problem with management plane

UMWL — Thu, 08 May 2014 12:07:59 GMT

Hi,

I am not able to access the management website. The website does not load. When I try to restart the management plane from ssh with a command "debug software restart management-server" I get this error:

2014-05-08 12:08:11.503 +0200 Error: pan_read_full(comm_utils.c:104): srvr: fatal recv error. sock=3 err=Connection reset by peer (131)

admin@PA-2020>

What's the problem?

Thanks,

Radoslaw Czajkowski

Re: problem with management plane

gwesson — Thu, 08 May 2014 12:37:28 GMT

The firewall's SSH server is controlled by the management server, so when you restart it you are also killing the active SSH connection. That's what the "Connection reset by peer" message is saying.

If you can't get to the management port, and you have a management profile set on one of the non-management interfaces, you may want to see if it's listening for the web connections. You can run the following command to have the firewall output what it is listening on:

> netstat listening yes numeric-ports yes

Check for a TCP entry such as:

tcp 0 0 *:443 *:* LISTEN

You can also tail the ms.log file while attempting to display the web interface on the management port to see if you receive any messages:

> tail follow yes mp-log ms.log

Attempt to display the page, and see if there are any messages.

Finally, what version and hardware are you running?

Hope this helps,

Greg Wesson

topic Re: problem with management plane in General Topics

problem with management plane

Re: problem with management plane