VMSS Autoprovision Issue

Check_M8 — Tue, 07 Apr 2020 13:16:02 GMT

Hi All,

I am trying to auto-provision vmss gateways in Azure from R80.30 SMS but the policy just reinstalls repeatedly until I eventually have to stop the cme service.

Here is the tail output of "service cme test" command:

}
New management session: 4c9e6414-5d8d-47eb-ac96-43940f394124
The take-over-session API failed: : Unrecognized parameter [__no_such_parameter__]
Discarding management session: dfd7373f-d86b-4f8f-972d-501253200312
The take-over-session API failed: : Management server failed to execute command
Resetting management session id
discard uid dfd7373f-d86b-4f8f-972d-501253200312: failed
restoring sid
Discarding management session: 2ba1ebff-e536-4039-94bd-1cab6c2e5391
The take-over-session API failed: : Management server failed to execute command
Resetting management session id
discard uid 2ba1ebff-e536-4039-94bd-1cab6c2e5391: failed
restoring sid
The get-interfaces-sync API failed: : Unrecognized parameter [__no_such_parameter__]
The show-simple-gateway API failed: : Runtime error: Unmarshalling Error: Unable to create an instance of com.checkpoint.management.dlecommon.ngm_api.CpmiOwned
The show-simple-gateway API failed: : Runtime error: Unmarshalling Error: Unable to create an instance of com.checkpoint.management.dlecommon.ngm_api.CpmiOwned

**********
All tests passed successfully
**********

These are the repeat loop iteration from the logfile /var/log/CPcme/cme.log:

