asg diag verify : Software Provision and Performance hogs failed

[todd]

Hi Expert,

We are setting new Maestro with 140 * 2 and SG6600*3. When we performed "asg diag verify" command, there are always two failed item.

One is Software Provision and the other is Performance hogs failed. Will this two failed item affect Maestro running and performance ?

We are running R81.10 JHF take 30.

+-------------------------------------------------------------------------------------------------------+
|Installed Hotfixes |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|Package |Name |Take |Result |Comments |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_CPSDC_AUTOUPDATE |19 |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_GOT_TPCONF_AUTOUPDATE |97 |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_HCP_AUTOUPDATE |48 |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOU|14 |Failed |1_01: Not exists |
| |PDATE | | | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CVPN |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|FW1 |HOTFIX_GOT_TPCONF_AUTOUPDATE |- |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|FW1 |HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOU|- |Failed |1_01: Not exists |
| |PDATE | | | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|FW1 |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|PPACK |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|SMO |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|SecurePlatform |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|cpsdc_wrapper |HOTFIX_CPSDC_AUTOUPDATE |- |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|hcp_wrapper |HOTFIX_HCP_AUTOUPDATE |- |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+

Summary
=======
1. Software verifier passed successfully.
2. Module verifier passed successfully.
3. Hotfix verifier failed.

==============================
Performance hogs:
==============================

-----------------------------------------------------------------
| Status | Test performed |
-----------------------------------------------------------------
| [FAILED] | Disabled Accept Templates |
| [FAILED] | Disabled NAT Templates |
| [PASSED] | FW1 debug flags |
| [PASSED] | Kernel soft lockups |
| [PASSED] | Long running processes |
| [PASSED] | Neighbour table overflow |
| [PASSED] | PPACK debug flags |
| [PASSED] | Routing cache entries |
| [PASSED] | SecureXL status |
| [PASSED] | Swap saturation |
| [PASSED] | routed trace options |
-----------------------------------------------------------------

Found the following issues:
-----------------------------------------------------------------
[ All] Accept Templates : disabled by Firewall; Layer Network disables template offloads from rule #697; Throughput acceleration still enabled.
[ All] NAT Templates: disabled by Firewall; Layer Network disables template offloads from rule #697; Throughput acceleration still enabled.

Thanks!

Todd

[_Val_]

@Anatoly can you please assist here?

[todd]

We found the performance hogs was caused by one rule with NFS service group object.

Removing some RPC NFS related objects from the rule service and re-run diag verify. All  performance hogs test are PASSED. 🙂

We also created a TAC for Software Provision failed which is currently under  investigation. 

[Martijn]

Hi,

Did you even got a solution for the Software Provision failure from TAC.

I am facing the same issue on a Maestro setup. All is working fine and both SGM where upgraded with the same procedure.
But on one SGM the following software is missing (Not Exists)

BUNDLE_ESOD_CSHELL_AUTOUPDATE
Hotfix_ESOD_CSHELL_AUTOUPDATE

Like to know if I can solve this without much effort.

Regards,
Martijn

[todd]

We opened a TAC ticket about this Software Provision failure on 2022/06. 

TAC said this is about autoupdater, when autoupdater is running, all these 'failed' will be fixed automatically. 

Since our environment does not allow connections to the Internet, we ignore these Software Provision failure.

Todd

[Lari_Luoma]

Hi!

Don't worry about auto-updater. It's a tool that updates itself automatically and asynchronously and that's why different SGMs can have a different revisions of it. asg_provision, which is part of asg diag as well is not the best tool because it gives this kind of false positives. Better tool to verify that your software is good is hcp -r "software version" -m all.
As you already found out performance_hogs failure is related to policy.