Chapter 4
Configuring High Availability (HA)
Figure 4-14
–
–
•
Trusted-side Link-detect IP Address: When an IP address (e.g. for an upstream router) is
optionally entered in this field, the CAS attempts to ping this external address. Typically, the same
trusted-side link-detect address is entered on both the HA-Primary and HA-Secondary CAS, but you
can specify different addresses for each CAS if your network topology is different.
Untrusted-side Link-detect IP Address: When an IP address (e.g. for a downstream switch) is
•
optionally entered in this field, the CAS will attempt to ping this external address. You can enter the
same or different untrusted-side link-detect addresses on both the HA-Primary and HA-Secondary
CAS.
OL-20326-01
Failover —HA-Primary Mode
Trusted-side Service IP Address: The common IP address by which the pair is addressed from
the trusted network (10.201.2.112 in the example in
Untrusted-side Service IP Address: The common address for the pair on the untrusted
(managed) network (10.201.50.243 in the sample).
Installing a Clean Access Server High Availability Pair
Figure 4-9 on page
Cisco NAC Appliance Hardware Installation Guide
4-20).
4-29