SAP CAL HANA - Connectivity issues

I deployed SAP HANA on AWS through SAP CAL.
I can connect to the HTTP interface and the HDB through the command line.
hdbsql=> \c -i 00 -u system
Password:
Connected to HDB@vhcalhdbdb:30015
hdbsql HDB=>
But if I try to connect to port 30015 remotely I just timeout. I have the 30015 open to the world in the AWS security group.
Is there a daemon that runs on the server that accepts remote connections or do I have a AWS network issue I need to investigate?

Hi Joseph,
Most probably you are behind a corporate firewall that does not allow you to connect to port 30015. Could you try to connect from another network?
Best regards,
Stanimir

Similar Messages

SAP CAL HANA errors

SAP HANA, developer edition 1.0 SPS 09 created from SAP CAL running on AWS.
I am receiving the following errors when executing a query in HANA via jdbc.
The first execution runs for 6 minutes then produces this error:
Caused by: com.sap.db.jdbc.exceptions.JDBCDriverException: SAP DBTech JDBC: [2]: general error: Allocation failed $REASON$
Caused by: com.sap.db.jdbc.exceptions.JDBCDriverException: SAP DBTech JDBC: [2048]: column store error: [9] Memory allocation failed
I re execute the query it runs for 25 minutes then produces the same error.
Then the instance is unresponsive.
If I look in HANA studio general overview there is plenty of memory and cpu available to the HANA instance.
There is also a crush dump listed in the log files.
I see the following errors in the indexserver_alert_vhcalhdbdb.trc on the HANA server:
[3742]{-1}[-1/-1] 2015-03-18 18:41:42.430797 e Licensing
LicenseMeasurementPersistence.cpp(00161) : Error storing license measurement for application id '000670', value 26 at ' 2015-03-18 18:41:39.3910000', internal error
[3742]{-1}[-1/-1] 2015-03-18 18:41:42.430999 e Licensing
LicensePluginRegistry.cpp(00394) : Error storing license measurement: internal error
[3732]{300601}[27/-1] 2015-03-18 18:30:16.406867 e Executor
PlanExecutor.cpp(00825) : pop1245 (rc 9, Memory allocation failed)
pop = RowPlanOperator() # pop1245
pop.setDetails('')
[3732]{300601}[27/-1] 2015-03-18 18:30:16.406890 e Executor
PlanExecutor.cpp(00825) : pop1243 (rc 9, Memory allocation failed)
[4437]{300601}[27/-1] 2015-03-18 18:28:13.921145 e Memory
ReportMemoryProblems.cpp(00799) : 8: 0x00007f0b1ba7a8c5 in ptime::TrexPlanOp::executePtimeOp(ltt_adp::vector<Executor::PlanData*, ltt::integral_constant<bool, true> > const&, ltt_adp::vector<Executor::PlanData*, ltt::integral_constant<bool, true> > const&, TRexCommonObjects::TRexApiError&, Executor::ExecutionInfo const&)+0x41 at trex_plan.cc:340 (libhdbcswrapper.so)
The memory errors are repeated many times.
What is the recommendation to investigate this issue?
Thank you.

