<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We’re having some issues bringing up firewalls on some of our NSD nodes. The problem I was actually trying to diagnose I don’t think is firewall related but still …<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We have port 22 and 1191 open and also 60000-61000, we also set:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># mmlsconfig tscTcpPort<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">tscTcpPort 1191<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># mmlsconfig tscCmdPortRange<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">tscCmdPortRange 60000-61000<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.0/com.ibm.spectrum.scale.v5r00.doc/bl1adv_firewallforinternalcommn.htm">https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.0/com.ibm.spectrum.scale.v5r00.doc/bl1adv_firewallforinternalcommn.htm</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Claims this is sufficient …<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Running mmnetverify:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># mmnetverify all --target-nodes rds-er-mgr01<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">rds-pg-mgr01 checking local configuration.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation interface: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">rds-pg-mgr01 checking communication with node rds-er-mgr01.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation resolution: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation ping: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation shell: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation copy: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation time: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation daemon-port: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation sdrserv-port: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation tsccmd-port: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation data-small: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation data-medium: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation data-large: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Could not connect to port 46326 on node rds-pg-mgr01 (10.20.0.56): timed out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">This may indicate a firewall configuration issue.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation bandwidth-node: Fail.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">rds-pg-mgr01 checking cluster communications.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Issues Found:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">rds-er-mgr01 could not connect to rds-pg-mgr01 (TCP, port 46326).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">mmnetverify: Command failed. Examine previous error messages to determine cause.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Note that the port number mentioned changes if we run mmnetverify multiple times. The two clients in this test are running 5.0.2 code. If I run in verbose mode I see:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><snip><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Checking network communication with node rds-er-mgr01.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Port range restricted by cluster configuration: 60000 - 61000.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> rds-er-mgr01: connecting to node rds-pg-mgr01.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> rds-er-mgr01: exchanged 256.0M bytes with rds-pg-mgr01.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Write size: 16.0M bytes.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Network statistics for rds-er-mgr01 during data exchange:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> packets sent: 68112<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> packets received: 72452<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Network Traffic between rds-er-mgr01 and rds-pg-mgr01 port 60000 ok.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation data-large: Success.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Checking network bandwidth.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> rds-er-mgr01: connecting to node rds-pg-mgr01.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Could not connect to port 36277 on node rds-pg-mgr01 (10.20.0.56): timed out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">This may indicate a firewall configuration issue.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Operation bandwidth-node: Fail.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><snip><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">So for many of the tests it looks like its using port 60000 as expected, is this just a bug in mmnetverify or am I doing something silly?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Simon<o:p></o:p></span></p>
</div>
</body>
</html>