Symantec Privileged Access Management

Expand all | Collapse all

Process of restore when CA PAM VM move to another DataCenter or physical server NAC FAIL

  • 1.  Process of restore when CA PAM VM move to another DataCenter or physical server NAC FAIL

    Posted Apr 06, 2018 11:00 AM

    Hi

     

    Customer requires within its operation in some occasions to move virtual machines between datacenter, this generates a change of MAC for these VMs, just as when changing the NAC of the physical server due to damage. How the solution is licensed based on the number of NAC configured and its assigned MACs which is the procedure to move or recover these virtual machines without affecting the operation.

     

    Some idea to respect?

     

    Thanks



  • 2.  Re: Process of restore when CA PAM VM move to another DataCenter or physical server NAC FAIL
    Best Answer

    Broadcom Employee
    Posted Apr 06, 2018 03:34 PM

    Hi Julian,

     

    I would suggest editing your VM settings to use a "Static" MAC address. This way, when you move them the MAC shouldn't change. VMs should always be unclustered and then powered off safely before attempting to move them. If you skip either of those steps we expect there to be problems. For example, you will end up with a cluster out of sync situation, or worse.

     

    You also mentioned the licensing. In the past (PAM 2.x), the license was invalidated if additional NICs were added or if the MAC Address of any of them changed. in PAM 3.x this restriction has been removed and you should be able to add NICs without harming the license.

     

    More info on Additional NIC problem: Is it possible to add additional NIC cards to a vi - CA Knowledge 

     

    Regards,

    Christian Lutz

    Support Engineer

    CA Technologies - North America