Hi all. Somehow I think I've managed to lock myself out of my scv3020 unit on the network. I was testing ACL settings to try and stop any management access but for a handful of IP's, but after I set what I thought was correct, i'm, no locked out from the LAN, or from an off site IP via VPN.
Luckily I still have local serial access, and when connected, if I try and connect via the controller IP, or the Storage Management app, I get the error
CreateAPISession: Failed because IP is blocked
Can anyone help me remove the ACL block/list via command line?
If that does not work for you, you will need to contact Support directly and an engineer can work with you in a remote session. The forum is not capable of doing remote sessions.
DELL-Charles R
Social Media and Communities Professional Dell Technologies | Enterprise Support Services #IWork4Dell
Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!
Thanks Charles. I do not need to reset the password as it has not been changed. Any network sessions are being blocked by an ACL lockout. I am looking to know the CLI commands to edit / remove the ACL access settings. This unit is no longer in support so I know that Dell enterprise support will not help with a remote session without a huge charge, so I was asking for advice on the commands on the community.
SC Series: "Invalid Login Credentials" error when starting a DSM session with access filters enabled
Symptoms
When trying to access the SC by using DSM and a set of verified credentials, an "Invalid Login Credentials" error is displayed on the login screen.
Example:
Cause
The blocked management access is caused by an IP access filter configured on the MC subsystem. Access filters can be created to selectively allow administrative access to a Storage Center based on IP address, user privilege level, or user name. When one or more access filters are defined, administrative connections that do not match an access filter are denied.
Resolution
If one encounters this issue, please contact Dell Technologies Technical Support and reference this Knowledge Base Article.
Internal Notes
Additional Notes on Symptoms:
NOTE: The "Invalid Login Credentials" message is not specific for this particular failure. Although it points to invalid credentials being used, many failure scenarios can display this particular error without revealing any clue about the underlaying failure. To discard other possibilities, activate the console debug log on both controllers and retry the login request.
When using the iDRAC, KVM, serial or remote SSH and activating log dispon debug on both controllers, a "CreateAPISession: Failed because IP x.x.x.x is blocked" error appears every time a login request takes place.
When reading the System Logs with WebCST, several "Login Session failed due to Access Denied via IP filter" messages can be observed.
Example:
04/22 02:29:08 AM httpd [error] [ 8047] : [80] : authenticate_user: [Basic] : [Admin] : [192.168.3.12] : [OK] 04/22 02:29:08 AM MC Login Session failed due to Access Denied via IP filter, username Admin from host 192.168.3.12 ... 04/22 02:29:09 AM httpd [error] [ 8047] : [80] : authenticate_user: [Basic] : [Admin] : [192.168.3.12] : [OK] 04/22 02:29:09 AM MC Login Session failed due to Access Denied via IP filter, username Admin from host 192.168.3.12 ...
Additional Notes on Cause:
The MC:AccessIPFilter table contains the current configured access filters. This table can be seen using WebCST by navigating to the System State section and selecting the proper Phone Home Date > MC > AccessIPFilter table. Using the CLI, the mc ipflt show command displays the same access filter table.
The quickest way to restore access is to delete all the configured filters from the table by using the mc ipflt delete command (from the iDRAC, KVM, serial or remote SSH). Once they are deleted, the management access should be restored. If there is a need to configure back new access filters, execute the following steps:
Expand the Dell Storage Manager menu, and then click Storage.
In the SC Series tab, select a Storage Center to open the Storage Center view.
In the Summary tab, click Settings. The Edit Storage Center Settings dialog box opens.
Click the IP Filtering tab.
Add the required access filter configuration.
DELL-Charles R
Social Media and Communities Professional Dell Technologies | Enterprise Support Services #IWork4Dell
Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!
DELL-Charles R
Moderator
•
4730 Posts
•
25476 Points
0
0
Posted January 27th, 2025 20:53
Hello,
This user posted these steps worked you may like to view:
How to reset password on Storage System Dell SCv3020
https://dell.to/3WAGHk4
If that does not work for you, you will need to contact Support directly and an engineer can work with you in a remote session. The forum is not capable of doing remote sessions.
DELL-Charles R
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!