Cisco Cisco Clean Access 3.5

Seite von 372
 
14-4
Cisco Clean Access Manager Installation and Administration Guide
OL-7044-01
Chapter 14      Configuring High Availability
Set Up the Primary Clean Access Manager
append=”console=ttyS0.....”
This line causes console output to be redirected to the serial port.
Tip
To comment out a line, add a “#” character to the start of the line. Lines beginning with this character 
are ignored. 
3.
Edit 
/etc/inittab
 and remove or comment out the last line: 
co:2345:respawn ...vt100
This line causes a login terminal to be started on the serial port. 
4.
At the command prompt, type 
lilo
 and press enter. This starts Lilo, the Linux boot loader.
5.
Reboot the computer by entering the reboot command.
Repeat the steps on the failover peer Clean Access Manager. 
Set Up the Primary Clean Access Manager 
Once you have verified the prerequisites, follow these steps to configure the primary Clean Access 
Manager for high availability. See 
 for a sample configuration example.
Configure the Primary Manager for High Availability
1.
Open the Clean Access Manager admin console for the primary Manager, and go to Administration 
CCA Manager > SSL Certificate
If using a temporary certificate for the HA pair:
a.
Select Export Certificate Request from the Choose an action: menu, then click Export 
Private Key
 to export the SSL private key. Save the key file to disk. You will have to import 
this file into the standby Manager later.
b.
Select Export Certificate Request from the Choose an action: menu, then click Export 
Certificate
 to export the SSL certificate. Save the certificate file to disk. You will have to import 
this file into the standby Manager later. 
Note
The instructions in this section assume that you will export the certificate from the primary 
Manager. 
If using a CA-signed certificate for the HA pair:
a.
Select Import Certificate from the Choose an action: menu.
b.
Used the Browse button next to the Certificate File field and navigate to the certificate file.
c.
Click Import CA-Signed Certificate to import the certificate. Note that you will need to import 
this same certificate into the standby Manager later. 
d.
Select Export Certificate Request from the Choose an action: menu, then click Export 
Private Key
 to export the SSL private key. Save the key file to disk. You will have to import 
this file into the standby Manager later.