Administrator Guide

As you enable W-ClearPass Insight on additional nodes in the cluster, CPPM automatically adds these nodes to
the W-ClearPass Insight database authentication source definition.
W-ClearPass Insight does not replicate data to any other nodes within the cluster—it is an entirely stand-alone
database.
W-ClearPass Insight Placement Considerations
Having W-ClearPass Insight enabled on multiple nodes within the cluster provides for a level of resilience,
however, you need to carefully consider where you enable W-ClearPass Insight. For every node where W-
ClearPass Insight is enabled, all the other nodes within the cluster subscribe through NetEvents to send data to
the W-ClearPass Insight database.
The amount of data sent to the W-ClearPass Insight database can be extremely high, and if you use Insight for
processing authentication requests within your cluster, where you enable W-ClearPass Insight is an important
design consideration:
l If you are running a large CPPM network in which the subscriber traffic is not consuming all the publisher's
resources, enable W-ClearPass Insight on the dedicated publisher and the standby publisher.
l If you are running a very large CPPM network in which the subscriber traffic will consume the publisher's
resources, you could enable W-ClearPass Insight on the dedicated publisher and the standby publisher, but
only if both of these nodes are dedicated to cluster operations—the publisher and standby publisher
should not be processing authentication requests.
l In a very large-scale deployment, W-ClearPass Insight should be placed on its own dedicated node. This
removes a lot of processing and I/O from the publisher, allowing it to handle the maximum amount of
worker traffic.
l W-ClearPass Insight data is valuable and could be used as part of policy evaluation. If this is the case, Dell
recommends that you enable redundant W-ClearPass Insight nodes for fault tolerance.
l If the worker traffic sent from the subscriber nodes is expected to fully saturate the capacity of the
publisher node, W-ClearPass Insight should not be enabled on the publisher node. However, if the
publisher node has spare capacity, it can be used to support the W-ClearPass Insight database. However,
take care to carefully monitor the publisher node's capacity and performance.
When a W-ClearPass Insight-Enabled Node Is Down
When a W-ClearPass Insight-enabled node in a cluster is down or out-of-sync for more than 30 minutes, the W-
ClearPass Insight node is moved to be the last W-ClearPass Insight node in the fall-back list. This allows for fail-
though to other W-ClearPass Insight nodes.
When a W-ClearPass Insight-enabled node is dropped from the cluster, the corresponding node entry in the W-
ClearPass Insight repository is removed.
Enabling W-ClearPass Insight
W-ClearPass Insight is not enabled by default, so you must manually enable it.
To enable W-ClearPass Insight:
1. Navigate to Administration > Server Manager > Server Configuration.
2. From the Server Configuration page, select the W-ClearPass node you want to configure.
The Server Configuration dialog opens.
Dell Networking W-ClearPass Deployment Guide Deploying W-ClearPass Clusters | 153