Conﬁguring Appc Security 208 | HP UX SNAplus2 specs

Conﬁguring APPC Communication

Conﬁguring APPC Security

208

Chapter 7

Image 208

HP UX SNAplus2 manual Conﬁguring Appc Security 208

Contents

Edition J2740-90013 HP 9000 Networking E1098 Legal Notices HEWLETT-PACKARD CompanyPage Page Contents Administering SNAplus2 Introduction to SNAplus2 Basic Conﬁguration Tasks Deﬁning Connectivity Components Conﬁguring Dependent LUs Conﬁguring Appc Communication Conﬁguring Passthrough Services Conﬁguring User Applications Managing SNAplus2 from NetView Managing SNAplus2 Clients Conﬁguration Planning Worksheets Conﬁguring an Invokable TP Using snaptpinstall Using SNAplus2 in a High Availability Environment Contents Contents Preface Prerequisite KnowledgeAbout This Book Organization of This BookPage Typographic Conventions Opcode LU name0p1 Definenode cd Operating System Conventions SNAplus2 PublicationsPublications for Users Special Element Sample of Typography Publications for Administrators HP-UX SNAplus2 3270/3179G Users Guide HP-UX SNAplus2 Administration Command Reference Publications for Programmers Related Publications HP-UX SNAplus2 MS Programmers GuidePage SNA Terms and Concepts Overview Systems Network Architecture Network Types Basic SNA ConceptsSNA Nodes Node Types in a Subarea Network Basic SNA Concepts SNA Subarea Network Connectivity Node Types in a Peer Network Transaction Programs Application Programming Interfaces Network Accessible Units Physical Units Logical Units LU 6.2 for APPC, 5250 and CPI-C LU 2 for 3270 displays Control Points Sessions Session Types Logical Unit Attributes for Sessions Multiple and Parallel Sessions Conversations Multiple and Parallel Sessions Communication between Transaction Programs and Logical Units Modes Route Selection Class of Service Basic Appn Concepts Appn Node Types Portion of a Sample Appn Network Appn Network Nodes Appn End Nodes LEN Nodes Appn Control Point Locating Resources Directory ServicesResource Names Basic Appn Concepts LEN Node Directory End Node Directory Network Node Directory Topology and Routing Services Session Routing Basic Appn Concepts Network Topology Database in Network Nodes Basic Appn Concepts Intermediate Routing Direct Connectivity Appn Network Using a Shared-Access Transport Facility Appn Connection Networks Basic Appn Concepts 11 Deﬁnitions Needed for Direct Links Using a Virtual Node Basic Appn Concepts Accessing Subarea Networks from Appn Networks Introduction to SNAplus2 Introduction to SNAplus2 What Is SNAplus2? Within a TCP/IP local area network LAN, SNAplus2 Standalone SNAplus2 Node That Communicates Directly with a Example ConﬁgurationsHost SNAplus2 Nodes in an Appn Network SNAplus2 Node Providing PU Concentration and Dlur SNAplus2 Node Conﬁgured for TN Server SNAplus2 Client/Server Conﬁguration SNAplus2 Components Components of SNAplus2 Node Components Passthrough ServicesSNA Support PU Concentration SNAplus2 Components TN Server User Applications Emulation RJE Workstation Daemon Windows client APIs see Windows APIs Appc API CPI-C API LUA API Windows APIs Client/Server Support Master Server and Backup Servers Beneﬁts of Client/Server Operation A domain with multiple SNAplus2 servers, one server holds HP-UX Clients Reference Windows Clients SNAplus2 Resources Connectivity Resources DLCs Link Stations PortsConnection Networks Local node can have an explicit link station deﬁned for its Session Resources SNAplus2 Resources Modes and Classes of Service Directory Information Domain Resources SNAplus2 Administration Administration Responsibilities Administration Tools Motif Administration