Cisco NAC3350-PROF-K9 - NAC Profiler Server Installation Manual page 125

Nac appliance hardware
Table of Contents

Advertisement

Chapter 4
Configuring High Availability (HA)
Cisco NAC-3310 CAMs/CASs feature a 160GB hard drive or 80GB hard drive. Both of these hard
drive sizes support High Availability (HA) deployments, and you can safely deploy a 160GB model
in an HA pair with an 80GB model.
You can choose to "automatically configure" the eth1 interface in the Administration > CCA
Manager > Failover page, but you must manually configure other (eth2 or eth3) HA interfaces with
an IP address, netmask, etc. prior to configuring HA on the CAM. Refer to
HA-Primary CAM, page 4-9
The eth1 interface can be used for heartbeat packets and database synchronization. The eth0, eth1,
and eth2/eth3 interfaces can be used for heartbeat packets. In addition, any available serial (COM)
interface can also be used for heartbeat packets. If using more than one of these interfaces, then all
the heartbeat interfaces need to fail for failover to occur.
Note
If you are configuring your CAM for HA, you must use eth1 for heartbeat and database synchronization.
All other Ethernet interfaces (eth0 and eth2/eth3) can be used only for heartbeat packets.
In CAM HA, when heartbeat is configured on multiple interfaces and eth1 is down, the standby CAM
Note
fails to do the database synchronization. The perfigo service is stopped on the standby CAM as the
database synchronization happens only on eth1, which is down. Cisco recommends using only eth1 as
heartbeat interface for CAM HA instead of using multiple HA interfaces.
When deploying the CAM/CAS across a WAN, you must prioritize all CAM/CAS traffic and SNMP
Note
traffic, and include the eth0/eth1 IP addresses of the CAM and CAS in addition to the Service IP address
for HA pairs. The prioritization can have a 256 kpbs bandwidth with roudtrip delayof 400ms.
The connection between HA pairs must be extremely reliable, with communication between HA pairs
Caution
unimpeded. The best practice is to use a dedicated Ethernet cable. Breaking communication between HA
pairs will result in two active nodes, which can have serious negative operational consequences. A key
aspect of the link between HA pairs is the ability to restore that link should it go down; restoration may
be fundamental to network stability, depending on your design.
OL-20326-01
Installing a Clean Access Manager High Availability Pair
for details on configuring the interfaces.
Cisco NAC Appliance Hardware Installation Guide
Configure the
4-5

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Nac-3315Nac-3355Nac-3395Nac-3310Nac-3350Nac-3390

Table of Contents