Re: PVA Gateway issues with two networks client

[Saisrikiran Mudigonda via Tech-talk <tech-talk@aps.anl.gov>]

Hi Michael,

Very sorry for the late reply. Please find the mygw.conf and acf_rules, pv_names files in text format.

Thanks for your help.

Sai

On Sun, Feb 9, 2025 at 8:55 AM Michael Davidsaver <mdavidsaver@gmail.com> wrote:

On 2/5/25 22:19, Saisrikiran Mudigonda via Tech-talk wrote:
> Hi all,
> I forgot to add the mygw.conf file contents in the earlier email. Please find the my gateway configuration details below.

Could you please attach mygw.conf as a text file?


> Any help is welcome.
> Thanks,
> Sai.
>
> On Wed, Feb 5, 2025 at 2:00 PM Saisrikiran Mudigonda <smudigonda@tifrh.res.in <mailto:smudigonda@tifrh.res.in>> wrote:
>
>     Hi all,
>
>     I am facing while running the PVA gateway and configuring two networks. The scenario is that I have class C 192.x.x.x network and 10.0.1.x network configured on the PVA gateway. I am running the IOC (exampleCPP) on 10.0.1.10 (VM) and I am able to access the PV's (PVRint, PVRlong, PVRshort, PVRbyte) from 192.168.0.106 (Windows) machine. Everything works fine.
>
>     Now, I have added a new Windows machine with two NIC cards, Ethernet with 192.168.0.107 and a USB to LAN cable with 10.0.1.33 configured. With this machine, I am able to access only the PV's using 10.0.1.x network (without the PVA gateway running). With the PVA gateway running, I am unable to access the PV's in Phoebus using 192.168.0.107 IP address. I tried to check the ACF rules file, PV list file but to no avail.
>
>     Please find here the ACF rules file and PV list file contents attached here for reference.
>     Any help or suggestions why the PV's access using the PVA gateway with the 192.x.x.x network is not working would be appreciated.
>
>     I am suspecting that the PVA gateway is binding the MAC address of the machine with a particular IP address. Can somebody confirm if this is the case?
>     Also, is there a way to check the PVA gateway logs as to get a peek at what's happening within the gateway?
>
>     Thanks,
>     Sai
>
>
>
>     --
>
>     Saisrikiran Mudigonda
>     Project Software Engineer
>     Extreme Photonics Innovation Centre
>     TIFR, Hyderabad, India
>

{
	"version":2,
	"readOnly":false,
	"clients":[
	    {
		"name":"client192",
		"provider":"pva",
		"addrlist":"192.168.0.255",
		"autoaddrlist":false,
		"statusprefix":"GW:STS:"
	    },
            {
		"name":"client10",
		"provider":"pva",
		"addrlist":"10.0.1.255",
		"autoaddrlist":false,
		"statusprefix":"GW:STS:"
	     }
           ],
           "servers":[
	     {  
                "name":"server10",
		"clients":["client192"],
                "interface":["10.0.1.6"],
                "addrlist":"10.0.1.255",
                "autoaddrlist":false,
		"statusprefix":"GW:STS:",
                "access":"acf_rules1.acf",
                "pvlist":"pv_names2.pvlist"
             },
             {
                "name":"server192",
                "clients":["client10"],
                "interface":["192.168.0.109"],
                "addrlist":"192.168.0.255",
                "autoaddrlist":false,
                "statusprefix":"GW":STS:",
                "access":"acf_rules1.acf",
                "pvlist":"pv_names2.pvlist"
              }
            ]
}

PVRint	ALLOW	DEFAULT
PVRint	ALLOW	OTHER
PVRlong	ALLOW	OTHER
PVRlong	ALLOW	OTHER
PVRlong	DENY	FROM	192.168.0.107
PVRshort	ALLOW	DEFAULT
PVRshort	ALLOW	OTHER
PVRbyte	DENY

UAG(group1) { "pryas" }
UAG(group2) { "EPIC" }
UAG(group3) { "vboxuser" }
UAG(users_10) {"vboxuser", "EPIC", "Admin"}
UAG(users)   { "Malu", "EPIC", "pryas" }

HAG(hostgroup192_1) { "192.168.0.106" }
HAG(hostgroup192_2) { "192.168.0.105" }
HAG(hostgroup192)   { "192.168.0.107", "192.168.0.106", "192.168.0.105" }
HAG(hostgroup10_1)  { "10.0.1.53", "10.0.1.10" }

ASG(DEFAULT) {
    RULE(1,WRITE) {
        UAG(users)
        HAG(hostgroup192)
    }
}
ASG(OTHER) {
    RULE(1,WRITE) {
        UAG(users_10)
        HAG(hostgroup10_1)
    }
}