Ah, ok the layer 3 switch can be considered a firewall for the purposes
of this problem.
Setting the TCP keepalive on the networker *server* is necessary in
this case - which is why what you did on the client is not helping.
To be more specific, when a savegrp runs, the networker server makes a
tcp connection to the client, I call this the 'control connection' at
the beginning of the session the server does the probing, and then for
each saveset needed it issues the save or savefs commands needed, it
then waits for the end of the saveset before any more data goes down the
connection. It is this tcp session that needs keepalive when the
savesets take longer than 2 hours each.
The reason you don't need keepalive on the client is because the only
connections from the client during a save is the one the data is
streaming down, and presumably somewhat more than one packet gets sent
every two hours!
There is some value in having the keepalives set on clients - this is
for restores when you are using the recover program from the client and
you are waiting for a big file that will take more than 2 hours...
There is a very good description of how things work in the section of
the 7.2 admin guide relating to firewalls
-----Original Message-----
From: Legato NetWorker discussion [mailto:NETWORKER AT listserv.temple DOT edu]
On Behalf Of Riaan Louwrens
Sent: Friday, 11 August 2006 11:19 PM
To: NETWORKER AT listserv.temple DOT edu
Subject: Re: [Networker] Dropped Connection Ports
Hi Howard,
Thanks for the reply, I have taken this into account - so group
inactivity was already set to 0 (I haven't tried a large timeout yet
...)
I know the TCP parameter is for so called firewall timeouts - however,
the symptom I am having on the layer 3 switch is exactly the same -
packets get dropped that are inactive for an extended period. It seemed
like 2 hours - which I believe is the default setting for tcp/ip.
We have been told that the fact that the 2 machine are on the same
switch - but different vlan's should not have an affect - but we will be
testing it this weekend.
Any other input is appreciated!
Regards,
Riaan
_________________________
Channel Data Service Desk
Tel: +27 (0) 860 235 235
Fax: +27 (0) 11 235 7777
Servicedesk Email: servicedesk AT channeldata.co DOT za
Website: http://www.channeldata.co.za
The message is intended only for the use of the people to whom it is
addressed.
It may contain information that is privileged and confidential.
Accordingly any unauthorised use is strictly prohibited.
If you are not the intended recipient, please contact the sender as soon
as possible.
-----Original Message-----
From: Legato NetWorker discussion [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU]
On Behalf Of Howard Martin
Sent: 11 August 2006 12:33
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Subject: Re: [Networker] Dropped Connection Ports
Probably you just need to set the groups inactivity timeout value to
either 0 (never times out) or to a value larger than the worst case
backup time. On the GUI Customize - Groups - view hidden - Inactivity
timeout (value in minutes).
The tcp_keepalive_timer is only to stop firewall timeouts from messing
up the backups.
To sign off this list, send email to listserv AT listserv.temple DOT edu and
type "signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems wit this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or via RSS at
http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
NOTICE
This e-mail and any attachments are confidential and may contain copyright
material of Macquarie Bank or third parties. If you are not the intended
recipient of this email you should not read, print, re-transmit, store or act
in reliance on this e-mail or any attachments, and should destroy all copies of
them. Macquarie Bank does not guarantee the integrity of any emails or any
attached files. The views or opinions expressed are the author's own and may
not reflect the views or opinions of Macquarie Bank.
To sign off this list, send email to listserv AT listserv.temple DOT edu and
type "signoff networker" in the
body of the email. Please write to networker-request AT listserv.temple DOT edu
if you have any problems
wit this list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
|