The file indexserver_alert_vhcalhdbdb.trc contains the following errors:
[4175]{300560}[23/-1] 2015-03-19 10:57:26.017346 e Executor
X2.cpp(02961) : 1: 0x00007f049f94df0a in _ZN5ptime3pcc16MonitorAllocBase14throwExceptionEv.isra.53+0x22 at pcc_MonitorAlloc.h:61 (libhdbrskernel.so)
[4175]{300560}[23/-1] 2015-03-19 10:57:26.017346 e Executor
X2.cpp(02961) : 2: 0x00007f049f9403f5 in ptime::Transaction::Transaction(ptime::Connection*, bool, bool, bool, bool)+0x18f1 at pcc_MonitorAlloc.h:114 (libhdbrskernel.so)
[4175]{300560}[23/-1] 2015-03-19 10:57:26.017346 e Executor
X2.cpp(02961) : 3: 0x00007f049ca15949 in ptime::TrexTempIndex::clearIndex() const+0x25 at trex_itab.cc:3020 (libhdbcswrapper.so)
[4175]{300560}[23/-1] 2015-03-19 10:57:26.017346 e Executor
X2.cpp(02961) : 4: 0x00007f049eb7bd74 in ptime::TrexObjectFactory::destroyTrexTempIndexObject(char const*, char const*, char const*)+0x40 at trex_object_factory.cc:1386 (libhdbrskernel.so)
[4175]{300560}[23/-1] 2015-03-19 10:57:26.017346 e Executor
X2.cpp(02961) : 5: 0x00007f049ca4e706 in ptime::TrexPlanData::~TrexPlanData()+0x1d2 at trex_plan_data.cc:49 (libhdbcswrapper.so)
6: 0x00007f049ca4e849 in ptime::TrexPlanData::~TrexPlanData()+0x5 at trex_plan_data.cc:53 (libhdbcswrapper.so)
7: 0x00007f04c44739ed in Executor::X2ConnectorValue::deleteItsValue()+0x29 at X2.cpp:323 (libhdbexecutor.so)
8: 0x00007f04c4488101 in Executor::X2::failPop(int)+0xb0 at X2.h:176 (libhdbexecutor.so)
9: 0x00007f04c44879b4 in Executor::X2::finishValue(Executor::X2ConnectorValue&, int&, bool)+0x110 at X2.cpp:920 (libhdbexecutor.so)
10: 0x00007f04c4488163 in Executor::X2::failPop(int)+0x110 at X2.cpp:3571 (libhdbexecutor.so)
11: 0x00007f04c44879b4 in Executor::X2::finishValue(Executor::X2ConnectorValue&, int&, bool)+0x110 at X2.cpp:920 (libhdbexecutor.so)
12: 0x00007f04c4488163 in Executor::X2::failPop(int)+0x110 at X2.cpp:3571 (libhdbexecutor.so)
13: 0x00007f04c44938d0 in Executor::X2::runPopTask(Executor::X2::PopTaskInfo&, int&, ltt::allocator&, ltt::allocator&)+0x1290 at X2.cpp:3548 (libhdbexecutor.so)
14: 0x00007f04c4494e32 in Executor::X2::runPopJob(Executor::X2Job*)+0x80 at X2.cpp:2956 (libhdbexecutor.so)
15: 0x00007f04c44956b8 in Executor::X2Job::run(Execution::JobObject&)+0x224 at X2.cpp:5294 (libhdbexecutor.so)
16: 0x00007f04ab3ec1fe in Execution::JobObjectImpl::run(Execution::JobWorker*)+0x72a at JobExecutorImpl.cpp:822 (libhdbbasis.so)
17: 0x00007f04ab3fadd2 in Execution::JobWorker::runJob(ltt::smartptr_handle<Execution::JobObjectForHandle>&)+0x2e0 at JobExecutorThreads.cpp:205 (libhdbbasis.so)
18: 0x00007f04ab3fbd24 in Execution::JobWorker::run(void*&)+0x1a0 at JobExecutorThreads.cpp:370 (libhdbbasis.so)
19: 0x00007f04ab433759 in Execution::Thread::staticMainImp(void**)+0x875 at Thread.cpp:492 (libhdbbasis.so)
[4175]{300560}[23/-1] 2015-03-19 10:57:26.017346 e Executor
X2.cpp(02961) : 20: 0x00007f04ab4343bd in Execution::Thread::staticMain(void*)+0x39 at ThreadMain.cpp:26 (libhdbbasis.so)
[4190]{300560}[23/-1] 2015-03-19 10:57:26.576080 e Memory
ReportMemoryProblems.cpp(00799) : OUT OF MEMORY occurred.
Host: sid-hdb
Executable: hdbindexserver
PID: 3599
Failed to allocate 131088 byte.
Current callstack:
1: 0x00007f04ab5a07fd in MemoryManager::PoolAllocator::allocateNoThrowImpl(unsigned long, void const*)+0x2a9 at PoolAllocator.cpp:1139 (libhdbbasis.so)
2: 0x00007f049dcfca79 in ptime::pcc::SingletonAlloc<ptime::pcc::MonitorAlloc<ptime::pcc::HeapAlloc>, ptime::pcc::GlobalScope>::allocate(unsigned long)+0x15 at pcc_MonitorAlloc.h:97 (libhdbrskernel.so)
3: 0x00007f049e095b50 in ptime::fastvector<void*, 16ul>::__allocate(unsigned long)+0x50 at fastvector.h:325 (libhdbrskernel.so)

