Error when try to connect N1000 to VC

harry.yang84 · ‎06-03-2009

Hi guys,

I got an error when i try to establish svs connection between n1000 and vc.

n1000v-test(config-svs-conn)# show svs connections

connection VC:
    ip address: 10.0.0.166
    protocol: vmware-vim https
    datacenter name: Calgary
    DVS uuid: -
    config status: Disabled
    operational status: Disconnected
n1000v-test(config-svs-conn)# connect
ERROR: [VMWARE-VIM] Cannot complete client certificate validation.

I was able to register the n1000 plug-in, no problem...

any idea?

Thanks,

Harry

sudutha · ‎06-03-2009

Hi Harry,

Can you please execute the command "show vms internal event-history errors" on VSM and get the ouptut? And also can you let us know the versions of the VSM, vSphere client and the vCenter Server that you are running?

Thanks,

Sundeep

harry.yang84 · ‎06-04-2009

Hi Sundeep,

Thanks for the prompt replp, and here is the output i get from event-history errors:

1) Event:E_DEBUG, length:132, at 666413 usecs after Wed Jun 3 21:33:04 2009
[102] convert_soap_fault_to_err(1175): SOAP 1.1 fault: "":ServerFaultCode [V
MWARE-VIM] Cannot complete client certificate validation.

2) Event:E_DEBUG, length:72, at 189812 usecs after Wed Jun 3 21:32:51 2009
[102] vms_print_conn_info_cli(383): Failed to read the DVS UUID from pss

3) Event:E_DEBUG, length:132, at 497442 usecs after Wed Jun 3 21:18:45 2009
[102] convert_soap_fault_to_err(1175): SOAP 1.1 fault: "":ServerFaultCode [V
MWARE-VIM] Cannot complete client certificate validation.

4) Event:E_DEBUG, length:72, at 345235 usecs after Wed Jun 3 21:12:27 2009
[102] vms_print_conn_info_cli(383): Failed to read the DVS UUID from pss

5) Event:E_DEBUG, length:132, at 850579 usecs after Wed Jun 3 21:11:29 2009
[102] convert_soap_fault_to_err(1175): SOAP 1.1 fault: "":ServerFaultCode [V
MWARE-VIM] Cannot complete client certificate validation.

6) Event:E_DEBUG, length:132, at 925866 usecs after Wed Jun 3 21:11:20 2009
[102] convert_soap_fault_to_err(1175): SOAP 1.1 fault: "":ServerFaultCode [V
MWARE-VIM] Cannot complete client certificate validation.

7) Event:E_DEBUG, length:72, at 661187 usecs after Wed Jun 3 21:06:54 2009
[102] vms_print_conn_info_cli(383): Failed to read the DVS UUID from pss

8) Event:E_DEBUG, length:116, at 760594 usecs after Wed May 27 13:42:38 2009
[102] vms_get_subject_from_certificate(2215): unable to open /bootflash/cisc
o_nexus_1000v_certificate.pem for reading

Version of n1000:

     Software
loader:    version 1.2(2) [last: image booted through mgmt0]
kickstart: version 4.0(1) [build 4.0(1a)S1(0.149)]
system:    version 4.0(1) [build 4.0(1a)S1(0.149)]
kickstart image file is: [not present on supervisor]

kickstart compile time: 11/19/2008 1:00:00
system image file is: bootflash:/nexus-1000v-mz.4.0.1a.S1.0.149.bin
system compile time: 11/19/2008 1:00:00 [01/27/2009 09:45:34]

Version of VC:

version 4.0.0 build 162856

Version of VSphere

version 4.0.0 build 162856

Version of ESX host

4.0.0, 164009

Thanks for the support, i really appreciate this.

Harry

dcasteli · ‎06-04-2009

Hi Harry

Looks like you have the Beta version of VSM ( bootflash:/nexus-1000v-mz.4.0.1a.S1.0.149.bin).Go ahead and download the FCS version of VSM (nexus-1000v-mz.4.0.4.SV1.1.bin) and you should be all set.The one which you have is not comaptible with the ESX/VC build 164009/162856.

