Configure AS/400 for TCP/IP Applications Chapter 4 MULTIPLE PROTOCOLS •Can run simultaneous in OS/400 •It is very common to have APPC and TCP/IP active at the same time •APPC to support business applications •TCP/IP for TELNET and FTP •More configuration required to for LPD and SMTP GO CFGTCP CFGTCP Configure TCP/IP Select one of the following: 1. Work with TCP/IP interfaces 2. Work with TCP/IP routes 3. Change TCP/IP attributes 4. Work with TCP/IP port restrictions 5. Work with TCP/IP remote system information 10. Work with TCP/IP host table entries 11. Merge TCP/IP host table 12. Change TCP/IP domain information 20. Configure TCP/IP applications 21. Configure related tables 22. Configure point-to-point TCP/IP GO CFGTCP - Option1 Type options, press Enter. 5=Display Opt Internet Address Subnet Mask Line Description Line Type -------- 127.0.0.1 142.204.57.104 142.204.57.105 255.0.0.0 255.255.255.192 255.255.255.192 *LOOPBACK ETHERNET FIBER *NONE *ELAN *ELAN Required for internal processing and testing!! GO MAIN, 6, 4 or GO CFGCMN CFGCMN Configure Communications and Remote Hardware System: ODIN Select one of the following: 1. Work with lines 2. Work with communications controllers 3. Work with work station controllers 4. Work with communications devices 5. Work with printers 6. Work with display stations 7. Work with modes 8. Work with classes-of-service 9. Work with configuration lists 10. Work with network interfaces 11. Work with connection lists 12. Work with network servers 13. Work with NetBIOS descriptions More... WRKLIND Work with Line Descriptions System: ODIN Position to . . . . . Starting characters Type options, press Enter. 2=Change 3=Copy 4=Delete 5=Display 6=Print 7=Rename 8=Work with status 9=Retrieve source Opt Line ETHERNET FIBER QESLINE QTILINE Q1PLIN Type *ELAN *ELAN *SDLC *SDLC *SDLC Text FIBER ETHERNET CONNECTION PM iSeries line WRKLIND, 5 Display Line Description Line description . . . . . . . . . : Option . . . . . . . . . . . . . . : Category of line . . . . . . . . . : ETHERNET *BASIC *ELAN Resource name . . . . . . . . . . : Online at IPL . . . . . . . . . . : Vary on wait . . . . . . . . . . . : Network controller . . . . . . . . : Local adapter address . . . . . . : Exchange identifier . . . . . . . : Ethernet standard . . . . . . . . : Line speed . . . . . . . . . . . . : Current line speed . . . . . . . . : Duplex . . . . . . . . . . . . . . : Current duplex . . . . . . . . . . : Maximum frame size . . . . . . . . : Maximum controllers . . . . . . . : CMN03 *YES *NOWAIT ETHERNET 0006299CF0B1 05667200 *ALL 100M 100M *FULL *FULL 1496 40 Configure TCP/IP applications SNMP FTP TELNET - Simple Network Management Protocol SMTP LPD HTTP WSG POP - Simple Mail Transfer Protocol File Transfer Protocol Character mode client to server port connection Line Printer Deamon HyperText Transfer Protocol WorkStation Gateway Post Office Protocol Go CFGTCP, 20 Configure TCP/IP Applications Select one of the following: 1. Configure SNMP agent 2. Configure RouteD 4. Configure BOOTP 5. Change DDM TCP attributes 10. Change FTP attributes 11. Configure TELNET 12. Configure SMTP 13. Change LPD attributes 16. Change POP attributes 17. Change REXEC attributes Configuring SNMP SNMP provides network management capabilities. An AS/400 CAN BE a managed system in an SNMP managed network, but the AS/400 CAN NOT be an SNMP manager. CHGSNMPA ( WRKCNTINF) CFGTCPSNMP Work with communities for SNMP ADDCOMSNMP CHGCOMSNMP RMVCOMSNMP Configuring FTP • When the AS/400 acts as a server, it allows clients to access physical, logical, source and save files and members stored on the system • When files are transferred to a client system , the AS/400 automatically translates them from EBCDIC to ASCII, but files can also be transferred without translation. Configuring FTP CHGFTPA autostart *yes (STRTCP) *no (STRTCPSVR) . FTP server doesn’t need to be active for the AS/400 to initiate a file transfer, either to or from the AS/400. . The only need for the FTP server to be active on the AS/400 is for a remote system to initiate a file transfer to or from the AS/400. . NBRSVR: The default FTP servers to be started automatically is three. (1----20) . INACTTIMO: The default number of seconds that an FTP connection can remain idle before the AS/400 disconnects the FTP connection is 300 seconds. (0----68years) 0 = NO Timeout Change FTP Attributes (CHGFTPA) Type choices, press Enter. Autostart servers . . . . . . . Number of initial servers . . . Inactivity timeout . . . . . . . Coded character set identifier Outgoing EBCDIC/ASCII table: Outgoing EBCDIC/ASCII table Library . . . . . . . . . . Incoming ASCII/EBCDIC table: Incoming ASCII/EBCDIC table Library . . . . . . . . . . Initial name format . . . . . . Initial directory . . . . . . . Initial list format . . . . . . New file CCSID . . . . . . . . . Subsystem description . . . . . Library . . . . . . . . . . . Allow secure sockets layer . . . AUTOSTART NBRSVR INACTTIMO CCSID TBLFTPOUT . *SAME *SAME *SAME *SAME *SAME TBLFTPIN . *SAME NAMEFMT CURDIR LISTFMT CRTCCSID SBSD *SAME *SAME *SAME *SAME *SAME ALWSSL *SAME Configuring TELNET • • CFGTCPTELN = TELNET CHGTELNA autostart *yes (STRTCP) *no (STRTCPSVR) The default Telnet server to be started automatically is one. You can start additional Telnet servers by using the command : STRTCPSVR SERVER(*Telnet) INACTTIMO: The default number of seconds that an Telnet connection can remain idle before the AS/400 disconnects the Telnet connection is 0 seconds, meaning idle connections will not be broken. (Valid range: 0----68years) 0 = No Timeout Change TELNET Attributes (CHGTELNA) Type choices, press Enter. Autostart server . . . . . . . . *SAME Number servers . . . . . . . . . *SAME Session keep alive timeout . . . *SAME *CALC... Default NVT type . . . . . . . . *SAME Coded character set identifier *SAME *MULTINAT... ASCII fullscreen mapping: Outgoing EBCDIC/ASCII table . *SAME Library . . . . . . . . . . *YES, *NO, *SAME 1-200, *SAME, *CALC 0-2147483647, *SAME, Incoming ASCII/EBCDIC table . *SAME Library . . . . . . . . . . Allow Secure Socket Layer . . . *SAME Name, *SAME, *CCSID, *DFT Name, *LIBL, *CURLIB *YES, *NO, *ONLY, *SAME *SAME, *VT100, *NVT 1-65533, *SAME, Name, *SAME, *CCSID, *DFT Name, *LIBL, *CURLIB Configuring Telnet • Changing Telnet related system values • QAUTOVRT QLMTSECOFR QINACTMSGQ QLMTDEVSSN QMAXSIGN QRMTSIGN QDSCJOBITV QINACTITV QMAXSGNACN QDEVRCYACN .The number of attempts a hacker can try to break into AS/400 system is: QAUTOVRT * QMAXSIGN Configuring SMTP • SMTP is used to transfer mail between host. • POP3 is used to transfer mail from a host to a client. • AS/400 supports both SMTP and POP3. Configuring SMTP • SNADS (System Network Architecture Distribution Services) is a vital component for e-mail on the AS/400. • SNADS is an SNA- based process to provide the routing and addressing functions for SMTP. • SNADS is the message distribution system that has been available on the AS/400 since its inception. • SNADS offers base functionality for message storage and forwarding within an AS/400. Configuring SMTP • SMTP provides for direct interaction but also has a spooling component to hold the mail until it is requested. • POP3 process assumes that the server maintains the mail for the client.POP3 accesses and downloads the mail dynamically when the user on the client system wants to receive it. Configuring SMTP • Incoming SMTP mail is sent to the AS/400 using the AS/400’s host and domain name specified in the TCP/IP configuration. • It’s critical that the AS/400 host and domain name reside in both the host table on the AS/400 as well as in the local domain and host name entry. • The AS/400 stores ,routes and forwards the mail message. – The content of the message is not important (attachments, graphics, fonts……are not of concern to AS/400. – The client is responsible for the proper display of the message. SMTP -- SNADS • SMTP– SNADS interaction is used to route the mail to the appropriate user’s mailbox. • SMTP receives incoming mail and forwards it to SNADS, which then places the mail in the appropriate storage area on the