Maas tunnel down with smart-1 cloud

[Gaurav_Pandya]

Hi Mates,

I have cluster managed by smart-1 cloud mgmt server. Policy installation fails as one of the gateway Maas tunnel is showing down.

Maas error.PNG

When I checked ifconfig on gateway, mass tunnel interface is not showing in the list. Connectivity to updates.checkpoint.com looks okay. Do I need to regenerate token?

[PhoneBoy]

Did you check the troubleshooting info here: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-...

[Gaurav_Pandya]

Yes, I have gone through the troubleshooting guide. It is mentioned that maas tunnel interface should be configured with same IP but not described what to do if it is not showing in the list with ifconfig command.

Maas error2.PNG

[PhoneBoy]

If regenerating the token doesn't work, I suggest a TAC case.

[Gaurav_Pandya · Accepted solution]

Regeneration of token resolved issue. Thanks..

[the_rock]

Good job! Btw, just for the context, if you ever have this issue again, look for files in $FWDIR/log dir on the fw, I think 2 last one in the list, I believe they start with wts something...

Andy

Its these actually, whatever files have below name or start with wstunnel:

wstunnel-*

[Gaurav_Pandya]

Sure, I will keep in mind.

[the_rock]

Its super useful. Guy from R&D showed me this while ago, I had no idea either. I actually "rummaged" though those files few times, it definitely helps.

Andy

[the_rock]

Not that it matters much, but figured would say it...stands for web socket tunnel : - )

[florence]

Hello,

I have the same issue with my cluster members. You only regenerate de Token or the SIC also?

[the_rock]

Just try maas off, wait few seconds, then maas on.

[Gaurav_Pandya]

Try maas off/on, suggested by @the_rock . If it does not work, then regenerate token. No need to re-establish SIC. 

The issue was resolved after regenerating the token for me.

[the_rock]

Thats usually how I used to solve that issue in the past.