Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

We have two Oracle 11g Enterprise Edition servers that need to replicate data via Oracle streams. However, the two servers are on untrusted domains and connect via a VPN. On end of the connection is a Juniper firewall, with the other side a TMG firewall.

I know the listener runs on port 1521, but what other ports or port ranges should be opened for Oracle replication to work correctly?

share|improve this question
    
Oracle's network protocol uses more than just port 1521: port 1521 is used purely for the initial connection. See stackoverflow.com/a/6246318/391445 for more information. –  Colin 't Hart Feb 20 at 14:01
add comment

1 Answer 1

I don't think any other ports than the listener ports are required. I suspect that the ports need to be open on your source AND target database/firewall, allowing both incoming and outgoing connections. Also, the host running RMAN has to be able to reach the listener ports, but that's probably default.

If tnsping works to both servers from the host you are running RMAN from, i think you should be all set.

share|improve this answer
1  
Oracle's network protocol uses more than just port 1521: port 1521 is used purely for the initial connection. –  Colin 't Hart Feb 20 at 14:02
    
Are you sure? The client will use a whole range of ports to connect to the listener port, but i was under the impression Oracle only listens on port 1521. Of course, this could be part of the problem, if the outgoing client connections get blocked. –  Wouter Feb 20 at 14:19
    
I just did a portscan on our server, aside from other services, only port 1521 is open. Also our server firewall blocks anything else... So even if another port is negotiated, this should not work. I could do a packetsniff of an active connection to verify... –  Wouter Feb 20 at 14:22
1  
Yes, if I recall correctly: the server process connects back to the client on a port number that the client communicates to the server as part of the connection process. –  Colin 't Hart Feb 20 at 14:43
1  
I was wrong in the details. In some implementations the listener communicates the new port number of the server process that has been started for the client and the client connects to that. But some newer versions don't do this anymore. Rather than regurgitate everything, here's a useful link that also includes references to Firewall vendors' docs: packetpushers.net/sqlnet-a-k-a-oracle-tns-and-firewalls –  Colin 't Hart Feb 21 at 9:33
show 1 more comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.