TCP connections fail intermittently with Juniper Firewall and the TCP sequence check feature enabled.

(Doc ID 2296913.1)

Last updated on DECEMBER 01, 2017

Applies to:

Solaris Operating System - Version 10 3/05 and later
Information in this document applies to any platform.

Symptoms

Various issues due to failing NFS TCP connections, shortly after some file transfers are initiated.

Packet traces show packets leaving the NFS client and not reaching the NFS server. 

The issue is only present when a Juniper firewall is in the mix, and only when the Juniper TCP sequence check feature is enabled.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms