MeshAgents went offline. Cannot re-add or reestablish communication outside server subnet. about meshcentral HOT 9 OPEN

right so meshcentral is running in LAN mode, because you havent set a cert name as its commented _cert
so the first thing to check is ur screenshot shows u have antivirus installed cynet antivirus, check if the antivirus has a firewall enabled, and make sure the meshagent is allowed through the firewall.
when meshcentral is run in LAN mode, each device sends a BROADCAST packet over the network which meshcentral will pick up and reply back

from meshcentral.

I removed CYNET from the machine meshcentral is hosted on as well as from a remote machine with the mesh agent on it and it did not seem to fix the issue. Is there a service name I should be looking for? C:\meshcentral\WinService\daemon\meshcentral.exe is listed on the host machine as the service.

I did further test this on a machine that is not and has never been protected by CYNET and was still unable to communicate with the machine via meshagent but can ping and RDP into it.

Thanks.

from meshcentral.

yes thats the daemon to run the service,
you might need to add node.exe also into the allowed list on your meshcentral server
you can also add meshagent.exe into the firewall rules too on the local machines.
can any of the remote machines goto the web ui?
https://IPOFSERVER ?
also is the config.json above the same as yours?
(you can get urs by going into the web ui then my server then show server configuration

from meshcentral.

OK. I will check with our system manager on adding exceptions for node.exe and meshagent.exe

All of the unresponsive remote machines I have tested can reach the MC server address without issue.

Here is the current output from the show server configuration:

{
"$schema": "https://raw.githubusercontent.com/Ylianst/MeshCentral/master/meshcentral-config-schema.json",
"comment1": "This is a simple configuration file, all values and sections that start with underscore (_) are ignored. Edit a section and remove the _ in front of the name. Refer to the user's guide for details.",
"comment2": "See node_modules/meshcentral/sample-config-advanced.json for a more advanced example.",
"settings": {
"_cert": "myserver.mydomain.com",
"_WANonly": true,
"LANonly": true,
"_sessionKey": "MyReallySecretPassword1",
"_port": 443,
"_aliasPort": 443,
"_redirPort": 80,
"_redirAliasPort": 80
},
"domains": {
"": {
"_title": "MyServer",
"_title2": "Servername",
"_minify": true,
"_newAccounts": true,
"_userNameIsEmail": true
}
},
"_letsencrypt": {
"comment": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
"email": "[email protected]",
"names": "myserver.mydomain.com",
"production": false
}
}

Thanks

from meshcentral.

If each node can see the web interface then it shouod be OK, so it must be something else.

If u run the meshagent.exe on a node, u should get a panel, if u click the info button it should show more information. Can u share a screenshot of it?

Also I would also check the command line console for the meshcentral and see if the is any errors being shown
Or
Click the show server errors in the Web ui, and see if any errors are being shown?

from meshcentral.

As a side note, I set up another instance of MC on another machine which is located on the same network as my host I am having issues with. I was able to add and connect machines across all subnets without issue. That seems to confirm that something is wrong with my MC instance an it is not related to antivirus, firewalls or security.

I really appreciate your time on this.

Thanks!

from meshcentral.

dont run 2 meshcentral instances at the same time, this will confuse the agents!!
but yes if you where able to create another instance of meshcentral and install the agents on that server ok and they all connect and last reboots too, then i think the must be a weird issue/firewall issue with ur old server?

from meshcentral.

Ok. So, no further investigation at this time is needed it sounds like.

Is there any way to get my existing agents to respond to a new instance of MC?

Thanks.

from meshcentral.

Sadly this is only possible if u have setup the the machines with a dns name.

As with a dns name, u would just point it to the new vm ip, copy over meshcentral-data and away u go.

But u could try doing that as ur only using local?

Copy the whole meshcentral-data from old to new.
Stop old, start new, see if they all come bk online?

from meshcentral.