topic RE: ezcloudx can't connect to 3935i behind fw/nat in Extreme Cloud

ezcloudx can't connect to 3935i behind fw/nat

aalmi — Fri, 02 Jun 2017 18:46:00 GMT

I have 3935i AP behind firewall using NAT ip which it get's from fw using firewall. When firewall rules where tightened Ezcloudx lost access to AP and AP blinks it's leds very often. I need firewall hosts/ports which to open in order to get it work. Any tips?

RE: ezcloudx can't connect to 3935i behind fw/nat

Jonquil_William — Fri, 02 Jun 2017 19:01:00 GMT

Hi, Mikael.

Are you following the Networks Requirements, which includes: "HTTPS traffic must be allowed through your firewall on port 443 for ExtremeCloud-managed APs
and switches to connect to ExtremeCloud and receive their configuration, software updates and
send analytics."

This info is located in the ExtremeCloud Information Center and QRG at http://www.extremenetworks.com/support/documentation/

Hope this helps. If not, you might want to contact Extreme's GTAC team at http://support.extremenetworks.com/

Jonquil Williams
Extreme Networks
Lead Technical Writer, Information Development

RE: ezcloudx can't connect to 3935i behind fw/nat

Erik_Auerswald — Fri, 02 Jun 2017 20:53:00 GMT

Hi Mikael,

you might find the GTAC Knowledge article How does my Access Point communicate to the ExtremeCloud? useful.

Thanks,
Erik

RE: ezcloudx can't connect to 3935i behind fw/nat

aalmi — Wed, 07 Jun 2017 17:58:00 GMT

Hi, After getting console access to AP I noticed that it could communicate to devices.extremecloud.com using ip but not with dns name. AP was configured to use dhcp for WAN access but for some reason it had locked resolver setting in resolv.conf which had wrong resolver ip set. I did cset factory reset which fixed the problem. Now ezcloud sees AP as it should.

I can see on fw logs that ap communicates to devices.extremecloud.com using port 443 (ssl app) as you adviced.

Thx.

Br,

Mikael

RE: ezcloudx can't connect to 3935i behind fw/nat

Erik_Auerswald — Wed, 07 Jun 2017 17:58:00 GMT

Thanks for letting us know. 

RE: ezcloudx can't connect to 3935i behind fw/nat

Eric_Burke — Sun, 24 Dec 2017 06:00:00 GMT

I realize this is a late post, but we recently ran into a similar problem and it occurred after a maintenance update to the cloud platform. What we found was that the front-end servers were relocated to an IP address which (according to our GeoIP filters on the firewall) is based in Germany. We were blocking Germany, and therefore the devices would not show in the cloud. One of those things you don't always think of, especially when it occurs on a device for which you don't "see" where it's going from a contextual sense.

BigRic