cloudstack-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sonali Jadhav <son...@servercentralen.se>
Subject RE: unable to create VPN connection for Site-To-Site VPN
Date Mon, 25 Jan 2016 10:41:30 GMT
Anyone? 

/Sonali

-----Original Message-----
From: Sonali Jadhav [mailto:sonali@servercentralen.se] 
Sent: Thursday, January 21, 2016 3:50 PM
To: users@cloudstack.apache.org
Subject: unable to create VPN connection for Site-To-Site VPN

Hi,

I am running ACS 4.5.2. I am trying to add VPC connection for making site-To-Site VPN in vpc.
But I running into an error,

2016-01-21 08:44:25,308 DEBUG [c.c.a.ApiServlet] (http-6443-exec-23:ctx-5134ed7d) ===START===
 1.4.134.114 -- GET  command=createVpnConnection&response=json&sessionkey=ASWYR9%2Bi4dq92HizW8V8s%3D&s2svpngatewayid=bb0ffb92-6ed1-444e-a3ab-0aaad4655625&s2scustomergatewayid=c19b2093-df5b-41a5-b58b-9f36a2a8154d&passive=false&_=1453362266654
2016-01-21 08:44:25,316 DEBUG [o.a.c.a.BaseCmd] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
Ignoring paremeter fordisplay as the caller is not authorized to pass it in
2016-01-21 08:44:25,333 DEBUG [c.c.u.AccountManagerImpl] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
Access to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] granted to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss]
by DomainChecker
2016-01-21 08:44:25,341 DEBUG [o.a.c.a.BaseCmd] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
Ignoring paremeter fordisplay as the caller is not authorized to pass it in
2016-01-21 08:44:25,353 DEBUG [c.c.u.AccountManagerImpl] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
Access to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] granted to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss]
by DomainChecker
2016-01-21 08:44:25,368 DEBUG [c.c.u.AccountManagerImpl] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
Access to com.cloud.network.dao.Site2SiteCustomerGatewayVO$$EnhancerByCGLIB$$dfda331d@3a81e18c
granted to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] by DomainChecker
2016-01-21 08:44:25,381 DEBUG [c.c.u.AccountManagerImpl] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
Access to com.cloud.network.dao.Site2SiteVpnGatewayVO$$EnhancerByCGLIB$$42578b7@5690e4b1 granted
to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] by DomainChecker
2016-01-21 08:44:25,586 INFO  [o.a.c.f.j.i.AsyncJobMonitor] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Add job-14425 into job monitoring
2016-01-21 08:44:25,594 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Executing AsyncJobVO {id:14425, userId: 12, accountId: 14, instanceType: None,
instanceId: 5, cmd: org.apache.cloudstack.api.command.user.vpn.CreateVpnConnectionCmd, cmdInfo:
{"id":"5","response":"json","sessionkey":"ASWYR9+i4dq92HizW8V8s\u003d","s2scustomergatewayid":"c19b2093-df5b-41a5-b58b-9f36a2a8154d","ctxDetails":"{\"com.cloud.network.Site2SiteVpnConnection\":\"b0f5546b-1877-4b2a-8eb2-2433ca3baab6\",\"com.cloud.network.Site2SiteVpnGateway\":\"bb0ffb92-6ed1-444e-a3ab-0aaad4655625\",\"com.cloud.network.Site2SiteCustomerGateway\":\"c19b2093-df5b-41a5-b58b-9f36a2a8154d\"}","cmdEventType":"VPN.S2S.CONNECTION.CREATE","ctxUserId":"12","s2svpngatewayid":"bb0ffb92-6ed1-444e-a3ab-0aaad4655625","passive":"false","httpmethod":"GET","_":"1453362266654","uuid":"b0f5546b-1877-4b2a-8eb2-2433ca3baab6","ctxAccountId":"14","ctxStartEventId":"112421"},
