IBM AS/400E - page 535

vChange TELNET Attributes (CHGTELNA)

vChange FTP Attributes (CHGFTPA)

vChange SMTP Attributes (CHGSMTPA)

vChange POP Mail Server Attributes (CHGPOPA)

vChange LPD Attributes (CHGLPDA)

vChange HTTP Attributes (CHGHTTPA)

vChange Workstation Gateway Server Attributes (CHGWSGA)

AppendixB. TCP/IP Security 515

Contents

Main Page Page Page Contents iv Page vi Page viii Page x Page xii Page Page About TCP/IP Conguration and Reference (SC41-5420) no additional SK3T-2027 TCP/IP Topics in the Information Center Who should read this book AS/400 Operations Navigator Installing Operations Navigator xvi Client Access Express for Windows - Setup Prerequisite and related information SK3T-2027 How to send your comments xviii Chapter 1. TCP/IP on AS/400 Linking Networks Together router gateway IP router Internetwork Communications interoperability 2 internet address host Accessing the Internet Cool Title About the AS/400 and the Internet, SC24-4815 Accessing the Internet, SG24-2597 Using the Information Super Highway, GG24-2499 IP Security Classes of Networks 4 IP Subnets Subnetworks and Subnet Masks 6 Page Broadcast Addresses 8 Domain Name System (DNS) Domain and Host Name local local.site local.market.site Naming Conventions for Domain Names and Host Names 10 SYS1.MFG.ABC.COM SYS1 Internet (SYSNAM01.SALES.ABC.COM) Routing Introduction to TCP/IP Protocols on AS/400 12 Application Protocols Application Protocol Standards Post Office Protocol (POP) Mail Server TELNET Protocol (TELNET) 14 Simple Network Management Protocol (SNMP) Simple Network Management Protocol (SNMP) Support OS/400 Network File System Support OS/400 Network File System Support Application Program Interfaces (APIs) System API Sockets Interface Transport Protocol Transmission Control Protocol (TCP) User Datagram Protocol (UDP) TCP and UDP Ports Assigned Numbers Well-known Ports Point-to-Point TCP/IP Internetwork Protocol Internet Protocol 18 Internet Control Message Protocol Internet Group Management Protocol Address Resolution Protocol AnyNet/400 Accessing APPC Using TCP/IP (SNA Over IP) Accessing APPC Using IPX (SNA Over IPX) 20 Internetwork Packet Exchange (IPX) Support Accessing Sockets Using IPX (IP Over IPX) Chapter 2. Conguring TCP/IP What you need to know before you can congure TCP/IP TCP/IP Connectivity Utilities for AS/400 Planning for TCP/IP Installation and Conguration Gathering Information About your Network 22 Installing the TCP/IP Application Programs TCP/IP Connectivity Utilities for AS/400 Software Installation host TCP/IP Addressing 24 Page On the Assignment of Subnet Numbers Using the TCP/IP Administration Menu 26 Using the Congure TCP/IP Menu 28 Simple Network Management Protocol (SNMP) Support Conguring TCP/IP using the Command Line Interface Step 1Conguring a Line Description Step 2Conguring a TCP/IP Interface 30 adding transparent subnetting Step 3Conguring TCP/IP Routes 32 Page 34 Page Step 4Conguring TCP/IP attributes Step 5Conguring TCP/IP Remote System Information (X.25) 36 Page Step 6Conguring TCP/IP Host Table Entries 38 Adding an Entry to the Host Table Work with TCP/IP Host Table Display 40 Page AnyNet/400: APPC over TCP/IP Step 7Conguring the Local Domain and Host Name 42 Domain Name System (DNS) Server Step 8Starting TCP/IP and TCP/IP Servers 44 OS/400 Work Management TCP/IP Jobs End TCP/IP (ENDTCP): Step 9Verifying the TCP/IP Connection 46 Verifying Additional TCP/IP Connections 48 Verifying TCP/IP Connections with Host NameExample Figure 29. VerifyTCP/IP Connection, Additional Parameters Verifying TCP/IP Connections with Internet AddressExample 50 Step 10Saving Your TCP/IP Conguration Tosave your TCP/IP conguration les, use the following command: SAVOBJ OBJ(QATOC* QATM*) LIB(QUSRSYS) DEV(TAP01) OBJTYPE(*FILE) Figure 30. VerifyingConnection to Remote System SYS1 Figure 31. VerifyingConnection to Remote System at Internet Address 9.4.191.76 TCP/IP Planning Checklists Line Description Parameters Checklist Table3. Line Description Parameters Local TCP/IP Host Information Checklist Table4. Local TCP/IP Host Information Sample Network Drawing 52 Page Page Chapter 3. TCP/IP: Operation, Management, and Advanced Topics Simple Network Management Protocol (SNMP) Support Network Status Work with TCP/IP Network Status Menu Work with TCP/IP Interface Status 56 Starting TCP/IP Interfaces Ending TCP/IP Interfaces Route-to-Interface Binding: 58 Display TCP/IP Route Information Work with TCP/IP Connection Status 60 Remote Address and Because no connection has been established yet, the Remote Port Figure 38. Work with TCP/IPConnection Status, Display 1 of 3 Ending TCP/IP Connections 62 Working with Conguration Status Displaying TCP/IP Network Status Information Display Multicast Groups 64 Displaying TCP/IP Interfaces Displaying Associated Routes 66 Displaying Route Details Option Displaying TCP/IP Route Information 68 Figure 46. Display TCP/IPRoute Details, Display 1 of 2 Figure 47. Display TCP/IPRoute Details, Display 2 of 2 Figure 48. Display TCP/IPRoute Information, Display 1 of 2 Figure 49. Display TCP/IPRoute Information, Display 2 of 2 Displaying TCP/IP Connections 70 Displaying Connection Totals Figure 51. Display TCP/IPConnection Status, Display 2 of 3 Figure 52. Display TCP/IPConnection Status, Display 3 of 3 Simple Network Management Protocol (SNMP) TCP/IP Host Tables 72 Managing TCP/IP Host Tables Host File Formats Host Table Information with *AIX Files Host Table Information with *NIC Files Internet Host TableSpecication Tips for Merging Host Tables Merging TCP/IP Host Tables Example: Successful Host Table Merge Example: Partly Successful Host Table Merge Managing the Host Table from a Central Site Step 1Create the Host Table on YourCentral System Domain Name System (DNS) Server IP Routing and Internet Control Message Protocol (ICMP) Redirecting Page Dead Gateway Processing Requirements For Internet Hosts - Communication Layers 78 Negative Advice from TCP or the Data Link Layer How IP Responds to Negative Advice Multihoming Function Example: A Single Host on a Network over a Communications Line Page Example: Multiple Hosts on Different Networks over the Same Communications Line Example: Multiple Hosts on Different Networks over Multiple Communications Lines Example: The Multihoming function 82 Type of Service (TOS) TOS Example Multiple Routes 84 TCP/IP Port Restriction Conguring TCP/IP Port Restrictions 86 Page Related Tables and the Host Table 88 Page 90 Figure 69. Work with Protocol TableEntry Display Figure 70. Work with Network TableEntry Display Using X.25 PVC instead of SVC IP Multicasting Host Extensions for IP Multicasting Multicast Application Programming Information Multicast Restrictions 92 Chapter 4. Conguring Point-to-Point TCP/IP (PPP and SLIP) Networks and Point-to-Point Connections PPP versus SLIP A Nonstandard For Transmissionof IP Datagrams Over Serial Lines: SLIP 94 Requirements for AS/400 SLIP Point-to-Point Request for Comments (RFC) line pool PPP Challenge Handshake Authentication Protocol (CHAP) PPP in HDPC-like Framing Conguring Point-to-Point Network Connections Conguring PPP Connection Proles Accessing Point-to-Point functions through Operations Navigator Checking for existing PPP Connection Proles 96 PPP Conguration Scenarios Example: Conguring Windows 95/98 to an AS/400 using a PPP Connection Example: Connecting to the Internet using an ISP Example: Connecting two AS/400s using dial-on-demand Congure a Dial-only connection prole on System 1 98 Congure a Switched line-answer connection prole on System 2 Start connection proles on System 1 and System 2 Verify congurations on System 1 and System 2 using TELNET Waiting for dial Switched line-dial on demand Example: AS/400 Office-to-Office Scenarios Scenario Denitions 100 Conguring LCL400 for all Scenarios 102 Conguring RMT400 to Dial into LCL400 Example: Remote LAN Access with Transparent Subnetting 104 Page Creating a Point-to-Point Prole for LAN Transparent Subnetting Unnumbered Net 106 Validation List: Example: Remote LAN Access with Dynamic Routing (RIP) and Creating a Point-to-Point Prole for LAN Access with Dynamic Routing (RIP) Unnumbered Net 108 Monitoring Activity Point-to-Point Jobs Messages 110 Jobs Printer Output Connection Alternatives Analog Phone Lines Digital Data Service 112 DDS Switched-56 ISDN T1/E1 114 Fractional T1 Using an Asynchronous Modem or ISDN Terminal Adapter PPP ISDN Support Conguring SLIP Connection Proles 116 Page Writing Connection Dialog Scripts Connection Script Considerations for SLIP 118 Creating and Changing Connection Scripts Rules for Creating and Changing Connection Scripts 120 Location of Default Connection Scripts: SLIP Connection Scripts-Examples Creating SLIP Client (Dial-Out) Connection Scripts-Examples 122 Creating SLIP Client (Dial-Out) Connection Scripts Example: Creating SLIP Server (Dial-In) Connection Scripts-Example Connection Script Considerations for PPP 124 NLS Considerations Using SLIP with an Asynchronous Line Description 126 Connection Dialog Scripts Conguring AS/400 Point-to-Point for SLIP Before You CongureAS/400 for SLIP - Checklist Hardware Requirements for the Asynchronous Line Description cannot 128 can Step 1 - Congure an Asynchronous Line Description Step 2 - Congure AS/400 For YourModem 130 Page Step 3 - Determine Conguration Prole Type 132 Step 4 - Add a Dial-In (*ANS) Conguration Prole Step 5 - Add a Dial-Out (*DIAL) Conguration Prole Step 6 - Start the Conguration Prole Monitoring Point-to-Point Activity 134 Options From WRKTCPPTP Working With Point-to-Point Jobs Point-to-Point Job Names: 136 Point-to-Point Job Status Indicators: Active Point-to-Point Jobs: 138 No active jobs to display. Figure 90. Work withActive Jobs-Displaying SLIP Jobs Figure 91. Working with a Job Point-to-Point Jobs That Are Not Active: Dial-In (*ANS) Point-to-Point Prole Parameters 140 Figure 95 shows the default entries you get when you rst access the display. Figure 94.Add *ANS Conguration Prole for SLIP Figure 95. Creating a *ANS Conguration Prole-Display 1 Text: 142 1Enter descriptive text for this conguration prole Local Interface Address: 2Youcan do one of the following: vEnter a new interface address. The new address can be: Figure 96. Creating a *ANS Conguration Prole-Display 2 Remote IP Address: Maximum Transmission Unit: Proxy ARP-Example: Proxy ARP-Denition: Allow Proxy ARP: 144 Add Default Route: 7 Line Description: Autocreate Controller and Device: Remote Location Name: Modem Information: Use Connection Dialog Script: Allow IP Datagram Forwarding: PING-ing your local IP address: 146 System Access Authorization List: Dial-Out Point-to-Point Prole Parameters: Figure 100. Creating a *DIALConguration Prole-Display 2 148 Figure 101. Creating a *DIALConguration Prole-Display 3 Local Interface Address: Remote IP Address: Request Header Compression: Maximum Transmission Unit: 150 Add Default Route: Additional Nameserver Add default route Additional Name Server: Line Description: Autocreate Controller and Device: 7 Remote Location Name: Modem Information: 152 Remote System Access Information: Asynchronous Line Description Parameters: CRTLINASC Parameters When Using a Modem: 154 CRTLINASC Parameters For a Direct Connection: Connection Dialog Scripts: Security: PPP/SLIP over *PPP 156 Page Page Chapter 5. Telnet Client 5250 Full-Screen Mode Considerations TN5250Start TCP/IP Telnet Command TN5250Screen Size 3270 Full-Screen Mode Considerations TN3270Start TCP/IP Telnet Command Using a Display Station during Telnet 3270 Full-Screen Mode 160 3270 Device Emulation Support TN3270 or TN5250Specifying Keyboard and Character Sets TN3270Screen Size TN3270Cursor Select Key TN3270Messages 162 TN3270Handling Null Characters VTxxx Full-Screen Mode Considerations Operational Differences Keyboard Issues 164 Screen Issues VTxxxScreen Size VTxxxCharacter Attributes 166 VT100Keyboard Indicator VTxxxStart TCP/IP Telnet Command Changing the VTxxx Keyboard Map 168 Figure 109. Change VT100 Primary Keyboard Map (Display 2) Figure 110.Change VT100 Alternate Keyboard Map (Display 1) 170 Figure 111.Change VT100 Alternate Keyboard Map (Display 2) Figure 112.Change VT220 Primary Keyboard Map (Display 1) Figure 113.Change VT220 Primary Keyboard Map (Display 2) Figure 114.Change VT220 Alternate Keyboard Map (Display 1) 172 SETUP Chapter5. TelnetClient 173 . > Figure 116.VT100 Keyboard Table10. VT100 and VT220 Control Character Keywords 174 Control Character Description Key Pressed with CTRL Key Down Keyword Hex Character Function Keys Main Keypad Table10. VT100 and VT220 Control Character Keywords (continued) Table11. Numeric Keypads Table11. Numeric Keypads (continued) 176 Table12. Top Row Function Keys Table13 on page 178 shows the keys that transmit codes for the editing keypad keys. Table13. Editing Keypad 178 VTxxxNational Language Support VTxxxMultinational Mode VTxxxNational Mode 180 Identifying Table Objects User-Dened Mapping Tables (ASCII Mode) System Functions Available during a Telnet Client Session Print 182 Chapter 6. Telnet Server Setting Up the Telnet Server Exit Determining Which Emulation Is Negotiated 5250 Full-Screen Mode Apple Macintosh 5250 Full-Screen Telnet Client 184 Net Subnet Hosts Connection Type Connection 3270 Full-Screen Mode 186 Setting up for 3270 Full-Screen Mode Youcan use the CFGTCPTELN command to set up your 3270 full-screen mode session. Step 13270Starting the Telnet Server Job Figure 120. Conguration Example of 3270 TelnetServer Support Figure 121. CFGTCPTELN in 3270 Full-Screen Session Step 23270Setting the Number of Virtual Devices 188 Security Considerations for 3270 Full-Screen Mode: Telnet and SNA 5250 Pass-Through Considerations for 3270 Full-Screen Mode: Step 33270Setting the QLMTSECOFR Value Step 43270Working with Associated System Values Step 53270Creating Virtual Controllers and Devices 190 Step 63270Dening Workstations to Subsystems Step 73270Activating the QSYSWRK Subsystem Step 83270Creating User Proles for Telnet Users Step 93270Checking the QKBDTYPE System Value Step 103270Setting the Default Keyboard Mapping default 192 Displaying a Keyboard Map: Changing a Keyboard Map: PA1 and PA2Keys on a PC Keyboard: 194 Break Messages in 3270 Full-Screen Mode Input-Inhibited Light Dening Capabilities for 3270 Devices VTxxx Full-Screen Mode Setting up for VTxxx Full-Screen Mode 196 Step 1VTxxxStarting the Telnet Server Job Step 2VTxxxSetting the Number of Virtual Devices Security Considerations for VTxxx Full-Screen Mode: 198 Telnet and SNA 5250 Pass-Through Considerations for VTxxx Full-Screen Mode: Step 3VTxxxSetting the QLMTSECOFR Value Step 4VTxxxWorking with Associated System Values Step 5VTxxxCreating Virtual Controllers and Devices Step 6VTxxxDening Workstations to Subsystems 200 Step 7VTxxxActivating the QSYSWRK Subsystem Step 8VTxxxCreating User Proles for Telnet Users Step 9VTxxxChecking the QKBDTYPE System Value change display Step 10VTxxxSetting the Default Keyboard Mapping 202 Table18. Special Values for VTxxx Keys Page Table18. Special Values for VTxxx Keys (continued) 204 Displaying a VTxxx Keyboard Map: Setting a VTxxx Keyboard Map: 206 Changing a VTxxx Keyboard Map: Step 11VTxxxSetting the DFTNVTTYPE Value Step 12VTxxxSetting the ASCII/EBCDIC Mapping Tables VTxxx Automatic Wrap System Request Processing for VTxxx Sessions Error Conditions on 5250 Keyboard Display Screens and VTxxx Support VT220 Control Characters 208 VT220 Programmer Reference Manual Some Practical Examples DEC MicroVAX VT100 Full-Screen TelnetClient TELNET Sun Sparc Classic VT100 Full-Screen Telnet Client Telnet ASCII Line Mode Setting up for ASCII Line Mode Step 1ASCIIStarting the Telnet Server Job Step 2ASCIISetting the Number of Virtual Devices Security Considerations for ASCII Full-Screen Mode 212 Telnet and SNA 5250 Pass-Through Considerations forASCII Full-Screen Mode Step 3ASCIISetting the QLMTSECOFR Value Step 4ASCIIWorking with Associated System Values Step 5ASCIICreating Virtual Controllers and Devices Step 6ASCIIDening Workstations to Subsystems 214 Step 7ASCIIActivating the QSYSWRK Subsystem Step 8ASCIICreating User Proles for Telnet Users Keyboard Mapping: Step 9Creating a Controller Description for a Virtual Workstation Step 10Creating a Network Virtual Device Telnet Printer Pass-Through Mode 216 Setting Up for Telnet Printer Pass-Through Mode Step 1Telnet Printer Pass-ThroughStarting the TelnetServer Job Step 2Telnet Printer Pass-ThroughSetting the Number of Virtual Devices Security Considerations for Telnet Printer Pass-Through Mode Telnet and SNA 5250 Pass-Through Considerations for Telnet Printer Pass-Through Mode 218 Step 3Setting the Telnet Timemark Timeout Value Step 4Telnet Printer Pass-ThroughCreating Virtual Controllers and Devices Telnet Printer Pass-Through Mode Server to Client Access Win95 Telnet Client TPPT Mode Server to Client Access Win95 Telnet Client Ending a Telnet Server Session Starting Cascaded Telnet or DSPT Sessions Using System Request Options Telnet Scenarios for Establishing Cascaded Sessions 220 Page 222 Page 224 System Request ProcessingScenarios Scenario 1 Scenario 2 Scenario 3 Scenario 4 Scenario 5 226 Scenario 6 Using a Group JobScenario 228 Workstation Type Negotiations and Mappings xxxx Table19. Full-Screen Workstation Mappings 230 System API Enhancement Dynamic Application Printing with TCP/IP IP Address Mapping IP Address Mapping Scenarios 232 Firewalls: Exit Point Performance Add Work Station Entry Work Management Subsystem routing and device name selection 234 Chapter 7. File Transfer Protocol (FTP) Client Functions Supported by FTP Client Functions Not Supported by FTP Client FTP Client and Server-Overview 236 Starting the FTP Client Session Alternative Start Commands 238 Logon to the Remote System (Server) Connecting to Another Server without Ending the FTP Session Ending the FTP Client Session 240 Transferring Files with File Transfer Protocol (FTP) Naming Format Indicator for AS/400 Names File Naming for the Library File System (QSYS.LIB) Names for Document Library Services (QDLS) Folders and Documents 242 Names for root, QOpenSys, QLANSrv and QFileSvr.400 File Systems Localle and Remotele Parameters for FTP Client Subcommands Table20. Example Default Names for the PUT, APPEND, and MPUT Subcommands (continued) Table21. Example Default Names for the GET and MGET Subcommands FTP Client Subcommands FTP Examples 244 AS/400-to-AS/400 Put a File: 246 Get Several File Members: 248 Figure 154. MGET SubcommandDisplay 1 Figure 155. MGET SubcommandDisplay 2 Page Get Several Files from a Folder: 250 AS/400-to-VAX/Wollongong This topic shows how to log on FTP to the VAXand how to use the PUT and GET subcommands. Process for Logging On: Figure 158. FTPMGET Subcommand using NAMEFMT 1 between FoldersDisplay 2 252 PUT and GET Subcommands: AS/400-to-AIX (UNIX) Logon Process for the RISC System/6000 System: 254 PUT and GET Subcommands: AS/400-to-OS/2 256 Logon: Figure 165.AIX Put Operation Figure 166.AIX Get Operation OS/2 Server Considerations: IBM TCP/IP V2.0 for OS/2 FTP Put Process: FTP Considerations (for Both Client and Server) Data Transfer Methods 258 Transferring Files that Contain Packed Decimal Data between AS/400 Systems Transferring Save Files Transferring save les from VM to AS/400Example: Transferring HFS Files 260 Transferring QDLS Documents Office Services Concepts and Programmers Guide Transferring root, QOpenSys and QLANSrv Files Transferring Files Using QFileSvr.400 Receiving Text Files on the AS/400 System to the QSYS.LIB File System 262 Transferring QSYS.LIB Files AS/400 File Pre-Creation Source Files: Sequencing, Timestamp, Level 264 CCSID Code Page Tagging for New Files on the AS/400 National Language Support Considerations for FTP CCSID variant Effects of Job Wait Time on FTP FTP Client Considerations 266 FTP Client File Naming File Structure and Path Name Specifying Mapping Tables International Application Development Server Time-out Considerations 268 Using Server Subcommands FTP as Batch Job Batch FTP: A Simple Example The Output Messages File Batch FTP: A Complex Example 270 Page 272 Page 274 Figure 178. FTPOutput (FTPLOG) After Running FTPBATCH Program (Part 1) Figure 179. FTPOutput (FTPLOG) after Running FTPBATCH Program (Part 2) Figure 180. FTPOutput (FTPLOG) after Running FTPBATCH Program (Part 3) 276 Figure 181. FTPOutput (FTPLOG) after Running FTPBATCH Program (Part 4) Sample Procedure: Exit Points for FTP Page Chapter 8. File Transfer Protocol (FTP) Server FTP Server-What It Does and Does Not Support Functions Supported by AS/400 FTP Server Functions Not Supported by FTP Server Conguring FTP Servers Starting FTP Servers 280 Available FTP Servers Ending FTP Servers Ending and Restarting FTP Server Jobs FTP Server Subcommands 282 FTP Server Considerations FTP Server Considerations for Non-AS/400 Clients FTP Server NAMEFMT Page Chapter 9. Post Office Protocol (POP) Mail Server verbs How the POP Server Works 286 The POP Server and Client Access-based Mail How to Get the POP Server Up and Running Internetwork Packet Exchange (IPX) Support 288 Users Guide, Setting Up Your System and Users SNA Distribution Services Adding POP Mail Users to the System Distribution Directory Mail service level. 290 Preferred address. Preferred address: SMTP user ID SMTP domain POP Mailboxes Setting Up Standard POP Mail Clients 292 Setting Up Client Access-Based Mail Clients Conguring the POP Server AnyMail/400 Mail Server Framework Support Conguring POP for Client Access-Based Mail Users 294 Removing POP Mail Users from the System Setting the Number of SNA Servers Starting the POP Server Ending the POP Server 296 verbs Supported POP Verbs How the POP Server Uses the Mail Server Framework AnyMail/400 Mail Server Framework Support Exchanging Mail with OfficeVision Conguring Both POP and SMTP Using *ANY Support with the POP Server SNA Distribution Services MIME Mail Sent To OfficeVision 298 Long Line Conversion Data Area Values The following examples include some values to consider for the QMAILFMT data area: 300 Calculating FFT Values MIME Content Types boundary= 302 Supported Content Types of the POP Server Figure 190. Example of a Multipart MIME Note 304 How the File Name is Derived lename= charset charset= MIME Content Types 306 Table26. MIME Primary Heading Content Types Table27. Mapping MIME Notes Part Type and Subtypes to OfficeVision Table27. Mapping MIME Notes Part Type and Subtypes to OfficeVision (continued) Type Subtype OfficeVision Setting Up MIME Headers to Differentiate between Recipients Figure 191. Example of a MIME Note Going from OfficeVision/400to a POP Mail User Sending MIME (POP Server) Mail across a SNADS Network How SNADS Tunneling Works 308 How to Congure System Distribution Directory Entries for SNADS Tunneling Page Address Types 310 AS/400 Address Book Table28. MAPI Address Type Denitions (continued) Address Facsimile Support for OS/400 Installation Guide telephone number The Address Book Cache 312 ASCII-EBCDIC Conversion and National Language Support EBCDIC-to-ASCII Conversion System name 314 ASCII-to-EBCDIC Conversion What are CCSIDs 316 CCSIDs Supported by the POP Server Page Chapter 10. Workstation Gateway Server DDS Reference Accessing Workstation Gateway Functions through Operations Navigator Starting the Workstation Gateway Server Change WSG Attributes 320 TCP/IP Server Start TCP/IP Servers Conguring the Workstation Gateway Server Congure TCP/IP Workstation Gateway Display Sign-on Panel Managing Virtual Devices for the Client Change System Value 322 Changing the Workstation Gateway Conguration Change Workstation Gateway Attributes Number of Clients per Server (NBRCLT) 324 Number of Workstation Gateway Clients Per Server Example Inactivity Timeout (INACTTIMO) Data Request Timeout (DTARQSTIMO) Network Timeout Hint Display Sign-on Panel (DSPSGN) Work with Registration Information Changing the Sign-on Panel File Change Subsystem Description 326 position order Access Logging (ACCLOG) Top Banner URL (TOPBNRURL) Bottom Banner URL (BOTBNRURL) Help Panel URL (HLPPNLURL) Coded Character Set Identier (CCSID) Server Mapping Tables (TBLWSGOUT) and (TBLWSGIN) 328 Workstation Gateway Server Mapping Tables Hint Workstation Gateway Exit Point for Accessing a User Prole Directly Granting Access to the Web Browser Online Help Information Customizing Web Browser Online Help Information Managing the Access Log 330 The QATMTLOG File QATMTLOG *MBR on AS/400 Page log key Accessing the Workstation Gateway from a Web Browser 332 redirect URL Request Form for NLS best t 334 Stop the Server: Security Taking Steps to Ensure Workstation Gateway Security Control User Proles That Can Access AS/400: Things to Avoid to Ensure Workstation Gateway Security without Workstation Gateway Requirements How the 5250 Display is Formatted for the Workstation Gateway Converting DDS Applications to HTML 336 Conguration Examples Starting the Server Automatically when TCP/IP Starts Example Changing the Number of Client Sessions per Server Job Using Server Mapping Tables Example Using a CCSID When MIME Code Page Not AvailableExample Online Help Information 338 Password A Word About Browsers... Signing on to the AS/400 Workstation Gateway Server Quick Tips for a Fast Start active Using the buttons: Function 340 Field Context-Sensitive Help menu boxes Using the menu boxes: here Page Functions Box: Help Box (or button): green screen Frequently Asked Questions 342 Function Enter Menu Boxes: Working with AS/400 Menus AS/400 Menu Parts 344 Chapter 11. Line Printer Requester (LPR) LPR Command Client (LPR) and Server (LPD) Relationship Conguration Requirements for LPR Sending a Spooled File (LPR) 346 Step 1 Locate the Spooled File that you Want to Send Work with Spooled Files Step 2 Start the Spooled File Transfer Sending Spooled Files to an AS/400 at V2R3 or V3R0M5 or higher 348 How the System Sends a Spooled File from an AS/400 System to Another AS/400 System How the System Sends a Spooled File from an AS/400 System to a Non-AS/400 System Number of copies Destination-dependent options lters 350 Transformation of Spooled Files Workstation Customization Programming Writer Transform Exit Program Image Print Transform Writer Transform Exit Program LPR Support of PostScript Printers Printer Device Programming Determining the Printer Device Type Printer Device Programming 352 Printer Requirements when Sending with Host Print Transform Function Authority for Sending Spooled Files Sending Spooled File Tips Sending Large Spooled Files Printer Pass-Through Setup Host Print Transform 354 Starting Printer Pass-Through Start Remote Writer Work with Writers Conguring for a RISC System/6000 System Scenario Setting Up for LPD on the RISC System/6000 System Scenario 356 Conguring Device and Virtual Printer for AIX Printing Conguring the AIX Printer Device Conguring a Virtual Printer 1. Select Option 1(Printer or plotter attached to host). Tocongure a virtual printer, specify the following at the AIX command line prompt: Figure 219. Printer Specications Figure 220. Conguring a VirtualPrinter Verifying LPD Started on the RISC System/6000 System 358 Verifying Your Conguration on the RISC System/6000 System Printer not Active Symptom Print Services Facility/6000 Function input 360 IBM AIX PSF/6000: Print Services for Users of AIX output Verifying Your Conguration of PSF/6000 Start AFP Utilities AFP Utilities/400 Users Guide and 362 Figure 225. Sending SCS to PSF/6000 Chapter 12. Line Printer Daemon (LPD) Conguring for Line Printer Daemon (LPD) Work with Active Jobs Congure TCP/IP LPD Change LPD Attributes How an AS/400 System Receives a Spooled File from Another AS/400 System 364 How an AS/400 System Receives a Spooled File from a Non-AS/400 System v How Spooled Files are Named on the Destination AS/400 one 366 Starting an LPD Server Job Change LPD Attributes Ending an LPD Server Job Attributes of the Received Spooled File User Prole Library Lists Changing the QPTMPLPD Printer File Default Values Change Printer File 368 