topic Re: Cannot telnet to Service Guard packaged ip address in Operating System - HP-UX

Cannot telnet to Service Guard packaged ip address

Suba Rao — Mon, 04 Apr 2005 02:04:07 GMT

Two cluster mc/s A and B.
Ip address for A (Only 1 ip) 10.10.1.4
Ip address for B (Only 1 ip) 10.10.1.5
Subnet mask 255.255.255.128

Package control file :

IP[0]=10.10.1.6
SUBNET[0]=10.10.1.0

Now the problem is we cannot telnet to package from any other node except where package is running.
If package is running on A, only from A we can telnet, not from B or any other node on same subnet. It says connetion refused.
But 10.10.1.6 ispingable from any other node.

Any insight to solve this problem .....

Points will be awarded for a good answers.

Re: Cannot telnet to Service Guard packaged ip address

Slawomir Gora — Mon, 04 Apr 2005 02:40:41 GMT

Hi,

it looks like you can only log by telnet from
loopback (localhost) adress.

1. what about other services ftp, ssh - is there the same problem ?
2. maby you have security restrictions look at file /var/adm/inetd.sec
3. did you have tcp_wrappers installed ?

Re: Cannot telnet to Service Guard packaged ip address

Suba Rao — Mon, 04 Apr 2005 03:11:53 GMT

I have tcp_wrappers installed via ssh.
ftp works only 1st time (Strange !!) but now both telnet and ftp fails. Ping is ok.
No /var/adm/inetd.sec file.

Thanks

Re: Cannot telnet to Service Guard packaged ip address

melvyn burnard — Mon, 04 Apr 2005 03:13:33 GMT

This sounds like you have soem form of routing issue.
I would suggest trying ftp etc to see if the same issue occurs.
You could also try adding the ip address without running the package by using ifconfig, and testing it this way, thus eliminating Serviceguard.
Also have you checked you package and syslog files to see if any warning or error is logged?

Re: Cannot telnet to Service Guard packaged ip address

Slawomir Gora — Mon, 04 Apr 2005 03:15:08 GMT

Hi,

are you sure you package IP 10.10.1.6 is unique in you network. Maby you have address conflict.
Shutdown package and check if you can ping to 10.10.1.6.

Re: Cannot telnet to Service Guard packaged ip address

Suba Rao — Mon, 04 Apr 2005 05:22:27 GMT

Thank you everybody. It is duplicate ip address 10.10.1.6 (I cannot beleive it but it is a fact)....

Re: Cannot telnet to Service Guard packaged ip address

Suba Rao — Mon, 04 Apr 2005 05:23:59 GMT

Problem solved.