Search
Clear search
Close search
Google apps
Main menu

Unable to enable mirroring when dedicated admin NIC is configured on replica GSA

Issue ID: 5090128


Summary: If dedicated admin NIC is configured on a replica, attempt to enable mirroring will result in Error Connecting via SSL to Host <ID> (<IP>). The error happens when the Apply Configuration button is clicked from master GSA on the Gogole Search Appliance > GSA^n > Configuration page. 


Cause:  This is a known issue filed as 5090128. When the Apply Configuration button is clicked on master, the configuration is pushed over to the replica on port 8443 of the primary NIC and in the case where dedicated admin NIC is configured on the replica, GSA's internal firewall blocks port 8443 on the primary NIC so the action would fail.


Workaround: The solution is to temporarily enable port 8443 on the primary NIC of the replica using a support script before clicking the Apply Configuration button from the master.

  1. On each of the replica GSA where dedicated admin NIC is enabled, navigate to Administration > Support Scripts.
  2. Select Paste custom support script and copy the script included below to the text box on the right, including the header (----BEGIN...) and footer (-----END...) lines.
  3. Click Run support script.
  4. On master GSA, check and verify the mirroring configuration is correct, then click Apply Configuration button from the Gogole Search Appliance > GSA^n > Configuration page. The action should succeed because port 8443 is now open on primary NIC of the replica.
  5. On each replica where the support script is run, login to admin console via the dedicated admin NIC IP on port 8443 (https://GSA-admin-IP:8443/) and toggle the Enable HTTP (i.e. non SSL) Admin Console and Version Manager access setting on the Google Search Appliance > Administration > System Settings page to remove the temporarily added firewall rule.

-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=5mZF
-----END PGP MESSAGE-----

 


Versions affected: 6.8, 6.10, 6.14 and 7.0

Versions fixed: 7.2

Was this article helpful?
How can we improve it?