ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » MQ AMQ9209 and AMQ9208 issue affected by router IPSEC

Post new topic  Reply to topic Goto page Previous  1, 2
 MQ AMQ9209 and AMQ9208 issue affected by router IPSEC « View previous topic :: View next topic » 
Author Message
mqtechie
PostPosted: Wed May 13, 2009 5:15 am    Post subject: Reply with quote

Newbie

Joined: 10 May 2009
Posts: 6

belchman wrote:
It is also possible that you router is set to clean up connections that have been inactive for X seconds and your discint property on your sender channel is Y seconds and X < Y.

This would cause those types of errors because to the MQ nodes, when the cleanup process cleans the "idle" threads it does so in a way that appears abrupt to MQ.

For example, our Firewall cleans up connections it thinks are unused or orphaned. The channels are running but no data is going across. When the FW closes the connection, an error is trapped and written to the qmgr logs because MQ thinks it was an ABEND.


In the Cisco router, the default lifetime is 86400 seconds, which is one day. When the lifetime time fires, it will renegotiated as a security measure. So, the issue is the router setting.

Is this issue related to IP MTU? The sender is using IBM AIX server. Does the sender server MTU need to be changed if IPSEC is implemented in the router? Or latest IBM MQ fix pack will fix this MTU issue?
Back to top
View user's profile Send private message
nheng
PostPosted: Wed May 13, 2009 7:32 pm    Post subject: Re: hi Reply with quote

Apprentice

Joined: 07 Dec 2007
Posts: 39

mqtechie wrote:
nheng wrote:
IPsec may be encrypt data (DES , 3DES , IDEA , RC2 ,etc) .Plz disable its.


Hi nheng,
Thanks for your comment.

Yes. We disable the IPSec and it works. The question is why? Need a logical explanation.

Thanks


When data has send to reciever.The receiver may can't read data..Why do u not encrypt data from sender?
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic  Reply to topic Goto page Previous  1, 2 Page 2 of 2

MQSeries.net Forum Index » General IBM MQ Support » MQ AMQ9209 and AMQ9208 issue affected by router IPSEC
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.