Wireless Access

We have 1 ClearPass Publisher (6.8.0) and 1 ClearPass Subscriber (6.7.10).

 

It seems both got out of sync after upgrading the Publisher to 6.8.0.

Now the Subscriber has Cluster Sync status Disabled.

 

How do I get them to sync again without breaking the whole environment?

Or how can I promote the subscriber to become publisher when in this state? (reason being the current Publisher needs to be decommissioned anyway)

 

In order to properly build a cluster both nodes need to be running the same version , I also recommend you upgrade to 6.8.6



Thank you

Victor Fabian

Pardon typos sent from Mobile

I tried upgrading the Subscriber to 6.8.0 to be the same as the Publisher, but that did not seem to go well.

The Subscriber looked to be stuck during boot.

 

Is there a way to downgrade the Publisher back to the same version as the Subscriber?

Are you seeing any certificate errors in the event viewer for the DB replication on the Publisher?

 

 

The publisher had a certificate that was about to expire in a few days.

It has been extended by now.

 

Is the subscriber still part of the cluster ?  if it is you should drop it from the cluster and perform a database reset from CLI and then upgrade it to the desired version while in standalone mode.

 

Upgrade your publisher to the same code and then join the subscriber back to the cluster

Requirements to join a Subscriber to a Cluster running 6.8.x > 

Onward

I recommend you open an Aruba TAC case to guide you through this 

I reverted the 6.8 upgrade to 6.7 using following instructions:

https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-rollback-CPPM-upgrade/ta-p/246006

 

The downgraded publisher got into sync again with the 6.7 subscriber.

After that, I installed a new certificate for the downgraded publisher as it was about to expire.

I promoted the subscriber to publisher.

Next will be to decommission the former publisher.