SAP Content Server Connectivity issue

Hi Friends,
We have installed Content server 6.40 on a standalone server after the installation i tried to open below link but its not opening.
http://hostname:1090/ContentServer/ContentServer.dll?serverInfo
This content server has to be connected to R3(ECC 6 EHP4 ) hence we went to t codes OAC0 and OACT to create content repository
We have created a content repository as below
Content Rep.    ZDMS
Description     ZDMS
Document Area : DMS document management system
Storage type: 04 HTTP content server
Version no.     0046   Content Server version 4.6
HTTP server     192.168.30.12(where the content server is installed)
Port Number     1090                        SSL Port Number
HTTP Script     ContentServer/ContentServer.dll
Phys. path      D:\usr\sap\FNS\SYS\global\
and when i am checking i am getting below error
Error in HTTP Access: IF_HTTP_CLIENT->RECEIVE 1 ICM_HTTP_CONNECTION_FAILED
i have also created a entry in table SDOKPROF
as below but still same issue.
NAME = USEHTTPPLG
VALUE = OFF
and also we have run RSHTTP05 to check if any error but no errors.
Even when we are going in t code CSADMIN we are getting same error
Error in HTTP Access: IF_HTTP_CLIENT->RECEIVE 1 ICM_HTTP_CONNECTION_FAILED
In dev_icm belwo error is showing.
** WARNING => Connection request from (2/3/0) to host: xxx.xxx.xx.xx, service: 1090 failed (NIECONN_REFUSED)
[Thr 5352] {000102ca} [icxxconn.c 2271]
Kindly help to solve this issue.
Thanks
Basis

Hi Deepak,
Thanks for your inputes i checked IIS and after the content server installation these website were not created hence i created it manully as per note 1823408 - Manual Creation of Website on Windows 2008 Server
I created SAP_Content_Server by following first 3 steps but after that 4 , 5 and 6 steps are not clear i dont see those option in ISS manger.
1. Go to Internet Information Services Manager from Start Menu >> Admintrative tools >> IIS manager
a) or Start Menu >> Run >> "Inetmgr"
2. Right Click on Sites >> "Add Website" to create a new Website.
a) Site name <Name of the webiste>
b) port <Port No>
c) Physical Path <path of the Content Server installation directory>
d) Application Pool >> Select "DefaultAppPool"
e) Click "OK"
f) Website will be created.
3. Right click on the newly created website >> "Add Application"
a) Alias "ContentServer"
b) Application Pool >> Select "AppPool_ContentServer"
c) Physical Path <path of the Content Server installation directory>
d) Click "OK"
Content Server Application will be created.
4. Double Click on the website >> Handler Mappings
a) Select "ISAPI.dll" from the list >> Edit Feature Permissions
b) Check the tick boxes for "Script" and "Execute"
c) Click "OK"
5. Double Click on the website >> Handler Mappings
a) Enable "Anonymous Authentication"
b) Enable "Basic Authentication"
c) Enable "Windows Authentication"
6. Double Click on the IIS Server name >> ISAPI and CGI Restrictions >> Click on "Add"
a) ISAPI or CGI Path <path of the Content Server installation directory,selecting "ContentServer.dll" >
b) Description "ContentServer.dll"
c) Check the tick box "Allow extension path to execute"
d) Click "OK"

SAP GUI 620 connectivity issue

Hi,
I am using SAP .NET connector 2.0.1 on windows XP machine from last 6 months. However, before a couple of days back, by machine got formatted and I had to install all the softwares again. Now when I try to connect to my SAP server using SAP GUI 620 logon pad, it says "Connection timed out". This connection gets established from various windows 2000/2003 machines but not on XP machines. Is there some special setting which needs to be done in order to use SAP GUI 620 on win XP? If not, then what could be the potential solution?

