Cisco Cisco Clean Access 3.5
16-14
Cisco Clean Access Server Installation and Administration Guide
OL-7045-01
Chapter 16 Upgrading to a New Software Release
Upgrading High Availability Pairs
Upgrading High Availability Pairs
This section describes the following:
•
•
Accessing Web Consoles for High Availability
Determining Active and Standby Clean Access Manager
For a Clean Access Manager High-Availability pair:
•
Access the primary CAM by opening the web console for the Primary’s IP address.
•
Access the secondary CAM by opening the web console for the Secondary’s IP address.
The web console for the standby (inactive) CAM will only display the Administration module menu.
Determining Active and Standby Clean Access Server
For a Clean Access Server High-Availability pair:
•
Access the primary CAS by opening a web console for the trusted-side (eth0) IP address of the
primary CAS, as follows:
primary CAS, as follows:
https://<primary CAS (eth0)IP>/admin
For example,
https://172.16.1.2/admin
•
Access the secondary CAS by opening a web console for the trusted-side (eth0) IP address of the
secondary CAS, as follows:
secondary CAS, as follows:
https://<secondary CAS (eth0)IP>/admin
For example,
https://172.16.1.3/admin
For failover CAS pairs, Device Management > CCA Servers > List of Servers in the CAM web
console displays the Service IP of the CAS pair first, followed by the IP address of the active CAS in
brackets. When the secondary CAS takes over, its IP address will be listed in the brackets as the active
server.
console displays the Service IP of the CAS pair first, followed by the IP address of the active CAS in
brackets. When the secondary CAS takes over, its IP address will be listed in the brackets as the active
server.
Instructions for Upgrading High Availability CAM and CAS
The following is the generally recommended way to upgrade an existing high-availability (failover) pair
of Clean Access Managers or Clean Access Servers.
of Clean Access Managers or Clean Access Servers.
Warning
Make sure to follow this procedure to prevent the database from getting out of sync.
Step 1
SSH into each machine in the failover pair. Login as the
root
user with the root password (default is
cisco123
)
Step 2
Verify that the upgrade package is present in the /store directory on each machine. (Refer to
for instructions.)