Search
Clear search
Close search
Google apps
Main menu

Troubleshooting GSA^n issues

Network environment requirements

Please find the list of the requirements your network environment should comply with in order the mirroring to work successfully:

- The search appliances must be able to contact each other on TCP ports 8000, 8443 and UDP port 500 using IP protocol 51 (IPSec AH).

- There should be no NAT between appliances

- If you are using the Admin NIC feature - the IP addresses of Admin NICs of all GSAs should be in one subnet.

Please make sure your network environment satisfies the requirements above.

GSA^n > Network Diagnostics page shows red status

If GSA^n > Network Diagnostics page shows red status please:

  1. Check with your network administration team that the network environment satisfies the requirements above
  2. Navigate to GSA^n > Configuration Admin Console page on master GSA and press the [Apply Configuration] button

If step 2 did not help, please disable mirroring completely and re-create the configuration from the scratch:

  1. Log into Admin Console on master GSA
  2. Navigate to the page "GSA^n > Configuration"
  3. Disable mirroring by pressing button [Disable]
  4. Enable mirroring by pressing button [Enable]
  5. Re-enter configuration parameters for mirroring
    For details please see the document Configuring GSA Mirroring
  6. Press the [Apply Configuration] button under the form

Collecting detailed diagnostics

If re-configuring mirroring from scratch did not help - you have to gather more detailed diagnostics for further investigation.

In order to do so please:

  1. Collect the following information information needed for a test:
    • master GSA IP address
    • replica GSA IP address
  2. Open two browser windows, with Master GSA on the left side and Replica on the right.
  3. Log into Admin Console of Master and Replica GSAs
  4. Navigate to the Content Sources > Diagnostics > Real-time Diagnostics page of the Master and the Replica
  5. Scroll down to the Run Packet Capture (tcpdump) block in both browser windows,
    • in the left window, opened for the Master GSA, put replica's IP address into Filter field
    • in the right window, opened for the Replica GSA, put master's IP address into Filter field
    • press [Start] button next to Filter field to start network capture in both browser windows
  6. Navigate to the GSA^n > Configuration page on master GSA
  7. Press the [Apply Configuration] button under the form
  8. Wait for the application process to finish (successfully or with an error)
  9. Navigate to the Content Sources > Diagnostics > Real-time Diagnostics page in both browser windows
  10. In both browser windows, scroll down to the Run Packet Capture (tcpdump) block, press [Stop] button next to Filter field to stop network capture and save the capture with "node_role-network_capture.cap" name

You can analyze network captures using Wireshark tool and check whether the packets sent from master GSA are being seen on replica's side and vice versa.

In the captures you should be able to see:

- ICMP packets between the master and the replica

- Communication between the master and the replica on TCP ports 8000 and 8443 

- Communication between the master and the replica on UDP port 500 with IP protocol 51 (IPSec)

If you do not see any of mentioned communications on both captures - the network environment might not comply with the requirements for successful GSA^n operation.

Please provide mentioned captures and IP addresses of master and replica while opening new case with Google Support for speedy investigation of GSA^n issues.

Was this article helpful?
How can we improve it?