Error: protocol_version SSL handshake failure in VNA ACI integration
search cancel

Error: protocol_version SSL handshake failure in VNA ACI integration

book

Article ID: 448205

calendar_today

Updated On:

Products

Network Observability Virtual Network Assurance

Issue/Introduction

DX NetOps Spectrum does not receive new alarms from Virtual Network Assurance (VNA) integrated with Cisco ACI. While a restart of OneClick (OC) makes current alarms visible, the live alarm feed remains frozen and no new events are processed.

Environment

  • DX NetOps Spectrum
  • DX NetOps Virtual Network Assurance (VNA)
  • Cisco ACI / APIC Controllers

Cause

TLS Mismatch: The VNA Wildfly instance has been manually configured to enforce TLS 1.3, which is incompatible with the supported protocols on the Cisco APIC controllers.

Resolution

  1. Log in to the VNA server as an administrator.
  2. Navigate to /opt/CA/VNA/wildfly/bin/.
  3. Edit standalone.conf.
  4. Locate and remove the following line: JAVA_OPTS="$JAVA_OPTS -Dhttps.protocols=TLSv1.3"
  5. Save the file.
  6. Restart the Wildfly service: systemctl stop wildfly systemctl start wildfly
Powered by Wolken Software