Troubleshooting
Problem
A new Enterprise Extender (EE) connection between different networks is being set up. The connection comes up and a CPCP session is established but user sessions are failing with an IST663I message and sense code 0897000A.
Symptom
IST663I BIND FAIL REQUEST RECEIVED, SENSE=0897000A
IST664I REAL OLU=NETA.APPLA REAL DLU=NETB.APPLB
IST889I SID = FFDFD056B774D9FF
IST891I NETB.VTAMB GENERATED FAILURE NOTIFICATION
IST893I ORIGINAL FAILING REQUEST IS BFINIT
IST314I END
Cause
The firewall policy between NETA and NETB was discarding the packets used to establish a rapid transport protocol (RTP) pipe for an LU-to-LU session. The connection setup sent by the interchange node in NETB to establish the necessary RTP pipe was never received by the RTP partner node in NETA. The session establishment flows continued and the BIND was eventually sent. Since the pipe setup from NETB to NETA has still not become fully active a new PIPE was created from NETA to NETB for this same session. The Bind was sent over this new pipe to NETB. NETB expects the bind for this session to come over the pipe that it is still in the process of being activated. The BIND coming over a different pipe is a should not occur situation. VTAM fails the session with the 0897000A sense code.
Resolving The Problem
For EE connections, you must verify that all firewalls along the connection path allow User Datagram Protocol (UDP) traffic in both directions over all 5 of the ports used for EE (12000, 12001, 12002, 12003 and 12004). To determine if firewall problems exist, you can use the DISPLAY EEDIAG,TEST=YES command to test UDP connectivity in both directions over all 5 of these ports. Also, you can enable this traffic more granularly, if desired, by enabling UDP traffic over these 5 ports only between specific pairs of IP addresses (the EE endpoint IP addresses).
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg21358344