Before Starting - Cisco NAC3350-PROF-K9 - NAC Profiler Server Installation Manual

Installing a Clean Access Server High Availability Pair
Note
The Clean Access Server retrieves session information from the CAM during failover. For example, if
Note
user A is logged into the system in role B, when failover occurs, user A will still be logged in and have
access specified by role B.
If the CAS is the DHCP server and failover occurs, user A also retains his/her assigned IP address
because to HA CASs do directly exchange DHCP failover information.
For HA CAS pairs, any CAS network setting changes performed on an HA-Primary CAS through the
Note
CAS management pages or CAS direct access web console must also be repeated on the HA-Secondary
CAS unit through its direct access web console. These settings include updating the SSL certificate,
system time, time zone, DNS, or Service IP. See the
Configuration Guide, Release 4.8(3)
details.

Before Starting

1.
2.
3.
Cisco NAC Appliance Hardware Installation Guide
4-24
The CA-signed certificate must be either based on the Service IP or a hostname/domain name
resolvable to the Service IP through DNS.
Before starting, make sure that both Clean Access Servers are installed and accessible over the
network. See Perform the Initial CAS Configuration, page
The two Clean Access Servers in the HA pair must remain Layer 2 adjacent to support heartbeat and
sync functions.
If the Clean Access Servers have already been added to the management domain of a CAM, they
should be removed. Use the Delete button in the List of Servers tab to remove the CASs.
Cisco NAC Appliance - Clean Access Server
and Modifying CAS High Availability Settings, page 4-40
Chapter 4 Configuring High Availability (HA)
3-24.
for
OL-20326-01