Solved!
Go to SolutionX1052P switch crashes when uploading a config via https
Hi,
I want to upload a previously saved, unaltered configuration file into the X1052P switch (firmware: 3.0.0.99) via https. The switch always crashes and reboots when I do this.
How to reproduce:
Switch Management > File Update and Backup > Backup Files > Edit
Transfer File Name: Running configuration, Backup Method: HTTP
Save the file locally on your computer.
Switch Management > File Update and Backup > Update Firmware/Configuration
File Type: Configuration Download, Update Method: HTTP, Destination File Name: Running Configuration. Select the previously saved file as Source File Name.
Click Ok.
The transfer starts. After a few seconds the switch reboots.
This is output on the serial console:
21-Sep-2018 16:54:16 %SYSLOG-F-OSFATAL: FATAL ERROR: GOAH: ABORT DATA exception ***** FATAL ERROR ***** SW Version : 3.0.0.99 Version Date: 04-Sep-2018 Version Time: 13:03:59 Instruction 0x8417E8 Exception vector 0x10 Program state register 0x60000013 0x00841798 0x00327bd4 0x0030f96c 0x00311024 0x0031138c 0x002c4050 0x002b03bc 0x002b0b4c 0x002be254 0x002b6cc4 0x002b73bc 0x002bf6d8 0x002b3f00 0x002ba348 0x0016b3b8
The configuration itself seems to be ok: When I copy the config file onto an usb drive, plug it into the switch and use something like this on the cli:
copy usb://my-config-backup running-config
the configuration is applied successfully. So the problem seems to be in the handling of the config download via http/https.
The copy operation on the cli does not always succeed. It fails if there is a specific access-list configuration used in the configuration. If the configuration contains this part:
management access-list ssh_https permit service https vlan1 permit service ssh vlan1 permit ip-source 172.17.1.17 service snmp vlan1 deny exit management access-class ssh_https
copying the configuration files on the cli fails with
Copy: Error in configuration download Line: 26 Command: permit service https vlan1
When I remove the access-list part from the configuration file, copying on the cli works again. The crash shown above does not depend on these lines being in the active configuration or not. So this seems to be a separate issue, but also related to parsing configuration files.
Please take a look at both of these issues. Thanks.
I did some more testing:
The crashing seems to be independant of the browser used, I can reproduce it with Firefox, IE and Chrome.
But the crash only appears when uploading the config via HTTPS, not when using just HTTP.
The config file contains the certificate used for the HTTPS configuration. My guess is that uploading a new certificate while the HTTPS communication is still in progress causes the crash.
Please try if you can reproduce the crash via HTTPS.
Very good that you were able to reproduce it and took the steps to get it fixed, thank you.
Did you try to reproduce the second issue with the access-list in the config?
I currently have a workaround for the crash by using a network controllable virtual usb drive to copy the config onto the switches. But I do not have any kind of workaround for the issue with the access-list configuration.
So while a reproducible crash is definitively not good, the issue with the access-lists is currently the more pressing one for me.
gvegidy
18 Posts
2012
0
Posted February 28th, 2019 04:00
I can confirm that this problem is fixed with firmware 3.0.1.1