cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to the Smart Net Total Care Community!

Our community includes Cisco experts to answer your questions about the Smart Net Total Care (SNTC) portal and CSP-Collector.
Click the navigation links below to access materials for using our service and supported collectors.

232
Views
10
Helpful
13
Replies
Highlighted

No Ping Response from C-SPC after Upgrade to 2.8.1

I ran the GUI update to the lastest version last night and all went well. However this morning I was told server alerts were going off since they could no longer get a ping response from the server. I logged into the admin user of the CLI and I can see where ICMP type 8 is allowed on the firewall of the C-SPC.

 

Does anyone else have this issue? We have stopped ping checks for now, but would like to resume so we can ensure our inventory is happening regularly.

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

It looks like iptables is being overwritten and the icmp permit rule is not there anymore after upgrade. This looks like a bug but for now instead of disabling iptables you can run "iptables -L --line-numbers" to get the numbered rules and in the INPUT chain add the icmp permit with "iptables -I INPUT 13 --match icmp --protocol icmp --icmp-type any --jump ACCEPT" where 13 is the line number at the end of INPUT chain. If there is a LOG_DROP entry at the end of the input chain, change the number to whatever line is 1 above it.

 

Thanks,

Brandon

13 REPLIES 13
Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

Is it still not replying to ping requests? I checked and it looks like your collector has uploaded multiple times today so it seems to have at least upgraded properly. It would make sense to lose pings for a while while the CSPC rebooted, which can sometimes take a while.

 

On a side note, it looks like you are getting uploads silenced due to them coming in so frequently. I would check the configuration to prevent this from happening.

 

Thank you,

Brandon

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

They have not worked all day. We had to silence it in our monitoring system.

How often should it upload?

Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

Uploads to SNTC are typically scheduled for at most once a week since we do not collect any syslog data and contract and EOX information does not fluctuate that frequently.
Beginner

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

I have the same issue.  Version 2.8.1 installed on Saturday morning, and my monitoring system has been unable to ping since the upgrade.  I am able to log into the web interface, and my Sunday morning collection and upload job ran without issue.  Did a firewall get enabled during the upgrade?

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

@mdsmith200 wrote:

I have the same issue.  Version 2.8.1 installed on Saturday morning, and my monitoring system has been unable to ping since the upgrade.  I am able to log into the web interface, and my Sunday morning collection and upload job ran without issue.  Did a firewall get enabled during the upgrade?


From what I could see, the firewall was allowing ICMP, but nothing was responding. Not sure if there is another layer of firewall I am not seeing. Either way, we still cannot ping our C-SPC, but its up and working.

Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

We've upgraded some collectors internally and don't have the ping issue. What monitoring system are you pinging from? Are you able to ping it from your workstation? Are you able to ping out from the collector itself? 

Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

Can you login to CLI as root user and temporarily disable iptables to see if you can ping? 

 

service iptables stop

Beginner

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

My CSPC server just upgraded to version 2.8.1 this morning and the server stopped replying to pings after the reboot.  I am able to get access to the server via SSH and https but cannot ping.

 

The suggestion brawall was dead on.  Shutting down iptables did workaround the issue, I am able to ping with iptables stopped.  I hope there is a version 2.8.2 out soon to fix this issue or a quick fix I can apply.

Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

Can you please PM me the output of "iptables -L" as root user?

 

Thank you,

Brandon

Cisco Employee

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

It looks like iptables is being overwritten and the icmp permit rule is not there anymore after upgrade. This looks like a bug but for now instead of disabling iptables you can run "iptables -L --line-numbers" to get the numbered rules and in the INPUT chain add the icmp permit with "iptables -I INPUT 13 --match icmp --protocol icmp --icmp-type any --jump ACCEPT" where 13 is the line number at the end of INPUT chain. If there is a LOG_DROP entry at the end of the input chain, change the number to whatever line is 1 above it.

 

Thanks,

Brandon

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

Thanks for the reply. Working on changing this now.

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

This works. Pinging is alive again.
Beginner

Re: No Ping Response from C-SPC after Upgrade to 2.8.1

Adding the ICMP to the IPTABLEs worked for me, But, after a restart of the collector, the ping issues came back. The IPTABLES ICMP entry had to be re-added. How do I make it stick?

CreatePlease to create content
Right-rail
Navigation
Be sure to bookmark these support pages and use them in the future to find all the self-help information.
Helpful Links
Spotlight awards-March 2019