Not able to access ISG proxy SSH directly but via ISG CLI attach-console command it works

Products

• SSP
• ISG Proxy

Issue/Introduction

ISG proxy application is hosted on SSP (Symantec Security Platform).

For example on ISG proxy 3:0 interface 10.1.1.1/24 IP address was configured.

Able to take proxy application CLI access from ISG CLI using attach-console command and from proxy CLI in show interface 3:0 command output it shows interface is up.

When tried to take SSH access of proxy using 3:0 interface IP 10.1.1.1 it doesn't work.

Environment

ISG proxy application hosted on SSP appliance.

Cause

ISG CLI verified physical status of NIC 3:0 by running show hardware-configuration command and found that interface 3:0 was not UP (i.e. link speed: with no link).

Resolution

From ISG CLI verified physical status of NICs by running show hardware-configuration command from enable mode and confirm the physical interface is up or not.

Important note:

The physical link state of the SSP appliance is not mirrored to the running applications. Specifically, applications running on ISG always show every interface as being UP, even if the physical interface is DOWN, and the applications' reporting of link speed is independent of the physically-set link speed on the SSP appliance.

Additional Information

For more information refer techdocs link About Networking on ISG