Cisco NAC3350-PROF-K9 - NAC Profiler Server Installation Manual page 157

Chapter 4 Configuring High Availability (HA)
[Primary] Peer MAC Address (trusted-side interface): The peer MAC address from the trusted
•
side (eth0) of the HA-Primary CAS.
• [Primary] Peer MAC Address (untrusted-side interface): The peer MAC address from the
untrusted side (eth1) of the HA-Primary CAS.
• Heartbeat UDP Interface 1: This setting specifies eth0 as a failover IP interface on the CAS. If a
dedicated Ethernet connection is not available, Cisco recommends using eth0 for the Heartbeat UDP
interface when configuring a Clean Access Server in HA mode.
[Primary] Heartbeat IP Address on eth0: The IP address of the trusted interface (eth0) of the
•
HA-Primary CAS.
Heartbeat UDP Interface 2: This setting specifies eth1 as a failover IP interface on the CAS. If you
•
configure your CAS HA system to use eth0 as the primary failover heartbeat connection, you can
also use the eth1 interface as a redundant heartbeat monitor.
[Primary] Heartbeat IP Address on eth1: The IP address of the untrusted interface (eth1) of the
•
HA-Primary CAS.
• Heartbeat UDP Interface 3: Options are N/A, eth2, or eth3. If a dedicated Ethernet connection is
not available, Cisco recommends using eth0 or another Ethernet interface for the Heartbeat UDP
interface when configuring a Clean Access Server in HA mode.
Note
[Primary] Heartbeat IP Address on Interface 3: The IP address of the tertiary failover heartbeat
•
link configured on the HA-Primary CAS.
Note
Cisco strongly recommends you do not use the serial interface on the NAC-3315/3355/3395 for the HA
Note
heartbeat function. Although this element still appears in the CAM web console, the Heartbeat Serial
Interface feature is being deprecated in a future Cisco NAC Appliance release. (The associated
Heartbeat Timeout value remains a valid configuration point, however, for deployments using optional
Heartbeat UDP interfaces 2 and 3.)
OL-20326-01
Before you can specify either the eth2 or eth3 interfaces to be Heartbeat UDP Interface 3, you
must manually configure the interface using the CAS CLI. There are no eth2 or eth3
configuration settings (IP address, netmask, etc.) available via the CAS web console. For
instructions, see Configuring Additional NIC Cards, page
You must configure at least one of the additional Ethernet interfaces on the HA-Primary CAS to
connect to a peer interface on the Secondary CAS in order to support HA behavior. In an HA
scenario, The Ethernet interface you configure serves as the medium for data sync between the
Primary and Secondary CAS.
Installing a Clean Access Server High Availability Pair
3-37.
Cisco NAC Appliance Hardware Installation Guide
4-37