VPN Router 1750 HTTP management issue...

[SD]

This is a strange one for me...

I had an IPSec session into my network via 1750, and I was running an HTTP management session to the private side management IP.  When the problem occurred I was not actively making configuration changes; I was just checking the status of sessions and the event log when Firefox stopped responding.  I thought Firefox had hung on me because my IPSec connection was still active and I could ping the IP address of the management port and other addresses in the private network. 

I restarted Firefox and then could no longer connect to the management IP but I could Telnet to it.  I had other co-workers try HTTP to the management IP from their machines in order to eliminate a problem with my client and/or workstation: the problem occurs for everyone.

From the CLI, I can see my old HTTP management session as active...

Does anyone have any idea how to re-gain management access via HTTP without resetting the VPN Router?  It is working just fine otherwise...

Thanks,
Stephane

[Telair]

Depending on code level, I at times had problems when telling my VPN boxes to display the log files.  Sounds like the managment GUI process is locked-up on the box.  Probably the fastest and easiest way would be to just reboot the box.  You should have a 3 minute outage to shutdown, reboot and start processing VPN packets again.

[Michael McNamara]

Hi SD and welcome to the forums!

You didn't mention what version of software you are running but there was a bug in specific version (don't ask me which version) that specifically revolved around the displaying of logs files. We eventually stopped using the GUI to display the log files because it was so slow. Instead we shipped everything to our SYSLOG server and wrote an in-house custom web application to display the log files over Internet Explorer.

I don't believe there is any ability to restart various components/services, it sounds like you need to reboot the box.

I would verify that you have a full backup somewhere just in case you end up with a corrupt configuration (happened to us a number of times on 7.x.x software). Thankfully we were able to restore from our weekly backup.

Good Luck!

[SD]

Thanks!

I am running V08_00.049 - I do have backups!  I learned that lesson many years ago...

I ended up rebooting and was able to regain HTTP management just fine. 

One thing I want to do is switch to HTTPS management but can't seem to get that to respond, even though HTTP works and that the HTTPS setting is enabled in Services/Available for the private-side management port. 

What could I be missing?

Cheers,
Stephane

[Michael McNamara]

Have you generated a CSR and signed that CSR and uploaded a SSL certificate to the VPN router?