cmdVersion: 0, status: IN_PROGRESS, processStatus: 0, resultCode: 0, result: null, initMsid:
59778234354585, completeMsid: null, lastUpdated: null, lastPolled: null, created: null}
2016-01-21 08:44:25,597 DEBUG [o.a.c.a.BaseCmd] (API-Job-Executor-2:ctx-c8efccc8 job-14425
ctx-c8db121f) Ignoring paremeter fordisplay as the caller is not authorized to pass it in
2016-01-21 08:44:25,599 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (http-6443-exec-23:ctx-5134ed7d
ctx-92ecd917) submit async job-14425, details: AsyncJobVO {id:14425, userId: 12, accountId:
14, instanceType: None, instanceId: 5, cmd: org.apache.cloudstack.api.command.user.vpn.CreateVpnConnectionCmd,
cmdInfo: {"id":"5","response":"json","sessionkey":"ASWYR9+i4dq92HizW8V8s\u003d","s2scustomergatewayid":"c19b2093-df5b-41a5-b58b-9f36a2a8154d","ctxDetails":"{\"com.cloud.network.Site2SiteVpnConnection\":\"b0f5546b-1877-4b2a-8eb2-2433ca3baab6\",\"com.cloud.network.Site2SiteVpnGateway\":\"bb0ffb92-6ed1-444e-a3ab-0aaad4655625\",\"com.cloud.network.Site2SiteCustomerGateway\":\"c19b2093-df5b-41a5-b58b-9f36a2a8154d\"}","cmdEventType":"VPN.S2S.CONNECTION.CREATE","ctxUserId":"12","s2svpngatewayid":"bb0ffb92-6ed1-444e-a3ab-0aaad4655625","passive":"false","httpmethod":"GET","_":"1453362266654","uuid":"b0f5546b-1877-4b2a-8eb2-2433ca3baab6","ctxAccountId":"14","ctxStartEventId":"112421"},
cmdVersion: 0, status: IN_PROGRESS, processStatus: 0, resultCode: 0, result: null, initMsid:
59778234354585, completeMsid: null, lastUpdated: null, lastPolled: null, created: null}
2016-01-21 08:44:25,601 DEBUG [c.c.a.ApiServlet] (http-6443-exec-23:ctx-5134ed7d ctx-92ecd917)
===END===  1.4.134.114 -- GET  command=createVpnConnection&response=json&sessionkey=ASWYR9%2Bi4dq92HizW8V8s%3D&s2svpngatewayid=bb0ffb92-6ed1-444e-a3ab-0aaad4655625&s2scustomergatewayid=c19b2093-df5b-41a5-b58b-9f36a2a8154d&passive=false&_=1453362266654
2016-01-21 08:44:25,614 DEBUG [c.c.u.AccountManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425 ctx-c8db121f) Access to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] granted
to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] by DomainChecker
2016-01-21 08:44:25,622 DEBUG [o.a.c.a.BaseCmd] (API-Job-Executor-2:ctx-c8efccc8 job-14425
ctx-c8db121f) Ignoring paremeter fordisplay as the caller is not authorized to pass it in
2016-01-21 08:44:25,631 DEBUG [c.c.a.m.AgentManagerImpl] (AgentManager-Handler-3:null) SeqA
11-89256: Processing Seq 11-89256:  { Cmd , MgmtId: -1, via: 11, Ver: v1, Flags: 11, [{"com.cloud.agent.api.ConsoleProxyLoadReportCommand":{"_proxyVmId":80,"_loadInfo":"{\n
 \"connections\": []\n}","wait":0}}] }
2016-01-21 08:44:25,716 DEBUG [c.c.a.m.AgentManagerImpl] (AgentManager-Handler-3:null) SeqA
11-89256: Sending Seq 11-89256:  { Ans: , MgmtId: 59778234354585, via: 11, Ver: v1, Flags:
100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
2016-01-21 08:44:25,766 DEBUG [c.c.a.m.ClusteredAgentAttache] (API-Job-Executor-2:ctx-c8efccc8
job-14425 ctx-c8db121f) Seq 4-3491697086095716136: Forwarding Seq 4-3491697086095716136: 
{ Cmd , MgmtId: 59778234354585, via: 4(SeSolXS02), Ver: v1, Flags: 100101, [{"com.cloud.agent.api.routing.Site2SiteVpnCfgCommand":{"create":true,"localPublicIp":"1.14.36.68","localGuestCidr":"10.10.0.0/18","localPublicGateway":"1.14.36.65","peerGatewayIp":"14.14.237.7","peerGuestCidrList":"192.168.232.0/24","ipsecPsk":"GZm+6z%K","ikePolicy":"3des-md5","espPolicy":"3des-md5","ikeLifetime":86400,"espLifetime":3600,"dpd":false,"passive":false,"accessDetails":{"zone.network.type":"Advanced","router.ip":"169.254.2.73","router.name":"r-163-VM"},"wait":0}}]
} to 249373720971888
2016-01-21 08:44:26,498 DEBUG [c.c.a.t.Request] (AgentManager-Handler-5:null) Seq 4-3491697086095716136:
Processing:  { Ans: , MgmtId: 59778234354585, via: 4, Ver: v1, Flags: 100, [{"com.cloud.agent.api.Answer":{"result":false,"details":"bash:
-=GZm+6z%KTjS: command not found\nbash: UTr?G: command not found\n    inet 1.14.36.68/26 brd
1.14.36.127 scope global eth1\n021 no connection named \"vpn-14.14.237.7\"\n000 terminating
all conns with alias='vpn-14.14.237.7' \n021 no connection named \"vpn-14.14.237.7\"\n021
no connection named \"vpn-14.14.237.7\"\n","wait":0}}] }
2016-01-21 08:44:26,498 DEBUG [c.c.a.m.AgentAttache] (AgentManager-Handler-5:null) Seq 4-3491697086095716136:
No more commands found
2016-01-21 08:44:26,498 DEBUG [c.c.a.t.Request] (API-Job-Executor-2:ctx-c8efccc8 job-14425
ctx-c8db121f) Seq 4-3491697086095716136: Received:  { Ans: , MgmtId: 59778234354585, via:
4, Ver: v1, Flags: 100, { Answer } }
2016-01-21 08:44:26,600 WARN  [o.a.c.a.c.u.v.CreateVpnConnectionCmd] (API-Job-Executor-2:ctx-c8efccc8
job-14425 ctx-c8db121f) Exception:
com.cloud.exception.ResourceUnavailableException: Resource [Site2SiteVpnConnection:5] is unreachable:
Failed to apply site-to-site VPN
                at com.cloud.network.vpn.Site2SiteVpnManagerImpl.startVpnConnection(Site2SiteVpnManagerImpl.java:345)
                at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
                at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
                at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                at java.lang.reflect.Method.invoke(Method.java:606)
                at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:317)
                at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)
                at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
                at org.apache.cloudstack.network.contrail.management.EventUtils$EventInterceptor.invoke(EventUtils.java:106)
                at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161)
                at com.cloud.event.ActionEventInterceptor.invoke(ActionEventInterceptor.java:51)
                at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161)
                at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:91)
                at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
                at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
                at com.sun.proxy.$Proxy160.startVpnConnection(Unknown Source)
                at org.apache.cloudstack.api.command.user.vpn.CreateVpnConnectionCmd.execute(CreateVpnConnectionCmd.java:153)
                at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:141)
                at com.cloud.api.ApiAsyncJobDispatcher.runJob(ApiAsyncJobDispatcher.java:108)
                at org.apache.cloudstack.framework.jobs.impl.AsyncJobManagerImpl$5.runInContext(AsyncJobManagerImpl.java:537)
                at org.apache.cloudstack.managed.context.ManagedContextRunnable$1.run(ManagedContextRunnable.java:49)
                at org.apache.cloudstack.managed.context.impl.DefaultManagedContext$1.call(DefaultManagedContext.java:56)
                at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.callWithContext(DefaultManagedContext.java:103)