Let us know if you still have issues connecting to the VC.

Thanks

Deepak

harry.yang84 · ‎06-04-2009

Thanks for the information.

Do I need to purchase a prod license to download 4.0.4? or it is something that I can download for free?

do you happen to have a link for that image???

dcasteli · ‎06-04-2009

You can download the 60-day Eval license from the below link:

http://www.cisco.com/en/US/products/ps9902/index.html

Thanks

Deepak

harry.yang84 · ‎06-04-2009

this is fantastic!!

Thanks a lot guys.

mhasabal · ‎06-23-2010

Hello sudutha

i got the same error but i am running the latest version

N1000vUCS# sh ver

Cisco Nexus Operating System (NX-OS) Software

TAC support: http://www.cisco.com/tac

The copyrights to certain works contained in this software are

owned by other third parties and used and distributed under

license. Certain components of this software are licensed under

the GNU General Public License (GPL) version 2.0 or the GNU

Lesser General Public License (LGPL) Version 2.1. A copy of each

such license is available at

http://www.opensource.org/licenses/gpl-2.0.php and

http://www.opensource.org/licenses/lgpl-2.1.php

Software

loader: version unavailable [last: image booted through mgmt0]

kickstart: version 4.0(4)SV1(3)

system: version 4.0(4)SV1(3)

kickstart image file is:

kickstart compile time: 4/26/2010 16:00:00

system image file is: bootflash:/nexus-1000v-mz.4.0.4.SV1.3.bin

system compile time: 4/26/2010 16:00:00 [04/27/2010 10:21:17]

Hardware

Cisco Nexus 1000V Chassis ("Virtual Supervisor Module")

Intel(R) Xeon(R) CPU with 2075028 kB of memory.

Processor Board ID T5056AA2935

Device name: N1000vUCS

bootflash: 1557496 kB

Kernel uptime is 0 day(s), 2 hour(s), 4 minute(s), 43 second(s)

plugin

Core Plugin, Ethernet Plugin

N1000vUCS# sh run

version 4.0(4)SV1(3)

username admin password 5 $1$jMe7RLHo$4mZty6nJu1S8ttp/aVo3I/ role network-admin

ssh key rsa 2048

ip domain-lookup

ip host N1000vUCS 10.1.4.20

kernel core target 0.0.0.0

kernel core limit 1

system default switchport

snmp-server user admin network-admin auth md5 0x98a5eb422ff1995ab6f804e37f11bdcd priv 0x98a5eb422ff1995ab6f804e37f11bdcd localizedke

y

snmp-server enable traps license

vrf context management

ip route 0.0.0.0/0 10.1.4.1

hostname N1000vUCS

vlan 1

vdc N1000vUCS id 1

limit-resource vlan minimum 16 maximum 513

limit-resource monitor-session minimum 0 maximum 64

limit-resource vrf minimum 16 maximum 8192

limit-resource port-channel minimum 0 maximum 256

limit-resource u4route-mem minimum 32 maximum 80

limit-resource u6route-mem minimum 16 maximum 48

interface mgmt0

ip address 10.1.4.20/24

interface control0

boot kickstart bootflash:/nexus-1000v-kickstart-mz.4.0.4.SV1.3.bin sup-1

boot system bootflash:/nexus-1000v-mz.4.0.4.SV1.3.bin sup-1

boot kickstart bootflash:/nexus-1000v-kickstart-mz.4.0.4.SV1.3.bin sup-2

boot system bootflash:/nexus-1000v-mz.4.0.4.SV1.3.bin sup-2

svs-domain

domain id 1

control vlan 4

packet vlan 4

svs mode L2

svs connection vcenter

protocol vmware-vim

remote ip address 10.1.4.29 port 80

vmware dvs datacenter-name NY

N1000vUCS# show vms internal event-history error

1) Event:E_DEBUG, length:134, at 121616 usecs after Thu Apr 26 23:23:46 2001

[102] convert_soap_fault_to_err(1453): SOAP 1.1 fault: "":ServerFaultCode [VMWARE-VIM] Extension key was not registered before i

ts use.

thank you