Experimental Physics and
Industrial Control System

Ralph Lange <[email protected]> · Fri, 14 Sep 2012 23:25:54 +0200

On 14.09.2012 22:38, Mark Rivers wrote:
> I have a naïve question about configuring soft IOCs, of which we now have quite a number.  We have not been setting EPICS_CA_SERVER_PORT when running the soft IOCs, so we get the warning:
>
> cas warning: Configured TCP port was unavailable.
> cas warning: Using dynamically assigned TCP port 44160,
> cas warning: but now two or more servers share the same UDP port.
> cas warning: Depending on your IP kernel this server may not be
> cas warning: reachable with UDP unicast (a host's IP in EPICS_CA_ADDR_LIST)
>
> We have also realized that our soft IOCs are not visible from outside our beamline firewall.  We have opened up ports 5064 and 5065 in the beamline firewall, so we can access PVs from the wireless network, and that works for VME crates (and the first soft IOC on a given computer).
>
> If we want to be able to access the soft IOCs from the wireless as well, is the following sufficient:
>
> - Set each soft IOC to use a specific EPICS_CA_SERVER_PORT
> - Open those ports in the firewall

That should work.

Two other options that might be preferable:
- Run a CA Gateway on a (dedicated, maybe virtual) machine inside your
beamline net, set it to a non-standard port, and open the firewall just
for access to that machine/port. That way you do not need to set
EPICS_CA_ADDR_LIST for all your other IOCs inside the beamline network
(to have them see all the non-standard soft IOCs).
- Run a CA Nameserver for all soft IOCs, and point your outside clients
to the Nameserver. Answers to name resolution requests contain IP number
and port, making all soft IOCs visible.

~Ralph

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System