Hi,
To my understanding you have to upgrade your Microsoft Excel verion to 2007. SAP GUI may not work either for 2003 and 2010. Please ask your IT team to upgrade your Excel version to 2007.
Regards,
Vishnu.

SAP CAL issue Activating HANA instance on AWS

My CAL instance of openSAP Course: Introduction to Software Development on SAP HANA 2013.01 is stuck in Activating status. I had previously deactivated my AWS account, and have now reactivated it. I got an error when trying to active the instance that my AWS account did not have the services required for the instance, and now I seem to be stuck in between creating the instance and the instance actually getting created. My AWS account is active, and I entered the security keys on the CAL side, but it is not working. Any help would be appreciated.

Hello Eric,
The instance entered in a state that does not allow to disappear from the list after the termination. We (the SAP CAL Team) just fixed the instance manually and it should disappear from your list. I also would suggest you to double check that there is no created instance in AWS console also.
Now you can create a new instance.
Best Regards,
Kremena

Error trying to activate HANA through SAP CAL

Hello,
I am encountering the following error when I try to activate AWS HANA through SAP CAL
"We are sorry, we cannot provide you with the solution due to the results of an export control check"
There seems to be a solution floating around but I can't seem to find the details.
Thank you in advance.
Jeff

Hi Stanimir, I am facing the same issue when trying to activate
1. openSAP - BI Clients and Applications on SAP HANA
2. SAP Business Warehouse 7.4 SP5 incl. SAP Business Objects BI 4.1 SP2 on SAP HANA 1.0 SP7 BYOL
error message
"We are sorry, we cannot provide you with the solution due to the results of an export control check."
Can you please help me ?
Sharan
[email protected]

CR2008 connectivity issue with BOE Universes(sap and non sap universes)

Hi Experts !!
Recently we tried to build/connect to a Universe in Crystal Reports2008 via 'Make a new connection tab'.
The universes are of SAP BW or non SAP Lying in BOE Servers and we are trying to build reports on them by conncting/utilizing the universes as a database for Crystal Reporting.
Our issue is most of the time we are not able to connect to the Universes and the connectivity blows out by some 'communication Error' thing initially.
While at some other points in time, the connectivity takes us to the Universe and we are able to select few characteristics and key figures from the Universe but the moment we go futher and try to run by pressing 'OK' button it blows out and say' LOGON FAILED'.
Apparantly, it is an connectivity issue with BOE server and from the different blogs it looks like it is a known issue for long.
The proposed issue resolution were like either CR2008 should be SP2 with BOE SP3 or there should be some additional .dll files defined in the paths in case of MSSQL database. None of this applies to us as we are on CR2008 with SP3 and going back to SP2 is probably not a viable option for us, and we are using Oracle as underlying database in this specific case.( i would like to tell you here that we are able to connect to Oracle Database directly though).
We have raised a message with SAP and was just wondering if we do have some solution/workaround already available to this known issue in place please?
Thanks&Regards.
Edited by: AMIT GHILDYAL on Aug 1, 2011 2:41 PM
Edited by: AMIT GHILDYAL on Aug 1, 2011 2:44 PM
Edited by: AMIT GHILDYAL on Aug 1, 2011 3:14 PM

Hi Amit,
Moved to Universe Forum.
If you have a case logged then no point posting here also, this is a public site and not a case management tool.
Once you do get the solution from your case please post it here also to help others if they have the same problem.
Thank you
Don

SAP CAL Activation with AWS - Failure

Following Instruction for Getting Started. Followed SCN documentation
Created user, Assigned two groups with with all four policy's @ IAM
SAP CAL still fails to validate.
Also wonder if there is more than one user, How does Cloud Application library authenticate the correct user in AWS.
Kindly help

