Security

Is there a way to rerun the configuration wizard on a newly deployed version of Clearpass 6.11.1 on a ESXi server? The folks responsible for our ESX hosts, deployed the OVA, but believe may have answered the mgmt/data port usage wrong. I only want to use 1 port, the mgmt port, for both mgmt/data traffic, but the mgmt port shows link down with an IP address configured. The data port mac address shows up on my switch infrastructure, but no IP.  I don't want to have them redeploy the OVA.

thanks

Is there a way to rerun the configuration wizard on a newly deployed version of Clearpass 6.11.1 on a ESXi server? The folks responsible for our ESX hosts, deployed the OVA, but believe may have answered the mgmt/data port usage wrong. I only want to use 1 port, the mgmt port, for both mgmt/data traffic, but the mgmt port shows link down with an IP address configured. The data port mac address shows up on my switch infrastructure, but no IP.  I don't want to have them redeploy the OVA.

thanks

When deploy ClearPass enable both NIC interfaces and configure them with the same network vlan. Next configure only the mgmt interface during your initial ClearPass configuration. Using mgmt interface for bot mgmt/data traffic is best practice is most cases.

Sometimes ClearPass turns the VM NIC interfaces, thats why i would recommend to enable both interface with same network.

Is there a way to rerun the configuration wizard on a newly deployed version of Clearpass 6.11.1 on a ESXi server? The folks responsible for our ESX hosts, deployed the OVA, but believe may have answered the mgmt/data port usage wrong. I only want to use 1 port, the mgmt port, for both mgmt/data traffic, but the mgmt port shows link down with an IP address configured. The data port mac address shows up on my switch infrastructure, but no IP.  I don't want to have them redeploy the OVA.

thanks

Thank you for your reply. We rebuilt the VM to make sure it wasn't something we did.

Our standard is using best practice to have both mgmt/data over 1 port, however, Network Interface card #2 again has a lower mac address than Network Interface card #1, so I assume that card #2.  Is it okay to put IP address on network card #2?

When deploy ClearPass enable both NIC interfaces and configure them with the same network vlan. Next configure only the mgmt interface during your initial ClearPass configuration. Using mgmt interface for bot mgmt/data traffic is best practice is most cases.

Sometimes ClearPass turns the VM NIC interfaces, thats why i would recommend to enable both interface with same network.

Is there a way to rerun the configuration wizard on a newly deployed version of Clearpass 6.11.1 on a ESXi server? The folks responsible for our ESX hosts, deployed the OVA, but believe may have answered the mgmt/data port usage wrong. I only want to use 1 port, the mgmt port, for both mgmt/data traffic, but the mgmt port shows link down with an IP address configured. The data port mac address shows up on my switch infrastructure, but no IP.  I don't want to have them redeploy the OVA.

thanks

The network interfaces will be ordered within the appliance based on the MAC address, the lower MAC address always being the MGMT port.  Pay zero attention to NIC 1/NIC 2 in the hypervisor, just look at the MAC addresses and make sure that the one with the lowest MAC address is the one you've configured for proper network connectivity in the hypervisor.

Thank you for your reply. We rebuilt the VM to make sure it wasn't something we did.

Our standard is using best practice to have both mgmt/data over 1 port, however, Network Interface card #2 again has a lower mac address than Network Interface card #1, so I assume that card #2.  Is it okay to put IP address on network card #2?

When deploy ClearPass enable both NIC interfaces and configure them with the same network vlan. Next configure only the mgmt interface during your initial ClearPass configuration. Using mgmt interface for bot mgmt/data traffic is best practice is most cases.

Sometimes ClearPass turns the VM NIC interfaces, thats why i would recommend to enable both interface with same network.

Is there a way to rerun the configuration wizard on a newly deployed version of Clearpass 6.11.1 on a ESXi server? The folks responsible for our ESX hosts, deployed the OVA, but believe may have answered the mgmt/data port usage wrong. I only want to use 1 port, the mgmt port, for both mgmt/data traffic, but the mgmt port shows link down with an IP address configured. The data port mac address shows up on my switch infrastructure, but no IP.  I don't want to have them redeploy the OVA.

thanks