Hello,
I'm building a lab and just want to have vManage/vBond/vSmart connected at this point.
I added vBond to Controllers list and applied a template to it. It sits with "Sync Pending - Device is offline" Status. But the devices are obviously communicating with each other. If feels like some kind of authentication is not passing.
- I already applied enterprise certificates, vManage cert status is "vBond Updated" and vBond cert status is "Installed"
- vManage vpn0(private IP) can reach vBond vpn0 (public IP)
- enterprise certificate org name matches vManage org name
vBond# show orchestrator local-properties
personality vbond
sp-organization-name orgname
organization-name orgname
system-ip 123.123.123.2
certificate-status Installed
root-ca-chain-status Installed
certificate-validity Valid
certificate-not-valid-before Aug 28 16:05:04 2019 GMT
certificate-not-valid-after Jan 09 16:05:04 2021 GMT
chassis-num/unique-id af028923-eea0-4984-a5b3-a717267c9e99
serial-num 084D6A4B4A3713E2041C87030F055D69057E81AC
number-active-wan-interfaces 1
protocol dtls
INSTANCE INDEX PORT VSMARTS VMANAGES STATE
----------------------------------------------
0 0 12346 0 0 up
vBond# show control local-properties
personality vedge
sp-organization-name orgname
organization-name orgname
certificate-status Installed
root-ca-chain-status Installed
certificate-validity Valid
certificate-not-valid-before Aug 28 16:05:04 2019 GMT
certificate-not-valid-after Jan 09 16:05:04 2021 GMT
dns-name #IP ADDRESS HERE#
site-id 200
domain-id 1
protocol dtls
tls-port 0
system-ip 123.123.123.2
chassis-num/unique-id af028923-eea0-4984-a5b3-a717267c9e99
serial-num 084D6A4B4A3713E2041C87030F055D69057E81AC
token Invalid
keygen-interval 1:00:00:00
retry-interval 0:00:00:18
no-activity-exp-interval 0:00:00:20
dns-cache-ttl 0:00:02:00
port-hopped FALSE
time-since-last-port-hop 0:00:00:00
embargo-check success
number-vbond-peers 0
number-active-wan-interfaces 0
vBond# sh run
system
host-name vBond
system-ip 123.123.123.2
site-id 200
admin-tech-on-failure
no route-consistency-check
organization-name orgname
upgrade-confirm 60
vbond x.x.x.x local
aaa
auth-order local radius tacacs
usergroup basic
task system read write
task interface read write
!
usergroup netadmin
!
usergroup operator
task system read
task interface read
task policy read
task routing read
task security read
!
usergroup tenantadmin
!
user admin
password $6$L5aqWo5QuILubDZW$.DZc3TM3U9XJd.5R0
!
!
logging
disk
enable
!
!
!
omp
no shutdown
graceful-restart
advertise connected
advertise static
!
security
ipsec
authentication-type ah-sha1-hmac sha1-hmac
!
!
vpn 0
interface ge0/0
ip address x.x.x.x./28
ipv6 dhcp-client
no shutdown
!
ip route 0.0.0.0/0 x.x.x.x
!
vpn 512
interface eth0
ip address 10.161.180.51/24
no shutdown
!
ip route 10.161.50.0/24 10.161.180.1
If anyone has any ideas I'd highly appreciate your help.
Regards,
Dan
