Michael_Fleming Absent Member.
Absent Member.
8633 views

ZCM Agent Multiple IP Addresses order = Unable to connect

I have the ZCM 10.3.2 agent installed on a Windows 2008 R2 server. This server has multiple IP addresses:

169.168.x.x (APIPA) = IBM USB Remote NDIS Network Device
10.1.x.x = LAN NIC

In ZCC when the IP addresses are listed as above it shows, "ZENworks Agent Status: Unable to connect through IP Address or Host Name" but when the 10.1.x.x IP address is top of the list it works. When it is "unable to connect", doing a refresh from the agent updates ZCC with contact time but when I try to do a refresh from ZCC on the device it fails.

I don't manage the server and don't know what the IBM USB Remote NDIS Network Device is or how it should be configured. We have other servers with multiple IP's and they work fine.

I thought ZCM should try to contact the device on all of it's IP addresses? I saw a customer had sent an enhancement request to specify the devices IP for ZCM (if needed).

Any ideas?
Labels (2)
0 Likes
21 Replies
Micro Focus Expert
Micro Focus Expert

Re: ZCM Agent Multiple IP Addresses order = Unable to connect

In the ZCC, Drill down the the ZCM Server and select the "Settings" tab
on the server object.

Then open up the "Infrastructure Management" tab and select
"Restricted IP Addresses"

Add the 169.168.x.x address to the list here.

The ZCM server will no longer advertise that address and the agents will
stop using it after their next refresh when they get the new info.


On 1/20/2011 7:36 AM, Michael Fleming wrote:
>
> I have the ZCM 10.3.2 agent installed on a Windows 2008 R2 server. This
> server has multiple IP addresses:
>
> 169.168.x.x (APIPA) = IBM USB Remote NDIS Network Device
> 10.1.x.x = LAN NIC
>
> In ZCC when the IP addresses are listed as above it shows, "ZENworks
> Agent Status: Unable to connect through IP Address or Host Name" but
> when the 10.1.x.x IP address is top of the list it works. When it is
> "unable to connect", doing a refresh from the agent updates ZCC with
> contact time but when I try to do a refresh from ZCC on the device it
> fails.
>
> I don't manage the server and don't know what the IBM USB Remote NDIS
> Network Device is or how it should be configured. We have other servers
> with multiple IP's and they work fine.
>
> I thought ZCM should try to contact the device on all of it's IP
> addresses? I saw a customer had sent an enhancement request to specify
> the devices IP for ZCM (if needed).
>
> Any ideas?
>
>



--
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
--
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
0 Likes
Michael_Fleming Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

Thanks Craig!

I'll use that as a work around for now. Should ZCM be contacting both addresses anyway? It seems to be giving up if the top address fails.

BTW, any idea what IBM USB Remote NDIS Network Device actually is? From what google told me its LAN over USB, so a USB NIC?
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: ZCM Agent Multiple IP Addresses order = Unable to connect

"zac zc -l" will show who the agent should try to talk to.

Make sure that Both Addresses show now.

After the change and refresh, only the good one should show.


On 1/20/2011 8:36 AM, Michael Fleming wrote:
>
> Thanks Craig!
>
> I'll use that as a work around for now. Should ZCM be contacting both
> addresses anyway? It seems to be giving up if the top address fails.
>
> BTW, any idea what IBM USB Remote NDIS Network Device actually is? From
> what google told me its LAN over USB, so a USB NIC?
>
>



--
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
--
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
0 Likes
Michael_Fleming Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

Yep both addresses show in the server roles prior to the restrict IP change. This is the same when the "unable to connect" happens. I'm guessing ZCM gives up if it fails to connect on the first IP address. Shouldn't it still try all the IP addresses?

Anyway, the IP restriction fixes this but it is still odd.

Cheers!
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: ZCM Agent Multiple IP Addresses order = Unable to connect

It will try all addresses.
There may be other issues, such as an incorrect subject in your Cert,
Reverse DNS Lookup issues on the Cert's Subject, etc...

On 1/21/2011 6:06 AM, Michael Fleming wrote:
>
> Yep both addresses show in the server roles prior to the restrict IP
> change. This is the same when the "unable to connect" happens. I'm
> guessing ZCM gives up if it fails to connect on the first IP address.
> Shouldn't it still try all the IP addresses?
>
> Anyway, the IP restriction fixes this but it is still odd.
>
> Cheers!
>
>



--
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
--
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
0 Likes
jcsmith1 Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

How does this work for users on VPNs? Or is this not a concern? For instance the user's private network is listed first then the the VPN tunnel 2nd gives you "Unable to connect". However, for whatever reason, if their VPN tunnel is listed first then you get a green light.

If there a way to specify which ranges are allowed?
0 Likes
Michael_Fleming Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

We are not really using ZCM in production yet (other than inventory) so not sure. We have a few pc's with wireless NIC's and they work fine but I didn't look in ZCC which IP address is listed in which order.
0 Likes
jcsmith1 Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

My big concern with this is we keep getting calls from VPN users saying they're not getting updates. When I remote them I find their PCs aren't listed and after connecting via IP I find it looks like they're registered when looking at the GUI -however- if you run "zac unr" it gives you a message stating the PC is not currently registered to any zones. I issue the "zac reg" command and after the user logs in they're fine.

When I looked in ZCC I saw the user's PC had a green light, but the next day I looked and noticed it had "Unable to connect". The difference seemed to be that their local workstation's address was listed first followed by the VPN (which is the only one that can talk to ZCC).

So I begin to wonder, if this condition persists for the amount of days we specified in our configuration will this system be removed because ZCC thinks it's not connected??
0 Likes
Michael_Fleming Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

Good point about the device becoming lost/retired depending on the ZCM configuration.

What I experienced with this issue was the agent COULD contact the ZCM primary for inventory scans and last contact time, even when the non-connectable IP was listed first. So I would say ZCM would think the device is still contacting home.

The issue is when you try and manage the device (or check its status), ZCM can NOT contact the device as it only tries the first listed IP.

Shaun and others - Ideas why ZCM isn't trying all IP's?
0 Likes
shaunpond Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connect

Michael,

> Shaun and others - Ideas why ZCM isn't trying all IP's?
>

you need a good zmd-messages.log at debug level, from bootup to the
point it fails, and look for the connection manager - see when it
contacts the server, is there a problem?

--

Shaun Pond


0 Likes
Michael_Fleming Absent Member.
Absent Member.

Re: ZCM Agent Multiple IP Addresses order = Unable to connec

Checked debug log and no errors on the client side which is what I expected as the devices agent can contact the ZCM server, it's the server that can't contact it.

Checked ZCM DB and found there is only 1 IP address (10.x.x.x) listed in the DeviceInfo table. Where/how does ZCC know about the devices other (169.x.x.x) address?

More importantly, how does it decide to order them? If it has only the working IP, then I enable the non-working IP it will order the 10.x.x.x first then after awhile it swaps the order without me doing anything.

I should note that on this device it only has asset/inventory management installed.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.