Re: PVA connection problem

[Ralph Lange via Tech-talk <tech-talk@aps.anl.gov>]

On Thu, 14 Sept 2023 at 22:52, Ignacio Arriagada via Tech-talk <tech-talk@aps.anl.gov> wrote:

Hello Tech-talk,

I'm running into an issue trying to communicate between 2 VMs using pva. In VM1 I have a softIOC running with PVAccess enabled with the following standard configuration.

epics> pvasr
pvAccess Server v7.1.6
Active configuration (w/ defaults)
EPICS_PVAS_INTF_ADDR_LIST = 0.0.0.0:5075
EPICS_PVAS_BEACON_ADDR_LIST =
EPICS_PVAS_AUTO_BEACON_ADDR_LIST = YES
EPICS_PVAS_BEACON_PERIOD = 15
EPICS_PVAS_BROADCAST_PORT = 5076
EPICS_PVAS_SERVER_PORT = 5075
EPICS_PVAS_PROVIDER_NAMES = QSRV

epics> pval
testSCS:TX
testSCS:RX
testSCS:gcbTx
testSCS:page0

epics>

[...]

The firewall config for the VMs is the following

VM1:

$ sudo firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: enp0s3
  sources:
  services: cockpit dhcpv6-client ssh
  ports: 8888/tcp 8888/udp 5064/tcp 5065/tcp 5064/udp 5065/udp
  protocols:
  forward: no
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

[...]

For security reasons I need to be able to find a configuration for the firewall that works with PVAccess. Any idea what I could be missing?

Sorry for asking the obvious:

Have you tried adding the PVA ports 5075/5076 in the same way as the CA ports 5064/5065?

Cheers,
~Ralph