Configuring Virtual IP Settings

You can configure two nodes in a cluster to share a virtual IP address. Each virtual IP address is bound to the Primary node by default. The Secondary node takes over when the Primary node is unavailable.

 

When configuring virtual IP on a hybrid cluster with both cloud hosted and on-premise nodes included, the details of the cloud hosted node will not display when configuring the virtual IP. In the previous releases, the Virtual IP Settings option was not displayed on the Server Configuration page for cloud hosted VMs. Going forward, this option is enabled for cloud hosted nodes.

 

In a virtual machine deployment of ClearPass Policy Manager, you must enable forged transmits on the VMWare distributed virtual switch for the Virtual IP feature to be effective.

To configure a virtual IP address:

1. Navigate to the Administration > Server Manager > Server Configuration page.

2. Click the Virtual IP Settings link.

By default, the Virtual IP Settings for IPv4 dialog opens:

Figure 1  Virtual IP Settings for IPv4

Figure 2  Virtual IP Settings for IPv6

3. Specify the Virtual IP Settings parameters as described in the following table, then click Save:

Table 1: Virtual IPv4 and IPv6 Settings Parameters

Parameter

Action/Description

Select IP Version

Select either the IPv4 or IPv6 addressing format.

Virtual IP

Enter the IPv4 or IPv6 address you want to define as the virtual IP address.
Virtual Host ID To specify a unique virtual Host for this Virtual IP, enter the virtual router ID (1-255).
Failover Wait Time

In the Failover Wait Time field, enter the number of seconds for the secondary node to wait after primary node failure before it acquires the virtual IP address. The default fail-over wait time is 10 seconds, in order for the secondary node to take over and respond quickly to authentication access requests.

Primary Node

Select the server to use as the primary node.

NOTE: When IPv6 is selected, the Primary Node and Secondary Node drop-down lists are populated with the corresponding IPv6 addresses for selection.

NOTE: To add an IPv6 address as a Virtual IP, it must be in the same subnet Subnet is the logical division of an IP network. as the Primary and Secondary nodes.
Secondary Node

Select the server to use as the secondary node.

Interface

When you select the primary node and the secondary node, the Interface field is populated with that node's management interface IP address.

NOTE: If the Data/External port is configured, the Interface field is populated with both the management interface IP address and the Data/External port IP address.

Subnet Subnet is the logical division of an IP network.

The Subnet value for the management interface IP address is automatically populated when you select the primary node and secondary node.

Enabled

The virtual IP settings configured here are enabled by default.