Hi Kaustubh,
This particular solution has two VMs and you were able to create only one of them because of the following error:
Operation Start failed on step Start Virtual Appliances with message: Start failed for VM SAP ERP 607 on SAP HANA SPS07 due to Amazon Web Services issue : AMAZON : Your account is currently being verified. Verification normally takes less than 2 hours. Until your account is verified, you may not be able to launch additional instances or create additional volumes. If you are still receiving this message after more than 2 hours, please let us know by writing to [email protected] We appreciate your patience. (Service: AmazonEC2; Status Code: 400; Error Code: PendingVerification; Request ID: cec64f67-b058-46ad-a813-be175b78b7fc)
This put the solution instance in status INCONSISTENT and the following Suspend and Resume operations will change the status of the existing VM but will not bring the missing VM up. To do so you may terminate this instance and create a new one. A couple of days should be enough for the AWS verification. If not, I would recommend to contact [email protected] as the error message advises.
Best regards,
Stanimir

HANA Connections Misbehavior !

Hi All,
For some period of time every day i find the Hana Connections to be not responding and it gets fixed on its own. Has someone already faced the similar issue or aware what to do ?
Thanks in Advance,
Yash

Hi Yash,
Are all the Master servers up and running fine (or maybe you have 2 and 1 is "down" and enabled)?
The connectivity is tested when clicking on the Manage Spaces tab and it tries to connect over the network to the HANA server. If for some reason there is no reply within 5 seconds (configurable I believe), which could probably happen when HANA is under a heavy load, the connection will show as broken. If you improve your HANA connectivity, this should not appear anymore (or extend the timeout).
I am wondering now, looking at your list, if that connectivity timeout is on all of the connections together, hence all of them appear inactive. It would in that case just require 1 unresponsive HANA connection to make all others fail.
I would suggest to test all the connections in IDT when the issue appears and maybe at the same time have the Adminstration perspective open in HANA design Studio to see the load on the different servers (which may require a lot of swithching between windows).
This SAP Note gives some indication to a single problematic connection: 1979585 - In Explorer under Manage Spaces, HANA connections shows "NewDB server does not respond".
I hope this helps,
Denis

Authentication error when creating EPM Add-in connection with SAP BO Enterprise connection type

Hello, Experts,
I have a problem with creation of EPM Add-in connection when SAP BusinessObjects Enterprise connection type is selected.
An error message is "Error while communicating with the server. Framework message: Authorization failed."
Here are the steps that were implemented and how this issue was reproduced:
SAP BusinessObjects Planning and Consolidation 10.0 SP12 for Microsoft was installed and configured.
Integration between SAP BPC and SAP BusinessObjects BI 4.1 SP02 was implemented. SAP BO users can successfully connect to SAP BPC system.
EPM connector was successfully installed and deployed in SAP BusinessObjects BI server.
BPC ODBO 2.0 SP04 64BIT was installed in SAP BusinessObjects server.
EPM connection was successfully created in SAP BusinessObjects CMC.
EPM Add-in and BPC ODBO 2.0 SP04 32BIT was installed in another computer (let's call it CLIENT) which has MS Office 2007 32BIT installed.
From CLIENT computer we have launched Excel manually and successfully created BPC connection with Connection Type - Local.
Then we have logged into BI Launch Pad and launched New / EPM document (Excel). Excel has started.
In EPM Add-in we have pressed Logon.
In connection window selected SAP BusinessObjects Enterprise connection type.
An error "Error while communicating with the server. Framework message: Authorization failed." appears.
Before this error appears we are not getting any window where we could select EPM connection (created in CMC) nor the possibility to enter username or password.
Looking forward you valuable comments and suggestions.
Thank you in advance.
Donatas Budrys

