|
| 1 | +--- |
| 2 | +title: Known issues for Azure Modeling and Simulation Workbench |
| 3 | +description: "Troubleshooting guide for known issues on Azure Modeling and Simulation Workbench." |
| 4 | +author: yousefi-msft |
| 5 | +ms.author: yousefi |
| 6 | +ms.service: modeling-simulation-workbench |
| 7 | +ms.topic: troubleshooting-known-issue |
| 8 | +ms.date: 09/29/2024 |
| 9 | + |
| 10 | +#customer intent: As a user, I want to troubleshoot and understand known issues with Azure Modeling and Simulation Workbench. |
| 11 | + |
| 12 | +--- |
| 13 | + |
| 14 | +# Known issues: Azure Modeling and Simulation Workbench |
| 15 | + |
| 16 | +The Modeling and Simulation Workbench is a secure, cloud-based platform for collaborative engineering, design, and simulation workloads that require security and confidentiality. The Workbench provides isolation for separate enterprises, allowing each to bring in code, data, or applications and apply them to a shared environment without exposing confidential intellectual property. |
| 17 | + |
| 18 | +This Known Issues guide provides troubleshooting and advisory information for resolving or acknowledging issues to be addressed. Where applicable, workaround or mitigation steps are provided. |
| 19 | + |
| 20 | +## EDA license upload failures on server name |
| 21 | + |
| 22 | +When uploading Electronic Design Automation (EDA) license files with server names that contain a dash ("-") symbol, the chamber license file server fails to process the file. For some license files, the `SERVER` line server name isn't being parsed correctly. The parser fails to tokenize this line in order to reformat for the chamber license server environment. |
| 23 | + |
| 24 | +### Troubleshooting steps |
| 25 | + |
| 26 | +If your license server has any dash ("-") characters in the name and fails when uploading a license file, this issue might be present for your release. Replace the server name with any single word placeholder using only alphanumeric characters (A-Z, a-z, 0-9) and no special characters or "-". For example if your `SERVER` line looks like this: |
| 27 | + |
| 28 | +```INI |
| 29 | +SERVER license-server-01 6045BDEB339C 1717 |
| 30 | +``` |
| 31 | + |
| 32 | +Replace the license server name to a name without dashes. The name is irrelevant as the license server transforms whatever is in the server position with the correctly formatted name. |
| 33 | + |
| 34 | +```INI |
| 35 | +SERVER serverplaceholder 6045BDEB339C 1717 |
| 36 | +``` |
| 37 | + |
| 38 | +## Synopsys license files upload failures due to missing port numbers |
| 39 | + |
| 40 | +Certain Synopsys EDA license files fail when uploaded to the Modeling and Simulation Workbench chamber license service without a port number. |
| 41 | + |
| 42 | +### Troubleshooting steps |
| 43 | + |
| 44 | +A Synopsys license file issued without a port number on the `VENDOR` line won't successfully upload unless edited by hand to include the port number. The port number can be found on the chamber license server overview page. |
| 45 | + |
| 46 | +A license file issued without a port number on the `VENDOR` line is shown. |
| 47 | + |
| 48 | +```INI |
| 49 | +VENDOR snpslmd /path/to/snpslmd |
| 50 | +``` |
| 51 | + |
| 52 | +Add the license server port to the end of the `VENDOR` line. You don't need to update the tool file path, indicated in the example as */path/to/snpslmd* or any other content. |
| 53 | + |
| 54 | +```INI |
| 55 | +VENDOR snpslmd /path/to/snpslmd 27021 |
| 56 | +``` |
| 57 | + |
| 58 | +## Users on public IP connector with IP on allowlist can't access workbench desktop or data pipeline |
| 59 | + |
| 60 | +A chamber with a public IP connector configured to allow users who's IP is listed after the first entry of the allowlist can't access the chamber either through the desktop or data pipeline using AzCopy. If the allowlist on a public IP connector contains overlapping networks, in some instances the preprocessor might fail to detect the overlapping networks before attempting to commit them to the active NSG. Failures aren't reported back to the user. Other NSG rules elsewhere - either before or after the interfering rule - might not be processed, defaulting to the "deny all" rule. Access to the connector might be blocked unexpectedly for users that previously had access and appear elsewhere in the list. Access is blocked for all connector interactions including desktop, data pipeline upload, and data pipeline download. The connector still responds to port queries, but doesn't allow interactions from an IP or IP range shown in the connector networking allowlist. |
| 61 | + |
| 62 | +### Prerequisites |
| 63 | + |
| 64 | +* A chamber is configured with a public IP connector (gateway appears as "None"). |
| 65 | + |
