Cloud Managed Networks

Hello,

 

I've been doing some testing with a 2930F in Central but somehow is seems to be in some kind of mode Central can't resume management.

 

 

Aruba-2930F-24G-4SFPP# show aruba-central

 Configuration and Status - Aruba Central

  Server URL              : https://device-eu.central.arubanetworks.com/ws
  Connected               : Yes
  Mode                    : Monitor
  Last Disconnect Time    : Mon Feb  4 18:02:00 2019
  Server DNS Lookup       : Success
  Proxy Server DNS Lookup : NA
  Error Reason            : NA

Mode stays on Monitor in stead of Managed. Does anyone know how to troubleshoot and solve this?

 

Regards,

 

Rens

 

Make sure you have this switch in a group that has configuration (or a template). Then make sure you are not in "aruba-central support-mode enable" in the switch.

 

 

Hello Samuel,

 

I have the same excat problem here. Switch stays in monitor mode.

 

- I "defaulted" the switch (so support-mode should be disabled)

- The 2930F switch is placed in a template groupe with configuration pending to apply to the switch

- Switch running version WC.16.06.0008 (is it the problem ?)

Did someone solved the problem? I also have two switches staying in monitor mode. The switches are assigned to a template group with a valid template config. "activate provision force" doesn't help. And the logfile is filling up with SSL messages: [...] I 07/09/19 14:18:29 00471 ssl: SSL certificate: CN =JL320A OU = HP Networking EVPG O = Hewlett-Packard Development Company ST = CA C = US, serialNumber = XXXXXXXXXX, BaseMAC xxxxxx-xxxxxx I 07/09/19 14:18:29 00468 ssl: User 'cloud': logged into SSL/TLS session for IDEVID from (null) I 07/09/19 14:18:25 00471 ssl: SSL certificate: CN =JL320A OU = HP Networking EVPG O = Hewlett-Packard Development Company ST = CA C = US, serialNumber = XXXXXXXXXX, BaseMAC xxxxxx-xxxxxx I 07/09/19 14:18:25 00468 ssl: User 'cloud': logged into SSL/TLS session for IDEVID from (null) I 07/09/19 14:18:05 00471 ssl: SSL certificate: CN =JL320A OU = HP Networking EVPG O = Hewlett-Packard Development Company ST = CA C = US, serialNumber = XXXXXXXXXX, BaseMAC xxxxxx-xxxxxx I 07/09/19 14:18:05 00468 ssl: User 'cloud': logged into SSL/TLS session for IDEVID from (null) I 07/09/19 14:17:45 00471 ssl: SSL certificate: CN =JL320A OU = HP Networking EVPG O = Hewlett-Packard Development Company ST = CA C = US, serialNumber = XXXXXXXXXX, BaseMAC xxxxxx-xxxxxx [...]

Any idea why config restore is not happening for few devices 

 

activate provision force doesn't work , even though central support mode is disabled , 

 

show aruba-central

Server URL : https://device-eu.central.arubanetworks.com/ws
Connected : Yes
Mode : Managed
Last Disconnect Time : Thu Feb 6 07:55:41 2020

 

 

Configuration and Status - Activate Provision Service

Activate Provision Service : Enabled
Activate Server Address : device.arubanetworks.com
Activation Key : 3EWHTDAL
Time Sync Status : Time sync from other source
Activate DNS Lookup : Success
Proxy Server DNS Lookup : NA
Activate Connection Status : Success
Error Reason : NA

 

---- Reverse event Log listing: Events Since Boot ----
I 02/06/20 07:58:52 03125 mgr: ST2-CMDR: Startup configuration changed by SNMP.
New seq. number 297
I 02/06/20 07:58:51 05258 central: ST2-CMDR: Aruba Central support mode is
disabled.
I 02/06/20 07:58:36 00471 ssl: ST2-CMDR: SSL certificate: CN =JL558A OU = HP
Networking EVPG O = Hewlett-Packard Development Company ST = CA C =
US, serialNumber = CN8BK910TH, BaseMAC 548028-cee6c0
I 02/06/20 07:58:36 00468 ssl: ST2-CMDR: User 'cloud': logged into SSL/TLS
session for IDEVID from (null)
I 02/06/20 07:58:32 05101 amp-server: ST2-CMDR: AMP server configuration is
disabled due to first configuration.
I 02/06/20 07:58:32 05221 activate: ST2-CMDR: The device is provisioned with the
Central https://device-eu.central.arubanetworks.com/ws.
I 02/06/20 07:58:32 03125 mgr: ST2-CMDR: Startup configuration changed by SNMP.
New seq. number 296
I 02/06/20 07:58:32 05622 activate: ST2-CMDR: Trusted Anchor Certificate
received from Activate server is successfully installed.
I 02/06/20 07:58:32 05223 activate: ST2-CMDR: Successfully established
connection with the Activate server;parsing final provision service
response.
I 02/06/20 07:58:27 05226 activate: ST2-CMDR: Successfully resolved the Activate
server address device.arubanetworks.com to 54.70.29.7.

What does the Central Audit Trail tell you about the device? Any error observed? You should see whether Central attempts to push any config change to the switch and succeeds or fails.

Issue got resolved . What we checked to resolve :

 

1 . Checked audit logs in central .

2. Which says :

Template/Variable Configuration Error

3. Uploaded variables for stack member 2 as well .

 

Findings among the failed ones , VSF member 2 was acting as master and we did not have variables uploaded for them . Looks like we have to upload variables for both VSF members . Will be raising a case with Aruba . Since the solution given by ARUBA said that variables are required only for one of the member but looks like we need for every members .

Glad you figured it out! Audit Trail is your friend in such cases

 

Now regarding the variables, it is actually required that you upload the variables for all switches in a stack:

https://help.central.arubanetworks.com/latest/documentation/online_help/content/switches/cfg/conf_stack_tmlgrp.htm

 

When uploading a configuring template, ensure that the variables are uploaded for all the members of the stack. The template is applied with the variables of the member that is elected as the commander.

 

Have you found any contrary info for the same? If so please point it out to me.

im having this same issue, but the above doesnt resolve anything for me. the switch doesnt even have any config apart from the basic config. but i am getting a tonne of ssl errors in the log. has anyone else had this issue?

Original Message:
Sent: Feb 12, 2020 05:39 AM
From: anupbdn
Subject: Central; Switch stays in Monitor Mode

Issue got resolved . What we checked to resolve :

 

1 . Checked audit logs in central .

2. Which says :

Template/Variable Configuration Error

3. Uploaded variables for stack member 2 as well .

 

Findings among the failed ones , VSF member 2 was acting as master and we did not have variables uploaded for them . Looks like we have to upload variables for both VSF members . Will be raising a case with Aruba . Since the solution given by ARUBA said that variables are required only for one of the member but looks like we need for every members .