NMC error: "The maximum number of web connections has been reached"

[BillP]

Hi Team!

I need your support to troubleshoot the issue with AP9635CH card installed on Symmetra PX250, firmware version is 6.3.2.

Time to time the customer have "The maximum number of web connections has been reached" error when connecting to web interface.

I know that it happens sometime when user dont use "Log Off" button and we recommend to login via Telnet or SSH to fix the problem.

In this case customer can not connect via telnet because of security policy and they use SSH.

But when NMC is in "maximum connections" error state, user can not login via SSH. They get "Server unexpectedly closed network connection" error from SSH client (they use Putty), so there is no way to connect to NMC remotely and the customer need to go to DC and reboot NMC manually.

After reboot both web and SSH connections works fine, but after some time the issue repeats again.

Can we troubleshoot it?

How to check NMC state, number of connections and so on. There is no such info in user interface. Does it have something like factory test mode?

[voidstar_apc]

Hi Valentin,

Log into the web interface and go to control->security->Session Management.

Alternatively change the web page from "home.htm" (or whatever it happens to be) to "sessman.htm".

[BillP]

Thank you for reply, but how can it help if NMC become unavailable remotely?

[B-DoubleE_apc]

Hi Valentin,

How long does it take for the card to report "max number of connections reached"? It might be worth it to reset the card as you've been doing one more time, then perhaps checking the "sessions" section that Voidstar mentioned every few days to see if there indeed are active sessions that have not been closed out properly. From that tab you can see which IP's are the offenders that have active web sessions to the card.

I would also make sure that under "Configuration --> Security --> Session Management", make sure that allow concurrent logins is set to "enabled".

[voidstar_apc · Accepted solution]

Hi Valentin,

In addition to what Matt said, I find it hard to reach the session limit because sessions auto-logout due to inactivity. The maximum you can set is to time out after an hour of inactivity. Either there's a bug causing your sessions not to logout, there's something tickling multiple concurrent sessions, or perhaps the NMC's run low on memory.

So perhaps the sessions page can give an indicator on how you're getting so many concurrent sessions and we can brainstorm solutions.

SNMP doesn't require a session so you could use that to reboot the NMC.

.iso.org.dod.internet.private.enterprises.apc.apcmgmt.mcontrol.mcontrolRestartAgent

(.1.3.6.1.4.1.318.2.2.1.0)

[BillP]

Thank you guys!

I'll try to investigate this.

[BillP · Accepted solution]

Hi Valentin,

Whilst logging into an NMC and the error “Maximum Connections Reached” is seen this means there is more than 1 person logged into the NMC.

NMC1 (AP9617 – AP9618 – AP9619)

NMC1 only allows one person at a time to log into a network management card. If this error is seen, the other user must log out before the second user can log into the  web console.

Using Telnet would remove the other user from the session.

NMC2 (AP9630 – AP9631 – AP9635)

The NMC2 will allow multiple users to log into the network management card, only if configured to do so.

Configuration > Security > Session Management (Allow Concurrent Logins)

daEHQ0zZT2Zmo4YxmOdp0w%3D%3D.png

If the other user isn’t apparent and the card is not configured for multiple users you can press the reset on the card for a short time (1 - 2 seconds) this will remove ALL users. They will then need to log in again.

Kind Regards, Rich…