Cisco NAC-3310, Руководство по установке

Страница: 144 / 176

4-24
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 4 Configuring High Availability (HA)
Installing a Clean Access Server High Availability Pair
Note The CA-signed certificate must be either based on the Service IP or a hostname/domain name
resolvable to the Service IP through DNS.
Note
The Clean Access Server retrieves session information from the CAM during failover. For example, if
user A is logged into the system in role B, when failover occurs, user A will still be logged in and have
access specified by role B.
If the CAS is the DHCP server and failover occurs, user A also retains his/her assigned IP address
because to HA CASs
do directly exchange DHCP failover information.
Note
For HA CAS pairs, any CAS network setting changes performed on an HA-Primary CAS through the
CAS management pages or CAS direct access web console must also be repeated on the HA-Secondary
CAS unit through its direct access web console. These settings include updating the SSL certificate,
system time, time zone, DNS, or Service IP. See the
Cisco NAC Appliance - Clean Access Server
Configuration Guide, Release 4.8(3) and Modifying CAS High Availability Settings, page 4-40 for
details.
Before Starting
1.
Before starting, make sure that both Clean Access Servers are installed and accessible over the
network. See
Perform the Initial CAS Configuration, page 3-24 .
2.
The two Clean Access Servers in the HA pair must remain Layer 2 adjacent to support heartbeat and
sync functions.
3.
If the Clean Access Servers have already been added to the management domain of a CAM, they
should be removed. Use the
Delete button in the List of Servers tab to remove the CASs.