topic Re: 408 Request Timeout on Gaia portal with MDPS and ClusterXL in Firewall and Security Management

408 Request Timeout on Gaia portal with MDPS and ClusterXL

okatsladz454 — Fri, 27 Sep 2024 17:02:23 GMT

Good evening.

We have created two nodes on open servers and configured MDPS on them. Full access to the management web interface of the management plane is provided.

After both nodes were combined into a cluster (HA) , access to the web interface disappeared. While troubleshooting, we noticed that when tcpdump was enabled to listen to the management interface on the management LAN, access to the Gaia portal was miraculously restored.

Could you please explain what could be the reason for this behavior? I suspect there is asymmetric routing (the data plane and management plane we have different default routes).

Thanks.

Re: 408 Request Timeout on Gaia portal with MDPS and ClusterXL

PhoneBoy — Fri, 27 Sep 2024 18:58:59 GMT

Sounds like a TAC case is in order.
From the screenshot it looks like R81.20 is involved, what JHF level?

Re: 408 Request Timeout on Gaia portal with MDPS and ClusterXL

okatsladz454 — Mon, 30 Sep 2024 08:32:25 GMT

take 84

TAC not buyed yet

Re: 408 Request Timeout on Gaia portal with MDPS and ClusterXL

the_rock — Mon, 30 Sep 2024 11:51:46 GMT

Can you check how below is configured?

Andy

Re: 408 Request Timeout on Gaia portal with MDPS and ClusterXL

okatsladz454 — Mon, 30 Sep 2024 15:38:38 GMT

yes
through all interfaces

Re: 408 Request Timeout on Gaia portal with MDPS and ClusterXL

the_rock — Mon, 30 Sep 2024 16:23:48 GMT

I tested enabling this in the lab (MDPS) and Gaia worked fine. Can you try maybe custom port? Just make sure access is allowed via rule base.

Andy