The BQN uses a dedicated network interface for management.The management interface supports both the SSH and WEB (HTTPs) services. Incase of problems accessing the configured management IP check the following:
- Ensure that the management network interfaceport is connected to the appropriate network.
- Verify that the link state of the managementnetwork interface is up. If the management interface is connected to a networkswitch, verify that the port in the switch is up and its attributes match the properties shown by the show interface command.
- If accessing the management IP address from a different network, make sure that static routing is configured to the access network, as explained in the Network Interface section in the User Guide.
- If there are firewalls in the management network, allow access to TCP port 22 for the SSH service and TCP port 443 for the WEB service.
- Verify using the system console that the management IP address and network prefix are correct. Connect a monitor and a keyboard to the server and login as root:
bqn0:˜# bqnsh
root@bqn0# show interface management detail
Interface: en0o1
IP address: 192.168.0.121/24
Default gateway: 192.168.0.1
Nameserver: n/a
- If you suspect the OAM IP settings are incorrector unknown, connect a monitor and a keyboard to the server and login as root to change it. For example, to change to OAM IP 10.10.10.12/24:
bqn0:˜# bqnsh
root@bqn0# set interface en0o1 management 0 10.10.10.12/24 gateway 10.10.10.1
root@bqn0# show interface management detail
Interface: en0o1
IP address: 10.10.10.12/24
Default gateway: 10.10.10.1
Nameserver: n/a
- The BQN management interface may be protected by its own firewall. The problem could be that your source IP address is notincluded in that firewall white list. This could happen even for addresses from the same subnet of the BQN management IP if the subnet is not part of the firewall rules. You can disable the firewall temporarily until the connection to the management port is restored. Connect a monitor and a keyboard to the server and login as root:
bqn0:˜# bqnsh
root@bqn0# show interface firewall
IFACE CHAIN RANGE
en0o1 input 10.0.0.0/8
en0o1 input 172.16.0.0/12
en0o1 input 192.168.0.0/16
root@bqn0# clear interface en0o1 firewall input
root@bqn0# show interface firewall
IFACE CHAIN RANGE
root@bqn0#
Once the management IP is reachable, you can define the new white list of allowed source IP ranges.