NAC Server and Manager Failure with out failover

Question

Hi, I'm working on a NAC L2 OOB wired design with 1 CAM and 1 CAS. I've not included failover to the design for the obvious financial reasons, and want to figure out the affect that the network would have in the case of a failure.
1.)What would the users experience in the event of a CAS failure? both currently online users and new users
2.)What would the users experience in the event of a CAM failure? both currently online users and new users
3.) Are there any ideas on how to minimize the effect on the users in the event of a failure, w/o adding failover bundle ?
Many thanks for your valuable input in advance.
Din

Answer 1

If you are out OOB, then a CAS failure would not affect logged in, remediated users, anyone not logged in would be stuck because when the CAS fails, the connectivity to the CAM would be lost.
If the CAM fails, you will not be able to log in, do remediation or anything. VLAN settings on switches will be frozen where they are at the moment of CAM faiure. Not that you could easily connect to switches, change vlans to allow users onto the LAN and the CAM would accept that passively when restarted but if you use the Agent it will probably want to log in again, which is not a huge issue if you use AD SSO.
Dan Sichel
Dan S.