We have changed internet providers in a number of sites, but the ACC still reports the OLD public IP address.

Should this be updated automatically?
Is there something I need to do to get this to update?

Go to Management/Registration and then Edit of the deviceand press the GeoIP button. This will update the location and the IP.

Unfortuantly this didn't resolve the issue.

For example my UK office still shows a public IP address of 81.138.***.xx, the Wan address of the unit is actally 87.127.x.***

I've seen the same issue ... no idea on how to fix it either.

__________________
Convergent Information Security Solutions, LLC
Astaro Preferred Solution Partner

Just for "fun" I tried what Thorsten suggested again (ACC 2.100, several clients with "mismatched IPs" ASG 7.502, hardware appliances) ... the mismatch continues. At this point I'm not so sure it's not the ACC Agent daemon on the Astaro that's not "letting go" of the old IP it's reporting... pressing the GEOIP button does not make a difference.

__________________
Convergent Information Security Solutions, LLC
Astaro Preferred Solution Partner

Hi,

there are two issues.

1) GeoIP resolution servers

The previous/former server infrastructure for the GeoIP retrieval is currently unavailable and we have migrated the resolution facilities to the official V7 Up2Date servers. Alas, the ACC agent on the 7.502 Gateways is still using an outdated server list. This behavior should be fixed in 7.503 - apologies for that.

2) Perceived external IP

There might be a difference on what you might expect to get as a public IP and what the GeoIP lookup mechanism might yield. What you will get is the IP address which is perceived by the Astaro Up2Date server as the REMOTE_HOST for an HTTPS request originating from the Gateway. This address actually might be the external IP of the Gateway itself, but can also be the address of the last masquerading firewall or HTTP proxy in between your Gateway and the Up2Date server.

Workaround/Fixes:

Option 1) Wait for 7.503 and let the issue repair itself ...

Option 2) Trigger the GeoIP manually on each Gateway using the correct Up2Date servers. This is suprisingly easy:

# mv /etc/location /etc/location.backup
# iplocator.plx
# cat /etc/location (to see the lookup result)

The ACC agent should pickup the change automatically and reflect it back in the ACC.

Sorry for the inconvenience - this should be up and running within the next week(s).

Thanks and regards,
Henning

I noticed the lack of Public IP (shows 0.0.0.0) and Lat/Long in a new ACC and I am running 7.503 on my ASGs. Did this get fixed in 7.503? How long does the GeoIP button take to update ACC?

Hi,
7.503 was an emergency update to fix a licensing issue ONLY.

Barry

__________________
http://DealBert.net
Home & business end-user since v1.x

• ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  
• ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  
• ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
  Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
  Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb

My guess is the fixes that Henning refers to will be in 7.504 at this point.

__________________
Convergent Information Security Solutions, LLC
Astaro Preferred Solution Partner

Hi,

thanks guys, you are definitely right - the fix was postponed to 7.504 because of 7.503 becoming an emergency up2date.

Sorry for the confusion, I need some kind of tracking device which tells me whether I have stated that certain issues will be fixed in a certain release - there is no correlation between our bug tracking system and the UBB other than my failing memory ...

Here is some manual workaround for the time being:

• Console/SSH to the Gateway device in question
• Execute the following command as root:
• # iplocator.plx
• Wait a few seconds and check contents of /etc/location
• The new contents should be reflected within ACC shortly

Regards,
Henning

__________________
"Molest me not with this pocket calculator stuff."