topic Re: TCPIP - Telnet sessions disconnect in Operating System - OpenVMS

TCPIP - Telnet sessions disconnect

Arno van Rennes — Wed, 24 Aug 2005 11:03:35 GMT

Using OpenVMS 7.3-2 and TCPIP V5.4 - ECO 5, TELNET sessions are disconnecting after several hours.
Another system on the same network segment, that is still on OpenVMS V7.1-2 and UCX V4.2 - ECO 5 does not have this problem.

Who knows what to do?

Re: TCPIP - Telnet sessions disconnect

Antoniov. — Wed, 24 Aug 2005 11:37:14 GMT

Arno,
welcome to VMS forum :-)
Here you can find some other Dutch guys :-)

I have same your configuration (just upgrdated) and I work with telnet without any disconnection trouble. I hope there is no any bug for this patch.
At first glance you have to check for session limit
$ TCPIP SH SERV TELNET /FULL

Service: TELNET
State: Enabled
Port: 23 Protocol: TCP Address: 0.0.0.0
Inactivity: 1 User_name: not defined Process: not defined
Limit: 10000 Active: 2 Peak: 2

File: not defined
Flags: Listen Rtty IPv6

Socket Opts: Keepalive Rcheck Scheck
Receive: 3000 Send: 3000

Log Opts: Actv Dactv Conn Error Logi Logo Mdfy Rjct
File: not defined

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0

Compare limit value with peak value.

Antonio Vigliotti

Re: TCPIP - Telnet sessions disconnect

Karl Rohwedder — Wed, 24 Aug 2005 13:41:46 GMT

Arno,

perhaps you find a clue in accounting, why the process dies.

If a service limit is reached, a new session would be rejected, but a running session should continue.

YOu do not a have an 'idle process killer' (e.g. WATCHER) running on the node, don't you? :-)

You could also check the counters of the ethernet devices using LANCP to exclude hardware errors.

regards Kalle

Re: TCPIP - Telnet sessions disconnect

Thomas Ritter — Wed, 24 Aug 2005 18:26:45 GMT

Firewall somewhere in the network ? Look at your keepalive values in

SYS$SPECIFIC:[TCPIP$ETC]SYSCONFIGTAB.DAT

inet:
tcp_keepcnt = 8
tcp_keepidle = 150
tcp_keepinit = 150
tcp_keepintvl = 150

Try to match them to the firewall's way of handling inactive sessions.

Re: TCPIP - Telnet sessions disconnect

Peter Quodling — Wed, 24 Aug 2005 18:34:23 GMT

You may also want to consider setting upp virtual terminals...

q

Re: TCPIP - Telnet sessions disconnect

Thomas Ritter — Wed, 24 Aug 2005 18:37:54 GMT

If the problem is firewall and timeouts try this command and report the results.

$ pipe sysconfig -q inet | sea sys$input keep
tcp_keepalive_default = 0
tcp_keepcnt = 8
tcp_keepidle = 150
tcp_keepinit = 150
tcp_keepintvl = 150

Re: TCPIP - Telnet sessions disconnect

Willem Grooters — Thu, 25 Aug 2005 01:28:45 GMT

- of inactivity ? or does this hapopen regardless activity on the session )breaking off the sessions)?

Re: TCPIP - Telnet sessions disconnect

Ian Miller. — Thu, 25 Aug 2005 04:12:16 GMT

In recent versions of TCPIP the keepalive defaults changed so use the commands as already suggested. You probably need to enable keepalive on the telnet service and change the various timeouts.

Re: TCPIP - Telnet sessions disconnect

Petr Spisek — Thu, 25 Aug 2005 06:58:15 GMT

Hi,
"disconnecting after several hours" ... it usually looks to firewall bahaviour, but if you have another server in the same segment ... it points to problem in the certain server.
But after all try to test telnet from your console to separate the network. If problem still running, try to compare the parameters as guys advise you.
Good luck
P.

Re: TCPIP - Telnet sessions disconnect

Arno van Rennes — Thu, 25 Aug 2005 11:25:46 GMT

Gentlemen, thanks for your reactions, I will try to answer them all at once here:

# Antonio:
$ TCPIP SH SERV TELNET /FULL
Service: TELNET
State: Enabled
Port: 23 Protocol: TCP Address: 0.0.0.0
Inactivity: 1 User_name: not defined Process: not defined
Limit: 200 Active: 14 Peak: 23

File: not defined
Flags: Listen Rtty IPv6

Socket Opts: Keepalive Rcheck Scheck
Receive: 3000 Send: 3000

Log Opts: Actv Dactv Conn Error Logi Logo Mdfy Rjct
File: not defined

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0

The limit values, compared to peak values looks all right to me.
The only difference with the correctly running (V7.1-2 + UCX V4.2) system = Flags: IPv6

# Kalle:
Accounting states only: Final status text: %RMS-F-RER, file read error. I have seen this before only now it happens more often.

New sessions are not rejected only running (idle) sessions are disconnected.

This system is the original of the mentioned V7.1-2 system. (e.g. the same processes are running)

The LANCP device counters look alright.

# Thomas Ritter:
The only tcp setting in SYS$SPECIFIC:[TCPIP$ETC]SYSCONFIGTAB.DAT is tcp_threads=8.

$ pipe sysconfig -q inet | sea sys$input keep
Shows %SEARCH-I-NOMATCHES, no strings matched.

