ACS high availability

Similar Questions

• ACS high availability deployment: collector's journal can cause AAA functions?

  Hello

  I've been watching the ACS installation guide, section of deployment:

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  Question:

  Is it possible for one of the cases to be the journal ACS collector? Or need a dedicated server for the collection of journal only?

  Thank you

  Mario

  It doesn't have to be a dedicated server. By default, the primary server will also be the collector of newspaper.

• High-availability software ACS 5.2

  Hello

  Can I configure main configuration / backup with the ACS 5.2 on Vmware software? Replication / high availability will happen just as if you use two devices? I need to install two ACS5.2 software on different machines to Vmware.

  concerning

  Joe

  Hey Joe,

  Yes it is possible. Make sure that you meet the requirements listed on this document:

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.2/installation/guide/csacs_vmware.html

  Thank you

  Serge

• Configuration of high availability.

  Hello

  Please help me to configure high availability for Foglight existing environment, please send me the steps and requirements of pre.

  How many servers can exist in a cluster?

  Capacity how do we need on the primary server and the other servers if there is a failure?

  We currently have 1 unifying and 3 child FMS.

  version: 5.6.10

  Thank you

  Vicky

  Vicky,

  There are 2 very useful field guides that go through the requirements and the Setup process.

  High Availability Guide - http://edocs.quest.com/foglight/5610/doc/wwhelp/wwhimpl/common/html/frameset.htm?context=field&file=HA-field/index.php&single=true

  Federation of field guide-

  http://eDOCS.quest.com/Foglight/5610/doc/wwhelp/wwhimpl/common/HTML/frameset.htm?context=field&file=Federation-field/index.php&single=true

  Note the following points, known issue

  http://eDOCS.quest.com/Foglight/5611/doc/wwhelp/wwhimpl/common/HTML/frameset.htm?context=field&file=HA-field/overview.1.php&single=true

  "A master of the Federation running in mode high availability is not supported. Only children Federated can be run by high availability. »

  Golan

• High availability of components in the design of vWorkspace tips

  Hi all

  Would ask you some advice regarding the design of vWorkspace components highly available. Suppose that vWorkspace components will be deployed in vSphere or hypervisors managed SCVMM hence HA is in place, if the failure of a host. In this situation, if we still need components redundant (n + 1 VMS) vWorkspace?

  On the other note, I understand that we can add a couple of broker for vWorkspace in vWorkspace Management Console connections and based on KB 99163 it would just work. I'm not sure how the traffic would be when an application is web access? As in, I guess that the connection broker news would be 'defined' at the request of the web call to the broker for connections. Or this is done automatically? Access Web would choose randomly from the broker for connections to go?

  Thanks for any advice in advance

  Kind regards

  Cyril

  Hi Cyril,.

  Big questions. As with any IT architecture in layers, you must plan HA and redundancy at all points of failure required by your environment or level of Service (SLA) agreements. For vWorkspace, the center of his universe is SQL and you must plan accordingly the failure and recovery. In some environments, full backup can meet the requirement of HA. In others, full SQL Cluster, Mirroring, replication, or Always-On configurations may be required. With our broker, we recommend N + 1 deployment in most scenarios HA. When you move peripheral components or enabling, you must evaluate each component and needs its impact of failure as well as its valuation to determine the appropriate AP.

  Load balancing between several brokers is done automatically by logic in the client connectors. In the case of Web access, when you configure the site Web Access in the Management Console, it includes broker list in the Web access configuration xml file. As client connectors, Web Access includes balancing logic that distributes the client load on brokers available automatically.

  If you have any questions about specific components and requirements of HA or architecture, please add them in the discussions.

• WLC 5508 high availability

  Hello

  Today I have two WLC 5508 (with license for 100 AP each of them), on a single site.

  The WLC work availability (active-standby).

  However, we have a new scenario, with 02 sites: A and B (attachment).

  I would like to know if it is possible to work as follows:

  The WLC - A as the main controller of site A. WLC - B as a backup (BDC) of WLC.-a.

  The WLC - B that has the PDC site B. WLC - as a backup (BDC) to WLC - B.

  For example:

  If WLC - a falls, site access Points are managed by B WLC site - B and vice versa.

  Is this possible?

  How can I configure the new scenario? Don't forget, there is a site-to-site between Site A and Site b.

  Another point:

  If I add more than 50 APs on Site A. How does the license number?

  Should I buy a license for the two WLC?

  TKS,

  >....

  >.. .is it possible?

  No. , high availability in terms of controller is supposed to be what is said, the backup controller is not 'full' - stby and cannot play other roles.

  M.

• IPCCX high availability

  Does anyone know if Cisco will provide redundancy standby high availability of IPCC express?

  Chris

  Search in the next major version of the IPCC Express. Last I heard it was scheduled for release next month some time.

  Jim

• Deployment of high availability of the IPCC 4.5

  In a future HD architecture implementation, the voice service will provide CallManager 5.0, that will integrate with 4.5 of the IPCC. 4.5 (required with 5.0 CM) IPCC does implement a high availability. How can we ensure that technical support continues to operate if the IPCC goes down? One possibility might be to configure CM such that if the IPCC goes down, all the number of help desk calls are automatically and immediately headed to a group (which includes all extensions help desk). This redirection can be configured in CM? Is there a better option?

  Thanks in advance,

  SB

  This is your best bet. On the road Points for your call center just put the call before busy, no answer and failure to the fighter pilot. Thus, when the IPCC Express Server is down it will sent to your fighter pilot.

