Unable to establish the connection between Tenant cluster and Virtual Appliance

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi All,

Recently we have encountered an interesting issue, We are not able to identify the root cause.

We have recently rebuilt our problematic VAs. To test the connection from cluster to VA we have configured VAs with all the necessary configuration according to the VA documentation in SailPoint documentation portal.

We have total 4 VAs in our Production environment. 2 are hosted in one data center and other 2 hosted in other data center. First 2 VAs are working fine (Which are hosted in one data center) without any issues. But when it comes to 3rd and 4th VAs (which are hosted in different data center), they are not able to establish the connection with the cluster. we have checked logs, network configuration, secure tunnel configuration.

  1. Network configuration

    IP address - checked

    DNS - checked

    Gateway- checked

    network connection checked (Ping works fine)

  2. We are using secure tunnel approach

    Secure tunnel configuration (Copying relevant SSLs keys into VA) - checked

    adding line “tunnetTraffic: true” to config.yaml file - checked

    able to connect to amazon services and able to download images and updates

    able to connect to regional secure tunnel IP addresses

  3. Canal service is up and running, showing Healthy

Everything looks good, but still no connection.

Our hunch is, It’s something to do with the part that the 3rd and 4th VAs are hosted in different data centers. something is restricting the connection between Tenant and these 2 VAs. So our query is which configuration we should check to identify this connection issue.

Thanks in advance.

Regards,

Ram

2

check if canal service is up?

3

Thanks for the reply.

canal service is up.

We were able to add our VA to the cluster. But it stuck at “VA update in progress”. Its been a whole day, but still in the same state.

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.