Agent is unreachable

[Nirmalkumar]

Hi all,

i recieved the following OEM alert frequently
----------------------------------------------
Agent is Unreachable (REASON = Cannot establish proxy connection: 502 Proxy Error ( The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. )) but the host is UP.
--------------------------------------------
But in the with in 5 mins,the agent is reachable.

plz help me out anything need to configure in OEM side and also explain me what is the above error.

Oracle version - 10g

Thanks
Nirmal.

[T G Manikandan · Accepted solution]

I think you are using Microsoft ISA server as the proxy/firewall server. you need to allow the port for which the SSL is configured for.

[Nirmalkumar]

Hi manikandan,

Thanks for your response..


Port is not blocked.if port is blocked means the agent will not be reachable permananetly.But my case agent will be reachable in the next 5 mins max.



Thanks
Nirmal.

[T G Manikandan]

What is the port configured in this case for OEM

[Nirmalkumar]

Hi Mani,

Management Service - ausb3oemdbv0a:1159
Agent - pngedms6:3872

ausb3oemdbv0a --- oem server name
target server name -- pngedms6


Thanks
Nirmal.

[Anshumali]

May be for that special 5 minutes you can check the port status? If the port is open, still you cant communicate issue may be with OEM.
If you get port blocked, get it checked at ISA level for its weired behavior.

Anshu

[T G Manikandan]

Did you check 429392.1 with metalink.

Solution

This inconsistent behaviour is most likely due to a proxy server is being used.

Add the for the host in the "Do Not Proxy For" list in the:

[Setup -> Patching Setup -> Proxy & Connection Settings -> Manual proxy configuration] screen.


Once this host was added communication from the OMS to the host was re-enabled.

This communication permits user to configure the Database target from within Grid Control.

[palaniappan.sp]

Hi,

Can u tell me the proxy details.If ur using Unix based proxy u have to allow the CONNECT method CONNECT,allow the ssl port 502 on the proxy.

Regds,
Palani.

[Nirmalkumar]

Hi all,

Thank you for your response.

Mani,

i added hostname in the "Do Not Proxy For" list, after that i didn't got the above alert.

Thanks mani


Thanks
Nirmal.