41.3 SSL VPN Not Reporting

If SSL VPN is not reporting, you must verify the status of JCC, SSL VPN server and restart them if they are down. If restarting any of these components do not work, reconfigure SSL VPN. If none of these work, then you must delete and reimport the SSL VPN server. This section has the following information:

41.3.1 Verifying and Restarting JCC

To check the status of JCC, enter the following command:

/etc/init.d/novell-jcc status.

If it is not running, enter the following command to restart jcc:

/etc/init.d/novell-jcc restart

41.3.2 Verifying and Restarting SSL VPN Server

To verify the status of SSLVPN server, enter the following command:

/etc/init.d/novell-sslvpn status

If any component is down, stop and start the SSL VPN server using the following commands:

novell-sslvpn stop novell-sslvpn start.

41.3.3 Reconfiguring SSL VPN

If JCC and SSL VPN are up and running but the problem persists, reconfigure SSL VPN as follows: verify if tomcat is up and running, enter the following command:

  1. Enter the following command to configure SSL VPN:

    sslvpnc -–configure

    Specify the following information:

    • IP address of the Administration Console

    • Public IP address of SSL VPN server

    • Private IP address of the SSL VPN server

  2. Enter the following command to start the SSL VPN server:

    /etc/init.d/novell-sslvpn start

  3. Enter the following command to restart server communications:

    /etc/init.d/novell-jcc restart

41.3.4 Deleting and Reimporting SSL VPN Server

If none of the above work, you must delete the SSL VPN server and reimport it to the administration control. Make sure that you have a backup of the config.xml and config.txt files, before you proceed with the following steps:

  1. In Administration Console, click SSL VPNs.

  2. Select the SSL VPN server that has the problem, then click Delete.

  3. Install the SSL VPN Gateway on a new server.

    Specify the IP address of Administration Console and the public and private addresses of the SSL VPN Gateway during installation.

    After installation, the SSL VPN Gateway is imported into the Administrator Console. This gateway does not have the configuration of the old SSL VPN gateway.

  4. In Administration Console, select Novell Access Manager > SSL VPN. Select the newly added SSL VPN server, then click Delete.

  5. Copy config.xml from the backup device to the following path:

    /etc/opt/novell/sslvpn/

  6. Copy config.txt from the backup device to the following path:

    /var/opt/novell/tomcat4/webapps/sslvpn/WEB-INF/

  7. As a root user, enter the following command to stop the SSL VPN server:

    /etc/init.d/novell-sslvpn stop

  8. Enter the following command to configure SSL VPN:

    sslvpnc -–configure

    Specify the following information:

    • IP address of the Administration Console

    • Public IP address of SSL VPN server

    • Private IP address of the SSL VPN server

  9. Enter the following command to start the SSL VPN server:

    /etc/init.d/novell-sslvpn start

  10. Enter the following command to restart server communications:

    /etc/init.d/novell-jcc restart

This imports the new SSL VPN server into the Administration Console with the configuration of the old SSL VPN server. If you had configured multiple private IP addresses for the old SSL VPN server, you can change them in the Administration Console.