failed to connect ICX 7150 to SZ

[tomer_iyar]

Hi,
i have installed an ICX7150-C12-2X1G POE 12-port - Version:10.1.15T225
and i am trying to connect it to my Smartzone vSZ-H - 5.1.1.0.598

i have followed the guide and configure the switch with the "sz Active-list command
and i have verified there is connectivity between both devices on all ports, but this doesnt seem to work for me


SSH@GroupA#show sz status

============    SZ Agent State Info     ===================
Config Status: None     Operation Status: Enabled
State: SZ QUERY             Prev State: INIT                 Event: SZ QUERY RESPONSE

SWR List            : None
Active List         : 10.31.3.8
DHCP Option 43      : No
DHCP Opt 43 List    : None
Passive List        : None
Merged List         : 10.31.3.8
Merged Idx: 0    IP : 10.31.3.8
Switch registrar host: sw-registrar.ruckuswireless.com
Switch registrar discovery retry count: 7
Switch registrar host resolve failure count: 7

SZ IP Used          : 10.31.3.8
SZ Query Status     :
        In Progress. Response Not Received.

sz logs
-------------------------
Jan  1 19:48:35:https_connmgr_send_request>Entered.
Jan  1 19:48:35:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, TIMER/2002 RC: 1
Jan  1 19:48:35:sz_execute_state_machine>Entering with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007
Jan  1 19:48:35:sz_parse_sz_query_response -- Status: 600 <<
Jan  1 19:48:35:sz_fsm_sz_query_state>Moving to IP:10.31.3.8 because of retry count: 36
Jan  1 19:48:35:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007 RC: 1
Jan  1 19:48:35:HTTP Request Error:Http remote connection close called.


any ideas? thanks.

[simon_pollard]

Try removing the switch registrar configuration, it's not needed and may be causing an issue. command is; no sz registrar 

And I assume that you can ping the SZ from the switch. 

[tomer_iyar]

removed it still no response,
the SZ is reachable

when i run the "show sz logs"

{"serial_number":"XXXXXXXX", "ipaddress":"10.31.3.210", "macaddress":"XXXXXXXXX", "switch/stack/spx":"stack", "numOfUnits":2, "firmware_version":"SPS08090b.bin", "switch_model":"ICX7150-C12P"}
==============

Jul 11 18:06:29:https_connmgr_send_request>Entered.
Jul 11 18:06:29:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, TIMER/2002 RC: 1
Jul 11 18:06:29:sz_execute_state_machine>Entering with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007
Jul 11 18:06:29:sz_parse_sz_query_response -- Status: 600 <<
Jul 11 18:06:29:sz_execute_state_machine>Exit with state/event: SZ QUERY/5, SZ QUERY RESPONSE/2007 RC: 1
Jul 11 18:06:29:HTTP Request Error:Http remote connection close called.
End i/max/iter 436/436/0

[simon_pollard]

Looking at this it appears that your compact switch is stacked;

{"serial_number":"XXXXXXXX", "ipaddress":"10.31.3.210", "macaddress":"XXXXXXXXX", "switch/stack/spx":"stack", "numOfUnits":2, "firmware_version":"SPS08090b.bin", "switch_model":"ICX7150-C12P"}


As your SZ only has a license for one switch then this is a problem, for your config you will need two switch licenses on the SZ.

[hashim_bharooc1]

Hey Tomer,

Please get outputs of:
"show tech"
"show ntp status."
"dm verify-device-certs"
"show License"

Thanks
Hashim

[tomer_iyar]

Hi,
SSH@RUCKUS-sw#show license
Unit  License Name    L3 Premium Port Speed Upgrade   Speed    Ports    MACsec
1     2X10GR          Yes        Yes                  10G      2        NA


SSH@RUCKUS-sw#dm verify-device-certs
Commencing sanity check for device certs ...
Verifying TPM files ...
Successfully verified
The device key pair is valid
The Encrypt/Decrypt test is successful
Successfully verified device certs

SSH@RUCKUS-sw#show ntp status
 Clock is unsynchronized, no reference clock
 NTP server mode is disabled, NTP client mode is disabled
 NTP master mode is disabled, NTP master stratum is 8
 NTP is not in panic mode


and the tech support is has very long output but this seems relevant - 
Jan  1 20:38:20:I:System: SSL server 10.31.3.8:443 is disconnected
Jan  1 20:38:05:I:SZAgent: Failed to connect to management device at 10.31.3.8 Error: HTTPS Connection Error

thanks.