Dear, Roberto,
Our user has Full Access to all BPC tasks and it is administrator in BI system.
Also we can successfully connect with the same user using Connection type "Local".
We had done some investigation and in the BPC SQL Server trace log we can catch the following message when an error occurs:
==============[System Error Tracing]==============
[System Name] : BPCXMLAService [Message Type] : ErrorMessage [Job Name] : ValidateUser [DateTime] : 04/23/2014 10:58:06 [UserId] : [Exception] DetailMsg : {System.Exception: Invalid user at SAP.BPC.Services.Webservice.XMLAService.XMLAService.ValidateUser()} ==============[System Error Tracing End ]==============
It is very interesting that after the EPM workbook is launched via BI Launch Pad till an error occurs we are NOT provided with possibility to enter any username and password. So the EPM add-in should use the same user which was logged into BI Launch Pad - in our case the user with administrative rights both in BI Launch Pad and BPC systems. Am I missing anything?
Looking forward your feedback.
Thank you in advance.
Best regards,
Donatas

Connectivity Issue

Hi All
Probably due to connectivity issue from Adapter engine to Integration engine, we have encountered with the following error in audit log of channel monitoring. Can any have an idea where we look for right settings?
"Transmitting the message to endpoint http://<Host name : service number (8000)>/sap/xi/engine?type=entry using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: java.net.ConnectException: Connection refused"
I tried to surf SDN, however I didn't get exact solution. Thanks in advance

Hi,
check if this 8000 is the same port used in SMICM-Services-http port,sxmb_admin-integration engine configuration-pipeline URL and exchange profile-http ports.it should be same 8000.
thanks.

Max allowed No of rows in SAP NetWeaver BW Connection

Hi Experts,
I am building a dashboard using SAP Netweaver BW Connection.
Query results in approx 4000 rows of data.(we know its not preferred to go with >512 rows of data but client is ok with the performance issue because of more data).
When i publish the dashboard its showing initializing.... and not moving any further.
I have changed the max. no of rows in the xcelcius(File->Preferences->Excel options->5000).
Please help me in solving this problem ASAP.
Thanks a ton in advance,
Bhargava Bommidi.
Edited by: BHARGAVA BOMMIDI on Mar 31, 2010 11:42 AM

Hi Bhargav,
I'm also facing the same issue.
Have done all the process given in,SAP Note 1307538.Also changed necessary parameters in Xcelsius.(File->Pref.->Excel Options)
Still the issue is... LiveOffice brings the whole data (approx.>1500 rows) in excel successfully,but when I run the dashboard through parameter/ prompt to webi report it again truncates row after 512 rows.
Looking fwd for help.
Regards,
Chitra

Error 2032 in SAP Netweaver BI Connection

I am using an xcelsius dashboard through a BICS connection. I am able to connect to a BEx query and publish this dashboard to SAP BW system. I also able to launch this dashboard in IE and everything works fine for next 30 min. I am able to go to multiple tabs in the dashboard and trigger various queries etc. However, after exactly 30 min, I get the error 2032. The exact error text says:
An error has occurred.
For more information, contact the file creator or your system administrator.
Error: Error #2032
Connection Type: SAP NetWeaver BI Connection
I am unable to find any such settings on the BW server side which can break the connection after 30 min. Also, BO is not involved as it's published on BW server itself. So, I am confused about what could be the reason and how to fix it.
Thanks in advance for your help.
Regards
Akhilesh

Hi All,
We were getting the same issue (Error #2032, while connecting to Bex query from DashboardDesign tool, "The First Post"),
The issue got resolved by installing "patch 14 for DashboardDesign 4.0 SP2".
You guys can try the same.
Thanks
Riyaz

