Original Message:
Sent: Sep 15, 2023 04:24 AM
From: MaxPower
Subject: CX 10000 and PSM
Hi Leo,
to run a successful PoC, I recommend to upgrade AFC / PSM and the switches so the latest versions.
Keep in mind the upgrade path: AFC -> PSM -> Switches
For further information, please take a look into the PSM User Guide:
https://asp.arubanetworks.com/downloads/documents/RmlsZTo2NDU0NDM4NC0zYWI0LTExZWUtOTNhMC0wNzBkNzVhNjgxMTQ%3D
Kind regards
Original Message:
Sent: Sep 15, 2023 04:07 AM
From: leo.ma
Subject: CX 10000 and PSM
Hi brother
yeap,There seems to be some problems when using 10.12. AFC cannot recognize the health status. I changed to 10.11.1041 and everything seems normal now.
------------------------------
leo ma
Original Message:
Sent: Sep 15, 2023 03:14 AM
From: MaxPower
Subject: CX 10000 and PSM
Hey Leo,
you should better upgrade to 1.62.2-T-10. You´re using the CX10K with 10.12.1000, which requires an up to date PSM, otherwise you might run into issues.
https://asp.arubanetworks.com/downloads/documents/RmlsZTo0YTQ1OGI0Mi0zYWI0LTExZWUtYTgzOC1kMzIzYmY3ODcwMjc%3D
Kind regards
Original Message:
Sent: Sep 15, 2023 02:53 AM
From: leo.ma
Subject: CX 10000 and PSM
Hi brother
i am change version to 1.54.3，
I think the method you mentioned works fine. I'll try it with AFC.，thanks。
------------------------------
leo ma
Original Message:
Sent: Sep 15, 2023 01:20 AM
From: MaxPower
Subject: CX 10000 and PSM
Hi Leo,
2023-09-15 03:16:27.681115: * PSM apigw is already running
- run: /usr/pensando/bin/INSTALL.sh --clean to cleanup all config on PSM and reset it
- run: bootstrap_PSM.py -distributed_services_switch -clustername PSM01 -domain pensando.io -ntpservers 192.168.4.235 -autoadmit True -accepteula 192.168.4.33
Kind regards
Original Message:
Sent: Sep 14, 2023 11:24 PM
From: leo.ma
Subject: CX 10000 and PSM
Hi MaxPower
i am try run
have error
[root@PSM ~]# bootstrap_PSM.py -distributed_services_switch 192.168.4.33
2023-09-15 03:22:40.184387: * all messages printed to the console will also be logged to the file: /var/log/pensando/pen-bootstrap-psm.log
2023-09-15 03:22:40.184471: * start PSM bootstrapping process
2023-09-15 03:22:40.184514: * - list of PSM ips: ['192.168.4.33']
2023-09-15 03:22:40.184544: * - list of ntp servers: ['0.us.pool.ntp.org', '1.us.pool.ntp.org']
2023-09-15 03:22:40.184622: * - cluster name: [cluster]
2023-09-15 03:22:40.184653: * - using domain name: [pensando.io]
2023-09-15 03:22:40.184677: * - auto-admit dse: [True]
2023-09-15 03:22:40.184702: * - cluster-recovery-keys file path: [None]
2023-09-15 03:22:40.184749: * - accept EULA: [False]
2023-09-15 03:22:40.184815: * checking for reachability
2023-09-15 03:22:44.195428: * connectivity check to 192.168.4.33 passed
2023-09-15 03:22:44.548316: * PSM apigw is already running
2023-09-15 03:22:44.548491: * enabling features
2023-09-15 03:22:44.548592: * enabling smart services
2023-09-15 03:22:44.755320: * error performing REST operation: POST https://localhost/configs/cluster/v1/licenses
2023-09-15 03:22:44.755474: * server returned: 401 {"kind":"Status","result":{"Str":"Authentication failed"},"message":["updating feature flags allowed only during cluster bootstrapping"],"code":401,"object-ref":{}}
2023-09-15 03:22:44.755994: * PSM bootstrap failed
2023-09-15 03:22:44.756066: * please check connectivity, run /usr/pensando/bin/INSTALL.sh --clean on all cluster nodes and rerun /usr/local/bin/bootstrap_PSM.py (with switch -v for verbose logging)
[root@PSM ~]# bootstrap_PSM.py -distributed_services_switch -clustername PSM01 -domain pensando.io -ntpservers 192.168.4.235 -autoadmit True -accepteula 192.168.4.33
2023-09-15 03:16:23.409701: * all messages printed to the console will also be logged to the file: /var/log/pensando/pen-bootstrap-psm.log
2023-09-15 03:16:23.409799: * start PSM bootstrapping process
2023-09-15 03:16:23.409864: * - list of PSM ips: ['192.168.4.33']
2023-09-15 03:16:23.409910: * - list of ntp servers: ['192.168.4.235']
2023-09-15 03:16:23.409936: * - cluster name: [PSM01]
2023-09-15 03:16:23.409961: * - using domain name: [pensando.io]
2023-09-15 03:16:23.409985: * - auto-admit dse: [True]
