question ncp + lotus domino

[asuescun]

Hi everybody, i have a question-issue,

i have a lotus domino server running over oes2, but several times a day the users are having problems cause suddendly the lotus server stop to respond but the service on servers oes is running.
I run a debug on domino and i send it to IBM, and they replayed to me that the problem is that there are many connections on 524 port and all band width is consumed, and the domino server can`t accept connections.
they suggest to configure a secondary ip address to manage 524 port, is that correct?, what would happen if i block traffic over 524 port?, how can i do that?

thanks a lot

[Brunold Rainer]

asuescun,

and all band width is consumed

When talking about band width I would talk more about the network speed of the interface installed in this server.
How many users work with that server and what network interface do you have installed (100 MB/1 GB) ?

Is this a single server tree or are there more server in this tree ?

Port 524 is used for edirectory synchronisation between edirectory server and windows clients using the novell client also communicate with the server on this port when they access filesystems and do logins.

Rainer

[asuescun]

thanks for your reply

there are about 350 local users (they are at the same office where server is) and about 200 users that access the server through wan link, just to access domino server.

the network interface is 100Mb

there are 47 servers on tree

[Anonymous_User]

* asuescun (Wed, 21 Oct 2009 21:06:04 GMT)
>
> i have a lotus domino server running over oes2, but several times a
> day the users are having problems cause suddendly the lotus server
> stop to respond but the service on servers oes is running.
> I run a debug on domino and i send it to IBM, and they replayed to me
> that the problem is that there are many connections on 524 port and
> all band width is consumed, and the domino server can`t accept
> connections.

Did they give you a detailed analysis? The number of connections is not
relevant for the bandwith. You could consume all the bandwith with just
one connection.

> they suggest to configure a secondary ip address to manage 524 port, is
> that correct?,

No, that is just nonsense. If bandwidth would be the problem, adding
additional network cards would have exactly zero effect.

> what would happen if i block traffic over 524 port?, how can i do
> that?

What are you using NCP for? eDirectory synchronization? NCP client
access? Why don't you verify what IBM says? There are a lot of tools
that can monitor network performance, [1] and [2] give an overview.

If you don't have experience with any of these (like me), I would first
do a general check of the IBM claims: do you have any additional network
services running on the same machine? Do they show the same behaviour as
Notes (they should if IBM is right)? Do a ping and compare these with
the slowdown times. You should see the response times going up. Also
Wireshark is able to do some basic performance overview.


Good luck, Thorsten
[1] http://en.wikipedia.org/wiki/Network_traffic_measurement
[2]
http://en.wikipedia.org/wiki/Comparison_of_network_monitoring_systems