By the way, the TCP SESSION TIMEOUT op de Firewall is 7200 seconds. (and the other systems on the same firewall have no problems)

# Willem Grooters:
Only idle sessions are being disconnected.

# Ian Miller:
Keepalive is enabled, do you mean I have to set the tcp_keep* settings that that Thomas Ritter mentioned, in SYS$SPECIFIC:[TCPIP$ETC]SYSCONFIGTAB.DAT?

# Petr Spisek:
Good idea, I have started a telnet from the console to its system, I will wait and see tomorrow morning if it is still there.

Re: TCPIP - Telnet sessions disconnect

Ian Miller. — Thu, 25 Aug 2005 11:54:54 GMT

Parhaps the previous command does not produce the results expected so try

$ sysconfig -q inet

and look for
tcp_keepcnt
tcp_keepidle
tcp_keepinit
tcp_keepintvl

I think these changed in recent versions of TCPIP

Re: TCPIP - Telnet sessions disconnect

Ian Miller. — Thu, 25 Aug 2005 11:57:37 GMT

for UCX V4.2 do
$ UCX SHOW PROTOCOL TCP/PARAM

Re: TCPIP - Telnet sessions disconnect

Arno van Rennes — Fri, 26 Aug 2005 01:01:51 GMT

The $ prompt put me on the wrong track, i did'nt notice that it was a TIPIP command.

$ pipe tcpip sysconfig -q inet | sea sys$input keep
Shows:
tcp_keepalive_default = 0
tcp_keepcnt = 8
tcp_keepidle = 14400
tcp_keepinit = 150
tcp_keepintvl = 150

The tcp_keepidle is a lot higher than in the example of Thomas but is'nt that just what I want? (I dit not set it do)

Re: TCPIP - Telnet sessions disconnect

Antoniov. — Fri, 26 Aug 2005 01:33:53 GMT

Arno,
$ pipe sysconfig -q inet|sea sys$pipe "keep"
tcp_keepalive_default = 0
tcp_keepcnt = 8
tcp_keepidle = 14400
tcp_keepinit = 150
tcp_keepintvl = 150

produces same result of your system.
The unique difference between my system and yours is limit in service. I have 10000. I installed a new machine (no upgrade from old system), but I think this shouldn't be important.

Antonio Vigliotti

Re: TCPIP - Telnet sessions disconnect

Arno van Rennes — Fri, 26 Aug 2005 02:04:27 GMT

Antonio,
Just to be sure, i have set the limit for the telnet service also at 10000.
Let's see what hapens....

Re: TCPIP - Telnet sessions disconnect

Ian Miller. — Fri, 26 Aug 2005 03:41:32 GMT

tcp_keepidle is the number of halfseconds before the initial keepalive probe is sent.
So on a idle telnet link it will be 7200 seconds before anything is sent. Your firewall timeout is 7200 seconds.
I would recommend reducing tcp_keepidle

Re: TCPIP - Telnet sessions disconnect

Thomas Ritter — Sun, 28 Aug 2005 19:43:01 GMT

Sorry I added some confusion. We execute

$ @sys$manager:tcpip$define_commands.com

to setup our popular tcpip commands.

Therefore

$ sh sym sysconfig
SYSCONFIG == "$SYS$SYSTEM:TCPIP$SYSCONFIG.EXE".

If progress is slow, experiment with some "keepalive" values.
Do we have confirmation that a firewall is part of the network topology ? What sort of a firewall ? Checkpoint ?

If so try connection using telnet behind the firewall and report the results.

IMO, dealing with Firewalls has become a necessary skill required of the VMS system administrator.

Thomas,
Melbourne Australia.

Re: TCPIP - Telnet sessions disconnect

Arno van Rennes — Mon, 05 Sep 2005 04:56:40 GMT

Ian,

Reducing tcp_keepidle does not help.
I even tried to set the tcp_keepidle to more than 14400 (more than the setting on the firewall which is 7200 seconds) but both setting did not change the disconnecting of idle sessions.
(it is still after about 2 hours of idle time they disconnect)

I have upgraded 2 more systems to OpenVMS 7.3-2 and TCPIP V5.4 - ECO 5 and they have the same problem now. (before that, telnet sessions did not disconnect)

Arno

Re: TCPIP - Telnet sessions disconnect

Arno van Rennes — Mon, 05 Sep 2005 05:06:35 GMT

Thomas,

Thanks, nou i can use the tcpip commands on the $-prompt!

A firewall is part of the network topology. (i understand it is an Nokia Checkpoint Firewall-1 NG)

Before, on advice of Petr Spisek, i made a telnet sesson to the system, from the consol of the system itself, (so no firewall is used) the session did not disconnect then.

But other OpenVMS systems on the same firewall do'nt disconnect the idle telnet sesions. Also i have upgraded 2 more systems to OpenVMS 7.3-2 and TCPIP V5.4 - ECO 5 and they have the same problem now. (before that, telnet sessions did not disconnect)

Arno

Re: TCPIP - Telnet sessions disconnect

Ian Miller. — Mon, 05 Sep 2005 05:08:13 GMT

Have you tried reducing tcp_keepidle on the upgraded vms systems?