AS/400. • Outgoing mail is sent to SMTP , which forwards it to SNADS for delivery. SMTP -- SNADS • You need SNADS distribution queues and TCP/IP routing table entries for proper processing of incoming/outgoing mail. • SNADS distribution queues and TCP/IP routing table entries are created automatically when the TCP/IP connectivity utilities are installed. SMTP alias table • Personal alias table Identifies only an SMTP address for a given user • System alias table Identifies the address for all users • WRKNAMSMTP Add, change, remove ,display ,print the alias table entries The commands you should know • • • • • • CHGSMTPA CFGTCPSMTP CHGPOPA WRKDIRE WRKDSTQ CFGDSTSRV CHGTELNA ADDDIRE CHGDIRE RMVDIRE RNMDIRE STRTCP - 1 Start TCP/IP (STRTCP) Where allowed to run: All environments (*ALL) • The Start TCP/IP (STRTCP) – – – – command initializes and activates TCP/IP processing starts the TCP/IP interfaces starts the TCP/IP server jobs starts the TCP/IP Point-To-Point (PTP) profiles. A STRTCP command must be issued before any TCP/IP processing can be performed on the iSeries. This includes Simple Network Management Protocol (SNMP) agent processing. • The TCP/IP interfaces that are started are those that have set the AUTOSTART parameter to a value of *YES using the Add TCP/IP Interface (ADDTCPIFC), the Change TCP/IP Interface (CHGTCPIFC) commands, or the iSeries Navigator. • The Change IPL Attributes (CHGIPLA) command with the STRTCP parameter set to a value of *YES can be used to automatically submit the STRTCP command at the completion of IPL. STRTCP - 2 • The Start TCP/IP command only starts a TCP/IP application job if the AUTOSTART attribute in the application's configuration is set to *YES when the command is issued.. • When the STRTCP command is issued, the QTCPIP job in the QSYSWRK subsystem is started. The QTCPIP job is used for activating and deactivating TCP/IP interfaces. • This command calls different programs to process each type of TCP/IP server. • Parameters – – – – Keyword STRSVR STRIFC STRPTPPRF Description Choices Start application servers *YES, *NO Start TCP/IP interfaces *YES, *NO Start point-to-point profiles *YES, *NO Notes Optional Optional Optional STRTCP - 3 • • • Start application servers (STRSVR) Specifies whether or not TCP/IP application servers are started by the Start TCP/IP (STRTCP) command. *YES – The STRTCP command starts all TCP/IP application servers with a configuration attribute of AUTOSTART(*YES) when TCP/IP is activated. • *NO – The STRTCP command does not start any TCP/IP application servers when TCP/IP is activated. • • Note: This parameter can be used when TCP/IP application servers using AnyNet are already active on your system and you intend to also activate TCP/IP. STRTCP STRSVR(*NO) activates TCP/IP processing without starting additional TCP/IP servers. When TCP/IP or AnyNet is already active, use the Start TCP/IP Server (STRTCPSVR) command to start additional TCP/IP application servers. STRTCP - 4 • • • Start TCP/IP interfaces (STRIFC) Specifies whether or not to activate all TCP/IP interfaces that specify AUTOSTART(*YES) when TCP/IP is activated. *YES – • When the QTCPIP job is started by the STRTCP command, the job will attempt to activate all TCP/IP interfaces for which AUTOSTART(*YES) is specified. *NO – The AUTOSTART(*YES) interface parameter will be ignored. No TCP/IP interfaces will be automatically started. • Note: Specifying STRIFC(*NO) only inhibits the activation of TCP/IP interfaces. It has no effect on interfaces for other AnyNet protocols such as IP over SNA or IP over IPX. • • Start point-to-point profiles (STRPTPPRF) Specifies whether or not to activate all point-to-point profiles that specify a configuration attribute of AUTOSTART(*YES) when TCP/IP is activated. *YES • – • As part of the running of the STRTCP command, the Start Point-to-Point TCP/IP (STRTCPPTP) command will also be run. The STRTCPPTP command will attempt to start all of the point-to-point profiles with a configuration attribute of AUTOSTART(*YES). *NO – The STRTCPPTP command will not be run.