Solved

Iseries WS session keeps disconnecting after periods of inactivity

Posted on 2006-07-21
7
1,134 Views
Last Modified: 2009-07-29
We have recently experienced constant disconnects on users' WS sessions.  All PC users have a WS session file to connect to our AS/400.  We have recently installed a ServGate M30 sercuity device/firewall.  Aftewards, sessions constantly disconnect after periods of inactivity.  All PCs are running XP pro, SP 2.  All users are connected to our internal network.  There are 2 users connected to our DMZ that do not experience this problem.

My troubleshooting has included the following:
1. A constant ping to the IP of the AS/400 shows no communication loss.
2. I created a KeepAliveTime DWORD in the registry (LocalMachine\CurrentControlSet\Services\TcpIp\Parameters\ and set it to 3600000 seconds (decimal)
3. I created a startup script at login - CWBCOPWR /KA:1 /MKA:60,3600

I have looked navigated through the ServGate device and do not see anything that would cause the disconnect because of inactivity.  

Any help or suggestions is much appreciated.
0
Comment
Question by:ConexionDave
  • 3
  • 3
7 Comments
 
LVL 18

Expert Comment

by:daveslash
ID: 17157267
You might have more success by posting your question in the AS/400 topic area:

http://www.experts-exchange.com/Programming/Programming_Platforms/AS400/

-- DaveSlash
0
 
LVL 57

Expert Comment

by:giltjr
ID: 17165038
I would check to see if the ServGate is actually passing the keepalive packets.

I would also check DB2 log on the iSeries server to see if it is showing anything.

Prior to using the ServGate, what were you using as a firewall?
0
 

Author Comment

by:ConexionDave
ID: 17167949
Prior to the ServGate, we were using a DLINK firewall, and also had a Symantec Security device.
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 57

Accepted Solution

by:
giltjr earned 500 total points
ID: 17168935
Do you have the ability to do a packet capture in-front of the firewal and behind the firewall?

If so I would suggest that you capture the packets to verify what is going on.  

I am assuming that you can predict how long after the session starts and there is no activity that it will end.  If so, then I would suggest capturing two traces on each side.  Trace 1 is the session setup to make sure that the session/connection is starting correctly.  Trace two you would start just prior to when you think the connection is going to drop and capture the drop.

I just thought of something, some stateful firewalls have a timer value on how long they will keep track of a conneciton.  I may be that your session is lasting longer than this and the firewall is deleting the information it has for the connection.

Also you have the keepalive timer set to  3600000 in the registry which is in ms, in seconds this is 3600, or 1 hour.  Do you really want to send the keepalive packet ever hour?
0
 

Author Comment

by:ConexionDave
ID: 17170442
I've changed the regestiry to send keep alives every minute if there is inactity for a 5 minute period.  Unfortuantely, I can't predict when the session will disconnect.  Seemingly, it varies.  
0
 

Author Comment

by:ConexionDave
ID: 17179310
I did find a timer value on our firewall.  It was set to 15 minutes.  Changing the value to 60 did the trick.   thanks giltjr.
0
 
LVL 57

Expert Comment

by:giltjr
ID: 17179744
Glad to be of help.
0

Featured Post

Master Your Team's Linux and Cloud Stack

Come see why top tech companies like Mailchimp and Media Temple use Linux Academy to build their employee training programs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

November 2009 Recently, a question came up in the DB2 forum regarding the date format in DB2 UDB for AS/400.  Apparently in UDB LUW (Linux/Unix/Windows), the date format is a system-wide setting, and is not controlled at the session level.  I'm n…
Recursive SQL in UDB/LUW (you can use 'recursive' and 'SQL' in the same sentence) A growing number of database queries lend themselves to recursive solutions.  It's not always easy to spot when recursion is called for, especially for people una…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question