2023-09-15 03:16:23.410008: * - cluster-recovery-keys file path: [None]
2023-09-15 03:16:23.410031: * - accept EULA: [True]
2023-09-15 03:16:23.410059: * checking for reachability
2023-09-15 03:16:27.420024: * connectivity check to 192.168.4.33 passed
2023-09-15 03:16:27.681115: * PSM apigw is already running
2023-09-15 03:16:27.681242: * enabling features
2023-09-15 03:16:27.681287: * enabling smart services
2023-09-15 03:16:27.867293: * error performing REST operation: POST https://localhost/configs/cluster/v1/licenses
2023-09-15 03:16:27.867387: * server returned: 401 {"kind":"Status","result":{"Str":"Authentication failed"},"message":["updating feature flags allowed only during cluster bootstrapping"],"code":401,"object-ref":{}}
2023-09-15 03:16:27.867730: * PSM bootstrap failed
2023-09-15 03:16:27.867782: * please check connectivity, run /usr/pensando/bin/INSTALL.sh --clean on all cluster nodes and rerun /usr/local/bin/bootstrap_PSM.py (with switch -v for verbose logging)
------------------------------
leo ma
Original Message:
Sent: Sep 14, 2023 03:19 AM
From: MaxPower
Subject: CX 10000 and PSM
Hello Leo,
as I can see in the overview, there is an blue DSC card icon (instead of a Switch icon). It seems, that you did not use the "-distributed_services_switch" switch in the bootstrapping process.
bootstrap_PSM.py -distributed_services_switch -clustername PSM01 -domain pensando.io -ntpservers X.X.X.X,X.X.X.X -autoadmit True -accepteula X.X.X.X
Kind regards
Original Message:
Sent: Sep 13, 2023 12:46 PM
From: Raghunandan
Subject: CX 10000 and PSM
Hi Leo
What is the version of PSM you are running? It's good to raise a TAC case to get it investigated.
------------------------------
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
Original Message:
Sent: Sep 12, 2023 09:54 PM
From: leo.ma
Subject: CX 10000 and PSM
Hi Raghunandan
My interface does not have Tenants
------------------------------
leo ma
Original Message:
Sent: Sep 12, 2023 10:59 AM
From: Raghunandan
Subject: CX 10000 and PSM
Hi Leo,
To configure the VRF, you need to navigate to Tenants-> VRF->Add VRF as below
In the Tenants Tab, you can see most of the configuration option.
------------------------------
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
Original Message:
Sent: Sep 12, 2023 09:36 AM
From: leo.ma
Subject: CX 10000 and PSM
yes，my cx 10000
10000# show psm
Policy and Services Manager Information
Operational Status : admitted
Host Addresses : 192.168.4.33
VRF : default
Source IP : 192.168.4.33
10000# show running-config psm
psm
host 192.168.4.33 vrf default
The status is normal, but I don't know how to configure it on psm.
For example, the following step in the guide:
Where should I configure it, please ignore its status since I powered it off
------------------------------
leo ma
Original Message:
Sent: Sep 12, 2023 08:43 AM
From: Raghunandan
Subject: CX 10000 and PSM
Hi Leo,
I assume you have already installed the PSM and its ready. In this scenario we need to follow below to associate DSS (CX 10000) with PSM.
Before proceeding further, make sure CX 10000 has L3 connectivity to PSM via mgmt/inband interface.
The association of DSS with PSM can be done using CX 10000 CLI
switch# conf t
switch(config)# psm
switch(config-psm)# host <ip address of the PSM cluster>
Once this is done, your DSS should be associate with PSM.
Verification can be done using System->DSS view, for a list of DSSes associated with this PSM.
Alternatively, you can execute command in CX 10000 CLI which shows the admission status.
switch# show psm
Policy and Services Manager Information
Operational Status: admitted
Host Addresses: <ip address of PSM host>
VRF: default
switch#
------------------------------
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
Original Message:
Sent: Sep 12, 2023 02:41 AM
From: leo.ma
Subject: CX 10000 and PSM
Hi brothers
I have a cx10000 that needs to be tested and linked with PSM, but my psm does not seem to be completely associated with the CX10000.
I don't have AFC, only PSM, I don't know how to proceed, AMD Pensando PSM for DSS Guide doesn't make me understand
------------------------------
leo ma
------------------------------