Cisco Cisco Clean Access 3.5
14-4
Cisco Clean Access Manager Installation and Administration Guide
OL-7044-01
Chapter 14 Configuring High Availability
Set Up the Primary Clean Access Manager
append=”console=ttyS0.....”
This line causes console output to be redirected to the serial port.
Tip
To comment out a line, add a “#” character to the start of the line. Lines beginning with this character
are ignored.
are ignored.
3.
Edit
/etc/inittab
and remove or comment out the last line:
co:2345:respawn ...vt100
This line causes a login terminal to be started on the serial port.
4.
At the command prompt, type
lilo
and press enter. This starts Lilo, the Linux boot loader.
5.
Reboot the computer by entering the reboot command.
Repeat the steps on the failover peer Clean Access Manager.
Set Up the Primary Clean Access Manager
Once you have verified the prerequisites, follow these steps to configure the primary Clean Access
Manager for high availability. See
Manager for high availability. See
for a sample configuration example.
Configure the Primary Manager for High Availability
1.
Open the Clean Access Manager admin console for the primary Manager, and go to Administration
> CCA Manager > SSL Certificate.
> CCA Manager > SSL Certificate.
If using a temporary certificate for the HA pair:
a.
Select Export Certificate Request from the Choose an action: menu, then click Export
Private Key to export the SSL private key. Save the key file to disk. You will have to import
this file into the standby Manager later.
Private Key to export the SSL private key. Save the key file to disk. You will have to import
this file into the standby Manager later.
b.
Select Export Certificate Request from the Choose an action: menu, then click Export
Certificate to export the SSL certificate. Save the certificate file to disk. You will have to import
this file into the standby Manager later.
Certificate to export the SSL certificate. Save the certificate file to disk. You will have to import
this file into the standby Manager later.
Note
The instructions in this section assume that you will export the certificate from the primary
Manager.
Manager.
If using a CA-signed certificate for the HA pair:
a.
Select Import Certificate from the Choose an action: menu.
b.
Used the Browse button next to the Certificate File field and navigate to the certificate file.
c.
Click Import CA-Signed Certificate to import the certificate. Note that you will need to import
this same certificate into the standby Manager later.
this same certificate into the standby Manager later.
d.
Select Export Certificate Request from the Choose an action: menu, then click Export
Private Key to export the SSL private key. Save the key file to disk. You will have to import
this file into the standby Manager later.
Private Key to export the SSL private key. Save the key file to disk. You will have to import
this file into the standby Manager later.