EPICS Controls Argonne National Laboratory

Experimental Physics and
Industrial Control System

1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  <20142015  2016  2017  2018  2019  2020  2021  2022  2023  2024  Index 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  <20142015  2016  2017  2018  2019  2020  2021  2022  2023  2024 
<== Date ==> <== Thread ==>

Subject: EPICS vs. Firewalls
From: Eric Norum <[email protected]>
To: EPICS mailing list <[email protected]>
Date: Mon, 15 Sep 2014 12:37:55 -0700
I thought that I understood the firewall configuration necessary to support EPICS, but I’m having problems with my desktop OS X machine getting values from a soft IOC on a Linux machine.

wenorum@enorum 203> caget bpmTest:098:AFE:pll6delay 
CAC: Unable to connect because "Connection refused"
CA.Client.Exception...............................................
    Warning: "Virtual circuit disconnect"
    Context: "xildev4.lbl.gov:60865"
    Source File: ../cac.cpp line 1215
    Current Time: Mon Sep 15 2014 12:33:12.417815000
..................................................................
Channel connect timed out: 'bpmTest:098:AFE:pll6delay' not found.


Here are the salient lines from the firewall configuration on xildev4 (the Linux box):
-A INPUT -s 128.3.128/255.255.252.0 -m state --state NEW -m udp -p udp --sport 5064 -j ACCEPT
-A INPUT -s 128.3.128/255.255.252.0 -m state --state NEW -m udp -p udp --dport 5065 -j ACCEPT
-A INPUT -s 128.3.128/255.255.252.0 -m state --state NEW -m udp -p udp --dport 5064 -j ACCEPT
-A INPUT -s 128.3.128/255.255.252.0 -m state --state NEW -m tcp -p tcp --dport 5064 -j ACCEPT

Which I think looks right — at least according to:  http://www.aps.anl.gov/epics/base/R3-14/12-docs/CAref.html#fire
I expect that I’ve missed something obvious here…..

-- 


Replies:
Re: EPICS vs. Firewalls J. Lewis Muir

Navigate by Date:
Prev: Re: Sequencer 2.2.0 Benjamin Franksen
Next: Re: Sequencer 2.2.0 Benjamin Franksen
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  <20142015  2016  2017  2018  2019  2020  2021  2022  2023  2024 
Navigate by Thread:
Prev: RE: Does the record type lsi support a long string longer than 40 bytes? Yun Sangwon
Next: Re: EPICS vs. Firewalls J. Lewis Muir
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  <20142015  2016  2017  2018  2019  2020  2021  2022  2023  2024 
ANJ, 17 Dec 2015 Valid HTML 4.01! · Home · News · About · Base · Modules · Extensions · Distributions · Download ·
· Search · EPICS V4 · IRMIS · Talk · Bugs · Documents · Links · Licensing ·