HPVM network issue

[Herr Swars]

I created my first integrity-VM (HP-UX 11.23). It was pretty straight forward except a network issue: I can ping and telnet other hosts from the VM but not vice versa. Ping, telnet, ftp to the VM is not possible. Looks like some kind of firewall is blocking. However "nslookup" and "ypwhich" from the VM shows a reasonable response. Never saw this on real hosts.
The vswitch is connected to lan1, the host itself uses lan0.
hpvmnet and hpvmstatus outputs are attached.

Many thanks for any hint!
BR
Heiko

[Torsten.]

What result do you get from

# hpvmnet -S vswitch1 -v

[melvyn burnard]

Have you checked your ip address, netmask etc, on the VM guest for this guest OS?
on the guest, what does netstat -in, lanscan, ifconfig lan0 show?

[Herr Swars]

Thanks for your response.
I attached the output you asked for. From my point of view IP, netmask and gateway are OK.

[melvyn burnard]

all looks good to me.
Have you tried halting and restarting the vswitch?

[Herr Swars]

Yes I did this.

[Herr Swars]

Do you think /sbin/set_parms initial could help? It's just a testing machine.

[melvyn burnard]

well that is one thing to try, I assume you have also rebooted the Guest OS.
If that fails, I suggest it may be time to log an official call with HP Response Centre

[Herr Swars]

/sbin/set_parms initial did not help. And - yes - I rebooted several times.
But now I compared the following SAM-section with the one from a real working host:
"Networking and Communications -> System Access"
On the VM there is "registrar" as the one and only entry. No telnet, login, exec, shell, time etc.
Does this mean the OS-installation is incompleate?

[melvyn burnard]

I would suggest you look at netstat -a and see what is listening, also check your inetd.conf and /etc/services.
Does anything show up in the syslog.log when you are trying to ping/telnet to this OS?
I doubt you have an incomplete SW install, but then I am never prepared to rule out anything

[Herr Swars]

Most of the entries in /etc/inetd.conv were commented out for some strange reasons.
I enabeled them and rebooted the VM.
/etc/services looks normal and netstat -a shows lots of listening services (telnet ...).
Nevertheless neither ping nor telnet works from outside.
I can see incoming requests in /var/adm/syslog/syslog.log when I try to connect from outside.
May be there is a "High Security" option during the OS-installation, which I did not disable by mistake?
In worst case I'll reinstall the OS.

[Tim Nelson]

Certainly if you picked the "high" security option during installation who knows what is on and/or turned off.

Some other easy tests to confirm and rule out an external firewall would be...
ping the guest from the host, telnet to the guest from the host.

If neither local lan access works then all your issues are on the guest. IPsec installed ? High security enabled ? etc.. etc..

Security is great until you lock yourself out of the house and only have one set of keys that are in the house ;)

[Herr Swars]

After removing IPFilter package from the guest problem seems to be solved.
So it was not an issue with virtualization really. Next time I'll check the OS-installation options more carefully.
Thanks for your hints.
Heiko