Article ID: 164590
Article Last Modified on 10/5/2006
APPLIES TO
- Microsoft SNA Server 3.0 Service Pack 4
This article was previously published under Q164590
Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry
SYMPTOMS
Branch-based SNA Servers that use a Remote Link Service may not be able to
communicate with a Central SNA Server if there are Internet firewalls or
screening routers between the SNA Server systems.
CAUSE
You can configure Central SNA Servers that are distributing link services
for remote SNA servers to use specific software port numbers. This allows
administrators of Internet firewalls to filter packets based on port
number, thereby denying/accepting their propagation to the private
network.
Branch (or Remote) SNA Servers that use the Remote Link Service to
communicate with the Central SNA Servers, use dynamic ports. The
Distributed Link Service is installed on the branch server, as installed
via SNA Server Manager (which appears with a link service name of SnaRemx
within SNA Server Manager). Because these remote servers use dynamic
ports, administrators could not determine what port number would be used,
thereby limiting their ability to filter packets based on port numbers.
RESOLUTION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
The SNA Server transport DLLs were modified to support registry
entries that can be used to set fixed port numbers over the
protocols supported by distributed link services. The supported
protocols are TCP/IP, IPX/SPX, and Banyan Vines IP.
The updated SNA Server modules and registry entries below must be
implemented on the branch (remote) SNA Server that is using the
distributed link service.
Normally the distributed link service (running on the central box,
such as SnaDlcX - for 802.2, SnaChanX - for Channel, etc) opens a
dynamic port number. The following registry setting can be used to
set the port number used by the link service:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<linkservice>\Parameters\
If TCP/IP:
If Netware IPX/SPX:
If Banyan Vines:
For example:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SnaDlc1\Parameters\IpPort: REG_DWORD: 1479 (decimal)
The firewall must be configured to allow TCP/IP traffic to and
from the port number used by the distributed link service running
on the central server.
It should not be necessary to set the local port number used by
the remote link service (i.e. SnaRemX) running on the branch
system, so that a dynamic port number is always used by SnaRemX.
WARNING: If you configure fixed IP ports on both ends, you will
be unable to reopen a connection for several minutes after it is
disconnected. This is due to the TcpTimedWaitDelay, per TCP/IP
RFC793.
However, if you must set the local port number that is used
by the remote link service (SnaRemX), the following registry
setting can be used to set the port number used by the link
service:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SnaRemX\Parameters\
If TCP/IP:
If Netware IPX/SPX:
If Banyan Vines:
LocalVinesPort: REG_DWORD:
Where "X" is the link service name. Note that there may be several
"SnaRemx" link services installed on the branch server. The names
default to SnaRem1, SnaRem2, and so forth.
For example:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SnaRem1\Parameters\LocalIpPort: REG_DWORD: 1479 (decimal)
The following files were modified to provide this support:
<snaroot>\system\snaip.dll
<snaroot>\system\snanw.dll
<snaroot>\system\snabv.dll
STATUS
Microsoft has confirmed this to be a problem in SNA Server version 3.0.
This problem was corrected in the latest Microsoft SNA Server 3.0 U.S.
Service Pack. For information on obtaining the service pack, query on
the following word in the Microsoft Knowledge Base (without the spaces):
Keywords: kbbug kbfix KB164590