Coyote Point Systems E350GX, Installation And Administration Manual

Page: 316 / 344

Appendix G: Troubleshooting
312 Equalizer Installation and Administration Guide
Log Contains SSL Errors with “wrong version number”
If you have one or more HTTPS clusters defined, you may see the following messages in the Equzalizer log:
ssl_err: 425:error:1408F10B: SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:360:
ssl_err: fatal error with ip_address
These messages indicate that a client has sent an HTTPS request to an HTTPS cluster, but has requested an SSL/TLS
version that is not configured on the cluster. These messages are logged by the SSL implementation used by Equalizer and
do not necessarily indicate a problem on Equalizer.
For example, if you configure the HTTPS cluster to support SSLv3 ciphers only, then any time a client requests a
connection using an SSLv2 cipher, SSL will log these messages. Check the cipher suite for the HTTPS cluster and the
configuration of the client to ensure that the desired SSL versions are being used.
GUI Always Reports All Configuration Errors
When a configuration update is made and an error occurs, a popup screen informs the user of the error. This error output
contains
all errors detected in the configuration file, not just the error associated with the current operation.
For example, let’s say that you have defined an HTTPS cluster but that you have not added an SSL certificate for the
cluster yet. If you then try to change another setting in the configuration and make an error, the GUI will report
both the
error you just made as well as the missing SSL certificate for the HTTPS cluster.
Updating the Configuration File Sequence Number
If you are establishing a failover configuration between two Equalizers, you should check the sequence number of the
configuration file on both Equalizers by clicking
Help > About
and expanding the
Equalizer System Information
box. The
configuration file with the highest sequence number will be transferred to the other system during the first synchronization
between the systems. If the configuration that you require has a lower sequence number, follow this procedure to edit the
configuration file manually:
1. Log in to the Equalizer with the configuration file you require via
ssh
(as eqsupport ) or the serial interface (as root ). If
you use ssh, enter the following command to switch to the root login:
su root
2. Copy the configuration file to a temporary location:
cp /var/eq/eq.conf /var/tmp
3. Edit the file /var/tmp/eq.conf using either of the text editors supplied with Equalizer:
ee
or
vi
. For example:
ee /var/tmp/eq.conf
For instructions on using these standard text editors, see their manual pages on the FreeBSD Hypertext Manual Pages
website:
www.freebsd.org/cgi/man.cgi
.
4. Searh for the string “
sequence
“ in the file, and increase the number on that line until it is higher than the sequence
number on the other Equalizer that you will configure into failover. Do not make any other changes to the file.
5. Save your change and exit the editor.
6. To check the new configuration file for syntax errors, enter the following:
parse_config -i /var/tmp/eq.conf
The
parse_config
command prints any syntax errors it finds to standard out, and nothing if the file is correct.
7. If there is a syntax error, repeat Steps 3 through 6 to fix the problem, so that
parse_config
returns no output.