Developer

 View Only
last person joined: yesterday 

Expand all | Collapse all

Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

This thread has been viewed 28 times
  • 1.  Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    Posted Dec 14, 2023 05:42 AM

    Hi Community,

    I try to add tagged vlans to uplink ports with an ansible playbook in a loop. During the loop lots of ports get tagged correctly but some fail with "Request failed: <urlopen error _ssl.c:975: The handshake operation timed out>". I use Aruba 2540 with aos YC.16.10.0019

    My playbook looks like this;

    ---

    - name: Setup Uplink ports
      hosts: all
      gather_facts: false
      tasks:
        - name: Add tagged vlan to port
          arubanetworks.aos_switch.arubaoss_vlan:
            vlan_id: "{{ item[0].vlan_id }}"
            config: create
            command: config_vlan_port
            port_id: "{{ item[1] }}"
            port_mode: "POM_TAGGED_STATIC"
            use_ssl: true
            port: 443
            query_max_response_time: 20
            robustness: 3
          with_nested:
            - "{{ vlan_configs }}"
            - "{{ uplink_ports }}"
          when:
            - vlan_configs is defined
            - uplink_ports is defined


    vlan_configs looks like this:

    vlan_configs:
      - vlan_id: 1004
        vlan_name: toazz
      - vlan_id: 7
        vlan_name: tawm
      - vlan_id: 11
        vlan_name: takl
      - vlan_id: 12
        vlan_name: tavi
    ....

    uplink_ports looks like this:

    uplink_ports:
      - 49
      - 50
      - 51
      - 52


    any help would be nice.



    ------------------------------
    Cheers
    Christopher
    ------------------------------


  • 2.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    MVP GURU
    Posted Dec 14, 2023 05:58 AM

    Hi,

    What the configuration of your switch ? for web management ?



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 3.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    Posted Dec 14, 2023 06:50 AM

    Hi alaoutte,

    no sure what you are asking for. On the switches I configured:

    no web-management

    web-management ssl



    ------------------------------
    Cheers
    Christopher
    ------------------------------



  • 4.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    MVP GURU
    Posted Dec 14, 2023 08:04 AM

    you have generate a certificate on the switch ?



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 5.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    Posted Dec 14, 2023 08:49 AM

    yes, I did. During the loop lots of ports get tagged correctly and communication with the switches works fine, but some fail with this error.



    ------------------------------
    Cheers
    Christopher
    ------------------------------



  • 6.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    MVP GURU
    Posted Dec 14, 2023 08:59 AM

    do you have try with http ?t ? 

    Do you have try to debug rest ?



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 7.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    Posted Jan 02, 2024 04:49 PM

    Are any of the interfaces you're configuring ones you're using for the REST API connection as well? Is the VLAN L3 with an IP that you're using for connection?



    ------------------------------
    Ti Chiapuzio-Wong (they/them)
    HPE Aruba Networking
    ------------------------------



  • 8.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    Posted Mar 21, 2024 06:25 AM

    Hi,

    sorry, for the delay. Had some other customers with issues ;-)

    @alagoutte Thanks for the hint. I switched now to http only and it looks fine. seems like the ssl handshake fails because of the number of connections made. Is the ssl-engine of 2540 and 2930 switches to slow? I'd prefer to use ssl instead of plain.

    I have debugged REST, but thats working fine.

    @Tiffany.Chiapuzio-Wong The configuration interface is an svi, so it is not directly involved.



    ------------------------------
    Cheers
    Christopher
    ------------------------------



  • 9.  RE: Ansible arubanetworks.aos_switch adding tagged vlan fails with "The handshake operation timed out"

    MVP GURU
    Posted Mar 21, 2024 07:26 AM

    Hi Christopher,

    Thanks for feedback,

    Yes, the SSL engine is slow on 25xx/29xx... 

    May be need to add tempo (or check if connection keep alive is supported on this ansible module... @Tiffany.Chiapuzio-Wong



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------