Cloud Managed Networks

 View Only
  • 1.  Error while connect IAP to Central

    Posted Oct 29, 2019 08:45 AM

    Hi there

     

    I've a IAP in a cluster which is not able to connect to central. (the other IAP in the same network / same cluster is connected to central without any trouble).

    I checked the Firewall Rules, the NTP service and the Activate settings but I'm not able to bring it to central properly.

    The IAP is shown in Central (I guess its because the other IAP is the VC at the moment and so Cental receives the informations through the VC), but when I enter the command "show activate" it shows me that there is a "connection-failed" error.

    IAP MAC Address : xx:xx:xx:xx:xx:xx
    IAP Serial Number : xxxxxxxxxx
    Cloud Activation Key :
    Activate Server :device.arubanetworks.com
    Activate Status :connection-failed
    Provision interval :10080 minutes

     

    With the "show log ap-debug | include awc" command I receive the following events:

     

    Oct 29 13:29:18 awc[2398]: wsc: receive message from cli, len 140
    Oct 29 13:29:18 awc[2398]: wsc: receive message type CONNECT_REQUEST(1), payload_type=1
    Oct 29 13:29:18 awc[2398]: wsc: setting proxy server xxx.xxx.xxx.xxx:8080
    Oct 29 13:29:18 awc[2398]: wsc: connect to server 50.112.213.198
    Oct 29 13:29:18 awc[2398]: wsc: central connection exist, destroy it first.
    Oct 29 13:29:18 awc[2398]: wsc: clear existed pollfd successfully.
    Oct 29 13:29:18 awc[2398]: wsc: callback_central(1561) LWS_CALLBACK_DEL_POLL_FD, remove the old fd 8 from dispatcher.
    Oct 29 13:29:18 awc[2398]: wsc: LWS_CALLBACK_CLOSED
    Oct 29 13:29:18 awc[2398]: wsc: create a wss connection address 50.112.213.198, port 443, path /ws/xxxxxxxxxx
    Oct 29 13:29:18 awc[2398]: wsc lib: Initial logging level 7
    Oct 29 13:29:18 awc[2398]: wsc lib: Library version: 1.2
    Oct 29 13:29:18 awc[2398]: wsc lib: Configured without extension support
    Oct 29 13:29:18 awc[2398]: wsc lib: Started with daemon pid 0
    Oct 29 13:29:18 awc[2398]: wsc lib: static allocation: 4444 + (12 x 1024 fds) = 16732 bytes
    Oct 29 13:29:18 awc[2398]: wsc lib: Proxy xxx.xxx.xxx.xxx:8080
    Oct 29 13:29:18 awc[2398]: wsc: callback_central(1530) LWS_CALLBACK_OPENSSL_LOAD_EXTRA_CLIENT_VERIFY_CERTS
    Oct 29 13:29:18 awc[2398]: wsc: callback_central(1550) LWS_CALLBACK_ADD_POLL_FD, add fd 8 to dispatcher, fds fd 8.
    Oct 29 13:29:18 awc[2398]: wsc: LWS_CALLBACK_SET_MODE_POLL_FD case POLLOUT
    Oct 29 13:29:18 awc[2398]: wsc: callback_central(1583) LWS_CALLBACK_SET_MODE_POLL_FD POLLOUT, DispAddInput input_write_id = 604568
    Oct 29 13:29:18 awc[2398]: wsc: Waiting for connect...
    Oct 29 13:29:18 awc[2398]: wsc: callback_central(1605) LWS_CALLBACK_CLEAR_MODE_POLL_FD, POLLOUT, dispatcher input_write_id=604568
    Oct 29 13:29:19 awc[2398]: wsc: callback_central: LWS_CALLBACK_CLIENT_ESTABLISHED
    Oct 29 13:29:19 awc[2398]: wsc: connect status is CONNECTED(2), prapare to send to cli.
    Oct 29 13:29:19 awc[2398]: wsc: send papi message to cli, appid 1, type CONNECT_RESPONSE(2), raw message len 9.
    Oct 29 13:29:19 awc[2398]: wsc: receive cloud message type device.auth.chal.req
    Oct 29 13:29:19 awc[2398]: wsc: receive auth challenge req topic
    Oct 29 13:29:19 awc[2398]: sign_challenge: 1221: failed to create signature using TPM, ret=-1, trying private key
    Oct 29 13:29:19 awc[2398]: sign_sha1_digest: 1090: Can't stat private key file '/tmp/deviceCerts/privkey.pem'
    Oct 29 13:29:19 awc[2398]: sign_challenge: 1225: Unable to get the signature

     

     

     

    Thanks for your help, your feedback and your time.

     

    Kind regards

    DominikGy



  • 2.  RE: Error while connect IAP to Central

    Posted Oct 31, 2019 11:21 AM

    I've opened a Case now and will share the answer as soon as it is solved.

     



  • 3.  RE: Error while connect IAP to Central
    Best Answer

    Posted Nov 11, 2019 06:10 AM
      |   view attached

    Problem was solved by performing a factory reset on the faulty IAP (see attached manual)

     

    Kind regards