EXOS Switch failing Redirection/XIQ registration

[jc20]

Hopefully this is the spot for this -

I've been through the article 000079814  and as far as I can tell - the switch can reach the internet.

The unit is an x460-G2-48p - I am reasonably certain I added the unit before getting it to properly connect... though I'm not sure if it was a virtual device or not.  I removed it while diagnosing the connection - and - well... no mas.

If I attempt to add it on the dashboard:

1522N-44253 - Device already onboarded

From the console of the switch:

X460G2-48p-10G4.1 # show iqagent
----------------------------------  --------------------------------------------
State                               Enabled
Active VR                           None
Serial Number                       1522N-44253
----------------------------------  --------------------------------------------
Status                              FAILED TO CONNECT TO REDIRECTOR/XIQ, WAITING BEFORE TRYING AGAIN
Version                             1.9.8
Debug                               ON
HTTP Proxy                          None
----------------------------------  --------------------------------------------
Association Method                  -
Association Url                     -
Poll URL                            -
----------------------------------  --------------------------------------------

Appreciate any assistance with this one -

Cheers

[Bill_Handler]

Jc20,

Glad that we’re moving forward… Usually even when it doesn’t go through, the IP Address for the hac. URL is listed.  Have you tried to ping that URL or the redirector URL?  They don’t usually respond, but just to know they are being resolved.  Within your XIQ instance, you should find the IP space listed under the firewall rules that need to be put in place.

Thanks,

Bill

[finmark73]

---

@Bill_Handler wrote:

Jc20,

Glad that we’re moving forward… Usually even when it doesn’t go through, the IP Address for the hac. URL is listed.  Have you tried to ping that URL or the redirector URL?  They don’t usually respond, but just to know they are being resolved.  Within your XIQ instance, you should find the IP space listed under the firewall rules that need to be put in place.

Thanks,

Bill

---

That makes sense. I’ll verify the DNS resolution for the HAC and redirector URLs first, then review the IP ranges listed in XIQ and make sure the necessary firewall rules are in place. Thanks for pointing me in the right direction.

[jc20]

Hey Bill -

Appreciate you assisting with this.

You were absolutely right (d'oh) - it didn't register when I was typing this up.  I'd seen the same error "result" and just was on autopilot.  I clearly was caffeine deficient.  With that said... sadly the same result.  I've checked our firewall logs and it doesn't appear to be blocking anything on the isolated vlan I set aside for the switch access.

Updated responses (I disabled and re-enabled iqagent to cycle things):

* X460G2-48p-10G4.21 # show iqagent
----------------------------------  --------------------------------------------
State                               Enabled
Active VR                           VR-Default
User VR                             VR-Default
Serial Number                       1522N-44253
----------------------------------  --------------------------------------------
Status                              HIVEAGENT INITIALIZING
Version                             1.9.8
Debug                               ON
----------------------------------  --------------------------------------------
Association Method                  -
Association Url                     -
Poll URL                            -
----------------------------------  --------------------------------------------

* X460G2-48p-10G4.21 # show iqagent
----------------------------------  --------------------------------------------
State                               Enabled
Active VR                           VR-Default
User VR                             VR-Default
Serial Number                       1522N-44253
----------------------------------  --------------------------------------------
Status                              FAILED TO CONNECT TO REDIRECTOR/XIQ, WAITING BEFORE TRYING AGAIN
Version                             1.9.8
Debug                               ON
HTTP Proxy                          None
----------------------------------  --------------------------------------------
Association Method                  -
Association Url                     -
Poll URL                            -
----------------------------------  --------------------------------------------

* X460G2-48p-10G4.21 # ping extremenetworks.com
Ping(ICMP) 20.163.232.59: 4 packets, 8 data bytes, interval 1 second(s).
16 bytes from 20.163.232.59: icmp_seq=0 ttl=107 time=46 ms
16 bytes from 20.163.232.59: icmp_seq=1 ttl=107 time=45 ms
16 bytes from 20.163.232.59: icmp_seq=2 ttl=107 time=45 ms
16 bytes from 20.163.232.59: icmp_seq=3 ttl=107 time=45 ms

--- 20.163.232.59 ping statistics ---
4 packets transmitted, 4 packets received, 0% loss
round-trip min/avg/max = 45/46/46 ms
* X460G2-48p-10G4.22 # ping 0.aerohive.pool.ntp.org
Ping(ICMP) 23.186.168.131: 4 packets, 8 data bytes, interval 1 second(s).
16 bytes from 23.186.168.131: icmp_seq=0 ttl=48 time=60 ms
16 bytes from 23.186.168.131: icmp_seq=1 ttl=48 time=59 ms
16 bytes from 23.186.168.131: icmp_seq=2 ttl=48 time=59 ms
16 bytes from 23.186.168.131: icmp_seq=3 ttl=48 time=62 ms

--- 23.186.168.131 ping statistics ---
4 packets transmitted, 4 packets received, 0% loss
round-trip min/avg/max = 59/60/62 ms

* X460G2-48p-10G4.23 # show iqagent
----------------------------------  --------------------------------------------
State                               Enabled
Active VR                           VR-Default
User VR                             VR-Default
Serial Number                       1522N-44253
----------------------------------  --------------------------------------------
Status                              FAILED TO CONNECT TO REDIRECTOR/XIQ, WAITING BEFORE TRYING AGAIN
Version                             1.9.8
Debug                               ON
HTTP Proxy                          None
----------------------------------  --------------------------------------------
Association Method                  -
Association Url                     -
Poll URL                            -
----------------------------------  --------------------------------------------

* X460G2-48p-10G4.24 # show iqagent discovery
-----------------------------------------------------------------------------
Virtual Router       : VR-Default
    XIQ User FQDN/IP :
    XIQ DHCP IP      :
    XIQ DHCP FQDN    :
    Redirector       : hac.extremecloudiq.com
-----------------------------------------------------------------------------

Thoughts?

[Bill_Handler]

Jc20,

The VR listed in your output shows ‘None’.  That should be whatever VR you’re using for the ports that can get to the internet; usually it is the Default VR.  That is likely why it will not reach out to XIQ.  Also make sure you have DNS configured so that it can resolve the URL.

The command should be something to like:  configure iqagent server vr vr-default

THanks,

Bill