Can't Connect to IOx Local Manager - 15.6.3M2 - IR829

[Justin Chin-You]

Team, I'm all out of ideas on this one. Really not sure where to go, I've got IOx working on another IR829 no problems but this one is fighting me.

I followed this guide to setup the environment: https://communities.cisco.com/docs/DOC-60826

The only thing i didn't do was configure NAT since there is no requirement for me to connect this to a public network.

I'm unable to browse to the local manager. (https:.//192.168.1.100:8443)

After completing all the other steps:

IOx Host comes up as expected:

Customer-IR829#show iox host list detail

IOX Server is running. Process ID: 330

Count of hosts registered: 1

Host registered:

===============

    IOX Server Address: FE80::FA0B:CBFF:FEAA:C80C; Port: 22222

    Link Local Address of Host: FE80::1FF:FE90:8B05

    IPV4 Address of Host:       192.168.1.100

    IPV6 Address of Host:       fe80::1ff:fe90:8b05

    Client Version:             0.4

    Session ID:                 2

    OS Nodename:                Customer-IR829-GOS-1

    Host Hardware Vendor:       Cisco Systems, Inc.

    Host Hardware Version:      1.0

    Host Card Type:             not implemented

    Host OS Version:            1.3.2.3

    OS status:                  RUNNING

    Interface Hardware Vendor:  None

    Interface Hardware Version: None

    Interface Card Type:        None

    Applications Registered:

    =======================

        Count of applications registered by this host: 0

Unable to telnet into the Guest-OS

Customer-IR829#telnet 192.168.1.100 2070

Trying 192.168.1.100, 2070 ...

% Connection refused by remote host

Upgraded and Downgraded Software:

Customer-IR829#show ver

Cisco IOS Software, ir800 Software (ir800-UNIVERSALK9-M), Version 15.6(3)M2, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2017 by Cisco Systems, Inc.

Compiled Wed 29-Mar-17 20:43 by prod_rel_team

ROM: Bootstrap program is IR800

Customer-IR829 uptime is 18 minutes

System returned to ROM by Firmware Upgrade at 21:50:51 UTC Mon Jun 19 2017

System image file is "flash:/ir800-universalk9-mz.SPA.156-3.M2"

Last reload reason: Reload Command

Confirmed Line settings:

line 1 2

transport input all

transport output all

stopbits 1

line 3

script dialer lte

no exec

transport preferred lat pad telnet rlogin lapb-ta mop udptn v120 ssh

transport input all

transport output all

line 4

no activation-character

no exec

transport preferred none

transport input all

transport output all

Anyone have any ideas why I can't pull up the local manager?

Thanks,

Justin

[Justin Chin-You]

Just adding to this, if I do a packet capture and try to browse to the local manager I get a TCP RST.

Web Browser says "Connection Refused"

[Steve Zhang]

Please refer to Re: Unable to start CAF on freshly installed IR809. There is one known issue for Cisco IOS Release 15.6(3)M2 - Release Notes for Cisco IR800 Industrial Integrated Services Routers and Cisco 1000 Series….

[Justin Chin-You]

Hi Steve,

Thanks for the reply. I did see that note but for the workaround to work I need to be able to telnet to the Guest-OS and I'm not able to do that. I get a connection refused.

[Steve Zhang]

To access the Local Manager, you need to set the related PAT rules. Please see IR 8xx Platforms - IOx Docs

[Justin Chin-You]

I'll give it a shot. Based on the instructions my understanding was that NAT/PAT is not required as my laptop is on the inside of the network and can directly reach the GuestOS.

The instructions also call out that I could use a public IP and not use NAT/PAT here.

[Justin Chin-You]

Hi Steve,

FYI... No luck configuring NAT did not help.

[Justin Chin-You · Accepted solution]

Okay, for anyone else who has run into this issue....

1) I had to Reverse SSH into the GOS (in my case 192.168.1.100)

     a) Use the user/Pass you created for Priv 15

2) Check the services

GOS#monit summary

Cannot translate 'Customer-IR829-GOS-1' to FQDN name -- Temporary Failure in name resolution

The Monit daemon 5.14 uptime: 15h 58m

Process 'dmo'          Running

File 'product_id'        Accessible

File 'hwid'                 Accessible

File 'svcbr0'              Accessible

File 'ioxcaps'            Accessible

Process 'caf'            Not Monitored

<snip>

3) Perform steps to change PID in the caf process

     a) Release Notes: Cisco IOS Release 15.6(3)M2 - Release Notes for Cisco IR800 Industrial Integrated Services Routers and Cisco 1000 Series…

     b) Post on issue here: Re: Unable to start CAF on freshly installed IR809

4) Edit /etc/hosts file to include the hostname for the GOS (in my case Customer-IR829-GOS-1)

5) Restart the caf service

     a) GOS#monit start caf