Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
392
Views
0
Helpful
4
Replies

CAS_Standby is unreachable for SSH and web.

arturo_triara
Level 1
Level 1

‎03-25-2009 10:01 AM - edited ‎03-09-2019 10:09 PM

I have 2 CAS in HA. CAS01[Active] CAS02[Standby]. Both use Trusted-side Service IP Address and Untrusted-side Service IP Address.

I reach the Active CAS trough the Service IP and trough its real IP.

But i can not reach the Standby CAS trough its real IP neither ssh.

Labels:
0 Helpful
4 Replies 4

Daniel Laden
Level 4
Level 4

‎03-25-2009 11:34 AM

Is your workstation on any of the VLANs managed by the NAC Server. Can you SSH to it from the NAC Manager.

0 Helpful

arturo_triara
Level 1
Level 1
In response to Daniel Laden

‎03-25-2009 11:50 AM

Yes mi workstation is into Vlan managed by NAC Server.

I can ssh to Stanby CAS trough the Active CAS.

0 Helpful

Daniel Laden
Level 4
Level 4
In response to arturo_triara

‎03-25-2009 05:20 PM

If you can access from a vlan not managed by Cisco NAC, it is probably because of the standby NAC Server is not supposed to interact with clients on managed subnets.

Though I have no documentation to support that.

-Dan Laden

0 Helpful

a.alekseev
Level 7
Level 7

‎03-25-2009 11:13 PM

Could you check that Failover is really working?

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents