rac修改监听端口

rac修改监听端口 一、背景与目标 在生产环境中，为了安全考虑，通常需要修改Oracle RAC监听的默认端口号。本技术方案旨在详细说明如何在Oracle RAC环境中修改监听端口，包括SCAN listener端口和Listener Ports，以确保数据库的安全性和稳定性。 二、环境准备 Oracle RAC集群环境已搭建并正常运行。 拥有足够的权限（如grid用户和oracle用户）来执行相关操作。 一、环境说明 数据库版本： Version 19.3.0.0.0 系统版本： [grid@rac1 ~]$ cat /etc/redhat-release  Red Hat Enterprise Linux Server release 7.6 (Maipo) IP相关信息： # public 192.168.56.111        rac1 192.168.56.112        rac2   # private 10.10.10.1   rac1-priv 10.10.10.2   rac2-priv   # virtual 192.168.56.113    rac1-vip 192.168.56.114    rac2-vip # scan-ip 192.168.56.115            rac-scan 需要注意的是如果某个应用要通过 SCAN IP 访问数据库，开通网络访问关系时除了开通 SCAN IP 端口外，还需要开通各个 VIP 监听端口， 因为SCAN IP 是把连接请求发送转发给 local listener，后续应用和 local listener 之间通讯的过程， 需要通过 VIP 来访问故也需要开通 VIP 监听端口，连接建立完成后，和 SCAN IP 就没有关系了   1.查看当前的本地监听和scan监听配置 [grid@rac1 ~]$ srvctl config scan_listener SCAN Listeners for network 1: Registration invited nodes:  Registration invited subnets:  Endpoints: TCP:1521 SCAN Listener LISTENER_SCAN1 exists SCAN Listener is enabled. [grid@rac1 ~]$ srvctl config scan SCAN name: rac-scan, Network: 1 Subnet IPv4: 192.168.56.0/255.255.255.0/enp0s3, static Subnet IPv6:  SCAN 1 IPv4 VIP: 192.168.56.115 SCAN VIP is enabled. [grid@rac1 ~]$ srvctl config listener -l listener Name: LISTENER Type: Database Listener Network: 1, Owner: grid Home: <CRS home> End points: TCP:1521 Listener is enabled. Listener is individually enabled on nodes:  Listener is individually disabled on nodes:  2 查看监听状态 [grid@rac1 ~]$ lsnrctl  status LSNRCTL for Linux: Version 19.0.0.0.0 - Production on 08-NOV-2024 01:01:42 Copyright (c) 1991, 2019, Oracle.  All rights reserved. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER))) STATUS of the LISTENER ------------------------ Alias                     LISTENER Version                   TNSLSNR for Linux: Version 19.0.0.0.0 - Production Start Date                07-NOV-2024 05:00:14 Uptime                    0 days 20 hr. 1 min. 28 sec Trace Level               off Security                  ON: Local OS Authentication SNMP                      OFF Listener Parameter File   /u01/app/19.9.0/grid/network/admin/listener.ora Listener Log File         /u01/app/grid/diag/tnslsnr/rac1/listener/alert/log.xml Listening Endpoints Summary...   (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER)))   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.56.111)(PORT=1521)))   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.56.113)(PORT=1521))) Services Summary... Service "+ASM" has 1 instance(s).   Instance "+ASM1", status READY, has 1 handler(s) for this service... Service "+ASM_DATA" has 1 instance(s).   Instance "+ASM1", status READY, has 1 handler(s) for this service... Service "+ASM_OCR" has 1 instance(s).   Instance "+ASM1", status READY, has 1 handler(s) for this service... Service "86b637b62fdf7a65e053f706e80a27ca" has 1 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service... Service "orcl" has 1 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service... Service "orclXDB" has 1 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service... The command completed successfully [grid@rac1 ~]$ lsnrctl status LISTENER_SCAN1 LSNRCTL for Linux: Version 19.0.0.0.0 - Production on 08-NOV-2024 01:01:55 Copyright (c) 1991, 2019, Oracle.  All rights reserved. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN1))) STATUS of the LISTENER ------------------------ Alias                     LISTENER_SCAN1 Version                   TNSLSNR for Linux: Version 19.0.0.0.0 - Production Start Date                07-NOV-2024 04:59:22 Uptime                    0 days 20 hr. 2 min. 33 sec Trace Level               off Security                  ON: Local OS Authentication SNMP                      OFF Listener Parameter File   /u01/app/19.9.0/grid/network/admin/listener.ora Listener Log File         /u01/app/grid/diag/tnslsnr/rac1/listener_scan1/alert/log.xml Listening Endpoints Summary...   (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER_SCAN1)))   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.56.115)(PORT=1521))) Services Summary... Service "86b637b62fdf7a65e053f706e80a27ca" has 2 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service...   Instance "orcl2", status READY, has 1 handler(s) for this service... Service "orcl" has 2 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service...   Instance "orcl2", status READY, has 1 handler(s) for this service... Service "orclXDB" has 2 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service...   