Link to home
Start Free TrialLog in
Avatar of Rich Olu
Rich OluFlag for United Kingdom of Great Britain and Northern Ireland

asked on

ORA 12170 TNS connect timeout

Has anyone come across this in OAS 10g R2?

Oracle Application Server 10gR2 on Red Hat ES 4u4
Oracle 10gR2 RAC (2-node) on Red Hat AS 4u4

The Application Servers are on different subnet from the RAC database and hence on separate switches.

During Installation of Identity Management, my installation abruptly fails. Checking the logs revealed connect timeout error. Then telnet to the database machine on any port from the app server times-out, although ping works. In fact telnet from the application server to anything else times-out. Telnet is only successful after reboot.

However, when I moved the app servers onto the same subnet, hence same switch, as the RAC, the installation completed successfully.

Now I need to move the App servers back into the DMZ where they are intended for. So I'm running the chgiphost.sh script and I'm hiting the same problem as I did during the installation.

It appears that some process in the installation is killing ability of Linux to talk to other machines on ports. Has anyone come across this? Is this firewall or software - Oracle or Linux?

More symptoms:
I can still telnet from the RAC to the App server even though the app server cannot talk to the database server
Don't forget I can ping the RAC server from the app server but telnet or ssh timeout.

Don't forget connectivity is durable when all servers are placed on the same subnet.

The remote database is definitely listening

I'm considering moving my database servers to teh DMZ. Has anyone done this without security risks? I believe you could create port rules to protect your database servers.

ASKER CERTIFIED SOLUTION
Avatar of anand_2000v
anand_2000v
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Rich Olu

ASKER

This was indeed a connectivity issue as I suspected.

I believe this should be deleted because it would not be of any use to anybody the fact that I was working where the network infrastructure is in a questionable state.

How do I delete this.