IBM Support

MustGather: Collecting data on IBM DataPower Gateway Appliance for networking and connectivity problems

Question & Answer


Question

Collect the following MustGather information to help IBM Support troubleshoot networking and connectivity problems on IBM  DataPower Gateway Appliances.

Answer

The following information describes the documentation needed by IBM support to investigate this problem scenario. Gather as much information listed in this document as possible. Gathering all this information places IBM Support in a much better position with a higher probability of debugging the problem in less time.

A. Describing the Problem:

  1. Document the current symptoms including messages, error codes or unexpected results.
  2. Document the steps leading up to the problem.
  3. Collect all IP addresses and ports involved in the transaction. This will include the client IP address, the IP address and port that the Front Side Handler is listening on, and the IP address and port that DataPower connects to on the Backside.
  4. Document any changes made to DataPower, the network, and other equipment involved in the transaction.
  5. If the problem involves SSL/TLS encrypted traffic, review the following:  Mustgather: Collecting data for TLS problems on IBM DataPower Gateway Appliance
  6. If the problem involves complete network connectivity failure, review the following :   MustGather Collecting data: DataPower Gateway Appliances: Ethernet port test 
  7. If the problem involves the message "Backside header failed to parse due to: Failed to establish a backside connection", review the following: How to troubleshoot the error "Failed to process response headers"


B. Collecting information on the Problem:

1. Set log level to debug

WebGUI -> Control Panel -> Troubleshooting -> Logging section -> Set Log Level to "debug"
2. Start Packet Capture across all interfaces to capture the issue
*This must be done from the default domain.
WebGUI-> Control Panel -> Troubleshooting -> 'Packet Capture' section
   Interface Type: All Interfaces
   Mode: Continuous
   Max Size: 25000
   Max Packet Size: 9000
   Expression Filter:  host ####  (where #### is the hostname or IP address of the affected frontend client or backend server)
   Log SSL Key = ON
   Click Start Packet Capture


3. Recreate the Problem:

Make sure to copy the full error message including the timestamp.
4. Stop the Packet Capture:

Control Panel -> Troubleshooting -> 'Stop packet capture' section
  Interface Type=  All Interfaces
  click 'Stop Packet Capture'
5. Generate error-report
WebGUI -> Control Panel -> Troubleshooting -> Reporting Section -> click 'Generate Error Report'
6. Download error-report, packet capture and sslkeyfile:
      temporary:///error-report
      temporary:///capture.pcap
      logtemp:///sslkeyfile.log
 

 7. Send the files to IBM DataPower Gateway Support:

Upload the files to the Datapower support case -
https://www.secure.ecurep.ibm.com/app/upload_sf

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"ARM Category":[{"code":"a8m50000000CdsKAAS","label":"DataPower-\u003ENetwork (NT)-\u003EConnectivity"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
11 November 2022

UID

swg21407324