This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Daniel_Hainich
Collaborator
2 hours ago

MHO140 / Q9800 - creating SG fail

Hi Guys,

iam trying to setup my new maestro environment. there are 2 mho140 in single-site-config.

mho is seeing booth q9800 as unassigned. when iam configuring the security group and assing one gw to the sg and also the mgmt-ports all seems to be fine.

the state of the gateway is changing to "joining" and i can see the following message at the cli:

 

Setting GW to be SGM 1_1 in security-group 1

 

iam waiting for a long time, about 60min. the gw dont reboot. 

there are a lot of erros in the log-files:

 

==> liblldp.log <==
[TLV] current->next = 0
[TLV] Freeing TLV Info String.
[TLV] Freeing TLV.
[TLV] Freeing TLV List Node.
[INT] Sending LLDPDU on [ethsBP1-02]!
[EXCESSIVE] Adding index 17 with name ethsBP1-02 to global port list
[EXCESSIVE] Setting TLV Validator '127' - it's the organizational specific TLV validator...

2024-11-25 20:08:56,154 DEBUG 242: lldp_update_state(): Update state BOOTING->UNASSIGNED
2024-11-25 20:11:22,084 DEBUG 242: lldp_update_state(): Update state UNASSIGNED->JOINING


==> quick_fcd_persistent.log <==
Mon Nov 25 20:11:21 2024 MHO version has changed, old = NA, new = 1, lldp description: A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20
Mon Nov 25 20:11:21 2024 Gateway id changed
Mon Nov 25 20:11:21 2024 db_sgm_id=NA, db_chassis_id=NA, db_sg_id=NA
Mon Nov 25 20:11:21 2024 lldp_sgm_id=1, lldp_chassis_id=1, lldp_sgid=1
Mon Nov 25 20:11:21 2024 my_sid='2419BA1112', my_short_sid='A1112'
Mon Nov 25 20:11:21 2024 lldp_descr='A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20'


==> simple_consumer_install.log <==
Mon Nov 25 20:05:23 EST 2024 Starting post-install script
Mon Nov 25 20:05:23 EST 2024 Create link to Python library
Mon Nov 25 20:05:23 EST 2024 Register cpview_collectd service
Mon Nov 25 20:05:23 EST 2024 Disabling cpview_collectd
Shutting cpview_collectd: [ OK ]
==> smartd.log <==
Mon Nov 25 20:08:46 2024 SSM amount are different (2 != 0). Updating ssm_amount to 2
Mon Nov 25 20:08:46 2024 Successfully updated GaiaDB internal communication bindings
Mon Nov 25 20:08:46 2024 Successfully configured ssm_amount to 2
Mon Nov 25 20:11:21 2024 MHO version has changed, old = NA, new = 1, lldp description: A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20
Mon Nov 25 20:11:21 2024 Gateway id changed
Mon Nov 25 20:11:21 2024 db_sgm_id=NA, db_chassis_id=NA, db_sg_id=NA
Mon Nov 25 20:11:21 2024 lldp_sgm_id=1, lldp_chassis_id=1, lldp_sgid=1
Mon Nov 25 20:11:21 2024 my_sid='2419BA1112', my_short_sid='A1112'
Mon Nov 25 20:11:21 2024 lldp_descr='A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20'
Mon Nov 25 20:11:23 2024 Setting GW to be SGM 1_1 in security-group 1

 

==> smo_install.log <==
defaultfilter:
Compiled OK.
Generating default filter
Unable to open '/dev/fw0': No such file or directory
Unable to open '/dev/fw0': No such file or directory
Unable to open '/dev/fw0': No such file or directory
Generating initial policy
could not create new link "/opt/CPsmo-R81.20/bin/asg_dxl": target "/opt/CPsmo-R81.20/bin/dxl" doesn't exist
creating symbolic links in /usr/bin/Python/lib/python2.7/site-packages/smo
Set ssm_groups_amount to 2

==> sp_communication.log <==
2024-11-25 21:04:08,366 DEBUG 342: is_pingable(): ssm2 is not pingable. cmd=/usr/bin/cmd_check_alive ssm2, rc=0, err=, out=1

2024-11-25 21:04:09,372 DEBUG 342: is_pingable(): ssm1 is not pingable. cmd=/usr/bin/cmd_check_alive ssm1, rc=0, err=, out=1

2024-11-25 21:04:09,372 ERROR 367: get_pingable_orch_id_in_local_site(): Unable to find a pingable orchestrator in the local site
2024-11-25 21:04:13,392 DEBUG 342: is_pingable(): ssm2 is not pingable. cmd=/usr/bin/cmd_check_alive ssm2, rc=0, err=, out=1

2024-11-25 21:04:14,398 DEBUG 342: is_pingable(): ssm1 is not pingable. cmd=/usr/bin/cmd_check_alive ssm1, rc=0, err=, out=1

2024-11-25 21:04:14,398 ERROR 367: get_pingable_orch_id_in_local_site(): Unable to find a pingable orchestrator in the local site

 

[Expert@gw-c5eda4:0]# ping ssm2
PING ssm2 (198.51.101.254) 56(84) bytes of data.
From 198.51.101.201 icmp_seq=1 Destination Host Unreachable
From 198.51.101.201 icmp_seq=2 Destination Host Unreachable
From 198.51.101.201 icmp_seq=3 Destination Host Unreachable
From 198.51.101.201 icmp_seq=4 Destination Host Unreachable

--- ssm2 ping statistics ---
6 packets transmitted, 0 received, +4 errors, 100% packet loss, time 5004ms
, pipe 4
[Expert@gw-c5eda4:0]# ping ssm1
PING ssm1 (198.51.101.126) 56(84) bytes of data.
From 198.51.101.1 icmp_seq=1 Destination Host Unreachable
From 198.51.101.1 icmp_seq=2 Destination Host Unreachable
From 198.51.101.1 icmp_seq=3 Destination Host Unreachable
From 198.51.101.1 icmp_seq=4 Destination Host Unreachable

--- ssm1 ping statistics ---
5 packets transmitted, 0 received, +4 errors, 100% packet loss, time 4007ms
, pipe 4
[Expert@gw-c5eda4:0]#

 

whats wrong with my setup? what can i do? please help!

thanks daniel

0 Kudos
0 Replies

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

View All ≫
 
Upcoming Maestro Events

    CheckMates Events