2020-04-07 11:26:10,059 CME_SERVICE INFO
2020-04-07 11:26:13,734 CME_SERVICE INFO The gateways found in controller VSECVMSS are:
2020-04-07 11:26:17,156 CME_SERVICE INFO 1: VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:26:17,156 CME_SERVICE INFO 2: VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:26:17,156 CME_SERVICE INFO
2020-04-07 11:26:17,156 CME_SERVICE INFO Configuration was not complete
2020-04-07 11:26:17,157 CME_SERVICE INFO VSECVMSS--VMSS-01_0--VSS-RG state is changed to: UPDATING
2020-04-07 11:26:17,157 CME_SERVICE INFO SIC has successfully been established between management ho270s and gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:26:17,157 CME_SERVICE INFO Resetting gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:26:17,297 CME_SERVICE INFO Setting policy None on gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:26:17,740 CME_SERVICE INFO setting proxy: null
2020-04-07 11:26:18,430 CME_SERVICE INFO Removing tag: __load_balancer__
2020-04-07 11:26:21,030 CME_SERVICE INFO Setting policy VMSS-POLICY on gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:27:48,281 CME_SERVICE INFO Successfully set policy VMSS-POLICY on gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:27:48,282 CME_SERVICE INFO run_local Executing: ['/opt/CPcme/service/post-customize.sh', 'add', 'VSECVMSS--VMSS-01_0--VSS-RG', ''] with:
data=None
env={'AUTOPROVISION_CLASS': 'Azure', 'AUTOPROVISION_VPN': 'false'}
2020-04-07 11:28:04,832 CME_SERVICE INFO Return code= 1
Output=
2020-04-07 11:28:04,833 CME_SERVICE INFO Running post install configuration on VSECVMSS--VMSS-01_0--VSS-RG
Post install script: 10.XX.XX.197: /opt/CPcme/service/../features/lb-health.sh -> /etc/fw/tmp/lb-health.sh
Transfer failed (/opt/CPcme/service/../features/lb-health.sh to /etc/fw/tmp/lb-health.sh) with rc 3
2020-04-07 11:28:04,833 CME_SERVICE INFO Resetting gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:28:05,012 CME_SERVICE INFO Setting policy None on gateway VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:28:07,385 CME_SERVICE ERROR Error during gateway synchronization attempt to add VSECVMSS--VMSS-01_0--VSS-RG
2020-04-07 11:28:07,386 CME_SERVICE ERROR Error details: Traceback (most recent call last):
File "/opt/CPcme/service/cme_service.py", line 284, in sync
management.set_gateway(instances[name], gw, auto_hf)
File "/opt/CPcme/cp_handlers/mgmt_handler.py", line 1313, in set_gateway
raise Exception('post-customize failed')
Exception: post-customize failed
2020-04-07 11:28:07,387 CME_SERVICE INFO Configuration was not complete
2020-04-07 11:28:07,387 CME_SERVICE INFO VSECVMSS--VMSS-01_1--VSS-RG state is changed to: UPDATING
2020-04-07 11:28:07,387 CME_SERVICE INFO SIC has successfully been established between management ho270s and gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:28:07,388 CME_SERVICE INFO Resetting gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:28:07,728 CME_SERVICE INFO Setting policy None on gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:28:08,427 CME_SERVICE INFO setting proxy: null
2020-04-07 11:28:09,099 CME_SERVICE INFO Removing tag: __load_balancer__
2020-04-07 11:28:11,776 CME_SERVICE INFO Setting policy VMSS-POLICY on gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:29:37,244 CME_SERVICE INFO Successfully set policy VMSS-POLICY on gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:29:37,245 CME_SERVICE INFO run_local Executing: ['/opt/CPcme/service/post-customize.sh', 'add', 'VSECVMSS--VMSS-01_1--VSS-RG', ''] with:
data=None
env={'AUTOPROVISION_CLASS': 'Azure', 'AUTOPROVISION_VPN': 'false'}
2020-04-07 11:29:54,000 CME_SERVICE INFO Return code= 1
Output=
2020-04-07 11:29:54,001 CME_SERVICE INFO Running post install configuration on VSECVMSS--VMSS-01_1--VSS-RG
Post install script: 10.XX.XX.198: /opt/CPcme/service/../features/lb-health.sh -> /etc/fw/tmp/lb-health.sh
Transfer failed (/opt/CPcme/service/../features/lb-health.sh to /etc/fw/tmp/lb-health.sh) with rc 3
2020-04-07 11:29:54,001 CME_SERVICE INFO Resetting gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:29:54,199 CME_SERVICE INFO Setting policy None on gateway VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:29:56,644 CME_SERVICE ERROR Error during gateway synchronization attempt to add VSECVMSS--VMSS-01_1--VSS-RG
2020-04-07 11:29:56,645 CME_SERVICE ERROR Error details: Traceback (most recent call last):
File "/opt/CPcme/service/cme_service.py", line 284, in sync
management.set_gateway(instances[name], gw, auto_hf)
File "/opt/CPcme/cp_handlers/mgmt_handler.py", line 1313, in set_gateway
raise Exception('post-customize failed')
Exception: post-customize failed
2020-04-07 11:29:56,645 CME_SERVICE INFO Configuration was not complete

I can see that /opt/CPcme/service/../features/lb-health.sh file is not located on the SMS so I dont see how this file transfer can ever complete. Thanks for your help.

Re: VMSS Autoprovision Issue

PhoneBoy — Thu, 09 Apr 2020 00:04:29 GMT

Do you have any unpublished sessions in your management?
The errors look…a bit odd.
Suspect TAC may need to be involved to assist.

Re: VMSS Autoprovision Issue

Check_M8 — Thu, 09 Apr 2020 07:12:11 GMT

Hi PhoneBoy,

No unpublished sessions, I can log a call with TAC - thanks for responding

Re: VMSS Autoprovision Issue

Check_M8 — Thu, 09 Apr 2020 14:31:35 GMT

Policy being pushed was blocking Remote Installation Daemon TCP Port 18208 .

topic Re: VMSS Autoprovision Issue in Cloud Firewall

VMSS Autoprovision Issue

Re: VMSS Autoprovision Issue

Re: VMSS Autoprovision Issue

Re: VMSS Autoprovision Issue