topic Re: EXOS switch failed to perform ZTP+ provision. in ExtremeSwitching (EXOS/Switch Engine)

EXOS switch failed to perform ZTP+ provision.

astro_saurabh — Fri, 17 Jan 2025 10:20:41 GMT

Hi All,

We've recently installed new 5420F-48P-4XE switches in one of our site. We also have a SiteEngine server running in our datacenter. Switch is able to reach & resolve 'extremecontrol.ourdomain.com' & 'hac.extremecloudiq.com'.
However, switch is unable to perform ZTP+ auto-provisioning.

IQAgent discovered on VR VR-Default
HTTP proxy : Not configured
User configured FQDN/IP : Not configured
DHCP opt 43, sub-opt 225 (FQDN) : Not provided
DHCP opt 43, sub-opt 226 (IP) : Not provided
Redirector : hac.extremecloudiq.com
Resolved IP : 34.253.190.222
XIQ Status : Service available
Data Center [JA042347G-00011] : Not onboarded

When we did a packet capture on the switch, it was unable to resolve 'extremecontrol'. However, if we try to resolve extremecontrol with our domain suffix it works.

* 5420F-48P-4XE-SwitchEngine.7 # ping extremecontrol
Error: Can't resolve host name.

ExtremeCloud IQ - Site Engine 24.10.10.70

Could someone guide what could be missing here?

Thanks..!!

Kind Regards,
Saurabh.

Re: EXOS switch failed to perform ZTP+ provision.

Bill_Handler — Fri, 17 Jan 2025 13:46:08 GMT

Saurabh,

Is DHCP handing out the domain name/DNS? That would be my first question, troubleshooting step...

Bill

Re: EXOS switch failed to perform ZTP+ provision.

Brent_Addis — Sun, 19 Jan 2025 06:38:38 GMT

Make sure you have your domain suffix pushed via DHCP. If you can ping extremecontrol typing the suffix in manually, but not just extremecontrol, it's not going to reach the host as it will use then default domain suffix from DNS to fill out the complete host.

Also, ZTP+ does not use the iqagent as this is specific to the cloud (It may be used later). it uses auto-provision.

https://documentation.extremenetworks.com/switchengine_commands_32.4/GUID-4BEA6A50-C54A-44A9-A464-A073B9F766CA.shtml

Re: EXOS switch failed to perform ZTP+ provision.

astro_saurabh — Mon, 20 Jan 2025 10:29:00 GMT

HI @Brent_Addis ,
Thans for the clue. We're pushing the dns suffix via DHCP, but it seems the switch is not able to recognise/read into that info.

* 5420F-48P-4XE-SwitchEngine.2 # show dns-client
Number of domain suffixes: 1
Domain Suffix 0: mydomain.com (DHCP)
Number of domain servers: 2
Name Server 0: 10.110.64.5 VR-Default (DHCP)
Name Server 1: 10.111.64.5 VR-Default (DHCP)
* 5420F-48P-4XE-SwitchEngine.3 # ping extremecontrol
Error: Can't resolve host name.

However, if I manually add the 'default domain' then it works.

Could you guide further with this please..?

Thanks..!!

KInd Regards,
Saurabh.

Re: EXOS switch failed to perform ZTP+ provision.

astro_saurabh — Mon, 20 Jan 2025 10:29:34 GMT

Hi @Bill_Handler ,
Yes, dhcp is handing out the dns suffix.

Thanks..!!

Kind Regards,
Saurabh.

Re: EXOS switch failed to perform ZTP+ provision.

Brent_Addis — Mon, 20 Jan 2025 22:23:02 GMT

What firmware are you running? My XOS switches retrieve the dns suffix 100% of the time.

Re: EXOS switch failed to perform ZTP+ provision.

astro_saurabh — Tue, 21 Jan 2025 14:32:04 GMT

Hi @Brent_Addis
Switch is running 32.6.3.127 version.

Switch : 801086-00-AJ JA042347G-00011 Rev AJ BootROM: 2.3.2.15 IMG: 32.6.3.127

Image : Extreme Networks Switch Engine version 32.6.3.127 32.6.3.127-patch1-8 by release-manager
on Wed Apr 10 16:23:44 EDT 2024
BootROM : Default 2.3.2.15 Alternate 2.3.2.15
Diagnostics : 0.0.2.7
Certified Version : EXOS Linux 5.10.177, Extreme Networks FIPS Object Module 2.0.16a
Build Tools Version : exos-arm64-sdk-3.1.19.1.0

Re: EXOS switch failed to perform ZTP+ provision.

Brent_Addis — Tue, 21 Jan 2025 23:01:14 GMT

Should be fine. I onboarded switches with that same firmware last week no problem.

Can you plug a laptop into the same port with DHCP, and ping extremecontrol with no suffix?

Re: EXOS switch failed to perform ZTP+ provision.

astro_saurabh — Wed, 22 Jan 2025 15:00:14 GMT

Hi @Brent_Addis :
With a laptop connected directly to the switch, I'm able to ping 'extremecontrol' without suffix.

However, the switch is still unable to reach 'extremecontrol' without suffix.

Thanks..!!

Kind Regards,
Saurabh.

Re: EXOS switch failed to perform ZTP+ provision.

timmyno7 — Tue, 28 Jan 2025 17:04:27 GMT

I am seeing this exact same problem (we use Site Engine exclusively). If we change the OS manually to Fabric it gets discovered by Site Engine immediately, but if we leave it on EXOS (waiting for NOS persona change) it gets an IP and DNS suffix, but cannot resolve extremecontrol.

Is there any solution for this?