Program Xsnapadmin Command-Line Administration Program Remote Command Facility Conﬁguration Files Chapter 103 NOF Applications Diagnostic Tools Simple Network Management Protocol Support Administering SNAplus2 108 Planning for SNAplus2 Conﬁguration Planning Worksheets Task Sheets Local System Enabling and Disabling SNAplus2 onSpecifying the Path to SNAplus2 Programs Snap start -s -m kernelmemorylimit -t Enabling SNAplus2 ServersMkernelmemorylimit Disabling SNAplus2 Servers Snap stop Using the Motif Administration Program Invoking the Motif Administration Program Resource Windows Domain Window SNAplus2 Domain Window Node Window Node Window Chapter 121 Resource Items Tool Bar Buttons SNAplus2 Tool Bar Resource Dialogs Sample Dialog Status Dialogs Help Windows Sample Status Dialog Sample Help Window Ascii Administration Program Snap2adm Using the Command-Line Administration Program Status DefineDelete Query Using the Command-Line Administration Program 132 Basic Conﬁguration Tasks 134 Conﬁguring Client/Server Functions Deletebackup AddbackupQuerysnanet Conﬁguring the Node Node Conﬁguration ParametersAppn support Control point name Control point alias Additional ConﬁgurationNode ID Conﬁguring Logging Tail Setcentrallogging Setgloballogtype Setlogtype Setlogfile Chapter 141 Conﬁguring Logging 142 Deﬁning Connectivity 144 Chapter 145 146 Deﬁning Ports, DLCs, and Connection Networks Port, Connection Network, and DLC Conﬁguration Parameters SNA port nameAdapter card number Port number Additional Port Parameters for Sdlc Initially activeLine details Type Encoding Dial string 6AT &&D3 &&Q1 DT7,012345678 Additional Port Parameters for X.25 Qllc Local SAP numberDeﬁne on connection network CN name Conﬁgure downstream LUs for implicit PU access Additional Port Parameters for Implicit PUConcentration Maximum active template instances Deﬁning Link Stations Link Station Conﬁguration Parameters Definetypels Common Link Station Parameters NameActivation LU trafﬁc Additional Link Station Parameters for Sdlc Poll address Line encoding MAC address SAP number Circuit type Channel IDRemote X.25 address Adapter/Port Number Remote node name Parameters for Independent LU TrafﬁcRemote node type Local node ID Parameters for Dependent LU TrafﬁcRemote node ID Remote node role Deﬁning Dlur PUs Dlur PU Conﬁguration ParametersDefineinternalpu PU Name Dlus Name Reactivate PU after failure 166 Conﬁguring Dependent LUs 168 Deﬁning LU Types LU Types 0-3 Conﬁguration ParametersDefinelu0to3 Definelu0to3range LU name LU type LU numbersLU in pool Pool name Deﬁning LU Pools Definelupool LU Pool Conﬁguration Parameters Assigned LUs Deﬁning LU Pools 174 Conﬁguring Appc 176 Chapter 177 Deﬁning Local LUs Member of default pool Local LU Conﬁguration ParametersDefinelocallu LU alias 180 Deﬁning Remote Nodes Remote Node Conﬁguration Parameters DefinedirectoryentryDefinepartnerlu Nodes SNA network name Deﬁning Partner LUs Defineadjacentlennode definedirectoryentry Partner LU Conﬁguration Parameters Partner LU nameWildcard partner LU name Alias Supports parallel sessions Uninterpreted NameLocation 186 Deﬁning TPs Issue the snapadmin definetp command TP name TP Invocation ParametersParameters are for invocation on any LU/on speciﬁc LU Multiple instances supported Route incoming Allocates to running TP Arguments Full path to TP executableUser ID Group ID TP Deﬁnition ParametersConversation level security required Restrict access Security access list Deﬁning Modes and Classes of Service 194 Standard Mode and COS Names Mode Associated Purpose Name COS Name Mode Conﬁguration Parameters Session limitsInitial session