  Please evaluate the useful messages.

  adignan - berbee

• IPS high-availability Solution

  Hi all

  obligation to have redundancy for appliance IPS placed on data center design, I dug on Cisco docs but found the resilience and the HA (High Availability) from the point of view of IPS could take place in the side of switches (HSRP/Eth channel balance).

  is there a visible way to implement high availability of dynamically!

  Kind regards

  Belal

  Yes Belal, both of the things mentioned by you are right. There is no function available which allows "failover" communications between IPS two boxes as do Cisco firewalls.

  Yes Etherchannel load balance traffic to each pair of IP from sensor single src - dst.

  Concerning

  Farrukh

• SNS with high availability option

  I need help to understand the requirements of network and connectivity to deployment Cisco show and share with the high availability option where the DC and DR are different geographical locations.

  As I understand it, to achieve high availability, the DMM and the SNS servers require a L2 connectivity between the primary and the secondary server. How can this be achieved in a scenario where two data centers are connected by WAN / MAN links?

  Thank you.

  Chaitanya Datar

  + 91 99225 83636

  Hi, Datar,

  I already asked this question to the TAC, and it is unfortunately clear today the HA mode with 2 servers connected mode "back to back" via Ethernet2, REQUIRES to be on the same network of L2.

  It is not yet based on the IP routing layer, and therefore it is did not in charge of the design when using remote data centers...

  :-(

  It's a shame, I know, and I pointed to the BU of the SnS.

  May be part of a next version of work will be based on network IP L3 routed...

  Wait and see.

  Hervé Collignon

  Converged Communications Manager

  Dimension Data Luxembourg.

• Two WLC 5508 anchor high availability

  Hello.

  It is possible use 2 WLC 5508 EN HOW to ANCHOR in an active scenario?.

  For example, if a WLC down the service, another Dungeon provide service to customers of anchor?

  At the moment we have just a WLC 5508 anchor mode. What do I have to configure high availability of the ANCHOR.

  Thank you very much!!!

  You have redundant WLC as anchor points, but if an anchor fails, the user must reconnect.

  There is a feature on the WLC HA, but it is mainly for foreigners redundancy WLC anchor no redundancy. With guest several anchors overseas WLC balance the load between the two. You will not be able to put a primary or backup.

  Sent by Cisco Support technique iPhone App

• IPS 4240 high availability?

  Hello

  4240 running in HA mode?

  Or should I look at 4255 if I need to work in HA mode?

  Kindly help me with this info... Thanks in advance.

  Kind regards
  RAM

  Just to add a little bit to Bob's response.  It is possible for the HA, but as mentioned above, it is not HA as you would expect of a firewall and requires significant network planning and is rather technical in nature.

  The best documentation I could find about the designs HA is in chapter 21 - "Deploying Cisco IPS for high availability" and High Performance of Earworms security CCNP 642-627 official Cert Guide, ISBN: 9780132372107.  She gets quite detailed and explains a large number of different methods.

  I was also able to find some information on this site, but it is at a higher level and does not provide as many options.

  https://www.NetworkWorld.com/community/node/18384

  I had to work HA in some of our environments, and I'm here to tell you, plan ahead, far in advance, test several methods to find one that suits.  We were using a method that I just couldn't find it mentioned anywhere.

• Remove the secondary controller and tertiary high availability for each access point

  I want to remove secondary and tertiary sector controller of high availability for each access point. I have more than 900 APs associated with a Version of the WLC 8510 8.0.121.0 software. What is the best/better way to remove secondary and tertiary controller?
  Or I can create a model first. We use version 2.2

  Hello

  Easiest way:

  Yes you can do this by using the first Cisco Infrastructure, you can create a Setup AP Lightweight model to specify the name of the PDC and the IP address and specify an empty value (choose the first empty option in the drop-down list) and 0.0.0.0 for the secondary and tertiary sector controllers.  Then you can apply this model to the AP, and she must remove (virgins all) values for these fields.

  Long way:

  Yes there is no clean way to remove it from the CLI. you need to manually remove each on the AP.

  Concerning

  Remember messages useful rates

• NAC Manager high availability peer CAM DEAD

  Hello

  I have two managers of the NAC with high availability and I used both interface eth1 of sides as a link Heartbit.

  I did following steps for high availability.

  (1) synchronize the time between two cams.

  (2) generate a temporary SSL certificate in CAMs and import-export procedure made in the other.

  (3) make a CAM as a primary and the other as secondary.

  But after all this made configuration I can see the State in surveillance > reports-primary CAM is in place in both servers and redundant CAM is down.

  Also on the failover tab, I can see - Local CAM - OK [Active] and counterpart CAM:-DEAD.

  I have attached some screenshots so that you can find the same.

  Your help will be very appreciated.

  Thank you

  Try these steps and check that all steps were followed:

  http://www.Cisco.com/c/en/us/support/docs/security/NAC-appliance-clean-access/99945-NAC-cam-HA.html

• Fabric interconnecting Cisco high availability

  Hi Experts,

  I would like to know,

  (1) what does fabric adapter interconnection cluster (L1, L2) ports are using high availability?

  (2) can form us able to interconnect fabric and fabric interconnection interconnection 6100 6200 to a cluster? If ok means how they exchange of history since the two are completely different material. ?

  Thanks in advance,

  Jako Raj

  Hello

  (1) L1 and L2 ports are used for the purpose of managing only basically to synchronize data management, triggering a possible failover.

  (2) different hardware platforms are supported in the same cluster only in a process of upgrading equipment. Actually what really happens in this meanwhile is the copy of the configuration and the new FI is promoted as primary. Although he works as a group, he is an active-standby cluster, where a single FI acts as principal.

  Kind regards