I have installed and configured NAM HA at HQ and NAS in 3 more locations in OOB VG mode.Everything was fine and running. Last day due to power failure, one of the edge router lost its power then back came up.But both the NAM HA pair and all other branch NAS were not brought down during the power shut down. After that, the clients in few branches are not connected to the NAC so we manually bypass the users by uncontrolled them in PROFILE and change the vlan from auth to access on the same profile page. What is the cause for this issue to be resolved.
The router is just in the transit path as Internet router. How does it affect some of the users in remote branches but in HQ where the NAM located users connected without any issues. Are there any keepalive or timeout in either NAS or NAM?
I expalin it bit more clear to make you understand.
HQ site with HA CAM pair and HA CAS pair configured and there are 6 branches where single CAS installed. The mode being used is OOB VG with SSO single sign-on.Three branches out of 6 using NME-NAC-K9 module 2821 router. Problem Des: Last day there was an power outage due to that the connectivity between CAM pair and other branch CAS were lost then after the power come up,the users in 3 branches are not able to connect (Login) to the network through the NAC agent. The connectivity between NAM and NAC module is up. Also in other branch out of 200 users, some users are able to connect and others are not. What is the issue to resolve this problem.
In the client laptop we are getting error "the NAC server is not available and contact administrator. There are connectivity between NAM and CAS.
I have to open the case. I already associated the service contract to my profile and got the confirmation email from Cisco but my profile not yet updated with the new contract number. I do not know why this delay from Cisco. Now I have to open one more case for that to resolve then again after confirming the contarct numer in my profile to open case for this NAC issue.
Please give me the frontline number to call them directly.I am now handling it officially and it seems that it would take long to resolve. I have to call them now since NAC configured with Uncontrolled.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :