• State Not Answered
  • Replies 6 replies
  • Subscribers 28 subscribers
  • Views 734 views
  • Users 0 members are here
Options
Related

Problem joining SPS to SPP (Safeguard 7.0)

samuele fochi
over 1 year ago

Goodmorning,

I have a problem joining SPS to SPP. In the web portal of SPS, if i try to join to SPP with the public IP address of SPP, SPS return me the error :

"spp_response": "Error sending request: SSLError: HTTPSConnectionPool(host='108.xxx.xxx.23', port=443): Max retries exceeded with url: /service/core/v3/Cluster/SessionModules (Caused by SSLError(CertificateError(\"hostname '108.xxx.xxx.23' doesn't match either of 'SG-7c55fce7xxxx', '10.xxx.xx.42'\")))"

If i try to join SPP using the private IP address, SPS don't reach SPP and go on timeout error. I tried to modify the hosts file of SPS, adding the ip of SPP(both public and private), 
but i can't resolve it.

Thank you,

Samuele

Parents
  • 0 over 1 year ago

    Hi Samuele,

    Does the SPP Web SSL certificate has the IP address defined in the SAN or just the hostname?

    If only the hostname try with the using the FQDN instead of the IP to join the SPP

    Thanks!

  • 0 over 1 year ago in reply to Tawfiq.Ahmad

    Hi,

    The SSL certificate is auto-generated from SPP, i tried to join SPP using both the ip address and the FQDN, but SPS continue to give me the same error. There are other things that i can try?

    Thank you,

    Samuele

  • 0 over 1 year ago in reply to samuele fochi

    SPS needs access to be able to access the private IP (10.xxx.xx.42) of SPP on port 443 

    Network communications between SPP and SPS

    - Ensure each SPP appliance will accept TCP/8649 and TCP/443 from all SPS appliances
    - Ensure each SPS appliance will accept TCP/8649 from all SPP appliances

    Telnet Tests

    From SPP, Settings | Diagnostics | Telnet enter the SPS IP and port number and test, you should see "Connection Succeeded."
    From SPS, Basic Settings | Troubleshooting | Connect to TCP port, enter SPP IP(s) and port number, connect, you should see "Connection established."
Reply
  • 0 over 1 year ago in reply to samuele fochi

    SPS needs access to be able to access the private IP (10.xxx.xx.42) of SPP on port 443 

    Network communications between SPP and SPS

    - Ensure each SPP appliance will accept TCP/8649 and TCP/443 from all SPS appliances
    - Ensure each SPS appliance will accept TCP/8649 from all SPP appliances

    Telnet Tests

    From SPP, Settings | Diagnostics | Telnet enter the SPS IP and port number and test, you should see "Connection Succeeded."
    From SPS, Basic Settings | Troubleshooting | Connect to TCP port, enter SPP IP(s) and port number, connect, you should see "Connection established."
Children