NAC Manager

[yuchenglai]

Hi,

Just wondering if anyone has can help...I can ping my to NAC Managers but cannot HTTPS into them. I get the "The page cannot be displayed message in IE." I used to be able to HTTPS into them but not anymore. I cannot think of anything that has changed in the network that would cause this. Also rebooting the NAC Managers did not solve this issue.

[naitsirhc81]

Try going to Internet Options, Content, "Clear SSL State". Then restart IE and try again.

[mdubec]

Hi David,

Have you resolved you problem in this case? Because I have same problem.

Thank you

Regards

Michal

[jonmarso_07]

Hello David can tell us you've solved your problem?
And he has done.Well I have this same problem and I'm going to redo the settings, I first set up the NTP,then I'll redo it and give temporary certificates then reconfigure failover.

[jonmarso_07]

Connect the Clean Access Manager Machines

There are two types of connections between HA-CAM peers: one to exchange runtime data that relates to the Clean Access Manager activities and one for the heartbeat signal. In High Availability, the Clean Access Manager always uses the eth1 interface for both data exchange and heartbeat UDP exchange. When the UDP heartbeat signal fails to be transmitted and received within a certain time period, the standby system takes over. In order to provide an extra measure of security, it is highly recommended to add a serial heartbeat connection between the Clean Access Manager peers. The serial connection provides an additional dedicated heartbeat exchange method that must fail before the standby system can take over. Note that the eth1 connection between the CAM peers is mandatory.

Physically connect the peer Clean Access Managers as shown:

• Use crossover cable to connect the eth1 Ethernet ports of the Clean Access Manager machines. This connection is used for the heartbeat UDP interface and data exchange (database mirroring) between the failover peers.
• Use null modem serial cable to connect the serial ports (highly recommended). This connection is used as an additional heartbeat serial exchange (keep-alive) between the failover peers.

Note: For serial cable connection for HA (either HA-CAM or HA-CAS), the serial cable must be a “null modem” cable.