                at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.runWithContext(DefaultManagedContext.java:53)
                at org.apache.cloudstack.managed.context.ManagedContextRunnable.run(ManagedContextRunnable.java:46)
                at org.apache.cloudstack.framework.jobs.impl.AsyncJobManagerImpl$5.run(AsyncJobManagerImpl.java:494)
                at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
                at java.util.concurrent.FutureTask.run(FutureTask.java:262)
                at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
                at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
                at java.lang.Thread.run(Thread.java:744)
2016-01-21 08:44:26,602 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Complete async job-14425, jobStatus: FAILED, resultCode: 530, result: org.apache.cloudstack.api.response.ExceptionResponse/null/{"uuidList":[],"errorcode":534,"errortext":"Resource
[Site2SiteVpnConnection:5] is unreachable: Failed to apply site-to-site VPN"}
2016-01-21 08:44:26,605 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Publish async job-14425 complete on message bus
2016-01-21 08:44:26,605 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Wake up jobs related to job-14425
2016-01-21 08:44:26,605 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Update db status for job-14425
2016-01-21 08:44:26,608 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Wake up jobs joined with job-14425 and disjoin all subjobs created from job- 14425
2016-01-21 08:44:26,659 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Done executing org.apache.cloudstack.api.command.user.vpn.CreateVpnConnectionCmd
for job-14425
2016-01-21 08:44:26,659 INFO  [o.a.c.f.j.i.AsyncJobMonitor] (API-Job-Executor-2:ctx-c8efccc8
job-14425) Remove job-14425 from job monitoring
2016-01-21 08:44:29,026 DEBUG [c.c.a.m.ClusteredAgentAttache] (AgentManager-Handler-9:null)
Seq 10-5857212790372051608: Routing from 249373720971888
2016-01-21 08:44:29,077 DEBUG [c.c.a.m.ClusteredAgentManagerImpl] (AgentManager-Handler-8:null)
Seq 10-5857212790372051608: MgmtId 249373720971888: Resp: Routing to peer
2016-01-21 08:44:29,089 DEBUG [c.c.a.ApiServlet] (http-6443-exec-21:ctx-c14edc36) ===START===
 1.4.134.114 -- GET  command=queryAsyncJobResult&jobId=ef828cc6-d1ba-496b-a458-5d3808886574&response=json&sessionkey=ASWYR9%2Bi4dq92HizW8V8s%3D&_=1453362270784
2016-01-21 08:44:29,115 DEBUG [c.c.u.AccountManagerImpl] (http-6443-exec-21:ctx-c14edc36 ctx-aaf0031d)
Access to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss] granted to Acct[04f51dd2-2fa6-4e1d-aa1c-625da0155494-mboss]
by DomainChecker
2016-01-21 08:44:29,170 DEBUG [c.c.a.ApiServlet] (http-6443-exec-21:ctx-c14edc36 ctx-aaf0031d)
===END===  1.4.134.114 -- GET  command=queryAsyncJobResult&jobId=ef828cc6-d1ba-496b-a458-5d3808886574&response=json&sessionkey=ASWYR9%2Bi4dq92HizW8V8s%3D&_=1453362270784
2016-01-21 08:44:29,874 DEBUG [o.a.c.s.SecondaryStorageManagerImpl] (secstorage-1:ctx-38cd76a3)
Zone 1 is ready to launch secondary storage VM
2016-01-21 08:44:30,167 DEBUG [c.c.c.ConsoleProxyManagerImpl] (consoleproxy-1:ctx-641443c8)
Zone 1 is ready to launch console proxy ^C

I think this a bug https://issues.apache.org/jira/browse/CLOUDSTACK-7124 , but its fixed in
4.5, and I am running 4.5.2 Is it really the same issue Or something else?

/sonali

Mime
View raw message