topic Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices in ExtremeCloud IQ- Site Engine Management Center

after upgrade to XMC 8.5.2.6 cannot terminal to devices

PRobbins — Thu, 01 Apr 2021 21:01:39 GMT

After upgrading to XMC 8.5.2.6 we can no longer terminal to the devices - it just says connection failed - even though all devices are showing as up in device list and all the SNMP / CLI profiles have not changed. the old netsight version 8.0.3 is sitting on a different VM and we are able to still terminal from that platform ? I even tried creating a new CLI profile and assigning to one of the switches but it still failed. I know the credentials are ok as can SSH from putty using those details and it lets me in, so its some issue with XMC 8.5.2.6

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

Stefan_K_ — Thu, 01 Apr 2021 21:07:51 GMT

Any information in the switch logs? Any ACLs in place or firewalls in between XMC and switches?

Can you please check under Administration → Users → Auth Group → Edit → Capability

Check if under “NetSight OneView” the option “access Terminal” is enabled.

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

Miguel-Angel_RO — Thu, 01 Apr 2021 21:07:56 GMT

Probbins,

Did you tried to telnet/SSH directly from the XMC shell?

Mig

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

PRobbins — Thu, 01 Apr 2021 21:12:31 GMT

there are no firewalls in place between XMC and switches - if i try to ssh from XMC shell i just get a Connection reset by peer response - if i try from the old xmc shell it accepts it ?

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

Miguel-Angel_RO — Thu, 01 Apr 2021 21:19:47 GMT

Don’t you have access policies in your switches?

Mig

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

PRobbins — Thu, 01 Apr 2021 22:47:34 GMT

customer had a ssh policy configured on switch which i have now amended to include the new XMC address and it has solved the issue, now have to work out how i can do a bulk change on this pol file for the rest of the switches without having to edit them all individually

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

Tomasz — Fri, 02 Apr 2021 02:05:07 GMT

Hi,

You can create a script in XMC for that. Something like (in EXOS realm) tftp get to pull the .pol from some tftp server, and then another command to apply this policy file as the new SSH access policy. You can then run this script against multiple devices. With 8.5 there is also another option under right-click, CLI Commands. You can run some commands on many devices at once without having to hassle with scripting menu (which is still good for something that you want to save for future execution, scheduling or as an alarm reaction).

Yep, April’s Fools today and I’m the fool, low on caffeine… Would it be an option to take down current SSH access policy for this operation?

Another option could be spoofing the original XMC IP to run a script from some another Linux machine (then it’ll need some ssh connection command on top as well, could run in loop to walk through all switches).

Hope that helps,

Tomasz

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

Stefan_K_ — Fri, 02 Apr 2021 03:30:14 GMT

He could use his old XMC VM to execute your suggestion. Or simply change his XMC IP-Address to the old one.

Re: after upgrade to XMC 8.5.2.6 cannot terminal to devices

Tomasz — Fri, 02 Apr 2021 03:40:03 GMT

Hi Stefan,

Indeed, I didn’t spot that the old VM is still in place. So it can still be useful for something. 😉

Cheers,

Tomasz