Cloudnet domain server connect status shows Idle
- 0 Followed
- 0Collected ，970Browsed
Network Topology
irrelvant
Problem Description
Customer AP WA6330 has access internet and working well, but can not make AP active on Cloudnet,
On device, check the cloudnet status:
[AP2]dis clou state
Cloud connection state : Unconnected
Device state : Idle
Cloud server address : N/A
Cloud server domain name : oasiscloud.h3c.com
Cloud connection mode : Https
Cloud server port : 19443
Connected at : N/A
Duration : 00d 00h 00m 00s
Process state : N/A
Failure reason : Processing CAS url response failed
Last down reason : Configuration changed (Details: N/A)
Last down at : Tue Nov 8 18:50:07 2022
Last report failure reason : N/A
Last report failure at : N/A
Dropped packets after reaching buffer limit : 0
Total dropped packets : 0
Last report incomplete reason : N/A
Last report incomplete at : N/A
Buffer full count : 0
Process Analysis
Open debug on device, we find the following packets, the device sent the authentication packet to cloudnet server, but some device between AP and the Public cloudnet server has refuse the authentication,
*Nov 8 19:02:40:178 2022 AP2 CMTNLMGR/7/PACKET:
HTTP/1.1 403 Forbidden
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'self'
Content-Type: text/html; charset="utf-8"
Content-Length: 5264
Connection: Close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" cOntent="IE=8; IE=EDGE">
<meta name="viewport" cOntent="width=device-width, initial-scale=1">
<style type="text/css">
body {
height: 100%;
font-family: Helvetica, Arial, sans-serif;
color: #6a6a6a;
margin: 0;
display: flex;
align-items: center;
justify-content: center;
}
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=ur
Solution
1.if the Failure reason shows can not parsed, you need check the DNS 1st,
2.the cloudnet server can not be ping because of the security, so please check the debug <debug cloudnet all>,
<AP2>*Nov 8 19:02:39:609 2022 AP2 CMTNLMGR/7/EVENT: Successfully queried domain name oasiscloud.h3c.com.
*Nov 8 19:02:39:611 2022 AP2 CMTNLMGR/7/EVENT: DNS parsed domain name successfully in Idle state: IP address=52.163.242.100.
3.please check your firewall if release the following ip and ports
|
52.163.242.100 |
tcp |
80/443/8443/19443 |
|
52.187.3.51 |
tcp |
19443/443 |
|
13.76.182.179 |
tcp |
80/443 |
|
13.76.252.214 |
tcp |
5555/28443 |
|
52.187.0.95 |
tcp |
80/443 |
|
40.73.23.215 |
UDP |
123 |