Restore Virtual systems in the vsx

ShadowNif

Hello,

I have a small problem, hope you can help me. In my test lab i had to reset the appliance in the Security group.
After reset i was able to build the SIC for the VSX, although now in smart console i can see that vsx is green.
But the Virtual Firewalls all red and i cannot see then in the CLI :

installing policy on the FWs shows error
"

Gateway: FWTVS302

Policy: SG_FWTVS302

Status: Failed

- Installation failed. Reason: Authentication error [ SIC error no. 147 ] check that peer SIC is configured properly and that system date and time on the Security Management Server and peer are synchronized (IP = 10.255.0.118)(port = 18191)."

Dario_Perez

Check across all SGM if SGM exists, if exist in one member you can reset the member where it doesn't exist with auto-clone enable if doesn't exist on any member, then the VSX is corrupted and you have to rebuild Security Group with 1 SGM and reconfigure it

ShadowNif

that would be the worst case scenario!!

emmap

Did you reset all the SGMs?

How did you do the SIC reset?

ShadowNif

1. took it out of the SG on Maestro Gaia, and put it back!!
2. cpconfig --> 5 SIC

emmap

OK, it seems like there's a 1 VS on there now, but not the other one, like you're in a weird, half-configured state. Resetting SIC in the cpconfig menu isn't the best way to go with VSX too. So, I would suggest that you need to basically start again. Remove all SGMs from the SG, add the first one back in, do the base OS config (including bonds and JHF) then run vsx_util reconfigure on the management server to put out the VSX config. Once it's all happy with 1 SGM you can add the others back in.