CTTI LOT1 Absent Member.
Absent Member.
337 views

OVPI and OVPA through firewall

Jump to solution
Hi,
I have OVPI working perfectlly, and recovering values from OVPA that are next to him. But I not able to recolect information through the firewall. I have opened port 381, 382, and 383 without success:

trendadm@hp9z18 > ./pa_discovery -node OWA04 -d 3
2007-02-28 15:32:13:000,MET,+01:00,pa_discovery,,INFO,7710,7700,777,"Start pa_discovery A.05.00.000."
Begin checking if agent exists
OWA04, EPC Status: Request denied, https protocol required
OWA04, OVPA Agent not found (socket connection refused)
2007-02-28 15:32:23:000,MET,+01:00,pa_discovery,,INFO,7710,7700,777,"Completed 1 out of 1 systems."
2007-02-28 15:32:23:000,MET,+01:00,pa_discovery,,INFO,7710,7700,777,"Exit pa_discovery A.05.00.000."
2007-02-28 15:32:23:000,MET,+01:00,pa_discovery,,INFO,7710,7700,777,"OWA04, Gathered 0.00 records per second (0 records in 10.0 seconds)"
0 Likes
1 Solution

Accepted Solutions
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: OVPI and OVPA through firewall

Jump to solution
OVPI 5.1 can not use https with agents - this feature will arrive with OVPI 5.2
10 Replies
Max ON_1 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
Try to verify the ports.

Configuring the firewall
Source Ports/Protocol Destination Ports/Protocol
PI any port > 1023 / tcp DCE daemon 135 / tcp
PI any port > 1023 / tcp MWA 382 / tcp
PI any port > 1023 / tcp MWA AGDBSERVER_PORT / tcp
REP_SERVER_PORT / tcp

bye
0 Likes
Thomas D. Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
Hi,
I think you have to open all the following ports : 135, 381, 382, 383 for TCP connections.
OVPI pa_discovery process will try all these ports to see if the agent is OVPA or CODA (EPC) and if a port is not open then the discovery will fail(timeout).

So:

OVPI(allports) <> 135,381,382,383(TCP) OVPA/CODA Agent


Regards,
Thomas
0 Likes
CTTI LOT1 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
Ok, thanks.
I have tried it with any:any without success, I'm going to have a look at it again...
0 Likes
leon_32 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
I think that newer agents can use https and your error message implies it is trying to use https

OWA04, EPC Status: Request denied, https protocol required
OWA04, OVPA Agent not found (socket connection refused)

Have you tried permitting https through your firewall???

HTH..

Leon
0 Likes
CTTI LOT1 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
How do you do it?
forcing coda to 381, and opening 382 and 383 for OVPA isn't enough?
0 Likes
leon_32 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
try also permitting port tcp 443

This is the port for https which you are currently getting a socket connection refused

HTH..

Leon
0 Likes
CTTI LOT1 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
Bad news,
We have been trying with ANY-ANY and the result is the same 😞

trendadm@hp9z18 > ./pa_discovery -node OWA04
2007-03-13 08:39:58:000,MET,+01:00,pa_discovery,,INFO,14219,14209,777,"Start pa_discovery A.05.00.000."
2007-03-13 08:40:08:000,MET,+01:00,pa_discovery,,INFO,14219,14209,777,"Completed 1 out of 1 systems."
2007-03-13 08:40:08:000,MET,+01:00,pa_discovery,,INFO,14219,14209,777,"Exit pa_discovery A.05.00.000."
2007-03-13 08:40:08:000,MET,+01:00,pa_discovery,,INFO,14219,14209,777,"OWA04, Gathered 0.00 records per second (0 records in 10.0 seconds)"
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: OVPI and OVPA through firewall

Jump to solution
OVPI 5.1 can not use https with agents - this feature will arrive with OVPI 5.2
CTTI LOT1 Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
Hi,
from HP support had told me the same....
Thanks.
0 Likes
Stanley.III Absent Member.
Absent Member.

Re: OVPI and OVPA through firewall

Jump to solution
Hi,

according refference guide, there is an option for pa_discovery:

-p Supresses pinging to the host.

It means maybe, you need to add that or open firewall for ICMP.

best regards
Stanley
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.