Problem cannot access WEB GUI on Ironport C160

[pipatlao]

Dear All,

I have problem when I change "Default Spam Quarantine" to another interface. After that I cannot access WEB GUI but I can access via SSH.

If you need futher infomation please let me know.

Please advice.

Pipat,

[Andreas Mueller]

Hello Pipat,

what are the ports you set for GUI and quarantine? If you have specified anything other than the default (80 for GUI, 82 or 83 for quarantine); check if your browser points to the correct port. Also, if you have enabled HTTPS, make sure either HTTP  redirection is enabled, or you connect with HTTPS://hostname.

Hope that helps,

Andreas

[ninoroygaleos]

hi pipat laoarg,

how do we classified your problem is it the page you are trying to access cannot be displayed? or the login page is displayed but when you attempted to log-in you say "you cannot access"?

you were able to login to the ssh correct? ok. then try to netstat -an and see that the httpd is running and listening to the port 80 (as it is its default webgui port). If you can't see anything then check the httpd services if it is running then after that you will surely what's going on with your C16. We've encountered your issue before, what i did was i've checked the listening port then I already knew what's going on and it is the httpd Services issue.

[pipatlao]

Sorry for slowly response

After I reboot box(appliance). This problem already resolved.

[ninoroygaleos]

ok. so, definity your problem would be the httpd services were stuck. You can actually testify that by viewing the logs undet /var/log/messages or /var/log/syslog, so you would be able do a countermeasure next time if it occured again. without restarting your C160. Just do a #service httpd restart and it good to go.

[diegomartins]

Here all my IronPort this slow. Testing telnet port 25 fail often. Is there a command to optimize the performance of the same? how do I get access to the directories / var / log?

Sent from Cisco Technical Support iPad App

[ninoroygaleos]

Hi Diego Correa,

you can access your Ironport using putty (over ssh (port 22)). You may get your putty copy over this link, http://www.putty.org/ .

See command below to get the content of the /var/log/ folder.

# ls /var/log

-onin

[Andreas Mueller]

Hello -onin,

there is no way that you can restart the webservice on a C160 from the CLI, nor does a /var/log/ folder exists on that level. Those commands you gave would only work on a encryption appliance (IEA) at root level only. Thus I ask you to  please provide solutions only that you have actually tested, and nothing that may know from other systems.

@Diego Correa - how do you test port 25? And what do you mean by slow, CLI, GUI access etc?

Cheers,

Andreas

[diegomartins]

All accesses are slow.

I'm testing Telnet (25) using machines of my local network. The connection establish, but the banner slow to appear.

The SSH access and Http also slow in the connection.

[Andreas Mueller]

Do you mean the commands on the CLI take very long to execute? or pages loading slow?  Was the appliance shut down without a proper reboot recently?

Regards,

Andreas

[diegomartins]

The two situations. Web and Cli.

The appliance is not shutdown incorrectly in the last 80 days. The last reboot was to update to version 7.5.

There is some command, for optimization the appliance?

Optimizations or clean the database.

In the graphs of MRTG or system graphs, the load for CPU and memory is ok.

Just for information, i have two Ironports (C150) in cluster. i see the problem for two.
However a higher frequency for the primary.

Tks

Diego Corrêa

[Andreas Mueller]

Hello Diego,

OK, so we can exclude any performance issues by a corrupted reporting, which sometimes happen after an unsafe reboot and causes the appliance to act very slow. Looks like your configuration needs some adjustment, if you experience the delay on both appliances? BTW, have you tested connectivity directly on the appliances, or from a different network? Maybe you have a firewall with protocol ispection inbetween that slows down output. Therefore I suggest you connect a laptop directly to the appliance, and check if the problem persists.

Regards,

Andreas

[kusumas4879]

I am new to iron ports and seeing > after the login , could some one help on how to get into # and perform a service httpd restart , I am able to login to my device that is running previously via the cli but not gui. performed a reboot but still unable to GUI.

[quatterman1]

can you share the command for an s370 team?