topic Re: failed to connect ICX 7150 to SZ in ICX Switches

failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 12:35:04 GMT

Hi,
i have installed an ICX7150-C12-2X1G POE 12-port - Version:10.1.15T225
and i am trying to connect it to my Smartzone vSZ-H - 5.1.1.0.598

i have followed the guide and configure the switch with the "sz Active-list command
and i have verified there is connectivity between both devices on all ports, but this doesnt seem to work for me

SSH@GroupA#show sz status

============ SZ Agent State Info ===================
Config Status: None Operation Status: Enabled
State: SZ QUERY Prev State: INIT Event: SZ QUERY RESPONSE

SWR List : None
Active List : 10.31.3.8
DHCP Option 43 : No
DHCP Opt 43 List : None
Passive List : None
Merged List : 10.31.3.8
Merged Idx: 0 IP : 10.31.3.8
Switch registrar host: sw-registrar.ruckuswireless.com
Switch registrar discovery retry count: 7
Switch registrar host resolve failure count: 7

SZ IP Used : 10.31.3.8
SZ Query Status :
In Progress. Response Not Received.

sz logs
-------------------------
Jan 1 19:48:35:https_connmgr_send_request>Entered.
Jan 1 19:48:35:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, TIMER/2002 RC: 1
Jan 1 19:48:35:sz_execute_state_machine>Entering with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007
Jan 1 19:48:35:sz_parse_sz_query_response -- Status: 600 <<
Jan 1 19:48:35:sz_fsm_sz_query_state>Moving to IP:10.31.3.8 because of retry count: 36
Jan 1 19:48:35:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007 RC: 1
Jan 1 19:48:35:HTTP Request Error:Http remote connection close called.

any ideas? thanks.

Re: failed to connect ICX 7150 to SZ

nikita_kulikov — Thu, 11 Jul 2019 12:38:55 GMT

Did you create new SwitchGroup in SmartZone?

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 12:43:19 GMT

no,
but i have just did, is there something else i should do?
thanks for the reply.

Re: failed to connect ICX 7150 to SZ

simon_pollard — Thu, 11 Jul 2019 12:45:55 GMT

Check the SZ, the switch is probably in the Default switch group, it will fully connect once you have moved it to the group you created.

Re: failed to connect ICX 7150 to SZ

nikita_kulikov — Thu, 11 Jul 2019 12:47:19 GMT

I created new SwitchGroup and added my switch in it. That's all.

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 12:48:55 GMT

it is not added to the SZ,
the state stuck on SZ Query and it appears to fail to get a response,
so its not added 😕
thanks.

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 12:53:40 GMT

i see, in my case it fails to be added to SZ so i am before the stage of moving between groups

Re: failed to connect ICX 7150 to SZ

simon_pollard — Thu, 11 Jul 2019 12:54:58 GMT

Your switch should be running the latest version 8.0.90 software and it should have been upgraded using the UFI image (see the 8.0.90 release notes for details).

Re: failed to connect ICX 7150 to SZ

eric_brement_an — Thu, 11 Jul 2019 13:08:39 GMT

Hi ,
have ICX valid licence on SZ ? In 5.0 version ICX licence it is not mandatory

Re: failed to connect ICX 7150 to SZ

jijo_panangat — Thu, 11 Jul 2019 13:21:14 GMT

You may create a switch registration rule and move the switch to non default group first and try joining. Also have clock or ntp set on ICX.

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 13:42:15 GMT

my license is still valid

CAPACITY-SWITCH-BUNDLED
Ruckus-Cluster-1

Permanent
1
Default Switch Capacity License for vSZ

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 13:51:13 GMT

configured switch registration rule and time , still fail to connect.
thanks.

