SQL dropping connection when in different VLAN
Hi Community.
I'm working on our LAN VLAN segmentation using our SonicWall NSA2700 as router. I have created some VLAN subinterfaces under the same Interface and added policy access rules to communicate them as needed. Everything works fine except SQL based programs. We put SQL (and others) servers in one VLAN and clients accessing to those servers in another. The thing is that they were constantly being disconnected. So I put them back to old VLAN (before segmentation, sql server and clients in the same) and everything went back to normal.
Am I missing something? Everything else (internet connection, shared drivers, printing) works fine with different VLANs scenario, just SQL based connections are being dropped.
Any clue would be appreciated.
Thanks.
Best Answer
-
ITSRB Newbie ✭
We had such a problem with oracle databases (errors: ORA-12637, ORA-00609). Oracle (since 19c) checks whether the underlying network supports "out-of-bound" packets. This refers to packets with URG flag.
We have enabled "Allow TCP Urgent Packets" in the access rules (Editing Rule -> Optional Settings -> Allow TCP Urgent Packets) for the Clients who needs it.
Maybe this will also help you.
1
Answers
@roger_92 is there a chance that the connections get dropped after a while when idle? It might be a timeout problem and you can raise the appropriate timeout in you access rule. Default for TCP is 15 Minutes, which might be not enough when not refreshed with a keep-alive. I saw this plenty of times.
If this does not work, you might check with the Event Log if any Security Service is interferring, but my bets are on timeout.
--Michael@BWC