Solved

Iseries WS session keeps disconnecting after periods of inactivity

Posted on 2006-07-21
7
1,135 Views
Last Modified: 2009-07-29
We have recently experienced constant disconnects on users' WS sessions.  All PC users have a WS session file to connect to our AS/400.  We have recently installed a ServGate M30 sercuity device/firewall.  Aftewards, sessions constantly disconnect after periods of inactivity.  All PCs are running XP pro, SP 2.  All users are connected to our internal network.  There are 2 users connected to our DMZ that do not experience this problem.

My troubleshooting has included the following:
1. A constant ping to the IP of the AS/400 shows no communication loss.
2. I created a KeepAliveTime DWORD in the registry (LocalMachine\CurrentControlSet\Services\TcpIp\Parameters\ and set it to 3600000 seconds (decimal)
3. I created a startup script at login - CWBCOPWR /KA:1 /MKA:60,3600

I have looked navigated through the ServGate device and do not see anything that would cause the disconnect because of inactivity.  

Any help or suggestions is much appreciated.
0
Comment
Question by:ConexionDave
  • 3
  • 3
7 Comments
 
LVL 18

Expert Comment

by:daveslash
ID: 17157267
You might have more success by posting your question in the AS/400 topic area:

http://www.experts-exchange.com/Programming/Programming_Platforms/AS400/

-- DaveSlash
0
 
LVL 57

Expert Comment

by:giltjr
ID: 17165038
I would check to see if the ServGate is actually passing the keepalive packets.

I would also check DB2 log on the iSeries server to see if it is showing anything.

Prior to using the ServGate, what were you using as a firewall?
0
 

Author Comment

by:ConexionDave
ID: 17167949
Prior to the ServGate, we were using a DLINK firewall, and also had a Symantec Security device.
0
Master Your Team's Linux and Cloud Stack

Come see why top tech companies like Mailchimp and Media Temple use Linux Academy to build their employee training programs.

 
LVL 57

Accepted Solution

by:
giltjr earned 500 total points
ID: 17168935
Do you have the ability to do a packet capture in-front of the firewal and behind the firewall?

If so I would suggest that you capture the packets to verify what is going on.  

I am assuming that you can predict how long after the session starts and there is no activity that it will end.  If so, then I would suggest capturing two traces on each side.  Trace 1 is the session setup to make sure that the session/connection is starting correctly.  Trace two you would start just prior to when you think the connection is going to drop and capture the drop.

I just thought of something, some stateful firewalls have a timer value on how long they will keep track of a conneciton.  I may be that your session is lasting longer than this and the firewall is deleting the information it has for the connection.

Also you have the keepalive timer set to  3600000 in the registry which is in ms, in seconds this is 3600, or 1 hour.  Do you really want to send the keepalive packet ever hour?
0
 

Author Comment

by:ConexionDave
ID: 17170442
I've changed the regestiry to send keep alives every minute if there is inactity for a 5 minute period.  Unfortuantely, I can't predict when the session will disconnect.  Seemingly, it varies.  
0
 

Author Comment

by:ConexionDave
ID: 17179310
I did find a timer value on our firewall.  It was set to 15 minutes.  Changing the value to 60 did the trick.   thanks giltjr.
0
 
LVL 57

Expert Comment

by:giltjr
ID: 17179744
Glad to be of help.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
DB2 what is copybook? 4 557
Disable auto commit on Oracle SQL Developer with DB2 5 604
DB2 Log Shipping (Big vs Little Endianness) 4 167
Shell Script on AIX 7 111
Recursive SQL in UDB/LUW (you can use 'recursive' and 'SQL' in the same sentence) A growing number of database queries lend themselves to recursive solutions.  It's not always easy to spot when recursion is called for, especially for people una…
Recursive SQL in UDB/LUW (it really isn't that hard to do) Recursive SQL is most often used to convert columns to rows or rows to columns.  A previous article described the process of converting rows to columns.  This article will build off of th…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question