I need to build a solution with below queries: -
1. Can I configure two or more IC units in active/active configuration (without using load balancers) wherein the units are in separate IP subnets (as all are placed in different locations for redundancy).
I will configure the UAC clients to have IP addresses of all the IC units of the cluster. Half of the UAC clients will have one unit as primary IC (Unit A) and the other unit as secondary IC (Unit B). Similarly remaining UAC clients will have one unit as primary IC (Unit B) and the other unit as secondary IC (Unit A).
Will the above scenario work?
2. Also how will the switches (authenticator) behave as now there are two RADIUS servers?
3. And can I integrate all the IC to integrate with all the Infranet enforcer (SSG firewall) and push dynamic polices to all of them simultaneously?