NAC CAS HA question

[lolayo_19]

Hello,

I currently have an IB and OoB VG environment. Both CAS are working fine, but now I want to add HA to both. Looking at te documentation (CAS user guide 4.1.3) I see I need two Service IP Addresses, one for the trusted interface and one for the untrusted. In my case since they ar running in VG mode, iwould normally have the same ip address in the trusted and untrusted sides. Does the same apply for the Service IP Addresses? should I use the same service ip on both sides??

Do I need in total three IP's 1 for both int's of the IB CAS, 1 for both int's of the OoB CAS, and 1 for both Service IP Addresses??

Thanks in advance for any info...

[Daniel Laden · Accepted solution]

For a VGW solution, you would use the same IP address for trusted and untrusted.

You will need three IP addresses: Real Primary, Real Secondary, Service IP. This is per system not per interface.

[lolayo_19]

Thanks Dan!!