Security

Reply
Frequent Contributor II

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

Hi everyone,

 

I found the issue is on ClearPass version 6.8.0.109592 that it cannot make subscriber.

I upgrade patch to 6.8.2.109931 file size is 941 MB.

After rebooted, I make subscriber again and it works only in CLI. 

For GUI, still face the same issue. Y_Y


Thank you,
Ratchapas S.
Land of Smiles
Occasional Contributor II

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

Hi All 

Many thanks for all your comments 

I can confirm that after upgrading to the latest version of Clearpass 8.2 clustering with ESXI 6.7 now works with a web gui and in CLI 

Problem Solved !

 

Regards 

Jack 

New Contributor

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

Hi - on 6.8.2 here, and had to use CLI method to get it to work. Odd...

 

Aruba Employee

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

It is not odd. Check release notes, HTTPS certificate validation was made mandatory for securing cluster communications and is recommended. Using CLI ignores HTTPS certificate validation.

Frequent Contributor II

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

I think it odd. Because I drop subscriber after see the issue of failover.

After it's standalone I tried to make-subscriber again via CLI and GUI. I stuck and got failed to do it.

Please advise.


Thank you,
Ratchapas S.
Land of Smiles
Aruba Employee

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

if you tried from the CLI using -V option it will not fail. If it does, please work with TAC.

Frequent Contributor II

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

First time it works but the second time it did not work.


Thank you,
Ratchapas S.
Land of Smiles
Aruba Employee

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

Not sure what you tried but I just dropped my node and added it again with

 

[appadmin@AB-CPPM-2]# cluster make-subscriber -V -i <Pub IP> 

 

and it worked fine.

Aruba Employee

Re: Clerpasss 6.8 Clustering Problem on ESXI 6.7

Usage:
make-subscriber -i <IP Address> [-l] [-b] [-V]

-i <IP Address> -- Publisher IP Address
-l -- Restore the local log database after this operation
-b -- Skip generating a backup before this operation
-V -- Do not verify publisher certificate

 

For lab/non-prod enviroment the CLI Option is fine!

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: