topic Re: unable to install policies or database in standalone setup in General Topics

unable to install policies or database in standalone setup

Kul — Fri, 04 Jan 2019 13:45:23 GMT

Dear Sir/Madam,

I tried to install policies and database and got this error message. "TCP connectivity failure ( port = 18191 )( IP = X.X.X.X )[ error no. 10 ] Policy installation canceled."

This is a standalone setup with gaia r77.30 Matthew Do Uri Bialik Kyle Reynolds Avigdor Sharon Igal Nahimovski Ofir Agasi Kyle Reynolds Bob Bent Kristen Kenedy

Please assist with what I could do.

Kind regards,

kul@

Re: unable to install policies or database in standalone setup

Vladimir — Fri, 04 Jan 2019 15:47:18 GMT

If you have the ability to connect to the console of your standalone gateway, check if the CPD is running.

If not, lookup one of the posts describing how to troubleshoot it on the platform and the version you are running.

Re: unable to install policies or database in standalone setup

Kul — Fri, 04 Jan 2019 16:01:55 GMT

I checked cpd,ita running fine o

Re: unable to install policies or database in standalone setup

Vladimir — Fri, 04 Jan 2019 16:07:43 GMT

If it is a non-production environment, or if you have a maintenance window, try fw unloadlocal and reinstall the policy.

Any chance something changed in your policy that will block your communication with the unit if it is successfully installed?

Re: unable to install policies or database in standalone setup

Kul — Fri, 04 Jan 2019 16:14:28 GMT

Okay will do that the device is under production. is it possible to back up policies before I do fw unloadlocal ??

And also one more question, if I do freshinstallatiion is it possible to back up policies, Nat, route and interfaces. So that after fresh installation I can just load the Config files.

Re: unable to install policies or database in standalone setup

Vladimir — Fri, 04 Jan 2019 17:21:28 GMT

You can backup the current state of the unit in WebUI as well as perform a snapshot there.

You can perform migrate export to get the objects and rulebase in a portable format.

You can separately backup Gaia config in CLI.

Good idea to download backups and snapshots of the unit.

The problem is that if the unit is failing to install the current policy, restoring it to the same state may not fix your issues.

Why not try TAC SR? It may be something simple they will be able to spot and fix in a short remote session.

Re: unable to install policies or database in standalone setup

PhoneBoy — Sat, 05 Jan 2019 02:29:22 GMT

fw unloadlocal does not change the policy configuration, it merely unloads it from the firewall kernel.

Re: unable to install policies or database in standalone setup

Kul — Sat, 05 Jan 2019 03:51:29 GMT

I tried to get support from TAC,they asked me to do fresh installation. I assume there is a possible way to rectify the issue.

They said the issue is change of IP of the device IP,which got the database ti be corrupted.

Sometimes TAC people make mistake as well so I am here getting possible help from you guys.

Thank you very much for getting on with this discussion.

Re: unable to install policies or database in standalone setup

PhoneBoy — Sat, 05 Jan 2019 07:16:21 GMT

Did you change the IP of the device at all?

Is the IP in the error message what you expect it to be?

Re: unable to install policies or database in standalone setup

Kul — Sat, 05 Jan 2019 07:43:57 GMT

I haven't Changed the ip.

Re: unable to install policies or database in standalone setup

PhoneBoy — Sat, 05 Jan 2019 07:48:17 GMT

If you opened a TAC case, please send me the SR# privately.

Re: unable to install policies or database in standalone setup

Kul — Sat, 05 Jan 2019 07:54:38 GMT

They said I need to do fresh installation.

Any idea can I copy objects, route, policies from current configuration so it gets easier for me when I do fresh installation.

Re: unable to install policies or database in standalone setup

PhoneBoy — Sat, 05 Jan 2019 08:14:39 GMT

Please send me the SR number privately so I can review the basis for this recommendation.

As far as migrating the security policy configuration, if there is corruption, it might be best to use cp_merge to export/import the configuration (assuming you want to stay on R77.30): Using cp_merge utility

The OS-specific settings can be exported/imported as described here: Export / Import configuration / partial configuration in Gaia

Re: unable to install policies or database in standalone setup

Kul — Sat, 05 Jan 2019 08:17:44 GMT

Sure will do, thanks alot