XMC Netsight 8.5.4 - NAC rule issue

AntonS — Thu, 04 Feb 2021 00:03:18 GMT

Hy,

I installed Netsight 8.5.4 this week.

All seemed good so far, today I needed to change a NAC rule.

After Adding a new rule, I was not able to view NAC rules in oneview anymore?

Did anyone else already install 8.5.4 and can test this?

I already sent a ticket to our partner.

Re: XMC Netsight 8.5.4 - NAC rule issue

Miguel-Angel_RO — Thu, 04 Feb 2021 00:06:33 GMT

Antox,

I run 8.5.4 and I didn’t experienced this

Mig

Re: XMC Netsight 8.5.4 - NAC rule issue

AntonS — Thu, 04 Feb 2021 00:14:57 GMT

Thank you

So it has something todo with our setup.

Re: XMC Netsight 8.5.4 - NAC rule issue

Miguel-Angel_RO — Thu, 04 Feb 2021 00:20:50 GMT

Anton,

At first step, I would reboot XMC.

The error seems to be database related.

During the boot of netsight do a tail -f /usr/local/Extreme/netsight/appdata/log/server.log to check at what moment the error does happen. This can give some information on the error.

I’m not sure about the typo of the path.

Mig

Re: XMC Netsight 8.5.4 - NAC rule issue

AntonS — Thu, 04 Feb 2021 15:58:37 GMT

I did what you told me.

After reboot of netsigth I could not see any errors during startup.

I added a rule and hit SAVE

2021-02-04 08:56:06,134 ERROR [com.enterasys.netsight.tam.server.webapps.monitor.configuration.NacWebConfiguration] Could not load table data.: java.lang.IndexOutOfBoundsException: Index: 101, Size: 101
        at com.enterasys.netsight.tam.server.webapps.monitor.configuration.NacWebConfiguration.getTableData(NacWebConfiguration.java:958)
        at com.enterasys.netsight.tam.server.webapps.monitor.DwrNac.getNacWebConfigurationData(DwrNac.java:698)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.directwebremoting.impl.CreatorModule$1.doFilter(CreatorModule.java:172)
        at com.enterasys.netsight.server.webapps.monitor.filters.DwrMethodFilter.doFilter(DwrMethodFilter.java:121)
        at org.directwebremoting.impl.CreatorModule$1.doFilter(CreatorModule.java:166)
        at org.directwebremoting.impl.CreatorModule.executeMethod(CreatorModule.java:184)
        at org.directwebremoting.impl.DefaultRemoter.execute(DefaultRemoter.java:353)
        at org.directwebremoting.impl.DefaultRemoter.execute(DefaultRemoter.java:306)
        at org.directwebremoting.dwrp.BaseCallHandler.handle(BaseCallHandler.java:110)
        at org.directwebremoting.servlet.UrlProcessor.handle(UrlProcessor.java:211)
        at org.directwebremoting.servlet.UrlProcessor.handle(UrlProcessor.java:185)
        at org.directwebremoting.servlet.DwrServlet.doPost(DwrServlet.java:144)
        at com.enterasys.netsight.server.webapps.monitor.views.WebDwrServlet.doPost(WebDwrServlet.java:38)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
        at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
        at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
        at io.undertow.websockets.jsr.JsrWebSocketFilter.doFilter(JsrWebSocketFilter.java:171)
        at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
        at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
        at com.enterasys.netsight.server.webapps.monitor.filters.CapabilitiesFilter.doFilter(CapabilitiesFilter.java:512)
        at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
        at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
        at com.enterasys.netsight.server.webapps.monitor.filters.LicenseFilter.doFilter(LicenseFilter.java:314)
        at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
        at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
        at com.enterasys.netsight.server.webapps.monitor.filters.UserConnectionFilter.doFilter(UserConnectionFilter.java:117)
        at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
        at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
        at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
        at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
        at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:65)
        at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
        at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
        at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132)
        at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
        at io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
        at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53)
        at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
        at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
        at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59)
        at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
        at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
        at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
        at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
        at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
        at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at org.wildfly.extension.undertow.deployment.RewriteCorrectingHandlerWrappers$PostWrapper$1.handleRequest(RewriteCorrectingHandlerWrappers.java:71)
        at io.undertow.predicate.PredicatesHandler.handleRequest(PredicatesHandler.java:110)
        at org.wildfly.extension.undertow.deployment.RewriteCorrectingHandlerWrappers$PreWrapper$1.handleRequest(RewriteCorrectingHandlerWrappers.java:52)
        at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
        at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
        at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
        at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
        at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
        at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
        at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
        at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
        at io.undertow.server.Connectors.executeRootHandler(Connectors.java:336)
        at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:748)

2021-02-04 08:56:06,136 ERROR [com.enterasys.netsight.tam.server.webapps.monitor.configuration.NacWebConfiguration] Could not create table data for type: rules(2017)

Re: XMC Netsight 8.5.4 - NAC rule issue

Miguel-Angel_RO — Fri, 05 Feb 2021 02:38:48 GMT

Anton,

You should open a case at GTAC.

I don’t have any issues from my side adding a rule.

Put a backup before the upgrade in a safe location

Mig

Re: XMC Netsight 8.5.4 - NAC rule issue

StephanH — Fri, 05 Feb 2021 03:55:25 GMT

Hello Anton,

try do restore a backup. The backup should be a version made before you tried to add the first rule you mentioned.

I have experienced that something went wrong during a write operation to the database. A restore has always helped so far.

Re: XMC Netsight 8.5.4 - NAC rule issue

AntonS — Fri, 05 Feb 2021 16:08:55 GMT

Hello,

I did, yesterday I tested with GTAC.

After copying of extisting NAC Config “2017” to new config “GTAC” we could reproduce the error also in the copied ruleset. So there was an error in that Nac Ruleset.

Today I tried to find out which rule makes problems, so I deleted a couple of rules in the copied “GTAC” ruleset. After that the error did not happen again!?

So I made again a copy of extisting NAC Config “2017” to new config “test”, and deleted one already disabled rule → no error?!

Problem solved - reason unknown

Now I can go on and try to integrate XIQ to our Extreme Control (NAC on Prem)

topic XMC Netsight 8.5.4 - NAC rule issue in ExtremeCloud IQ- Site Engine Management Center

XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue

Re: XMC Netsight 8.5.4 - NAC rule issue