Troubleshooting Site Activation Issues

Problem

Solution

The prerequisites to activate a site are as follows:

• Check the spoke connectivity to Internet.

• Check the firewall policies between the CPE device and the CSO. The hub or spoke must be able to communicate to CSO through ports 443 (activation), 444 (activation for small and medium deployments), 7804 (outbound-ssh), 3514(app-track logs), 514 (syslog), and 2216 (telemetry agent). See Deployment Guide

Problem

Solution

Do the following:

• Verify that your device can reach the Internet.

• Verify the date and time on the device.

• Verify that the DHCP server and the device are connected to the ge-0/0/0 port.

• Reboot the device.

Problem

Solution

If the site activation proces is stuck for more than 15 minutes, then do the following:

• Verify that your network firewall allows UDP ports 500 and 4500 for the SD-WAN site.

• Verify that your network firewall allows TCP port 7804 for the next-generation firewall site.

• Reboot the device.

Problem

Solution

Verify that the device is zeroized or running the factory-default configuration. If the device is pre-staged, then ensure that the configuration is not overlapping with the CSO stage-1 configuration. Reboot the device.

Problem

Solution

Verify the device connectivity to the Internet. Retry the failed job in CSO. Navigate to Monitor > Jobs, select the failed job, and click Retry Job.