3PAR StoreServ Storage
cancel
Showing results for 
Search instead for 
Did you mean: 

3PAR 7200 Upgrade Issue

SOLVED
Go to solution
SHAMRIN
Advisor

3PAR 7200 Upgrade Issue

Update of HP 3PAR OS 3.1.2 MU5 to 3.2.1 MU5 was performed. All preliminary checks were successful, but the final was unsuccessful: "All units are not online after waiting 45 minutes". Virtual Service Processor wrote that "Could not open connection to the CLI server process on the IP Socket connection timed out to port 2550". HP 3PAR Management Console also lost connection. In fact, the array does not listen ports 2550, 5783 and 5782.

But! SSH connection is working, the array is successfully updated, all the hardware components are error-free, production work fine, showalert/checkhealth/showversion ok.  

What is this error? What can be done?

Thanks

Update. The array listens to the ports: 22 (SSH), 5781 (Event monitor), 5988/5989 (CIM) and 8008/8080 (Web Services). And it's all! 

Alex

 

8 REPLIES
Dennis Handly
Acclaimed Contributor

Re: 3PAR 7200 Upgrade Issue to 3.2.1 MU5

> the array does not listen ports 2550, 5783 and 5782.

 

The array doesn't listen to 2550.  You can disable non-secure ports, which would remove 5782.

You can disable all these ports with another setnet option.

SHAMRIN
Advisor

Re: 3PAR 7200 Upgrade Issue to 3.2.1 MU5

Dennis, with setnet command I can disable the non-encrypted ports, but I can not change this control ports. And port 5783 should be open all time, I think .......  

Dennis Handly
Acclaimed Contributor

Re: 3PAR 7200 Upgrade issue to 3.2.1 MU5

> with setnet I can disable the non-encrypted ports, but I can not change this control ports.

 

Yes, with: setnet disableports yes

 

> port 5783 should be open all time

 

There was P14 3.2.1 MU3 that would disable all CLI ports.  This was obsoleted when the SSL security problem was fixed.

SHAMRIN
Advisor

Re: 3PAR 7200 Upgrade issue to 3.2.1 MU5

Unfortunately, I can not find a description for this patch. Dennis, do you have a Release Notes of it? Or maybe you remember what was the problem of security?

Dennis Handly
Acclaimed Contributor

Re: 3PAR 7200 Upgrade issue to 3.2.1 MU5

> I can not find a description for this patch.

 

It was only for that one MU.  And if you did install it, it would show up in "showpatch -hist".

 

> Or maybe you remember what was the problem of security?

 

POODLE

Cali
Honored Contributor
Solution

Re: 3PAR 7200 Upgrade issue to 3.2.1 MU5

There was a Bug in the 3.2.1 MU5 Update script.

Try this:

setnet disableports no

setnet remotecliports enable

 

 

That was not planned in this way.
SHAMRIN
Advisor

Re: 3PAR 7200 Upgrade issue to 3.2.1 MU5

Yep, bingo! Many thanks! 

Alex

victor-c
Advisor

Re: 3PAR 7200 Upgrade issue to 3.2.1 MU5

Thanks. 

Work for me