limit Maximum session limit Minimum contention winner sessions Minimum contention loser sessionsAuto-activated sessions Receive pacing window Maximum window size Session timeoutMaximum RU size Chapter 199 Use default LU Deﬁning CPI-C Side InformationCPI-C Conﬁguration Parameters Local LU Partner LU ModePartner TP Security Password Chapter 203 Definelulupassword Conﬁguring Appc SecurityConﬁguring Session Security Session Security Conﬁguration Parameters Defineuseridpassword Conﬁguring Conversation SecurityAdditional Conﬁguration Conversation Security Conﬁguration Parameters Conﬁguring a Security Access List Security Access List Conﬁguration ParametersDefinesecurityaccesslist Users in access list Chapter 207 Conﬁguring Appc Security 208 Conﬁguring User Applications 210 Chapter 211 212 Conﬁguring 3270 Emulator Users Conﬁguring 3270 Users and SessionsDefineemulatoruser Emulation User and Group Conﬁguration Parameters User NameGroup Name Style File Sessions Style ﬁle accessPermissions Session Conﬁguration Parameters Conﬁguring 3270 SessionsSession name Display or Printer LU/Pool nameSession base name Number of sessions Conﬁguring 5250 Users Conﬁguring 5250 Emulator Users Chapter 219 Conﬁguring RJE Workstations RJE Workstation Conﬁguration ParametersWorkstation name Run on computer Unix group name Conﬁguring RJE Workstations 222 Conﬁguring Passthrough 224 Conﬁguring TN Server Conﬁguring TN Server Access Records TN Server Access Record Conﬁguration ParametersDefinetn3270access TN3270 client address Support TN3270E TCP/IP port number Allow access to speciﬁc LU Conﬁguring TN Server Association RecordsDisplay LU assigned Printer LU assigned TN Server Association Record Conﬁguration Parameters Definetn3270associationDisplay LU Printer LU Conﬁguring PU Concentration Downstream LU Conﬁguration Parameters Downstream LU name Upstream LU name Allow timeoutFake logon Conﬁguring Dlur 234 Managing SNAplus2 from NetView 236 Using the Host NetView Program Changing the Size of the Command Input Area Overview of RCF Command SyntaxNetView Screen Display Input n Commandtext Uppercase Characters and Escape Characters Using Escape Characters in RCF Commands Characters to Produce Input ABcd Using Spcf Restrictions on Administration Commands Used with Spcf Examples of Spcf Commands Runcmd sp=myspname, appl=node, -a -d querylu0to3 UCF Command Syntax Using UCFRuncmd sp=spname, appl=unix, HP-UXcommand Permitted Commands HP-UXcommand Output from HP-UX System Commands Example of a UCF CommandGrep Temp ab*.c TEMP.out Canceling a Command Runcmd sp=myspname, appl=unix, ux-cancel UCF Security Using UCF 248 Managing SNAplus2 Clients End of Section 250 Setting Up IP Port Numbers Client Networking Requirements LAN Access Timeout Client Networking Requirements For Windows Deﬁning Client TPs NOF verbs querycentrallogger or querynodeall Managing Win32 Clients Enabling a Win32 Client Disabling SNAplus2 for a Win32 Client Snapwinsec domain Win32 Client SecuritySnapwinsec off Win32 Client Conﬁguration Possible values for each Registry subkey are as follows Domain ConﬁgurationSnagroup Lanaccesstimeout Invokedtps Serverlosttimeout Broadcastattemptcount Servers ClientstarttimeoutServer1 Server2-Server10 Auditloggingenabled ExceptionloggingenabledLogging Errorﬁle BackuperrorﬁleErrorﬁlewrapsize Logdirectory Auditﬁle BackupauditﬁleAuditﬁlewrapsize Succincterrors Succinctaudits APItracing ﬁle1ﬁle2 ﬂipsize Truncationlength AllapiAppc Cpic Rui CsvNof MSGtracing CStracing Fmi Datagram AdminmsgData Send Receive CSVdata Csvtblg Managing Win16 Clients Enabling a Win16 Client Disabling SNAplus2 for a Win16 Client Win16 Client Security Win16 Client Initialization File sna.ini Chapter 279 Snauser Chapter 281 282 Chapter 283 284 Chapter 285 286 Chapter 287 288 Chapter 289 290 Chapter 291 292 Chapter 293 End of Section 294 Enabling SNAplus2 on HP-UX Clients Managing HP-UX ClientsSnap start -t HP-UX Client Network Data File snaclnt.net Chapter 297 Server names End of Section Chapter 299 Managing HP-UX Clients 300 Conﬁguration Planning Worksheets 302 Node Worksheets Appn End Node LEN Node Your Motif FieldValid Entry/Notes Implementation ValueYour LEN node Conﬁguration server? Leased line Switched outgoing Switched incoming Connectivity WorksheetsNumber Port number Initially active Select if needed Line Details Type Duplex Setting Negotiable Primary Primary multi-drop SecondaryPhysical link type Sdlc Link Station Dialog By administrator On node startup On demand Any Independent only Dependent only Name Upstream Dlus Token Ring Appendix a 311 Ethernet Motif Field Valid Entry/Notes Implementation Value Appendix a 313 314 Fddi NETNAME.CNNAME each Independent LU trafﬁc Appendix a 317 Qllc Appendix a 319 320 Subnet ID Passthrough Services Worksheets Your Motif FieldValid Entry/NotesImplementation Value PU Concentration LU Pool Dialog Pool nameLU lists Downstream LU Dialog TN Server Access Dialog TN Server Allow access to speciﬁc TN Server Association Dialog Display LU User Application Support Worksheets Appc 255 Supports parallel Minimum contention Motif Field Valid Entry/Notes Implementation Value LocationEbcdic characters LS name Restrict to speciﬁc LU Multiple instancesSupported Route incoming User ID Up to 10 characters Password Basic Mapped EitherSync level PIP allowed Select if needed Name Local LU 5250Partner TP name 3270 LU Type 0-3 Dialog LU name Emulator User and Emulator Group Dialogs User name or group Style ﬁle name Multiple sessions Session name Session Dialog Single session orSession type RJE Workstation Dialog Workstation name LUA 337 338 Introduction to Snmp 340 SNAplus2 Appn Snmp Subagent Appn Management Information Base MIB Conﬁguring an Invokable TP Using snaptpinstall Snaptpinstall -aﬁlename Snaptpinstall -r -t TPname -l LUaliasSnaptpinstall -r -t TPname Snaptpinstall -q -t TPname -l LUalias File Format for snaptpinstall TPname 346 Appendix C 347 348 Appendix C 349 350 Securitytype is Service Securitytype 352 Using SNAplus2 in a High Availability Environment 354 What is High Availability? 356 Appendix D 357 SNAplus2 High Availability Features LU Pools for 3270, 3179G, and LUA Client/Server Conﬁguration Figure D-2 LU Pools 360 Appendix D 361 Table D-1 Component Primary Server Backup Server Appendix D 363 364 Using SNAplus2 with MC/ServiceGuard Figure D-6 SNAplus2 environment with ServiceGuard Creating the HA SNAplus2 Package Identifying Critical SNAplus2 Connectivity Appendix D 367 SNAplus2 Package Table D-2 Suggestions for Deﬁning the SNAplus2 Package Specifying the Service CommandOpt/sna/bin/snapmon HALS. See Specifying 370 Specifying a Package IP Address SNAplus2 Client/Server LAN Connections Figure D-7 SNAplus2 in Client/Server Conﬁguration SNA LAN Connections TN Server LAN Connections Figure D-9 SNAplus2 Server Running TNServer Using the LAN to Access Standalone Servers Figure D-10 Accessing SNAplus2 Server via LAN Customizing the SNAplus2 Package Control ScriptModifying the Path variable Adding Customer Deﬁned Functions Snapadmin startls, lsname=HALS Compatibility Constraints Lans Qllc Sdlc Appendix D 381 Advanced Conﬁguration Techniques Writing Your Own SNAplus2 Service Script 384 Appendix D 385 386 Index Numerics 388 389 390 391 392 393 394 395 396 397 398