Instance "orcl2", status READY, has 1 handler(s) for this service... The command completed successfully 3 修改监听端口  [grid@rac1 ~]$ srvctl modify listener -l LISTENER -p "TCP:11521" [grid@rac1 ~]$  [grid@rac1 ~]$ srvctl modify scan_listener -p 11521 再次查看状态 [grid@rac1 ~]$ lsnrctl status LSNRCTL for Linux: Version 19.0.0.0.0 - Production on 08-NOV-2024 01:03:20 Copyright (c) 1991, 2019, Oracle.  All rights reserved. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER))) STATUS of the LISTENER ------------------------ Alias                     LISTENER Version                   TNSLSNR for Linux: Version 19.0.0.0.0 - Production Start Date                07-NOV-2024 05:00:14 Uptime                    0 days 20 hr. 3 min. 6 sec Trace Level               off Security                  ON: Local OS Authentication SNMP                      OFF Listener Parameter File   /u01/app/19.9.0/grid/network/admin/listener.ora Listener Log File         /u01/app/grid/diag/tnslsnr/rac1/listener/alert/log.xml Listening Endpoints Summary...   (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER)))   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.56.111)(PORT=11521)))   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.56.113)(PORT=11521))) Services Summary... Service "+ASM" has 1 instance(s).   Instance "+ASM1", status READY, has 1 handler(s) for this service... Service "+ASM_DATA" has 1 instance(s).   Instance "+ASM1", status READY, has 1 handler(s) for this service... Service "+ASM_OCR" has 1 instance(s).   Instance "+ASM1", status READY, has 1 handler(s) for this service... Service "86b637b62fdf7a65e053f706e80a27ca" has 1 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service... Service "orcl" has 1 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service... Service "orclXDB" has 1 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service... The command completed successfully [grid@rac1 ~]$ lsnrctl status LISTENER_SCAN1 LSNRCTL for Linux: Version 19.0.0.0.0 - Production on 08-NOV-2024 01:03:30 Copyright (c) 1991, 2019, Oracle.  All rights reserved. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN1))) STATUS of the LISTENER ------------------------ Alias                     LISTENER_SCAN1 Version                   TNSLSNR for Linux: Version 19.0.0.0.0 - Production Start Date                07-NOV-2024 04:59:22 Uptime                    0 days 20 hr. 4 min. 8 sec Trace Level               off Security                  ON: Local OS Authentication SNMP                      OFF Listener Parameter File   /u01/app/19.9.0/grid/network/admin/listener.ora Listener Log File         /u01/app/grid/diag/tnslsnr/rac1/listener_scan1/alert/log.xml Listening Endpoints Summary...   (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER_SCAN1)))   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.56.115)(PORT=11521))) Services Summary... Service "86b637b62fdf7a65e053f706e80a27ca" has 2 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service...   Instance "orcl2", status READY, has 1 handler(s) for this service... Service "orcl" has 2 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service...   Instance "orcl2", status READY, has 1 handler(s) for this service... Service "orclXDB" has 2 instance(s).   Instance "orcl1", status READY, has 1 handler(s) for this service...   Instance "orcl2", status READY, has 1 handler(s) for this service... The command completed successfully 可以看到监听端口应该修改 检查发现监听已经正常启动，端口号也改变为正确的端口，无需单独重启。 如有需要重启动监听,(正常情况下不需要重启,数据库会自动应用新的端口) 仅在节点 1 上执行。 [grid@rac01 ]$ srvctl stop listener -l listener [grid@rac01 ]$ srvctl stop scan_listener [grid@rac01 ]$ srvctl start listener -l listener [grid@rac01 ]$ srvctl start scan_listener 4.监听检查状态 在 scan 所在的节点执行 [grid@rac02 ~]$ lsnrctl status LISTENER_SCAN1 节点 1 和节点 2 都检查执行 [grid@rac02 ~]$ lsnrctl status 5.检查asm监听信息。 local_listener      string   (ADDRESS=(PROTOCOL=TCP)(HOST= 192.168.56.114)(PORT=11521)) 6.查看数据库的监听信息 SQL>  show parameter list forward_listener      string listener_networks      string local_listener      string   (ADDRESS=(PROTOCOL=TCP)(HOST= 192.168.56.113)(PORT=11521)) remote_listener      string   rac-scan:11521 如果没有自动修改则登录数据库实例,仅在其中一个实例执行。 alter system set remote_listener='rac-scan:11521' scope=both; 修改 LOCAL_LISTENER 仅仅在一个主机上执行。 alter system set local_listener = '(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.56.113)(PORT=11521))' scope=both sid='orcl1'; alter system set local_listener = '(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.56.114)(PORT=11521))' scope=both sid='orcl2'; 7.修改 tnsnames.ora 配置文件 记得修改各个客户端以及 tnsnames.ora 配置文件中监听端口的配置。 vim /u01/app/oracle/product/19.0.0/dbhome_1/network/admin/tnsnames.ora