EcoStruxure IT forum
Schneider Electric support forum about installation and configuration for DCIM including EcoStruxure IT Expert, IT Advisor, Data Center Expert, and NetBotz
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:41 PM . Last Modified: 2024-04-04 03:35 AM
Hello Support,
Good morning!
Currently i'm using the DCE 7.5 .ova file test product. I used to configured the server proxy to check the connection if DCE server that can connect or contact the updates.apc.com. However, I got an error message "The Http Test ha failed".
Then I try to access this https://updates.apc.com from my computer with an internet connection I got an error. 403 - Forbidden: Access is denied.
Is the link above still exists or need some steps in order to access it like:
Floro
(CID:133371418)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:41 PM . Last Modified: 2024-04-04 03:35 AM
Hi Floro,
Good day!
A DCE appliance may not be able to communicate with updates.apc.com due to strict network security from your side.
The alternative would be manually pulling the firmware catalogue file that can let you update the device's firmware without any internet connection. The instructions for this can be seen from the article from the link below:
https://www.schneider-electric.us/en/faqs/FA226042/
I hope this helps.
Kind regards,
Justine Chester
(CID:133371432)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:41 PM . Last Modified: 2024-04-04 03:35 AM
Hello Justine,
thank you very much for your explanation. However, I got little bit confused because you mention that strict on the network security from our side, this means from our corporate network policy, this one is clear for me.
But, using the Home internet or Mobile Data connection I could not even access this updates.apc.com and not using the corporate network. Same error I got forbidden to access.
I hope this one you can verify it also from your side.
the good points is I can download manually the DFF from APC.com and upload manually to DCE to update the firmware of Network management card of UPS.
Regards,
Floro
(CID:133371443)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:41 PM . Last Modified: 2024-04-04 03:35 AM
Hi Floro,
Thank you for your reply and for your feedback.
If you are using a home network and you are not able to update the APC devices using the apply firmware update feature on the DCE, it is possible that there could be something that is blocking the server's https and ftp access (see FA293307).
I have not tried updating the DCE server using mobile data, as the OVA file should be deployed on an ESXi server that usually has LAN connection (where attaching it to a 4G/3G modem is not typical).
By the way, I tried accessing https://updates.apc.com/ via web-browser and it also gave me a "403 - Forbidden: Access is denied" error (this error is expected via web browser), but the DCE client's "check updates" button was able to communicate with that site without any issues. The update server (updates.apc.com) can only be accessed by a DCE requesting the update files.
I think manually pulling the firmware catalogue file is a good alternative. If you wish to further investigate why the DCE is not able to fetch the catalogue from the update server it is worth confirming whether or not the https and ftp ports are blocked or not.
I hope this helps.
Kind regards,
Justine Chester
(CID:133371450)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:41 PM . Last Modified: 2024-04-04 03:35 AM
Hello Justine,
thank you for confirmation. to correct my explanation of using mobile data. I used mobile data is for verification of update.apc.com only from my mobile device to verify if I could get the same error for "Forbidden Access" but not using the mobile data for connection using DCE.
Our DCE now is connecting thru LAN and using network policy implement by our Telecom Team.
I would as the help of our Telecom team on how we could proceed on this if ever.
But the second option for me is fine to download manually the firmware catalogue.
Thanks again for your feedback.
Regards,
Floro
(CID:133371464)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:41 PM . Last Modified: 2024-04-04 03:34 AM
Hi Floro,
You are welcome and it is good to know that the DCE is now communicating with the update server.
As for your comment when having the forbidden access (403) error while browsing from your mobile device, since this is not how updates.apc.com should be accessed (DCE can only access the server via https/http and ftp as mentioned earlier), this cannot be used to verify or test connection to the update server.
I hope this is clear and have a nice day 🙂
Kind regards,
Justine Chester
(CID:133371470)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:42 PM . Last Modified: 2024-04-04 03:34 AM
Hello Justine,
One more question. What are the ports used for DCE in order to access this updates.apc.com.
Or what are the default ports that needs to allow into our Network policy or in the firewall, so that I can request it to our telecom team to allowed those port number.
Your support will much appreciated on this.
Regards,
Floro
(CID:133371482)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:42 PM . Last Modified: 2024-04-04 03:34 AM
Hi Floro,
The ports are 80 for http, 443 for https, and 21 for FTP. For the list of ports used by DCE, you can refer to the article from the link below:
https://www.schneider-electric.us/en/faqs/FA158328/
Kind regards,
Justine Chester
(CID:133371487)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:42 PM . Last Modified: 2024-04-04 03:34 AM
Dear floro masangkay,
Tell us, please, have you solved this question or not?
With respect.
(CID:134026530)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:42 PM . Last Modified: 2024-04-04 03:34 AM
Sorry for my late response yes it is already resolved and incN download the firmware kow.
regards,
floro
(CID:134026595)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:42 PM . Last Modified: 2024-04-04 03:34 AM
Ok, thanks for the good feedback 😀.
(CID:134026604)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 09:42 PM . Last Modified: 2023-10-22 04:12 AM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.