Clovertech

VPN Issues.

› Clovertech Forums › Read Only Archives › Cloverleaf › Cloverleaf › VPN Issues.

  • Creator
    Topic
  • June 8, 2010 at 12:06 am #51793
    Kevin Crist
    Participant

      We are recieving messages through the vpn that are embedded pdfs based on certain criteria. We had been having problems with not recieving some messages. In looking in our logs it would show that 3 or 4 times through the night we would lose our connection. They put in a keep alive ping after so long so the vpn tunnel stays up. Then they are telling us that our acks are timing out so they cant send messages.  Now they say they are getting this error:

      Unable to connect to destination

      java.net.ConnectException: Connection refused

      and cant connect.  

      They can ping through the tunnel to the interface engine ip address. But theycan verify they don

    • Creator
      Topic
    Viewing 3 reply threads
    • Author
      Replies
      • June 8, 2010 at 1:28 am #71764
        Jim Kosloskey
        Participant

          Kevin,

          Is this a TCP/IP (or MLP PDL) connection and if so is 45218 the port number you have defined in you thread configuration?

          If the port number is 45218 this may be in your ephemereal range of ports and thus might be interfered with by other connections that also dip into the ephemereal range.

          All Mirth is is another integration tool and if the port is the issue it would not make any difference.

          We tend to not let vendors tell us which integration engine to use. If this is done right it will work with Cloverleaf.

          In my case unless the vendor can defend their system, I would suspect their system before I suspect Cloverleaf (again assuming everyone is playing the game correctly).

          email: jim.kosloskey@jim-kosloskey.com 30+ years Cloverleaf, 61 years IT – old fart.

        • June 8, 2010 at 12:12 pm #71765
          Kevin Crist
          Participant

            Yes, this is a TCP/IP connection and the port defined is 45218. Can you explain what the ephemereal range of ports is? Is there somewhere we can tell what these are or are they a standard? I didnt realize what the Mirth was and i agree, cloverleaf should work fine with this.

          • June 8, 2010 at 1:12 pm #71766
            James Cobane
            Participant

              Since this is going over a VPN, another thing to look at is how large the messages are coming from the external system.  Since these are PDFs, it’s possible that they are large enough that it is causing issues with the number of packets that the message is getting broken down into and thus causing timeouts.  You may want to turn up the EO on Cloverleaf to see if your getting any info in the log indicating that Cloverleaf isn’t getting the full message within the timeout of the pdl.  We also have a connection with a vendor that uses Mirth, and we found that they had issues receiving the ACK over the same port that they sent the message on.  It would appear that they would close the port shortly after the send and the ack wouldn’t get back to them.  We ended up sending the ACK’s over a different port.  This may have been an issue with the vendor not being able to configure Mirth correctly.

              Jim Cobane

              Henry Ford Health

            • June 8, 2010 at 1:19 pm #71767
              Jim Kosloskey
              Participant

                Kevin,

                Try this link for a discussion on clovertech regarding ports:

                https://usspvlclovertch2.infor.com/viewtopic.php?t=2681&highlight=ephemeral

                email: jim.kosloskey@jim-kosloskey.com 30+ years Cloverleaf, 61 years IT – old fart.

            • Author
              Replies
            Viewing 3 reply threads
            • The forum ‘Cloverleaf’ is closed to new topics and replies.