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 13:52:27 GMT

this is my SW version - SW: Version 08.0.90bT211
appears to be updated

Re: failed to connect ICX 7150 to SZ

simon_pollard — Thu, 11 Jul 2019 14:35:59 GMT

When you do show version does it look like this:

Copyright (c) Ruckus Networks, Inc. All rights reserved.
UNIT 1: compiled on May 23 2019 at 23:27:11 labeled as SPS08090b
(28596544 bytes) from Primary SPS08090b.bin (UFI)
SW: Version 08.0.90bT211

If the (UFI) is missing then you will need to redo the upgrade with the UFI image.

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 14:43:20 GMT

I've got the UFI

SSH@GroupA#show version
Copyright (c) Ruckus Networks, Inc. All rights reserved.
UNIT 1: compiled on May 23 2019 at 23:27:11 labeled as SPS08090b
(28596544 bytes) from Primary SPS08090b.bin (UFI)
SW: Version 08.0.90bT211
Compressed Primary Boot Code size = 786944, Version:10.1.15T225 (mnz10115)
Compiled on Thu Jan 31 09:08:55 2019

HW: Stackable ICX7150-C12-POE

Re: failed to connect ICX 7150 to SZ

simon_pollard — Thu, 11 Jul 2019 15:01:49 GMT

Try removing the switch registrar configuration, it's not needed and may be causing an issue. command is; no sz registrar

And I assume that you can ping the SZ from the switch.

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Thu, 11 Jul 2019 15:09:02 GMT

removed it still no response,
the SZ is reachable

when i run the "show sz logs"

{"serial_number":"XXXXXXXX", "ipaddress":"10.31.3.210", "macaddress":"XXXXXXXXX", "switch/stack/spx":"stack", "numOfUnits":2, "firmware_version":"SPS08090b.bin", "switch_model":"ICX7150-C12P"}
==============

Jul 11 18:06:29:https_connmgr_send_request>Entered.
Jul 11 18:06:29:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, TIMER/2002 RC: 1
Jul 11 18:06:29:sz_execute_state_machine>Entering with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007
Jul 11 18:06:29:sz_parse_sz_query_response -- Status: 600 <<
Jul 11 18:06:29:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007 RC: 1
Jul 11 18:06:29:HTTP Request Error:Http remote connection close called.
End i/max/iter 436/436/0

Re: failed to connect ICX 7150 to SZ

simon_pollard — Thu, 11 Jul 2019 15:44:30 GMT

Looking at this it appears that your compact switch is stacked;

{"serial_number":"XXXXXXXX", "ipaddress":"10.31.3.210", "macaddress":"XXXXXXXXX", "switch/stack/spx":"stack", "numOfUnits":2, "firmware_version":"SPS08090b.bin", "switch_model":"ICX7150-C12P"}

As your SZ only has a license for one switch then this is a problem, for your config you will need two switch licenses on the SZ.

Re: failed to connect ICX 7150 to SZ

hashim_bharooc1 — Fri, 12 Jul 2019 22:10:21 GMT

Hey Tomer,

Please get outputs of:
"show tech"
"show ntp status."
"dm verify-device-certs"
"show License"

Thanks
Hashim

Re: failed to connect ICX 7150 to SZ

tomer_iyar — Sun, 14 Jul 2019 16:04:58 GMT

Hi,
SSH@RUCKUS-sw#show license
Unit License Name L3 Premium Port Speed Upgrade Speed Ports MACsec
1 2X10GR Yes Yes 10G 2 NA

SSH@RUCKUS-sw#dm verify-device-certs
Commencing sanity check for device certs ...
Verifying TPM files ...
Successfully verified
The device key pair is valid
The Encrypt/Decrypt test is successful
Successfully verified device certs

SSH@RUCKUS-sw#show ntp status
Clock is unsynchronized, no reference clock
NTP server mode is disabled, NTP client mode is disabled
NTP master mode is disabled, NTP master stratum is 8
NTP is not in panic mode

and the tech support is has very long output but this seems relevant -
Jan 1 20:38:20:I:System: SSL server 10.31.3.8:443 is disconnected
Jan 1 20:38:05:I:SZAgent: Failed to connect to management device at 10.31.3.8 Error: HTTPS Connection Error

thanks.