Cisco NAC3350-PROF-K9 - NAC Profiler Server Installation Manual page 131

Chapter 4 Configuring High Availability (HA)
(Recommended) Specify parameters to enable failover based on eth0 link failure detection for the
Step 5
HA-Primary CAM:
a. Enter IP addresses for the interfaces the HA pair uses to failover from the primary to the secondary
CAM in the Link-detect IP Address for eth0 field. When IP addresses are entered in this field, the
HA-Secondary CAM attempts to ping the specified HA-Primary CAM IP address to verify
connectivity. Typically, the same IP address is entered on both the HA-Primary and HA-Secondary
CAM, but you can specify different addresses for each CAM if your network topology allows.
Specify the duration (in seconds) the CAM continues to ping the Link-detect IP address before
b.
determining that the eth0 interface may have gone down, thus initiating a failover to the secondary
CAM, in the Link-detect Timeout field. The minimum value for this setting is 10 seconds, but
Cisco recommends at least a 25-second timeout interval.
Note
Each Clean Access Manager must have a unique host name (such as
Step 6
host name of the HA-Primary CAM in the Host Name field under Administration > CCA Manager >
Network, and type the host name of the HA-Secondary CAM in the Peer Host Name field under
Administration > CCA Manager > Failover.
Note • A Host Name value is mandatory when setting up high availability, while the Host Domain name
is optional.
The Host Name and Peer Host Name fields are case-sensitive. Make sure to match what is typed
•
here with what is typed for the HA-Secondary CAM later.
If you are using the default setting for the mandatory eth1 UDP heartbeat interface, leave the Auto eth1
Step 7
Setup checkbox enabled (checked). If you want to specify a different [Secondary] Heartbeat eth1
Address, uncheck the Auto eth1 Setup checkbox and enter the new IP address in the (peer IP on
heartbeat udp interface on eth1) field.
Note
Warning To specify redundant failover links as described in
Ethernet interfaces on the CAM before you try to set up HA. If you attempt to configure these interfaces
and the NICs on which the Ethernet interfaces reside are not configured correctly, the CAM will enter
maintenance mode (will not boot properly) when you reboot.
(Optional) If you want to enable the CAM's Heartbeat UDP Interface 2 function that sets up a
Step 8
redundant failover heartbeat via the CAM eth0 interface, enable the eth0 checkbox and specify an
associated peer IP address in the [Secondary] Heartbeat IP Address on eth0 field. Otherwise, leave
this N/A if not using the additional UDP heartbeat interface.
OL-20326-01
Link-detect settings on the CAM (Release 4.1(3) and later) are needed to allow the active
CAM to failover to the standby CAM in case of a switch port failure or a link failure on the
switch port connected to eth0 of the active CAM. In the event a failover must take place, the
Link detect setting allows the standby CAM to ensure that the secondary CAM eth0 interface
is up and able to take on the active role.
The Auto eth1 Setup option automatically assigns 192.168.0.254 as the primary CAM's eth1
(heartbeat) interface and assumes the IP address for the peer (secondary) eth1 interface is
192.168.0.253.
Installing a Clean Access Manager High Availability Pair
rjcam_1
Step 9, you must first configure the appropriate
Cisco NAC Appliance Hardware Installation Guide
and ). Type the
rjcam_2
4-11