Author: Joshua Ehiguese

Date: Nov 26th - 2014

Title: Steps to test scan and vip connections after firewall modification rules.

Document Change Control.

Revision Date Author Description of change

1.0 2014-11-26 Joshua Ehiguese Document Creation.

1. SCAN connection tests

From the Application server eg. OEM server confirm that you can connect to each database
(tutu) using sqlplus with the SCAN (node-scan.domain.com:1522) .
 e.g

sqlplus sys/<password>@node-domain.com:1522/tutu_s.domain.com as sysdba

sqlplus sys/<password>@@node-domain.com:1522/kiki_s.domain.com as sysdba
sqlplus sys/<password>@@node-domain.com:1522/nunu_s.domain.com as sysdba

2. VIP connection tests

From the OEM MY server confirm that you can connect to either one of the database (tutu)
using sqlplus with the VIP on each host(noden1-vip. domain.com:1521, noden2vip.
domain.com:1521, noden3-vip. domain.com:1521, noden4-vip. domain.com:1521)
e.g

sqlplus sys/<password>@noden1-vip.domain.com:1521/tutu_s.domain.com as sysdba

sqlplus sys/<password>@noden2-vip.domain.com:1521/tutu_s.domain.com as sysdba
sqlplus sys/<password>@noden3-vip.domain.com:1521/tutu_s.domain.com as sysdba
sqlplus sys/<password>@noden4-vip.domain.com:1521/tutu_s.domain.com as sysdba

Confirm you are able to connect from the OEM sever using the VIP IP address.

/etc/hosts:

44.44.44.45 noden1-vip.domain.comnoden1-vip

44.44.44.46 noden2-vip.domain.comnoden2-vip

44.44.44.47 noden3-vip.domain.comnoden3-vip

44.44.44.52 noden4-vip.domain.comnoden4-vip

e.g

sqlplus sys/<password>@44.44.44.45:1521/tutu_s.domain.com as sysdba

sqlplus sys/<password>@44.44.44.46:1521/tutu_s.domain.com as sysdba
sqlplus sys/<password>@44.44.44.47:1521/tutu_s.domain.com as sysdba
sqlplus sys/<password>@44.44.44.52:1521/tutu_s.domain.com as sysdba

3. Ping tests
 Confirm you are able to ping the scan from the OEM server and should return 3 IPs in round
robin fashion.

e.g

You can query the dns to find out the ip address e.g.

$nslookup node-domain.com
$nslookup node-domain.com
$nslookup node-domain.com
$nslookup node-domain.com

$ ping –c4 node-domain.com

$ ping –c4 node-domain.com
$ ping –c4 node-domain.com
$ ping –c4 node-domain.com
ping node-domain.com

Note: Not working if Ping is disabled.

4. IP address connection tests

Confirm you are able to connect from the MY OEM sever to the scan but this time using the scan
IP address from nslookup above.
e.g

sqlplus sys/<password>@44.44.44.48:1522/tutu_s.domain.com as sysdba

sqlplus sys/<password>@44.44.44.49:1522/tutu_s.domain.com as sysdba
sqlplus sys/<password>@44.44.44.50:1522/tutu_s.domain.com as sysdba