topic NAC problem. Cant add server. in Network Security

NAC problem. Cant add server.

Andrey Chubakov — Fri, 21 Feb 2020 12:38:32 GMT

Hi all!

I cant add a nac server to CAM. Error: Failed to add server: Conflicting Clean Access Server with IP address <10.52.244.146> must first be removed.

I add server with ip: 10.52.244.194. I checked all the settings. This address is not use in the settings of server whit IP - 10.52.244.146.

In the logs I dont see useful information.

Why do I have this error on the CAM???

NAC problem. Cant add server.

Jennifer Halim — Mon, 14 May 2012 13:04:16 GMT

You might be hitting this bug: CSCtd27095

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtd27095

Please follow the "workaround" advised in the bug.

NAC problem. Cant add server.

Andrey Chubakov — Tue, 15 May 2012 04:52:56 GMT

Thx, Jennifer. I found this bug in Release Notes for Cisco NAC Appliance.

NAC problem. Cant add server.

Andrey Chubakov — Thu, 17 May 2012 08:10:20 GMT

Jennifer. In CSCtd27095 says: The repair updates only the CAS file locally. The fix/repair should update the CAM's database with the CAS's new SSKey. I reconfigure perfigo service with right SSkey on my CAS (10.52.244.194). Does not help. I cant reconfigure perfigo on my CAM, because 10 servers in work.

P.S.

When i delete CAS with IP 10.52.244.146, then i can add CAS (10.52.244.194). But when i just change CAS IP - 10.52.244.194 on, for example, 10.52.244.154 anyway i see this error.

What create a conflict of these servers?

NAC problem. Cant add server.

Jennifer Halim — Thu, 17 May 2012 11:55:20 GMT

Yup, unfortunately you would need to update the CAM DB with the right SSkey to resolve the issue.