Security

Reply
Highlighted
Contributor I

Multiple VIPs on Clearpass Cluster

Hi All

 

I wanted to spread the load of 802.1X authentications across my Clearpass cluster so I created a second VIP and made my subscriber the primary for the new VIP. Testing went well and all looked fine, but the minute to pointed production authentication taffic at the new VIP all RADIUS authentications on both servers started to timeout. I quickly made my publisher the primary for the second VIP and all returned to normal.

Is there someting I'm missing with regards to creating a second VIP?

Clearpass version is 6.7.7

 

Thanks

 

Dave

Super Contributor II

Re: Multiple VIPs on Clearpass Cluster

Hi Dave,

Two VIP's should work without any issue. Advice is to use two VIP's and spread the VIP's over the two clearpass nodes.
I haven't seen issues with the VIP's in the past. Where all services running, also the VIP and RADIUS service?
Is there something noted in the event viewer?

Willem Bargeman ACMX#935 | ACCX #822

Please give me kudos if my post was useful!
If your issue is solved mark the post as solution!
Contributor I

Re: Multiple VIPs on Clearpass Cluster

Checked the event viewer and can see issues with high I/O wait time, looking at vSphere it would appear that it's an issue with disc latency. The hardware is due for eplacement soon so will probably bring the replacement forward.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: