Configure The Ha-Primary Clean Access Server - Cisco NAC3350-PROF-K9 - NAC Profiler Server Installation Manual

Chapter 4 Configuring High Availability (HA)

Configure the HA-Primary Clean Access Server

The general sequence to configure the HA-Primary CAS is as follows:
When done, continue to
a. Access the HA-Primary CAS Directly
Each Clean Access Server has its own web admin console that allows configuration of certain limited
Administration settings directly on the CAS. The CAS direct access web console must be used to
configure CAS pairs for HA.
To access the HA-Primary Clean Access Server's direct access web admin console:
1.
2.
Note •
•
b. Configure the Host Information for the HA-Primary CAS
3.
4.
Note
OL-20326-01
a. Access the HA-Primary CAS Directly, page 4-27
b. Configure the Host Information for the HA-Primary CAS, page 4-27
c. Configure HA-Primary Mode and Update, page 4-28
d. Configure the SSL Certificate, page 4-32
e. Reboot the HA-Primary CAS, page 4-33
f. Add the CAS to the CAM Using the Service IP, page 4-33
Configure the HA-Secondary Clean Access Server, page
Open a web browser and type the IP address of the trusted (eth0) interface of the CAS in the
URL/address field, as follows: https://<primary_CAS_eth0_IP_address>/admin (for example,
https://172.16.1.2/admin
Accept the temporary certificate and log in as user
during initial configuration.
In order to copy and paste values to/from configuration forms, Cisco recommends keeping both web
consoles open for each CAS (primary and secondary). See also
Directly, page 4-34.
To ensure security, Cisco recommends changing the initial password of the CAS.
Click the Network Settings link, then the DNS tab.
In the Host Name field, type the host name for the HA-Primary CAS. Make sure there is a domain
in the Host Domain field, such as cisco.com. If necessary, add one and click Update.
When configuring HA, it is mandatory to specify a Host Name for each machine in the HA-pair.
The Host Name is case-sensitive and cannot be an IP address. Host Names are needed later for
the Local Host Name and Peer Host Name fields of the HA Primary and HA Secondary
configuration. The Local Host Name and Peer Host Name do not need to be resolvable via
DNS; however, they are case-sensitive and need to match the Host Names you have specified for
the machines.
Installing a Clean Access Server High Availability Pair
).
admin
Cisco NAC Appliance Hardware Installation Guide
4-34.
with the web console password specified
a. Access the HA-Secondary CAS
4-27