topic Re: SIC reset in R76 in Hyperscale Firewall (Maestro)

SIC reset in R76SP

Amitclass101 — Mon, 26 Sep 2022 06:38:22 GMT

Hi All ,

I'm having an issue related to SIC my gateway is running on the R76 and SMS is running on R80.20. somedays ago my SIC certificate expired and SIC is broken between the gateway and SMS. I need to reestablish the SIC without any downtime. is there any way to do this in R76.

Re: SIC reset in R76

_Val_ — Tue, 20 Sep 2022 10:05:01 GMT

SIC reset, regardless of the version, will cause downtime on your GW.

That said, both R76 and R80.20 are out of support for a long time.

Re: SIC reset in R76

Amitclass101 — Tue, 20 Sep 2022 10:07:17 GMT

Is these below command will not work on R76 gateway

# cp_conf sic init KEY_HERE norestart

# cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"

# cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd"

Re: SIC reset in R76

_Val_ — Tue, 20 Sep 2022 10:20:45 GMT

According to sk86521 this should actually work. I was talking about doing SIC reset through cpconfig.

Re: SIC reset in R76

Amitclass101 — Fri, 23 Sep 2022 21:27:28 GMT

One more thing the device which I'm using is 44000 appliance and it is having 4 blade on two chassis, so how can I reset the SIC for all the blade at once without any down time.

Re: SIC reset in R76

Chris_Atkinson — Sat, 24 Sep 2022 00:06:17 GMT

Note support for R76SP.50 ceased in April 2021

sk86521 section 2 details the process for Scalable Platforms using commands prefaced with g - (global).

Re: SIC reset in R76

Chris_Atkinson — Sat, 24 Sep 2022 02:56:59 GMT

These commands are not correct for R76SP release, refer section 2 of the SK (sk86521).

Re: SIC reset in R76

_Val_ — Mon, 26 Sep 2022 06:40:52 GMT

@Chris_Atkinson thanks for this.

@Amitclass101 you did not mention the most important part of the information.

This is what SK says for Scalable Platforms:

On Scalable Platform in Security Gateway Mode:

[Expert@HostName]# g_all cp_conf sic init New_Activation_Key norestart
[Expert@HostName]# gexec -f -b all -c 'cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"'
[Expert@HostName]# gexec -f -b all -c 'cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd"'

Re: SIC reset in R76

Amitclass101 — Sun, 02 Oct 2022 08:19:15 GMT

Thanks for the help we resolved the issue after using this command in proper blade of the firewall.