一起因JUNIPER防火墙引起的PL/SQL使用故障

lihui2082483

ORALCE数据库在使用PL/SQL连接时遇到的怪现象  
现象如下：
      数据库里只有一张表，在远程连接使用命令行时用如下命令：
select * from user_info;完全没有问题，但在使用PL/SQL使用时就和死机一样，完全没有反应。根据我部维保公司一名资深工程师的建议，我立刻查阅相关资料从下午五点至深夜两点半，根据我部使用JUNIPER防火墙的因素，查阅JUNIPER相关资料：
sqlnet protocol and Oracle 10 problems
Options
Mark as New
Bookmark
Subscribe
Subscribe to RSS Feed
Highlight
Print
Email to a Friend
Report Inappropriate Content
?02-09-201005:36 AM
Has anyone had any luck on an SRX240 running JunOS 9.6 with sqlnet or oracle 10 databases running through it.
This has been worked on for quite some time on the DB side and they are finally pointing the finger at the firewalls. So we started looking at this today.
The only thing they could give us from the DB traces was that packets seem to be dropping randomly and Oracle claims not to many firewalls handle the sqlnet protocol well.
Is there an ALG for this in JunOS 9.6.
Also this is running through a Netscreen 208 that may be the cause as well. The app server is in our DMZ and connects to the Databases on our PCI vlan which has an SRX 240 in front of it to keep it segragated fomr the rest of the network for compliance issues. The DMZ firewalls are Netscreen 208a. Getting replaced later this year with SRX650. But we have to get this DB working now.
Message 1 of 6(6,055 Views)
Reply
<!-- container for custom hooks -->
etaftm
Contributor

Posts: 59
Registered:         ?11-22-2009
0
Re: sqlnet protocol and Oracle 10 problems
Options
Mark as New
Bookmark
Subscribe
Subscribe to RSS Feed
Highlight
Print
Email to a Friend
Report Inappropriate Content
?02-10-201007:16 PM
We had the same problem with our oracle server. The Juniper tech advised us to turn off the SQL ALG
set security alg sql disable
===================================================================
仔细阅读相关文档：
在 JUNIPER JUNOS 6.1以下版本使用以下命令：set alg sql disable;
在 JUNIPER JUNOS 6.2,6.3版本使用以下命令：unset alg sql enable;
今天 下午验证后远程使用PL/SQL连接查询此表正常。

tom0732

以前也遇到过，印象中关闭SQL ALG的时候只是针对1521端口

lihui2082483

应该是这样，具体的我看ＪＵＮＩＰＥＲ的手册看了半天对这条也没有详细的解释，