Kbase P9085: Error 9407 connecting from App Server client or AIA to App Server Going Through Firewall NAT
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
19/12/2005 |
|
Status: Verified
FACT(s) (Environment):
Progress 9.1x
SYMPTOM(s):
Error 9407 connecting from App Server client to App Server
Error 9407 connecting to Appserver from AIA when using a Firewall NAT
Connection failure for host <host_name> port <port> transport <transport_name>. (9407)
Connection failure for host 192.168.1.2 port 5162 transport TCP (9407)
Using Firewall with NAT (network address translation)
CAUSE:
The problem is with the Appserver configuration using the IP address and not the Host Name. Using the NAT of the Firewall with an IP address is causing the IP address to be translated from Address A to Address B, then the NS binds to this address and replies to the WebClient with this address, which therefore causes the 9407 error message.
FIX:
The correct thing to do for such a configuration is to use the HOST NAME and not the IP address, therefore the NS will bind to the Host name and not a translated IP address.
To make a client connection through a NAT Firewall, you must set registrationMode to Register-HostName, and set hostName to the hostname of the system where the broker is running. You can set these via Progress Explorer or in the ubroker.properties file itself in the specific broker properties section.
The default values of these settings can be found in the [Ubroker]
section of the ubroker.properties file.
Example Settings:
registrationMode=Register-HostName
hostName=(host system name)
Description=(type of IP address)