- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-09-2022 04:38 AM
Here are some of the commnds I ean on ION2K via console:
ion toolkit# dump controller status
Controller Connection : Partially Connected
Number of Active Connections : 1
--------------------------------------------------------------------------------
tcp 0 0 10.0.0.65:41419 52.8.25.40:443 ESTABLISHED
--------------------------------------------------------------------------------
==
ion toolkit# ping controller 8.8.8.8
PING 8.8.8.8 (8.8.8.8) from 10.0.0.65: 56 data bytes
64 bytes from 8.8.8.8: seq=0 ttl=117 time=13.652 ms
64 bytes from 8.8.8.8: seq=1 ttl=117 time=13.592 ms
64 bytes from 8.8.8.8: seq=2 ttl=117 time=14.170 ms
64 bytes from 8.8.8.8: seq=3 ttl=117 time=14.148 ms
64 bytes from 8.8.8.8: seq=4 ttl=117 time=13.524 ms
--- 8.8.8.8 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 13.524/13.817/14.170 ms
ion toolkit#
==
Any help would be greatly appreciated.
Thanks,
Ajit
01-14-2022 12:06 AM
Thank you for the post @AjitKumar
Based on the output you provided the IOS appliance has connectivity to portal. In order to see what is preventing from registration, I would recommend to run: "debug controller reachability controller1"
The device that can successfully register will have below output:
ion toolkit# debug controller reachability controller1
TPM and tcsd process is running fine
Mic cert check passed
Cic cert check passed
Mic cert verify passed
Cic cert verify passed
CIC cert connection test done
Device is connected to Controller
The first thing that has to pass is MIC (Manufacturer Installed Certificate) check to authenticate ION appliance to controller. If it fails at this step, could you confirm the certificate is there and that it is valid: "inspect certificate mic"
Below KB describes steps during initial to portal:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBNHCA4
Depending which step fails in the debug and validity of certificate, I would narrow down the troubleshooting.
Kind Regards
Pavel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!