ping to port not working, 3 NICs,

[Basheer_2]

Hello

I have 3 nics
ping and telnet works with/without port for 2 nics

10.1.244.233
10.1.254.233

ping 10.1.236.233 - works
telnet 10.1.236.233 8007 does NOT work

Any reason why telnet with/without port does not work.

[jamesps]

Do a netstat -an | grep 8007 on that machine (10.1.236.233).

Does it show any services running and listening on this port?

[Basheer_2]

Thanks James

tcp 0 0 *.8007 *.* LISTEN

also lsof -i tcp:8007
httpd 10764 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10776 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10777 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10795 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10796 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10797 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10798 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10799 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10809 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10810 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 10811 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)
httpd 16139 applcrp2 23u IPv4 0x57b58ac0 0t0 TCP *:8007 (LISTEN)

[jamesps]

On the same machine can you run this:

ipfstat -io

[Basheer_2]

thanks james

ipfstat -io
empty list for ipfilter(out)
empty list for ipfilter(in)

[jamesps]

Is that httpd, have you checked the httpd logs? Have you tried restarting the service itself?

Also can you run this: netstat -in

[Basheer_2]

it is the oracle's httpd
has lots of entries when i do ps -ef |grep -i httpd


netstat -in
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lan3 1500 10.1.236.0 10.1.236.233 51575 0 16843 0 0
lan1 1500 10.1.254.0 10.1.254.233 8875 0 150 0 0
lan0 1500 10.1.244.0 10.1.244.233 448193 0 360411 0 0
lo0 4136 127.0.0.0 127.0.0.1 5575 0 5575 0 0

[jamesps]

Have you checked the httpd log file? Or restarting the service?

Does telnet return something like this:
"telnet: Unable to connect to remote host: Connection refused" right away?

[Basheer_2]

Thanks james
telnet 10.1.236.233 8007

connecting to 10.1.236.233 ..
after few seconds
CouldNOT open connection to the host on port 8007: Connect Failed,

I will try re-starting the service

[Torsten.]

The subnet mask is the key!

If your mask is only around 16 Bits you have both NICs in the same subnet.

This won't work - it's not allowed to have more than 1 NIC per host in one subnet.

You'll need a special software (APA) or different IP-addresses or a different mask.

What mask you are using?

--

Of course the process listening on that port has to answer - try to restart.

[Basheer_2]

thanks
here are my IPs
10.1.244.233
10.1.254.233
10.1.236.233 - does not work

is this OK or NO

[Torsten.]

Please do a "lanscan" and a "ifconfig lanx" for every NIC.

e.g.

# ifconfig lan0
# ifconfig lan1
...

[Basheer_2]

ifconfig lan0
lan0: flags=1843
inet 10.1.244.233 netmask ffffff00 broadcast 10.1.244.255
erpapp02-/db02/oracrp2/product/iAS/Apache/Apache/logs# ifconfig lan1
lan1: flags=1843
inet 10.1.254.233 netmask ffffff00 broadcast 10.1.254.255
erpapp02-/db02/oracrp2/product/iAS/Apache/Apache/logs# ifconfig lan3
lan3: flags=1843
inet 10.1.236.233 netmask ffffff00 broadcast 10.1.236.255
erpapp02-/db02/oracrp2/product/iAS/Apache/Apache/logs# lanscan
Hardware Station Crd Hdw Net-Interface NM MAC HP-DLPI DLPI
Path Address In# State NamePPA ID Type Support Mjr#
0/1/2/0 0x00306E4B4644 0 UP lan0 snap0 1 ETHER Yes 119
0/4/1/0 0x00306E0F7987 3 UP lan3 snap3 2 ETHER Yes 119
0/6/1/0 0x001321BD1FBD 1 UP lan1 snap1 3 ETHER Yes 119

[jamesps]

Since they are 3 IPs on 3 different interfaces no matter what mask do they have, you should be able to have access to all of them locally if you are on the same machine all routing is handled locally.

You are telneting from the same machine is that right? If not then yes, routing is an issue this the packets cannot find the way back.

[jamesps]

Your subnet masks should be 255.255.0.0 for all these interfaces. Please check the /etc/rc.config.d/netconf and modify them as needed. Then you can restart the network interfaces:

/sbin/init.d/net stop
route -f (optionally)
/sbin/init.d/net start

[Basheer_2]

James

all my machines netmask is 255.255.255.0

[Torsten.]

I guess your netmask entry

netmask ffffff00

is OK! Don't change!
Check the apache logs!

[jamesps]

In /etc/services do you have this port (8007) defined?

Oracle's httpd server is based on Apache, have you checked your httpd.conf for any "deny from" directives?

Have you edited the httpd.conf (httpd) configuration file manually to customize it with this port and the 3 IP addresses? If yes then did you run this: dcmctl updateConfig to update the DCM repository? Oracle recommends changing the configuration using the OEM web pages.

[jamesps]

The configuration files should be in: ORACLE_HOME/Apache/Apache/conf

Check these files:
httpd.conf
oracle_apache.conf
access.conf

And here:
ORACLE_HOME/opmn/logs/*

There should be some indications on why Oracle's httpd doesn't "like" the third IP address. It's probably a service configuration issue.

Hope this helps,
james

[Basheer_2]

thank James,

I can telnet to ip1 and ip2 and can NOT to ip3.
when i telnet using ip1 and ip2, i get login prompt. this does not happen for telnet ip3

SO I think its related to routing talbes and proper route add command.

If I am not able to telnet to the server using ip3, then the issue of accessing oracle comes up.

[Steve Lewis]

Its not the network IP/subnet mask at all.
Your webserver is listening on port 8007 whereas telnet only listens on port 23 (as defined in /etc/services).

When you telnet to 10.1.236.233 8007 you will get this:
Connected to 10.1.236.233
Escape character is '^]'.

Then without breaking or waiting for a login prompt type:
GET /

You should receive the html code of your root page as sent by the webserver.

So to re-iterate, you will not get a telnet login prompt on a port that telnet is not listening on.

[Basheer_2]

Thanks Steve
i tried both with and without the port.
both times it says could NOt open connection to host on port 23 ( if i dont specify anything) or on port 8007
(defaily 23 and 8007)

telnet 10.1.236.233 8007 ( default 23)

connecting to 10.1.236.233 ..
after few seconds
CouldNOT open connection to the host on port 8007: Connect Failed,

[Steve Lewis]

OK that helps:

So now on a different machine that is on that same subnet (10.1.236.xxx) and the same segment (i.e. the same switch/hub) try to ping the server.

If you cannot ping, then try

linkloop -i N 0x00306E0F7987
where N is the PPA of the lan interface on the same segment as your quiet one.

This goes below IP/routing and checks connectivity.

[Steve Lewis]

I have just noticed your ifconfig.

Is this something to do with the flags?

lan3: flags=1843

[Basheer_2]

Thanks Steve
here is whats happening
from my PC
1) ping/telnet 10.1.244.233 OK (lan0)
2) ping/telnet 10.1.254.233 OK (lan1)

3) ping 10.1.236.233 ok
telnet 10.1.236.233 NOT OK (lan3)

from another server (10.1.236.50)
ping/telnet 10.1.236.233 OK