Wireless Access

 View Only
  • 1.  Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 16, 2024 05:02 AM

    Greetings,

    I have an observation after upgrading my Conductor and Gateways last week from 8.10.0.14 to 8.12.0.3.

    Prior to the upgrade some of my services in Clearpass related to my remote accesspoints used to has the NAS/NAD IP of my conductor but after the upgrade they instead showed as coming from the VRRP IP from the two Gateways.

    I been looking through the documentation but I have as yet not figured out what caused this change so I figured I'd check if someone else have experienced the same thing :)



  • 2.  RE: Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 16, 2024 10:04 AM

    Make sure to configure the RADIUS source IP and NAS IP to reflect the expected information in your environment.

    ip radius source-interface vlan <vid>
    ip radius nas-ip <address>



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 3.  RE: Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 16, 2024 10:19 AM

    Fair enough.

    This isn't really an issue as it was quick fix to change to services in Clearpass, I was however interested in why this happened as I made no changes to the configuration (other than upgrading the software ofcourse).




  • 4.  RE: Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 16, 2024 10:50 AM
    Edited by chulcher Dec 16, 2024 10:52 AM

    Are the controllers in a cluster?  And if so, is the VRRP IP you are referring to the cluster VRRP or a manually configured VRRP?



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 5.  RE: Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 16, 2024 01:28 PM

    They are indeed in a cluster and the IP that started appearing is the VRRP IP for each of the two gateways.




  • 6.  RE: Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 16, 2024 02:01 PM

    That is actually the expected behavior and the whole reason for those VRRP instances to exist.  There was a bug, fixed in 8.12, that had the incorrect IP address being reported for some cases.

    Expected:

    • No cluster, no MCR: use controller-ip (default) or configured settings
    • No cluster, managed by MCR: use IP of MCR (default) or configured settings
    • Cluster: Use IP of MCR (default), if cluster VRRP configured then use those, if cluster non-functional then fallback to default (MCR or configured settings)


    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 7.  RE: Observation after upgrading Conductor/Gateways to 8.12.0.3

    Posted Dec 22, 2024 09:42 AM

    Yup, that's it exaclty.

    Thank you for the inforamtion :)