| 66 | +* The allowlist has entries with CIDR-masked IP ranges less than a single host /32 (/31 and smaller). |
| 67 | + |
| 68 | +* The IP ranges of two or more entries with subnet masking are overlapping. Overlapping ranges can sometimes be identified with leading octets being identical, but trailing octets marked with a "0". |
| 69 | + |
| 70 | +### Troubleshooting steps |
| 71 | + |
| 72 | +If a user that could previously access the workbench loses connectivity even though their IP is still on the allowlist, an overlapping but unhandled error with the allowlist might be blocking. Loss of connectivity doesn't preclude that any onsite or local firewall, VPN, or gateway might also be blocking access. |
| 73 | + |
| 74 | +Users should identify overlapping IP ranges by checking the allowlist of masked subnets less than a single host (less than /32) and ensure that those subnets have no overlap. Those overlapping subnets should be replaced with nonoverlapping subnets. An indicator of this is that the first allowlist entry is acknowledged, but other rules aren't. |
| 75 | + |
| 76 | +## Data pipeline upload file corruption or truncation |
| 77 | + |
| 78 | +Uploaded files to a chamber through the data pipeline might be truncated or otherwise corrupt. |
| 79 | + |
| 80 | +### Troubleshooting steps |
| 81 | + |
| 82 | +While uploading files into a chamber, you might see a file that isn't the expected length, corrupt, or otherwise doesn't pass a hash check. |
| 83 | + |
| 84 | +### Possible causes |
| 85 | + |
| 86 | +The file isn't corrupt or truncated, but still uploading. The data pipeline isn't a single stage and files placed in the upload pipeline don't appear instantaneously in the */mount/datapipeline/datain* directory and are likely still completing. Check back later and verify the length or hash. |
| 87 | + |
| 88 | +## Azure VMs located in the same region as a workbench can't access a public IP connector |
| 89 | + |
| 90 | +Resources deployed outside of a workbench, in particular virtual machines (VM), can't access a chamber through a public IP connector if located in the same region. A VM deployed in the same region or even the same resource group as a workbench isn't able to connect to the chamber's connector. The VM's public facing IP address is on the allowlist. A locally installed version of AzCopy is unable to access the chamber's data pipeline. Errors include timeouts or not authorized. |
| 91 | + |
| 92 | +### Prerequisites |
| 93 | + |
| 94 | +* A workbench chamber is deployed using a public IP connector in one region. |
| 95 | + |
| 96 | +* A virtual machine or other resource with a public facing IP address is deployed in the same region. |
| 97 | + |
| 98 | +* The connector's allowlist has the public facing IP address of the VM. |
| 99 | + |
| 100 | +### Troubleshooting steps |
| 101 | + |
| 102 | +Azure resources in the same region don't use public IP or internet to communicate. Rather, if an Azure resource initiates communication to another Azure resource in the same region, private Azure networking is used. As a result, both the source and destination IP addresses are private network addresses, which aren't permitted on the connector's allowlist. |
| 103 | + |
| 104 | +The VM or other directly communicating resource should be located in another region beside's the workbench's region. Networking continues to happen on Azure's backbone network and doesn't pass over the general internet, but instead uses the public IP address. The new region can be any permissible region for the resource and doesn't need to be an active region for the Modeling and Simulation Workbench. |
| 105 | + |
| 106 | +<!-- KEEP THIS FOR FUTURE CHANGES |
| 107 | +## [Issue] |
| 108 | +Required: Issue - H2 |
| 109 | +
|
| 110 | +Each known issue should be in its own section. |
| 111 | +Provide a title for the section so that users can |
| 112 | +easily identify the issue that they are experiencing. |
| 113 | +
|
| 114 | +[Describe the issue.] |
| 115 | +
|
| 116 | +<!-- Required: Issue description (no heading) |
| 117 | +
|
| 118 | +Describe the issue. |
| 119 | +
|
| 120 | +### Prerequisites |
| 121 | +
|
| 122 | +<!--Optional: Prerequisites - H3 |
| 123 | +
|
| 124 | +Use clear and unambiguous language, and use |
| 125 | +an unordered list format. |
| 126 | +
|
| 127 | +### Troubleshooting steps |
| 128 | +
|
| 129 | +<!-- Optional: Troubleshooting steps - H3 |
| 130 | +
|
| 131 | +Not all known issues can be corrected, but if a solution |
| 132 | +is known, describe the steps to take to correct the issue. |
| 133 | +
|
| 134 | +### Possible causes |
| 135 | +
|
| 136 | +<!-- Optional: Possible causes - H3 |
| 137 | +
|
| 138 | +In an H3 section, describe potential causes. |
| 139 | +
|
| 140 | +--> |
0 commit comments