6.1 Getting Started with Troubleshooting

You should begin troubleshooting issues with Corente Cloud Services Exchange by checking the status of your Locations in App Net Manager.

Do the following:

Log in to App Net Manager.
Expand the Locations folder in the domain directory.
Select the Location that you need to troubleshoot.

App Net Manager displays a detailed view of the Location. This view is displayed as Partners of Location to the right of the domain directory. You can view the status of the Location as well as the tunnels between other Locations. Icons indicate the status of the Location and colored lines indicate the status of each tunnel.

You should identify the status of the Location and each tunnel and then take the appropriate action, as described in the following tables:

Table 6.1 Location Icons

Meaning	Explanation	Action
Alarm	A yellow triangle on the lower right side of an icon indicates that the Corente Services Gateway is generating an alarm. This feature appears in conjunction with a red or black icon, indicating an alarm has been generated based upon the Corente Services Gateway status.	You can view the active alarms being generated by a Corente Services Gateway by right-clicking the Corente Services Gateway icon and highlighting Alarms in the menu that appears. Select an alarm number to view the details of that active alarm, which will indicate what sort of problem the Corente Services Gateway is experiencing. This problem is also indicated by the color of the icon or tunnel, but often the alarm notification will pinpoint a specific connectivity or policy issue to troubleshoot.
Disconnected	A red square indicates that the Corente Services Gateway has suddenly become disconnected from the SCP, without being powered off safely.	Do the following: Ensure the Corente Services Gateway is powered on and that the service has started running. Ensure that all Ethernet cables are plugged in and that the indicator lights on the network interfaces are flashing to show that they are active. If the network interfaces do not indicate that they are active, you should replace the cables between the Corente Services Gateway and the Internet Access Device (IAD) and between the Corente Services Gateway and the LAN, if appropriate.
Inactive	A yellow square indicates that the Corente Services Gateway is currently inactive on the Corente Services network, but has been powered off or is being rebooted safely.	Do the following: Ensure the Corente Services Gateway is powered on and that the service has started running. Ensure that all Ethernet cables are plugged in and that the indicator lights on the network interfaces are flashing to show that they are active. If the network interfaces do not indicate that they are active, you should replace the cables between the Corente Services Gateway and the IAD and between the Corente Services Gateway and the LAN, if appropriate.
Denied	A black square indicates that this site is invalid. The Corente Services Gateway at this site will be unable to connect to the SCP.	If the Corente Services Gateway is denied, contact Oracle Support in order to determine the reason.
Firewalled	A white square with a circular red border means that the Corente Services Gateway appears to be operating behind a firewall that restricts access to TCP port 551.	Any third-party firewall devices between the Internet and the Corente Services Gateway must have port 551 opened to allow both inbound and outbound connections to/from the Corente Services Gateway or the service will not be able to function.
Active	A green square indicates that the Corente Services Gateway is functional and has a secure connection with the SCP. It is currently active on the Corente Services network.	If users are experiencing connectivity issues, you should evaluate policy provisioning for the affected users. If users are experiencing slow or degraded performance, you should troubleshoot performance issues.

Table 6.2 Tunnel Colors

Meaning	Explanation	Action
Alert	A red line indicates that a problem has occurred with the tunnel.	Do the following: Ensure the Corente Services Gateway is powered on and that the service has started running. Ensure that all Ethernet cables are plugged in and that the indicator lights on the network interfaces are flashing to show that they are active. If the network interfaces do not indicate that they are active, you should replace the cables between the Corente Services Gateway and the IAD and between the Corente Services Gateway and the LAN, if appropriate.
Down	A yellow line indicates that the tunnel is down. This is most likely due to the fact that one of the partner Corente Services Gateways is inactive on the Corente Services network, but has been powered off or is being rebooted safely.	Do the following: Ensure the Corente Services Gateway is powered on and that the service has started running. Ensure that all Ethernet cables are plugged in and that the indicator lights on the network interfaces are flashing to show that they are active. If the network interfaces do not indicate that they are active, you should replace the cables between the Corente Services Gateway and the IAD and between the Corente Services Gateway and the LAN, if appropriate.
Pending	A pink line indicates that the tunnel is currently in the process of being brought up or being brought down.	You should wait a few minutes to see what color the line becomes before beginning diagnosis. If the color does not change, escalate the issue to Oracle Support for diagnosis.
Configuration Alert	A black line indicates that the Corente Services Gateway partners are able to communicate with each other. However, the User Groups that each partner is exporting to the other contain conflicting address spaces.	When connecting sites with a Corente Services Gateway, the address ranges used at these sites must not overlap. Unique IP address spaces must be used at each site. To resolve the address conflict, you should use one of the Corente Services NAT options to remap addresses at either site to new addresses for the connection: Outbound NAT is enabled on a local User Group so that when the User Group is made visible to remote partners, the addresses in that User Group are remapped to a specified subnet. Inbound NAT is enabled on a Corente Services Gateway partner so that when the partner’s User Group is made visible to the local Corente Services Gateway, the User Group is remapped to a specified subnet. Auto Resolve NAT is enabled between partners so that if the addresses in the User Groups of the partners ever overlap, each range in the User Groups is automatically remapped to another subnet.
Active	A green line indicates that the tunnel between the site and your hosting center is active.	If users are experiencing connectivity issues, you should evaluate policy provisioning for the affected users. If users are experiencing slow or degraded performance, you should troubleshoot performance issues.