CSPC 2.7 stopped uploading

[A.Begessinova]

Good day, 

Please advise,  CSPC 2.7 stopped to uploading data, it shows error:

Upload failed at 01/16/2019 09 18 46 AQTT with the response

A connectivity exception occured while processing the request. The Exception is HTTPs TransportMode has Failed 407 Proxy Authentication Required
_SNTC_1547612248316 603 1

Previously it works  without any problems... no additional configurations was made on our proxy.

[balaji.bandi]

There were some issue with 2.7, contact cisco TAC to upgrade to 2.8.

we had same issue, we upgraded to 2.8 all work as expected.

[A.Begessinova]

Hello,
Unfortunately, we have limited contact and TAC request can not be openned.

So If we will do re-deploy CSPC with 2.8 version, we have to install collector_2.8.0.1_08.zip???
In software download page shows below notification:
Collector 2.8.0.1 Patch can only be installed on collector 2.8 version only . Please check your current collector version before installing 2.8.0.1.

[jofrumki]

Can you provide the output from the CLI while logged in as 'admin', show ip, in a private message?

[A.Begessinova]

Hello,
No, because in last time after password changing (password was expired), admin account is locked and configuration via CLI is unavailable. Further we used WEB access only. We followed instructions in CSPC 2.7 quick guide, deployed CSPC 2.7.4.version. In guide I haven't found collectorlogin/root account access configuration, therefore it was not configured.
I have tried to upgrade Using UI, but it shows failure:server is down

[jofrumki · Accepted solution]

It sounds like you are affected by the bug CSCvm03906 which prevents password changes on the adminshell to take affect. The only workaround is to update the database through Linux, which you've stated you are unable to access. At this point a redeployment of the CSPC would be necessary to get the uploads working again. 

Once you've redeployed, it it considered best practice to enable the collectorlogin and root Linux users from the adminshell with the following commands;

pwdreset collectorlogin 90

pwdreset root 90

Thank you

[A.Begessinova]

Please advise, what version will be correct to redeploy CSPC: install old 2.7.4 or install new 2.8 version?

[jofrumki]

It is best to deploy a 2.8 CSPC to mitigate against existing bugs on 2.7.4

[balaji.bandi]

Hope that was originally suggested myself after my few experience CSPS.

[A.Begessinova]

Please confirm, CSPC2.8 image is Collector-2.8-B-75.ova?

[Jarrett Pomeroy]

That is correct!

[A.Begessinova]

Hello,

We have installed CSPC 2.8 version and we have another issue with collecting data. I have tried discovery by IP address range, but it shows status failed, SNMP Unreachable or Incorrect SNMP Credentials.
We specify same SNMP credentials on CSPC and on our network device

[jofrumki]

Can you confirm that the devices' ACLs specify the CSPC's IP address?
You can test the SNMP protocol from the CSPC CLI using an snmpwalk command, examples are below;
snmpwalk -v 2c -c <RO Community String> <Device IP Address>
snmpwalk -v 3 -u <Username> -l <[AuthPriv | AuthNoPriv | noAuthNoPriv]> -a <[MD5 | SHA]> -A <Auth Password> -x <[AES | DES]> -X <Privacy Password> <Device IP Address>

[A.Begessinova]

Hi,
Yes, we have added CSPC IP address in ACL , it was already configured and works on previous version 2.7. I will send you private message, and regatding test, snmp command is unavailable:

admin# snmpwalk -v 2c -c r3@da((e$s 10.189.x.x
No such command.
Use '?' or 'help' to see supported commands.
admin# snmp?
No such command.
Use '?' or 'help' to see supported commands.

[jofrumki]

Thank you for your message.
To test SNMP, you must be logged in as root on the CLI because the admin user is not a Linux user. First login as collectorlogin and then type su and ENTER, then provide the root password. If you need to generate the collectorlogin and root passwords please use the following commands from admin;
pwdreset collectorlogin 90
pwdreset root 90