Browser Access to Leaf Switches Fails with "The device or resource (bdasw-ib2) is not set up to accept connections on port "https".

Asset ID:	1-72-2172142.1
Update Date:	2016-08-14
Keywords:

Solution Type Problem Resolution Sure

Solution 2172142.1 : Browser Access to Leaf Switches Fails with "The device or resource (bdasw-ib2) is not set up to accept connections on port "https".

Applies to:

Big Data Appliance Hardware - Version All Versions and later
Linux x86-64

Symptoms

Browser access to leaf switches fails. In IE for example output is like:

The remote device or resource won't accept the connection
Contact your network administrator

and

The device or resource (bdasw-ib2) is not set up to accept connections on port "https".

It is possible to ssh into the switch. However, it is necessary to access the switches in a browser to perform the post-discovery SNMP configuration setup on the BDA.

Cause

Nothing on the switch is listening on http or https.

For browser access to leaf switches the following settings are required:

/SP/services/https servicestate = enabled

and

/SP/services/http secureredirect = enabled

Without these settings, the switches are inaccessible via a browser as described above.

Solution

The solution is:

1. ssh into the switch:

For example login to the switch:

# ssh bdasw-ib2

2. Bring up the ilom:

# spsh

Output is like:

# spsh

Oracle(R) Integrated Lights Out Manager

Version ILOM 3.0 r47111

3. Check the values of "/SP/services/https servicestate" and "/SP/services/http secureredirect". When browser access fails they will be disabled.

-> show /SP/services/https servicestate

/SP/services/https
Properties:
servicestate = disabled

-> show /SP/services/http secureredirect

/SP/services/http
Properties:
secureredirect = disabled

4. Enable the values:

-> set /SP/services/https servicestate=enabled

Set 'servicestate' to 'enabled'

-> set /SP/services/http secureredirect=enabled

Set 'secureredirect' to 'enabled'

5. Access to the switch in the browser should be successful now.

6. Note for security purposes e.g. ILOM security scans, disabling browser access may be preferred. When finished with the browser access you can disable the settings again:

-> set /SP/services/http secureredirect=disabled

Set 'secureredirect' to 'disabled'

-> set /SP/services/https servicestate=disabled

Set 'servicestate' to 'disabled'

Attachments

This solution has no attachment