cancel
Showing results for 
Search instead for 
Did you mean: 

Policy Rules Not Being Pushed to Wireless Controller

Policy Rules Not Being Pushed to Wireless Controller

Anonymous
Not applicable
Hi,

Running:

XMC: 8.2.4.42
Identifi : 10.51.01.0100

Was previously running the wireless controller on a code 10.41.x.x, was getting same issue - hence the upgrade.

Doing a policy domain enforce. It completes very quickly but no sign of any errors:

6db5b22f1d3846a0b7f18d0a731ca511_fbda98c0-f51d-4080-94be-97b6dc89c890.png



No errors in the logs:

6db5b22f1d3846a0b7f18d0a731ca511_7dc4027c-d11d-49f7-8fcd-b5d8489e397a.png



But none of the rules show up on the wireless controller:

6db5b22f1d3846a0b7f18d0a731ca511_b91b7ee3-7d8e-4f01-a2c1-b1ddf8896a0f.png



Enabling verbose debugging for policy manager I also don't see any errors, which part of is shown below:

code:
Target : 10.0.255.16
Community : null
Request ID : 1978159902
Command : Response(0)
Status : Success
[0] [etsysPolicyRuleRowStatus.11.17.6.0.20.0.0.0.0.16.2.0] | destroy type:2


2019-04-09 16:33:52,941 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - throttle reqs : {2474782=cmd=2,id=2474782,index=307524, 2474781=cmd=2,id=2474781,index=307523, 2474780=cmd=2,id=2474780,index=307522}
2019-04-09 16:33:52,941 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - reqs pending = 0
2019-04-09 16:33:52,941 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - removing req from call back list 2474780
2019-04-09 16:33:52,953 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - 10.0.255.16------call back func looking for id = 2474781
2019-04-09 16:33:52,953 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - pdu rsp =
Target : 10.0.255.16
Community : null
Request ID : 1978159903
Command : Response(0)
Status : Success
[0] [etsysPolicyRuleRowStatus.8.17.6.0.5.0.0.0.0.16.2.0] | destroy type:2


2019-04-09 16:33:52,953 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - throttle reqs : {2474782=cmd=2,id=2474782,index=307524, 2474781=cmd=2,id=2474781,index=307523}
2019-04-09 16:33:52,953 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - reqs pending = 0
2019-04-09 16:33:52,953 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - removing req from call back list 2474781
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - 10.0.255.16------call back func looking for id = 2474782
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - pdu rsp =
Target : 10.0.255.16
Community : null
Request ID : 1978159904
Command : Response(0)
Status : Success
[0] [etsysPolicyRuleRowStatus.11.18.6.17.179.0.0.0.0.16.2.0] | destroy type:2


2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - throttle reqs : {2474782=cmd=2,id=2474782,index=307524}
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - reqs pending = 0
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - removing req from call back list 2474782
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] destroyPolicyRules() - destroyPolicyRules - start - sw
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] destroyPolicyRules() - rulesToDestroy = {}
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] $EtPolMibCallback.EPMCallbackFunc() - Done removing headless rules on 10.0.255.16
2019-04-09 16:33:52,954 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] removePolicyMACMapping() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] removePolicyIPMapping() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] removePolicyVLANMapping() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] removeRFC3580VLANMappings() - started [10.0.255.16] [Enterprise User Build-IB_65_66,Enterprise User Build-20_22]
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] removePolicies() - started [10.0.255.16] [Enterprise User Build-IB_65_66,Enterprise User Build-20_22]
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] removeRules() - started [10.0.255.16]null
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] setPolicies() - Started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,955 INFO [com.enterasys.netsight.data.landscape.SwitchEnforceData] Modifying role(s) [Enterprise User Build-20_22,Enterprise User Build-IB_65_66] on 10.0.255.16
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] setPolicyDefaults() - setPolicyDefaults - start
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - maxOut = 7
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - reqs outstanding = 0 10.0.255.16
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - command = 2
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - asyncRequest stack id = 2474783
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - asyncRequest throttleReqCount/ret index = 307525
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] setPolicyDefaults() - setPolicyDefaults - start
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - maxOut = 7
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - reqs outstanding = 1 10.0.255.16
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - command = 2
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - asyncRequest stack id = 2474784
2019-04-09 16:33:52,955 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] asyncRequest() - asyncRequest throttleReqCount/ret index = 307526
2019-04-09 16:33:52,966 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - 10.0.255.16------call back func looking for id = 2474783
2019-04-09 16:33:52,966 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - pdu rsp =
Target : 10.0.255.16
Community : null
Request ID : 1978159905
Command : Response(0)
Status : Success
[0] [etsysPolicyProfileName.8] | Enterprise User Build-IB_65_66 type:4
[1] [etsysPolicyProfilePortVidStatus.8] | enabled type:2
[2] [etsysPolicyProfilePortVid.8] | 1024 type:66
[3] [etsysPolicyProfilePriorityStatus.8] | enabled type:2
[4] [etsysPolicyProfilePriority.8] | 1 type:2
[5] [etsysPolicyProfileMirrorIndex.8] | -1 type:2
[6] [etsysPolicyProfileNSI.8] | 0 type:66


2019-04-09 16:33:52,966 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - throttle reqs : {2474784=cmd=2,id=2474784,index=307526, 2474783=cmd=2,id=2474783,index=307525}
2019-04-09 16:33:52,966 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - reqs pending = 0
2019-04-09 16:33:52,966 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - removing req from call back list 2474783
2019-04-09 16:33:52,967 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - 10.0.255.16------call back func looking for id = 2474784
2019-04-09 16:33:52,967 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - pdu rsp =
Target : 10.0.255.16
Community : null
Request ID : 1978159906
Command : Response(0)
Status : Success
[0] [etsysPolicyProfileName.11] | Enterprise User Build-20_22 type:4
[1] [etsysPolicyProfilePortVidStatus.11] | enabled type:2
[2] [etsysPolicyProfilePortVid.11] | 1008 type:66
[3] [etsysPolicyProfilePriorityStatus.11] | enabled type:2
[4] [etsysPolicyProfilePriority.11] | 1 type:2
[5] [etsysPolicyProfileMirrorIndex.11] | -1 type:2
[6] [etsysPolicyProfileNSI.11] | 0 type:66


2019-04-09 16:33:52,967 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - throttle reqs : {2474784=cmd=2,id=2474784,index=307526}
2019-04-09 16:33:52,967 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] dumpThrottleReqs() - reqs pending = 0
2019-04-09 16:33:52,967 DEBUG [com.enterasys.netsight.data.landscape.SwitchData] SnmpCallbackFunc() - removing req from call back list 2474784
2019-04-09 16:33:52,967 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] setPolicies on 10.0.255.16- finished on 10.0.255.16
2019-04-09 16:33:52,968 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] setPolicyEgress() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,968 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] setPolicyMACMapping() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,968 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] setPolicyIPMapping() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,969 DEBUG [com.enterasys.netsight.data.landscape.SwitchEnforceData] setPolicyClassifications() - started [10.0.255.16] [Failsafe,Administrator,Deny Access,Guest Access,Enterprise Access,Enterprise User Build-IB_65_66,Enterprise User Build-20_22,Quarantine,Unregistered,Notification,Assessing]
2019-04-09 16:33:52,969 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] createPolicyRules() - createPolicyRules - start
2019-04-09 16:33:52,969 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] createPolicyRules() - rulesToCreate = [oid=0.25.2.8.0.16.2.0 polIdx=4 cos=-1 vid=4095 syslog=2 audtrap=2 disprt=2 httpR=-1 tci=2 mirIdx=-1 tos=0 tstat=0 qpol=null qpolIdx= -1, oid=0.25.2.8.6.16.2.0 polIdx=4 cos=-1 vid=4095 syslog=2 audtrap=2 disprt=2 httpR=-1 tci=2 mirIdx=-1 tos=0 tstat=0 qpol=null qpolIdx= -1, oid=0.18.6.0.22.10.0.9.10.48.2.0 polIdx=8 cos=-1 vid=4095 syslog=2 audtrap=2 disprt=2 httpR=-1 tci=2 mirIdx=-1 tos=0 tstat=0 qpol=null qpolIdx= -1, oid=0.17.6.0.22.10.0.9.10.48.2.0 polIdx=8 cos=-1 vid=4095 syslog=2 audtrap=2 disprt=2 httpR=-1 tci=2 mirIdx=-1 tos=0 tstat=0 qpol=null qpolIdx= -1, oid=0.18.6.0.22.10.0.9.10.48.2.0 polIdx=11 cos=-1 vid=4095 syslog=2 audtrap=2 disprt=2 httpR=-1 tci=2 mirIdx=-1 tos=0 tstat=0 qpol=null qpolIdx= -1, oid=0.17.6.0.22.10.0.9.10.48.2.0 polIdx=11 cos=-1 vid=4095 syslog=2 audtrap=2 disprt=2 httpR=-1 tci=2 mirIdx=-1 tos=0 tstat=0 qpol=null qpolIdx= -1]
2019-04-09 16:33:52,969 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] [10.0.255.16] createNewPolicyRules() - createNewPolicyRules - started
2019-04-09 16:33:52,969 DEBUG [com.enterasys.netsight.policy.snmp.EtPolicyMib] createNewPolicyRules() - attempint write with pdu =
Target : 10.0.255.16
Community : null
Command : Set(2)
Timeout(s) : 20
Status : Command is not a response
[0] [etsysPolicyRuleResult1.4.25.2.8.6.16.2.0] | 4095 type:2
[1] [etsysPolicyRuleResult2.4.25.2.8.6.16.2.0] | -1 type:2
[2] [etsysPolicyRuleMirrorIndex.4.25.2.8.6.16.2.0] | -1 type:2
[3] [etsysPolicyRuleHttpRedirectIndex.4.25.2.8.6.16.2.0] | -1 type:2




Many thanks



Many thanks
1 ACCEPTED SOLUTION

Anonymous
Not applicable
Managed to resolve it. I change the Role name from:

Enterprise User Build-IB_65_66

Thinking that probably was a good choice, to?

User Build IB

And now the rules have been added

View solution in original post

1 REPLY 1

Anonymous
Not applicable
Managed to resolve it. I change the Role name from:

Enterprise User Build-IB_65_66

Thinking that probably was a good choice, to?

User Build IB

And now the rules have been added
GTM-P2G8KFN