Unable to open DS clients when server firewall is enabled

A forum for discussing DataStage<sup>®</sup> basics. If you're not sure where your question goes, start here.

Moderators: chulett, rschirm, roy

Post Reply
sreesuku2
Participant
Posts: 45
Joined: Tue Oct 22, 2013 11:45 am

Unable to open DS clients when server firewall is enabled

Post by sreesuku2 »

Hi Team,

I have Datstage server 8.5 installed on a Windows server, but when I am trying to access the server through client installed on my local machine its giving me the error
"Failed to connect to Information Server Engine: hostname, project: ABC.
(The connection has timed out (81015)) "

But when I disable the Windows firewall on the server, I am able to access the designer and other clients.

I have allowed all DS clients to communicate through windows firewall as per the below link.
http://pic.dhe.ibm.com/infocenter/iisin ... tions.html

I have also tried opening the ports 2809, 9100, 8880, 9401, 9403, 9402, 9060, 9080, 9353, 9043, 9443, 5060, 5061, 7276, 7286, 5558, 5578, 9633
through outbound rules in windows firewall advanced settings.
Still I am not able to open DS clients when turn on the firewall.

Am I missing something here ? Is there any other way to add exceptions for firewall to access DS clients ?

Regards
Sreekumar
hitmanthesilentassasin
Participant
Posts: 150
Joined: Tue Mar 13, 2007 1:17 am

Post by hitmanthesilentassasin »

Also, check if there are any other softwares like symantec which is blocking the access
ray.wurlod
Participant
Posts: 54607
Joined: Wed Oct 23, 2002 10:52 pm
Location: Sydney, Australia
Contact:

Post by ray.wurlod »

Welcome aboard.

There are some ports that have to be open for inbound traffic in addition to those open for outbound. The error message(s) suggest which ports. Or you can refer to the Planning, Installation and Configuration Guide
IBM Software Services Group
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
sreesuku2
Participant
Posts: 45
Joined: Tue Oct 22, 2013 11:45 am

Post by sreesuku2 »

Hi,

Thanks for replies

hitmanthesilentassasin : I have only Windows firewall enabled in the server.

ray.wurlod : I have enabled the following ports in both inbound and outbound rules. 2809, 9402, 9403, 9353, 9100, 9401, 7276, 7286, 5558, 5578, 8880, 9060, 9043, 9080, 9443, 31538, 13400, 13401, 10000, 11000

still the same issue. But works perfectly when firewall is disabled

Regards
Sree
sreesuku2
Participant
Posts: 45
Joined: Tue Oct 22, 2013 11:45 am

Post by sreesuku2 »

Hi All,

I enabled port 31538 in the inbound rule. Then it started working :)
Thanks for all the help

Regards
Sree
ray.wurlod
Participant
Posts: 54607
Joined: Wed Oct 23, 2002 10:52 pm
Location: Sydney, Australia
Contact:

Post by ray.wurlod »

Well done, though you'd already claimed to have 31538 opened for both directions, which is why I was still musing about it. Port 31538 is the port that DataStage clients used to connect to the DataStage engine - specifically to the dsrpcd process when connecting.
IBM Software Services Group
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
Post Reply