topic Re: HPVM network issue in Operating System - HP-UX

HPVM network issue

Herr Swars — Fri, 29 Aug 2008 08:21:29 GMT

I created my first integrity-VM (HP-UX 11.23). It was pretty straight forward except a network issue: I can ping and telnet other hosts from the VM but not vice versa. Ping, telnet, ftp to the VM is not possible. Looks like some kind of firewall is blocking. However "nslookup" and "ypwhich" from the VM shows a reasonable response. Never saw this on real hosts.
The vswitch is connected to lan1, the host itself uses lan0.
hpvmnet and hpvmstatus outputs are attached.

Many thanks for any hint!
BR
Heiko

Re: HPVM network issue

Torsten. — Fri, 29 Aug 2008 09:07:53 GMT

What result do you get from

# hpvmnet -S vswitch1 -v

Re: HPVM network issue

melvyn burnard — Fri, 29 Aug 2008 09:36:59 GMT

Have you checked your ip address, netmask etc, on the VM guest for this guest OS?
on the guest, what does netstat -in, lanscan, ifconfig lan0 show?

Re: HPVM network issue

Herr Swars — Fri, 29 Aug 2008 10:05:03 GMT

Thanks for your response.
I attached the output you asked for. From my point of view IP, netmask and gateway are OK.

Re: HPVM network issue

melvyn burnard — Fri, 29 Aug 2008 10:46:20 GMT

all looks good to me.
Have you tried halting and restarting the vswitch?

Re: HPVM network issue

Herr Swars — Fri, 29 Aug 2008 10:47:38 GMT

Yes I did this.

Re: HPVM network issue

Herr Swars — Fri, 29 Aug 2008 10:48:36 GMT

Do you think /sbin/set_parms initial could help? It's just a testing machine.

Re: HPVM network issue

melvyn burnard — Fri, 29 Aug 2008 11:04:45 GMT

well that is one thing to try, I assume you have also rebooted the Guest OS.
If that fails, I suggest it may be time to log an official call with HP Response Centre

Re: HPVM network issue

Herr Swars — Fri, 29 Aug 2008 11:49:58 GMT

/sbin/set_parms initial did not help. And - yes - I rebooted several times.
But now I compared the following SAM-section with the one from a real working host:
"Networking and Communications -> System Access"
On the VM there is "registrar" as the one and only entry. No telnet, login, exec, shell, time etc.
Does this mean the OS-installation is incompleate?

Re: HPVM network issue

melvyn burnard — Fri, 29 Aug 2008 12:10:24 GMT

I would suggest you look at netstat -a and see what is listening, also check your inetd.conf and /etc/services.
Does anything show up in the syslog.log when you are trying to ping/telnet to this OS?
I doubt you have an incomplete SW install, but then I am never prepared to rule out anything

Re: HPVM network issue

Herr Swars — Fri, 29 Aug 2008 12:25:36 GMT

Most of the entries in /etc/inetd.conv were commented out for some strange reasons.
I enabeled them and rebooted the VM.
/etc/services looks normal and netstat -a shows lots of listening services (telnet ...).
Nevertheless neither ping nor telnet works from outside.
I can see incoming requests in /var/adm/syslog/syslog.log when I try to connect from outside.
May be there is a "High Security" option during the OS-installation, which I did not disable by mistake?
In worst case I'll reinstall the OS.

Re: HPVM network issue

Tim Nelson — Fri, 29 Aug 2008 14:53:41 GMT

Certainly if you picked the "high" security option during installation who knows what is on and/or turned off.

Some other easy tests to confirm and rule out an external firewall would be...
ping the guest from the host, telnet to the guest from the host.

If neither local lan access works then all your issues are on the guest. IPsec installed ? High security enabled ? etc.. etc..

Security is great until you lock yourself out of the house and only have one set of keys that are in the house ;)

Re: HPVM network issue

Herr Swars — Mon, 01 Sep 2008 06:09:08 GMT

After removing IPFilter package from the guest problem seems to be solved.
So it was not an issue with virtualization really. Next time I'll check the OS-installation options more carefully.
Thanks for your hints.
Heiko