HM-NG: Delta configuration update not working ?

  • 2
  • Question
  • Updated 3 years ago
We have 28 AP230 ready to deploy. So far i have only 2 online for policy testing and tweaking.

One thing that really makes me crazy: Delta configuration update is NEVER working. When i go through "Configure / Network policies", modify small things "last updated on" ALWAYS gives me "Update failed" in red.

The only way to get it working all the time is "Monitor / Devices / Complete configuration update" and then of course it reboots after update.

The problem is that radius cache e.t.c. are emptied and all users have to logon again. This is a no go once deployed in production .... 

This was since the first HM-NG version and after two updates (online version) it is still the case. So i start wondering if i am the only one experiencing this ?
Photo of Foxi352

Foxi352

  • 7 Posts
  • 1 Reply Like

Posted 3 years ago

  • 2
Photo of Chad Bryan

Chad Bryan

  • 8 Posts
  • 0 Reply Likes
I'm having the exact same issue. Any updates?
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Hi Chad and Foxi352,

You should open a support case with your point of support for these issues.

Cheers,

Nick
Photo of John Wilhite

John Wilhite

  • 3 Posts
  • 0 Reply Likes
For me the Deltas were a crap shoot, I would have to run it 3-4 times before it would show anything even being done.  Then sometimes I would get error on the monitor tab but the AP was actually updated, other times I could never get it to take it without a full config.  

Since the latest update to NG a few weeks ago I can't even get the full config push to work reliably.  Very frustrating.  I've spent hours with support trying to get the Delta working to finally tell them, I don't have time to keep working on it, you see the issue is happening, fix it and let me know when, I will do Full Configs until then.  Well crap now that isn't working.  Guess it is time for another support case.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
There is a known issue that breaks configuration generation if Traffic Filters have been modified under Configure > Common Objects > Security > Traffic Filters.

You can correct this by changing the traffic filters elsewhere.

For example, for each SSID, under Configure > Network Policies > Wireless Connectivity > {SSID} > Optional Settings > Customize (Optional Settings), change what is configured, save it, go back in again, change it to what is desired, save it.
Photo of John Wilhite

John Wilhite

  • 3 Posts
  • 0 Reply Likes
When I edited the firewall policy (specifically an IP Allow line) it was through the SSID area and when I did this it was for another Network Policy entirely.  I couldn't figure out why it would cause problems on this network, turns out the firewall policy was shared with the other network policy.  As soon as I removed that shared policy it all updated just fine.  So there is something wrong with having a shared firewall policy area as well.  Thanks for leading down the right path Nick.
Photo of John Wilhite

John Wilhite

  • 3 Posts
  • 0 Reply Likes
Correction that was a shared "User Profile", which contains the Firewall rules.  

Just to note... something that might be related when I was originally trying to edit that policy to see if resaving it would work I kept getting an error saying I needed a Unique Vlan Name for this network.  It might have something to do with the shared VLAN settings?  
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Hi Chad and Foxi352,

I am sorry that you experienced the problem. We consider this is a Customer Found Defect and it will be handled with priority if you could open a support case with your point of support, like Nick suggested. 

Best regards,
Fan
Photo of Foxi352

Foxi352

  • 7 Posts
  • 1 Reply Like
Thank you Fan, will open a ticket. But since you monitor this thread i have another question:

I did some feedbacks with the "How are we doing" feedback button on the middle-right in HMNG. Are they even considered ? I ask because i already mentioned a few bugs in HMNG with this system some month ago and never received feedback, but the errors weren't fixed either with the last two updates. The bug we are actually talking about for example was also sent via that feedback system about 2 month ago.

So i wonder if i should continue sending bugs i find via the integrated feedback system or if that is a waste of time and that i should always open support cases each time i find something ?

Regards,

Serge
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
As a rule of thumb, if it is a service impacting issue, open a support case. If it is a feature request or a minor niggle, leave feedback in HM-NG. These are considered but as with anything there's a finite development resource and opportunity costs therefore.
(Edited)
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Thanks a lot, Nick. Your advice is very correct!

Foxi352, you asked a very important question that's dear to me. I would like to share my perspective. 

Whether to open a support ticket or submit feedback via the Feedback tool in GUI, the difference also lies in the processes. Support cases are handled by an established/contract based customer support process. Our support has SLA with customers. Once a ticket is entered into the system, the support machine is going to handle it based on standard process.

On the other hand, feedback via the Feedback button on GUI is relatively a new process. I am currently the person responsible for reviewing the feedback weekly, assigning action owners, and generating statistics report to notify internal teams about outstanding issues and trends. Occasionally, I may reach out to the submitter to clarify questions or provide update. This manual process is not scalable at all, as the user bases of HMNG quickly increases. I am evaluating a better user feedback management solution. If any of you have any good recommendation on a user feedback management solution, email me separately: flin@aerohive.com. Many thanks in advance. 

Even you submitted a support ticket, it's still meaningful to submit a piece of feedback via the Feedback button. This helps keep issues in a single place and allows themes to emerge from similar feedbacks. Ideally, if we had a good user feedback management system in place, it should take all kinds of feedback, be it defect, feature request, usability concerns, etc..

P.S. Use the screen capture function to minimize your typing.
Caveat: There is bug in screen capture that blocks capturing the bottom half of the screen. You may have to scroll to the bottom half first. I will follow up on getting it fixed. 

Best regards,
Fan Lin
flin@aerohive.com