Software Updates server is always down

[AltaNoc NSG]

I was able to update the collector once via CLI. That time was random chance and I have no idea what was different.

Since that time, every time I have kicked off a manual update - it says the server is down. I have the following list as to what is expected for connectivity:

72.163.7.113 (TCP 443) concsoweb-prd.cisco.com 
72.163.4.161 (TCP 443/80) www.cisco.com 
72.163.7.60 (TCP 443/80) dl.cisco.com 
72.163.7.60 (TCP 443/80) dl1.cisco.com 
173.37.146.12 (TCP 443/80) dl2.cisco.com 
173.37.144.208 (TCP 443/80) sso.cisco.com

Yet, I am seeing icmp denies on our firewall going from the collector to 72.163.7.113. That is the only thing being denied. Would this be the part that could keep this issue from happening?

[Jarrett Pomeroy]

Hello AltaNoc NSG,

Thank you for the details.  It looks like you may be impacted by this bug ID CSCvd16364. This was part of a CSPC 2.6.x release, as workaround mentioned in this bug, can you please check and see if Ping/ICMP is allowed on your firewall for server reach-ability.  Once allowed, you may try to run the "check update " command again. After you have upgraded to our latest release, icmp will no longer be required for further "check update" commands.

Thank you,

Jarrett

[AltaNoc NSG]

Thank you for your reply!

I will make the change to allow the icmp traffic temporarily - and upgrade.

After I complete this action I will reply if that fixed my situation.

[AltaNoc NSG]

Update was successful, and it appears that icmp is no longer needed to query the download server.

problem now is that the CLI seems to be broken... when I attempt logging in I get the following and the session auto closes:

java.net.ConnectException: Connection refused (Connection refused)
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:589)
at java.net.Socket.connect(Socket.java:538)
at java.net.Socket.<init>(Socket.java:434)
at java.net.Socket.<init>(Socket.java:244)
at com.cisco.ca.ss.lcm.adminshell.client.ShellClient.main(ShellClient.java:51)
Error occured: could not connect to the database server.
Please make sure mysql database server is up and running.

[Jarrett Pomeroy]

Hello AltaNoc NSG,

This error can sometimes be found after a restart of the server before the admin services are running.  Are you still seeing this issue after the VM has been running for awhile?

Thank you,

Jarrett

[AltaNoc NSG · Accepted solution]

Yes, this software has been running since January 11th.

oddly enough, now that I gave it some time and revisited - I am able to log in with my credentials.

now to try and install... yup. Now that looks like it is working too.

Server must have been shy. but thanks for the quick reply!