3PAR 7200 Upgrade Issue

[SHAMRIN]

Update of HP 3PAR OS 3.1.2 MU5 to 3.2.1 MU5 was performed. All preliminary checks were successful, but the final was unsuccessful: "All units are not online after waiting 45 minutes". Virtual Service Processor wrote that "Could not open connection to the CLI server process on the IP Socket connection timed out to port 2550". HP 3PAR Management Console also lost connection. In fact, the array does not listen ports 2550, 5783 and 5782.

But! SSH connection is working, the array is successfully updated, all the hardware components are error-free, production work fine, showalert/checkhealth/showversion ok.  

What is this error? What can be done?

Thanks

Update. The array listens to the ports: 22 (SSH), 5781 (Event monitor), 5988/5989 (CIM) and 8008/8080 (Web Services). And it's all! 

Alex

[Dennis Handly]

> the array does not listen ports 2550, 5783 and 5782.

The array doesn't listen to 2550.  You can disable non-secure ports, which would remove 5782.

You can disable all these ports with another setnet option.

[SHAMRIN]

Dennis, with setnet command I can disable the non-encrypted ports, but I can not change this control ports. And port 5783 should be open all time, I think .......  

[Dennis Handly]

> with setnet I can disable the non-encrypted ports, but I can not change this control ports.

Yes, with: setnet disableports yes

> port 5783 should be open all time

There was P14 3.2.1 MU3 that would disable all CLI ports.  This was obsoleted when the SSL security problem was fixed.

[SHAMRIN]

Unfortunately, I can not find a description for this patch. Dennis, do you have a Release Notes of it? Or maybe you remember what was the problem of security?

[Dennis Handly]

> I can not find a description for this patch.

It was only for that one MU.  And if you did install it, it would show up in "showpatch -hist".

> Or maybe you remember what was the problem of security?

POODLE

[Cali · Accepted solution]

There was a Bug in the 3.2.1 MU5 Update script.

Try this:

setnet disableports no

setnet remotecliports enable

[SHAMRIN]

Yep, bingo! Many thanks! 

Alex

[victor-c]

Thanks. 

Work for me