You also want port 1101 open. Port 1101 serves the same purpose for HA-JNDI that 1098 does for regular JNDI. 1099/1100 is for contacting the server to download a naming client proxy; 1098/1101 is for subsequent calls to do lookups, etc.
If you're only using HA-JNDI, you probably don't need 1099/1098 open.
If that doesn't solve the problem, please post the full stack trace.
In this case, I should disable entire JNDI and leave only HA-JNDI, so I could turn off 1098/1099 ports, am I right?
In order to accomplish this, is enough to comment the JNDI section on jboss-service.xml?
Thank you for your help.
No, absolutely not. The AS will not run without regular JNDI. I just meant you don't need to allow traffic for those ports through your firewall, as your client outside the firewall doesn't use them.