TMS zl Management and Configuration Guide ST.1.1.100430

10-25
Troubleshooting
Troubleshooting the TMS zl Module in Routing Mode
■ Ensure that your management workstation is in a management-
access zone.
If the management workstation is not in a management-access zone, you
must either enable management access on its zone or create an access
policy to enable SSH, Telnet, or HTTPS access. Because you cannot access
the Web browser interface, you must enable management access or create
these policies from the TMS zl Module’s CLI. For example, to enable
management access for a zone, access the module’s CLI interface and
move to the global configuration context. Then, enter:
hostswitch(tms-module-C:config)# management zone
<zone>
■ Ensure that IPS is not blocking your management station’s traffic.
To determine if IPS is blocking your management station’s traffic, access
the host switch’s CLI and then move to the TMS zl Module’s CLI. Enter the
following command to display the log messages:
hostswitch(tms-module-C)# show logging local
You will see output similar to the following:
time="2009-04-30 11:56:16" severity=critical pri=1
fw=ProCurve-TMS-zl-Module id=fw_l2l3_attack
msg="ICM?: invalid echo request packet, packets
dropped" srczone=INTERNAL src=10.1.1.77
dstzone=INTERNAL dst=10.1.10.10 proto=ICMP icmptype=8
subfamid=icmppacketanomaly mtype=attack duplicate-
count=3 mid=644 icmpcode=9
. . .
You can also use the filter option to list only certain log messages (just as
you can in the TMS zl Module’s Web browser interface). For example, to
list only the log messages that contain “IPS” enter:
hostswitch(tms-module-C)# show logging local filter
search ips