RV345P cannot re-register Security License and becomes unresponsive

[Inland-OZ]

Hi all,

We have a number of Cisco RV3XXx devices at client offices' where they are preferred for routing protocols and simplicity.

One has a security license and we are noticing from Australia that particularly this one is becoming unresponsive to clients and throughput after business hours.

In the log I find at the time (2022-01-27T21:24:50+10:00) it happens a license check is being made by the RV345P and someone has to reset the router, because it does not resume working at all (unresponsive, no DHCP, no traffic, no web UI).

======================================================================================

Log file:

2022-01-27T21:28:51+10:00 <error>smart_agent: SA-ERROR: Recover OOC entry time and grace expiration time in TS failed.
2022-01-27T21:28:51+10:00 <notice>smart_agent: SA-Notice: %SMART_LIC-5-COMM_RESTORED:Communications with Cisco licensing cloud restored
2022-01-27T21:27:12+10:00 <notice>mwan3: Primary/Next Primary interface wan2, is UP
2022-01-27T21:26:49+10:00 <notice>mwan3: Primary/Next Primary interface wan1, is UP
2022-01-27T21:26:31+10:00 <notice>netifd: Interface 'wan16' has link connectivity
2022-01-27T21:26:31+10:00 <notice>netifd: Interface 'wan1' has link connectivity
2022-01-27T21:26:31+10:00 <notice>netifd: Interface 'wan26' has link connectivity
2022-01-27T21:26:31+10:00 <notice>netifd: Interface 'wan2' has link connectivity
2022-01-27T21:25:39+10:00 <error>Webfilter: Cannot resolve host bcap15.brightcloud.com: Name or service not known
2022-01-27T21:25:25+10:00 <notice>system: device booted with active firmware version: 1.0.03.24
2022-01-27T21:25:24+10:00 <notice>system: argument:all
2022-01-27T21:25:24+10:00 <notice>system: ##Checking lanwancheck work around Here
2022-01-27T21:25:16+10:00 <alert>system: recurring-schedule: disabled.
2022-01-27T21:24:50+10:00 <error>smart_agent: SA-ERROR: SAMsgManage send failed
2022-01-27T21:24:50+10:00 <error>smart_agent: SA-Error: %SMART_LIC-3-COMM_FAILED:Communications failure with Cisco licensing cloud: Fail to parse response data from SCH server
2022-01-27T21:24:50+10:00 <error>smart_agent: SA-ERROR: Rval Communication message send response error
2022-01-27T21:24:50+10:00 <error>smart_agent: SA-ERROR: Failed to send message to Cisco: Fail to parse response data from SCH server
2022-01-27T21:24:40+10:00 <warning>Webfilter: WF POLICY modified: name POLICY_NAME bEnable 0 bWebreputation 1, ipgrp POLICY_NAME,sched NONE
2022-01-27T21:24:40+10:00 <notice>Webfilter: WF POLICY added: name POLICY_NAME, bEnable 0 bWebreputation 1 etc..
2022-01-27T21:24:40+10:00 <notice>Webfilter: ipgrp LOOKUP queried for <name> : <POLICY_NAME> SUCCESS
2022-01-27T21:24:40+10:00 <warning>Webfilter: WF POLICY modified: name LAN bEnable 0 bWebreputation 1, ipgrp LAN,sched NONE
2022-01-27T21:24:40+10:00 <notice>Webfilter: WF POLICY added: name LAN, bEnable 0 bWebreputation 1 etc..
2022-01-27T21:24:40+10:00 <notice>Webfilter: Last message ' ipgrp LOOKUP querie' repeated 1 times, supressed by syslog-ng on Router
2022-01-27T21:24:40+10:00 <notice>Webfilter: ipgrp LOOKUP queried for <name> : <LAN> SUCCESS
2022-01-27T21:24:39+10:00 <notice>Webfilter: Webfilter disabled
2022-01-27T21:24:39+10:00 <alert>Webfilter: Webfilter application damonized successfully !!!!
2022-01-27T21:24:39+10:00 <alert>Webfilter: Webfilter application damonizing !!!
2022-01-27T21:24:39+10:00 <error>Webfilter: Calling poller creation .
2022-01-27T21:24:23+10:00 <notice>system: argument:
2022-01-27T21:24:21+10:00 <notice>system: #Checking lanwancheck work around Here

======================================================================================

Of course the communication to the Cisco host could be due to both WAN 1 & 2 being offline BUT, this happens when normal online activity is present and both WAN 1 & 2 are online?

Today the device Security license was de-registered and these responses came from the UI; More work needed here to register with Cisco? Congestion?

Currently the device is unable to reach CISCO licensing to install the Smart Software Licensing Token, yet all users' have normal WWW access? WHY?

[Inland-OZ]

The latest firmware (1.0.03.26) has been applied to the RV345P (with a Security License) and registration succeeded with the device reboot.

As an aside, an alternate email server was configured in the device, (because the local POP3 Server goes offline) and this seemed to be associated with the outages, however time will tell.

Now monitoring for stability!

[Inland-OZ]

This has begun again, virtually every time the unit is power-cycled, it is "de-registered" ! ;(

Every day now?

Why, when it has the potential to allow malware and blacklisted traffic into our network.

Although, yes it moves to Evaluation Mode, but that is not the point, someone has to check and re authorise / register the license.

[Inland-OZ]

Do we have a problem here?

What to do, to resolve this?

[Inland-OZ]

Interestingly, this seems associate with either:

1. Creating a schedule (very simple only)

2. Mail server being offline for log reports

3. Logging module stops responding

As for logs, these are the last and only lines of the log report:
2022-04-30T09:50:31+00:00 <error>PnP: [9956]: pnp.infra.network.HTTPConnClient ERROR HELLO failed
2022-04-30T09:50:31+00:00 <warning>PnP: [9956]: pnp.discovery.mechanisms.dns_discovery WARNING Attempting HTTPS DNS Discovery without NTP sync
2022-04-30T09:50:21+00:00 <notice>system: syslog-ng version:3.0.8 started.
2022-04-30T09:50:21+00:00 <warning>kernel: [ 141.210239] fp_netfilter_pre_routing: 8 callbacks suppressed

I have disabled all logging as test.

[Inland-OZ · Accepted solution]

Good news for this device is that the latest Firmware (1.0.03.27):

• Very stable
  
  
• The UI is generally more responsive to the user for over a month now

Although, twice last week the security license could not register with the Smart Account and the device was returned to "Evaluation Mode".

Otherwise very good !

[Inland-OZ]

Security License was De-Registered again today, is there a way to avoid this happening again?