Security

One of the Clearpass Cluster nodes suffered a power cut this morning.

 

It came back up and back in sync, but I have seen this error a few times afterwards:

 

2017-10-23 14:19:55+01:00 CPPM[clp01] profiler: Profiler ip:192.168.70.8 unstable

 

This is from both nodes - is this part of the resync or is it a problem?

 

I've experienced a similar issue after upgrades with an error that says "Battery Sync Unstable". Working with TAC they can stop/start this service or process and it should stabilize. I would start there.

HI

 

Thanks for the reply, yes it is back to normal now :)

 

 

hello sir,

 

which service that should i restart ?

 

[appadmin@TBN-AT-AC01]# service status all
Policy server [ cpass-policy-server ] is running
TACACS server [ cpass-tacacs-server ] is running
Radius server [ cpass-radius-server ] is running
Async DB write service [ cpass-dbwrite-server ] is running
DB replication service [ cpass-replication ] is running
DB change notification server [ cpass-dbcn-server ] is running
System monitor service [ cpass-sysmon-server ] is running
System auxiliary service [ cpass-system-auxiliary-server ] is running
Admin server [ cpass-admin-server ] is running
Async netd service [ cpass-async-netd ] is running
Multi-master cache [ cpass-multi-master-cache-server ] is running
Domain Server [ cpass-domain-server@HO ] is running
Stats collection service [ cpass-statsd-server ] is running
Stats aggregation service [ cpass-carbon-server ] is running
Ingress logger service [ cpass-igslogger-server ] is stopped
Ingress logrepo service [ cpass-igslogrepo-server ] is stopped
RadSec Service [ cpass-radsec ] is running
AirGroup notification service [ airgroup-workqueue ] is running
ClearPass Guest background service [ cpg-background ] is running
ClearPass Guest cache [ cpg-redis-cache ] is running
Extensions service [ cpass-extensions ] is running
Micros Fidelio FIAS [ fias-server ] is running
ClearPass Virtual IP service [ cpass-vip ] is running
ClearPass IPsec service [ cpass-ipsec ] is running

I don't recall which service is tied directly to the battery sync or profiler, but if you need to restart them, just do a "service restart all" and allow CPPM to refresh all of the services.

 

**NOTE - This will cause short outage with authentications and admin access to the server**

 

Typically this process takes 30-60 seconds. 

hello sir,

 

i believe i'm already restart all service, but those alert still occure, any other idea sir ?

I would suggest opening a case with TAC and have them investigate further.
In previous experience, power loss to CPPM servers is not good. I've had
servers become completely corrupted and had to RMA probably 3 or 4 over the
years from power hits.

TAC is your best next step. 1-800-WiFi-LAN or if you have an ASP account,
you can generate a case online. Just remember to get your SN of CPPM for
TAC - log into WebUI and click the version in the bottom right I believe it
is, it should pop up a box with your SN.

noted sir,

 

tomorrow i will call TAC to investigate it