Cisco Systems OL-15986-01 Deployment Considerations

12-5

Cisco NAC Guest Server Installation and Configuration Guide

OL-15986-01

Chapter 12 Replication and High Availability Deployment Considerations

Device Failure

If one of the Cisco NAC Guest Servers in a replication pair fails and needs to be replaced, you should

set up replication with the working server and the data will be r e-sync hr oniz ed t o t he d evice.

Warning

Do not restore the failed unit from a backup. Restoring from a backup onto one unit in a replication

pair will result in not having an exact replica of the data on both servers.

Step 1 From the administration interface select Authentication > Replication Settings from the left hand menu

(Figure 12-4).

Figure 12-4 Resetting Replication

Step 2 Set Replication Mode to Off on both of the Guest Servers.

Step 3 Follow the instructions in Setting up replication, page 12-1 and ensure that you set the working server

as the one with the data.

Deployment Considerations

Connectivity

The Cisco NAC Guest Servers need to be provided with IP connectivity between the units. Cisco

recommends making the network path between the devices resilient so that synchronization can always

be performed. However if the devices become disconnected they will continue to functio n and st o re

changes until they are connected back together and can re-establish communication. At that point they

will re-synchronize databases.

Contents

Main Cisco NAC Guest Server Installation and Configuration Guide Page CONTENTS Page Page Page Page Page About This Guide Audience Purpose Document Conventions Product Documentation Obtaining Documentation and Submitting a Service Request Welcome to Cisco NAC Guest Server Introduction Guest Access Concepts Before You Start Package Contents Rack Mounting Cisco NAC Guest Server Licensing Upgrading Firmware Additional Information Installing Cisco NAC Guest Server Connecting the Cisco NAC Guest Server Page Command Line Configuration Configure IP Address and Default Gateway Page Change Root Password Re-Imaging the Appliance Page Page System Setup Accessing the Administration Interface Obtain and Install Cisco NAC Guest Server License Access Cisco NAC Guest Server Administration Interface Configuring Network Settings Date and Time Settings Page SSL Certificate Accessing the Guest Server using HTTP or HTTPS Generating Temporary Certificates/ CSRs/ Private Key Downloading Certificate Files Downloading the CSR and Certificate Downloading the Private Key Upload Certificate Files Configuring Administrator Authentication Add New Admin Account Edit Existing Admin Account Page Delete Existing Admin Account Page Configuring Sponsor Authentication Configuring Local Sponsor Authentication Add New Local User Account Page Edit Existing User Account Delete Existing User Account Configuring Active Directory (AD) Authentication Add Active Directory Domain Controller Edit Existing Domain Controller Page Delete Existing Domain Controller Entry Configuring LDAP Authentication Page Add an LDAP Server Edit an Existing LDAP Server Page Delete an Existing LDAP Server Entry Configuring RADIUS Authentication Add a RADIUS Server Edit an Existing RADIUS Server Delete an Existing RADIUS Server Entry Configuring Sponsor Authentication Settings Changing the Order of Authentication Servers Sponsor Timeouts Page Configuring User Group Permissions Adding User Groups Page Page Editing User Groups Page Deleting User Groups Specifying the Order of User Groups Mapping to Active Directory Groups Mapping to LDAP Groups Page Mapping to RADIUS Groups Configuring Guest Policies Setting the Username Policy Setting the Password Policy Setting the Guest Details Policy Page Integrating with Cisco NAC Appliance Adding Clean Access Manager Entries Page Editing Clean Access Manager Entries Deleting Clean Access Manager Entries Configuring the CAM for Reporting Adding a RADIUS Accounting Server Configure the CAM to Format RADIUS Accounting Data Page Page Configuring RADIUS Clients Overview Adding RADIUS Clients Editing RADIUS Clients Deleting RADIUS Clients Page Page Guest Account Notification Configuring Email Notification Configuring SMS Notification Page Customizing the Application User Interface Templates Adding a User Interface Template Editing a User Interface Template Page Editing the Print Template Editing the Email Template Editing the SMS Template Using Account Durations Deleting a Template Setting the Default Interface Mapping Setting User Default Redirection Page Backup and Restore Configuring Backup Settings Taking a snapshot Scheduling a Backup Restoring Backups Page Replication and High Availability Setting up replication Page Configuring Provisioning Replication Status Recovering from Failures Network Connectivity Device Failure Deployment Considerations Connectivity Load Balancing Web Interface RADIUS Interface Page Page Logging and Troubleshooting System Logging Log Files Downloading the log files Application Logging Email Logging RADIUS Logging Page Page Licensing Licensing Page Sponsor Documentation Introduction to Cisco NAC Guest Server Connecting to the Guest Server Page Page Creating Guest User Accounts Page Print Account Details Email Account Details Text Message Account Details (SMS) Multiple Guest Accounts Creating Multiple Accounts from Text Entry Creating Multiple Accounts from CSV File Creating Multiple Random Accounts Printing/Email/SMS Multiple Accounts Viewing Multiple Account Groups Viewing Multiple Account Groups Finding Multiple Account Groups by username Finding Multiple Account Groups on the Active Accounts Report. Editing Guest Accounts Suspending Guest Accounts Viewing Active Accounts and Resending Details Reporting on Guest Users Page APPENDIX A Open Source License Acknowledgements Notices OpenSSL/Open SSL Project License Issues