CAS_Standby is unreachable for SSH and web.

Unanswered Question
Mar 25th, 2009
User Badges:

I have 2 CAS in HA. CAS01[Active] CAS02[Standby]. Both use Trusted-side Service IP Address and Untrusted-side Service IP Address.

I reach the Active CAS trough the Service IP and trough its real IP.

But i can not reach the Standby CAS trough its real IP neither ssh.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Daniel Laden Wed, 03/25/2009 - 11:34
User Badges:
  • Cisco Employee,

Is your workstation on any of the VLANs managed by the NAC Server. Can you SSH to it from the NAC Manager.

arturo_triara Wed, 03/25/2009 - 11:50
User Badges:

Yes mi workstation is into Vlan managed by NAC Server.

I can ssh to Stanby CAS trough the Active CAS.

Daniel Laden Wed, 03/25/2009 - 17:20
User Badges:
  • Cisco Employee,

If you can access from a vlan not managed by Cisco NAC, it is probably because of the standby NAC Server is not supposed to interact with clients on managed subnets.

Though I have no documentation to support that.

-Dan Laden

a.alekseev Wed, 03/25/2009 - 23:13
User Badges:
  • Gold, 750 points or more

Could you check that Failover is really working?


This Discussion