Using 2 data (SAP Netweaver BW) connections in Xcelsius dashboard

I have a situation when using 2 data (SAP Netweaver BW) connections in Xcelsius dashboard.
Break-down of issue:
I have a toggle button in our Sales dashboard which displays Top Ten Customers versus Bottom Ten Customers. I use the value of the toggle button to trigger the data connections. When a user clicks the toggle button for Top Ten Customers the value of the toggle button would be a 1 which would trigger a BW query to capture sales data for the Top Ten Customers. When a a user clicks the toggle button for Bottom Ten Customers the value of the toggle button would be a 0 which would trigger a BW query to capture sales data for the Bottom Ten Custoemrs. NOTE: all the key figures in both querys use a scaling factor of 1000. So for example, if invoiced sale has a value of 100,000 the scaling factor of a 1000 would display this key figure with a value of a 100. The issue I am having with the dashboard is when I click the toggle botton for the Top ten Customers, the value shows as 100 and if i click the toggle button for Bottom ten Customers the value would show as 100,000. I need the toggle button to show the values using the scaling factor coming from the BW queries for both Top Ten Customers and Bottom Ten Customers. It's only using the 1000 scaling factor coming from the Top Ten Customers.
Any help on this issue would be graetly appreciated...
Thanks,
Joe

Hi, I get both. I think the errors are connected. On the one hand it is not possible to create any SAP NetWeaver BW connection, because you cannot enter the connection details- just as in the screen above. The only option you have is to use the "browse" button, but then the blank error appears.
When trying to open a Dashboard from Portal you have to use SAP->Open and then SAP GUI should appear, but here I get the error "Could not open from SAP" instead. I have installed BEx and SAP GUI of course, reinstalled all of them two times just as recommended above, also reinstalled MS Excel, Flash, Java. Furthermore I tried to repair the installation and to change between different editions, personal, departmental etc.
In the meantime I think it should not be possible at all to connect to BW with the departmental license key. Can somebody confirm that?

Connectivity Issues Cisco ASA 5515 in Transparent Mode

Hi,
we´re having problems with one transparent mode setup at one customer site. The ASA is equiped with a CX Module, but we´re not using it, so far in the service policy rules it was enabled and matched all traffic, but in "monitor only" mode. There is a global acl that allows any-any-IP.
Firewall-Info:
- ASA Version 9.1(2)
- Interfaces gi0/0 + gi0/2 without any interface errors
The ASA 5515x is configured as a "bump in the wire". In general our setup is working but with beginning of the installation of the firewall the customer faces following connection issues, without the firewall no problems:
- Connections to SAP-Servers behind the MPLS begin to drop, affected all users
- Incoming monitoring sessions (ping/snmp) from central management are facing ping timeouts, connection timeouts
- http downloads are stopping, Customer: it will stop responding and the download will fail.
In general the customer describes it this way: "We do not have the best connection here so once we connected the firewall all the problems are magnified"
I recognized, that we unconfigured the default inspection during initial setup and reconfigured this entry for the cx module. So the the default inspection with all the settings are not present any more... How important are these settings? One phenomen is, that I´ve seen a large numbers of concurrent connections that increased over time. And we already had that situation, that the firewall reached the max-conn count.
Should I try to reconfigure the default inspection, as it ships from factory? And whats the best way to check for problems? What can be the reason for the dropping connections?
I attached a network plan and the firewall config, hopefully, that somebody has an idea. Of course I can provide additional information...
Best Regards
Sebastian

Hi Vibhor,
thanks for your reply. Does this also affect the traffic, even the setting is set to "Monitor Only" ?
Is it recommend to configure the default-inspection rule as a default setting?
Further Question: I´ve read sth. about, that service policy rules must be "reloaded" to take effect, after they have been changed. Is that right and how do I reload them?
Here is an output from sh asp drop, do I have to care about certain values? This values result from two connected users doing some downloads over a 2Mbit connection.
ciscoasa# show asp drop
Frame drop:
Invalid encapsulation (invalid-encap) 10
First TCP packet not SYN (tcp-not-syn) 114
TCP failed 3 way handshake (tcp-3whs-failed) 3
TCP RST/FIN out of order (tcp-rstfin-ooo) 18
Dst MAC L2 Lookup Failed (dst-l2_lookup-fail) 33
L2 Src/Dst same LAN port (l2_same-lan-port) 260
FP L2 rule drop (l2_acl) 2958
Interface is down (interface-down) 9420
No management IP address configured for TFW (tfw-no-mgmt-ip-config) 117
Dropped pending packets in a closed socket (np-socket-closed) 66
Thanks
Sebastian

SAP CAL HANA - Connectivity issues

Similar Messages

Maybe you are looking for