Resolving firewall/routing issues (ERRNO=450 ERRNOJR=74947206)

The z/OS® IBM zAware log stream client can receive socket connection "time out" type error conditions that stem from security settings on the IBM zAware server logical partition. Do the following:
  1. Verify the network configuration of the IBM zAware server logical partition (for example, one or more of the IP addresses, the port that makes use of 'ifconfig', 'netstat -an', and so forth).
  2. Verify that the _BPXK_SETIBMOPT_TRANSPORT environment variable is not set on the z/OS system. The 'env' command will show the environment variable setting.
  3. Verify that routing was set up properly using 'ping', 'ftp' or 'traceroute'. From the IBM zAware server logical partition, ping the z/OS image intended as the z/OS IBM zAware log stream client system. The command 'D TCPIP, {procname},ROUTE' shows the routing table of the z/OS system.
  4. If the connection is successful from the IBM zAware server logical partition to the z/OS IBM zAware monitored client system, but the reverse direction fails, check the security setting on the IBM zAware server logical partition.
Note:
  1. The TCPDUMP tool is useful to determine where the communication attempt fails. Start the TCPDUMP tool first on the IBM zAware server logical partition. You might want to specify the '-i' option to filter out the content: 'tcpdump -i interfacename'.
  2. Try to connect from the z/OS IBM zAware log stream client system to the IBM zAware server logical partition: 'ftp ipaddress portnumber'.
  3. Check to determine if the SYN packets have arrived for the connection request and if there areany SYN/ACK response packets. If a SYN/ACK response packet does not exist, check the security setting on the IBM zAware server logical partition.