Troubleshooting and Maintenance

Summary: OT/ICS › Security

Common Error Messages

Log Rotation:

• Automatic log rotation: 10MB per file, 3 backups
• Manual cleanup: Delete old log files if needed
• Location: /opt/connexGate/backend/logs/

License Validation:

• Automatic validation on startup
• Periodic validation (hourly)
• Manual validation: Reload license page

Configuration Backup:

• Regular backup of configuration files
• Backup before major changes
• Document network configuration

Certificate Renewal (if using SSL/TLS):

• SSL certificates: /opt/connexGate/ssl/cert.pem and key.pem
• MQTT certificates: /etc/connexgate/mqtt/
• Renew certificates before expiration
• Restart service after certificate update

Service Management:

bash sudo systemctl status connexgate

sudo systemctl start connexgate

sudo systemctl stop connexgate

sudo systemctl restart connexgate

sudo journalctl -u connexgate -f

Network Interface Verification:

bash ip addr show

ip link show

ping <target-ip>

"Proxy engine not available":

• Cause: Proxy model not enabled in license or engine not started
• Solution: Activate license with proxy model enabled, restart service

"NAT engine not available":

• Cause: NAT model not enabled in license or engine not started
• Solution: Activate license with NAT model enabled, restart service

"Maximum number of shadow servers reached":

• Cause: Device limit exceeded
• Solution: Delete unused devices or upgrade license

"Failed to connect to license server":

• Cause: License server unreachable or incorrect URL
• Solution: Verify license server URL, check network connectivity

"Device keys not found":

• Cause: Device keys not generated
• Solution: Generate device keys using generate_device_keys_by_serial.py

"Network interfaces validation failed":

• Cause: Network interfaces not configured or not up
• Solution: Verify interface configuration, ensure interfaces are up