Loading...
Loading...
An attempt to initiate a secure shell (SSH) session from Avamar to the integrated Data Domain faiols: SSH to the Data Domain from Avamar fails (using any account such as sysadmin or ddboost): admin@test-avamar:~/#: ssh ddboostuser@dd-hostname-removed Output: ssh_exchange_identification: read: Connection reset by peer -- Or -- ssh_exchange_identification: Connection closed by remote host Notes: The failure occurs for any user. The failure only occurs from Avamar SSH sessions can be initiated from other locations within the network without issue. A connectivity test from Avamar to port 22 on the Data Domain reports no issues: telnet dd-hostname-removed 22 Trying 10.10.10.23... Connected to dd-hostname-removed. Escape character is '^]'. ^] telnet> q Connection closed.
Data Domain systems contain an adminaccess access list that can restrict certain protocols based on IP addresses or hostnames. If these restrictions are in place only the IP addresses or hostnames listed within the " Allowed Hosts " field can connect to the Data Domain using those protocols. If the Avamar hostname or IP address is not included it can cause access issues and also result in the Data Domain appearing unresponsive in the Avamar Administrator UI. Example 1: SSH is restricted to allow only the IP address 10.0.0.1. adminaccess show Service Enabled Allowed Hosts ------- ------- ------------- ssh yes 10.0.0.1 scp yes (same as ssh) telnet no 10.0.0.1 ftp no 10.0.0.1 ftps yes 10.0.0.1 http yes - https yes - ------- ------- ------------ Example 2: ssh access is limited to the three hosts testbox1, testbox2, and testbox3 adminaccess show Service Enabled Allowed Hosts ----------- ------- --------------------------- ssh yes testbox1.corp.dell.local testbox2.corp.dell.local testbox3.corp.dell.local scp no (same as ssh) ... web-service yes N/A ----------- ------- --------------------------- Example 3: A a configuration without any access list (any host can log in to the Data Domain using ssh) adminaccess show Service Enabled Allowed Hosts ------- ------- -------------- ssh yes -
Admin access must be configured to include Avamar's IP address or hostname into the allowed hosts. 1. Log in to the Data Domain with an admin account. 2. The admin access can be set back to the default using the following command: (This command resets the adminaccess ssh rules and allows ssh connections from any host.) adminaccess reset ssh Verify: adminaccess show Service Enabled Allowed Hosts ------- ------- ------------- ssh yes - scp yes (same as ssh) telnet no 10.0.0.1 ftp no 10.0.0.1 ftps yes 10.0.0.1 http yes - https yes - ------- ------- ------------- -- Or -- If the SSH access cannot be reset, allow explicit SSH access from the Avamar with the following command: adminaccess ssh add <Avamar IP Address or FQDN> Confirm that the admin access list has been updated correctly. adminaccess show Service Enabled Allowed Hosts ------- ------- --------------------------- ssh yes 10.0.0.1 avamar.company.com scp yes (same as ssh) telnet no 10.0.0.1 ftp yes 10.0.0.1 ftps no - http yes - https yes - ------- ------- --------------------------- -- Or -- Perform these steps using the Data Domain web UI. If the issue is still unresolved, review Avamar: Troubleshooting Data Domain Integration Errors in the Avamar Administrator UI (Resolution Path)
Click on a version to see all relevant bugs