<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>So we moved away from Rancid for something that is more PCI compliant. So far so good, until very recently we see this problem.</div>
<div><br>
</div>
<div>I have 26 juniper devices in a job in Orion NCM. For some reason, for the last week, the daily backup job reports that 8-10 devices were “unable to login” or “connection refused”. However, when I switch Orion NCM to use local Admin logins on the Junipers
versus TAC+ accounts, I see no errors. Something with the communication between the network devices and TAC+ isn’t playing nice together. </div>
<div><br>
</div>
<div>I’ve tried the following:</div>
<div><br>
</div>
<div>Increased the SSH Timeout settings on Orion to 120 seconds.</div>
<div>Decreased the # of concurrent connections from default 11 to 1.</div>
<div>Reinstalled Orion Job Engine + other tweaks on the Orion NCM side.</div>
<div>Tried only Juniper devices, or only Arista devices, or 8 instead of 27 devices = all had mixed failures.</div>
<div><br>
</div>
<div>None of the failures are consistent. Job 1 has 8/27 failures. Job 2 has 10/27 failures with some that failed in the first job passing in this one. Etc…</div>
<div><br>
</div>
<div>Remember, local NAS accounts setup in Orion work just fine – TAC+ isn’t even talked to when this happens.</div>
<div><br>
</div>
<div>Is there any tuning I can do to the TAC+ server to make sure its able to handle the connections? What debug log level should I be looking at to get the best information? I’ve tried 24, 60, and even the higher ones, but they’re too noisy. </div>
<div><br>
</div>
<div><br>
</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE">
<div><font color="#7f7f7f" face="Calibri,Arial,Helvetica,sans-serif"><span style="font-size: 16px;">—</span></font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px;">
<font color="#7f7f7f">Matt Almgren, Sr. Network Engineer</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px;">
<img type="image/png" src="cid:29988614-ECDA-44BA-8377-ABD3ACFBCD1C" style="-webkit-user-select: none;" width="155.250000" height="23.250000"></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px;">
<span style="color: rgb(127, 127, 127);">101 Lytton Avenue, Palo Alto, CA 94301</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px;">
<span style="color: rgb(127, 127, 127);">m: 408.499.9669</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px;">
<span style="color: rgb(127, 127, 127);">www.surveymonkey.com</span></div>
</div>
</div>
</body>
</html>