Tuesday, September 2, 2008

IP address exclusion rules in sqlnet.ora

$ORACLE_HOME/NETWORK/ADMIN/SQLNET.ORA

tcp.validnode_checking = YES
tcp.invited_nodes = {list of IP addresses}
tcp.excluded_nodes = {list of IP addresses}

You cannot specify a range, wildcard, partial IP or subnet mask
You must put all invited nodes in one line; likewise for excluded nodes.
You should always enter localhost as an invited node.
TCP.INVITED_NODES takes precedence over the TCP.EXCLUDED_NODES