LPD-Supported Commands on the AS/400 LPD-Supported Commands for Control File Printing LPD-Supported Control File Options and Attributes How the Ownership of Spooled Files Is Determined Printer Device Programming 370 How an LPD Server Selects an Output Queue for a File Receive a Printer Job Figure 228. Flow for Determining Output Queue for a Spooled File Receive Printer Job How Authority for Putting Spooled Files on Output Queue is Determined 372 Using LPD to Print ASCII Files OS/2 TCP/IPExample Using LPD to Print ASCII Files Converted to EBCDIC System/370 Example binary 374 RISC System/6000 Example Authority Required to Receive Spooled Files Figure 229. SampleAIX C Shell for Printing AIX File on AS/400 Receiving Spooled Files Benets Work with Spooled Files 376 Creating a Default User Prole Chapter 13. BOOTP Server Accessing BOOTP Functions through Operations Navigator Starting the BOOTP Server Automatically Starting the BOOTP Server 378 Work with BOOTP Table Change BOOTP Attributes Changing BOOTP Attributes Working with the BOOTP Table Adding IBM Network Stations to an Existing BOOTP Environment Network Station Manager Installation and Use Adding Network Stations with the Command Line Interface Network Device 380 Congure TCP/IP BOOTP Options Type File name and directory Page Chapter 14. TFTP Server Accessing TFTP Functions through Operations Navigator Starting the TFTP Server Automatically Starting the TFTP Server Ending the TFTP Server Changing TFTP Attributes 384 Change TCP/IP TFTP Attributes Server and Client Ports TFTP Extensions netascii TFTP Transfer Size Option TFTP Subnet Broadcast Option 386 Client to Server TFTP Read Request (RRQ) Options blksize tsize Server to Client TFTP Option Acknowledgment (OACK) subntbcst_tftp 388 blksize subnet broadcast identier Conguring TFTP for Clients other than IBM Network Station Change user authority 390 New data authorities Work with Authority Data Authority Opt Chapter 15. RouteD Server Accessing RouteD Functions through Operations Navigator Starting the RouteD Server Automatically Starting the RouteD Server not running 392 Change RouteD Attributes Ending the RouteD Server Working with RouteD Conguration RouteD Conguration Scenario RIP_INTERFACE Statement bit number 394 n mask Supply Values DIST_ROUTES_IN Metric Community rip_community_name 396 n bit number Changing RouteD Attributes 398 Chapter 16. REXEC Server Accessing REXEC Functions through Operations Navigator Starting the REXEC Server from the Command Line Interface Automatically Starting the REXEC Server Ending the REXEC Server Where allowed to run Change REXEC Attributes Changing Attributes Selecting a Command Processor REXEC Connection Usage ILE C for AS/400 Programmers Guide For AS/400 CL command processing For Qshell and spawned path command processing Spooled Output Considerations Client Considerations REXEC Server Jobs and Job Names 402 Creating REXEC Server Spooled Job Logs Exit Points for Controlling REXEC Server Page Chapter 17. DHCP Server DHCP Overview leased What is DHCP? Planning for DHCP How Many DHCP Servers do you Need? 406 Using Multiple DHCP Servers: Using a Single DHCP Server: Do you Already have BOOTP Servers in your Network? Do you have Hosts with Special Requirements? What is a Reasonable Lease Time? Setting Up a DHCP Network 408 map Creating a Scoped Network Dening Scoped Statements 410 Page Specifying DHCP Options options 412 Architected DHCP Options User-dened DHCP Options Request for Comment and Internet Draft Documents Accessing DHCP Functions through Operations Navigator 414 Starting and Ending the DHCP Server from the Command Line Interface Starting the DHCP Server Start TCP Server Automatically Starting the DHCP Server Change DHCP Attributes Ending the DHCP Server Changing DHCP Attributes 416 Exit Points for a DHCP Server Examples of DHCP Congurations Conguring DHCP for a Local Area Network Address Range Conguring DHCP for a Local Area Network with a Router Subnet Options Using DHCP to Congure Clients Attached to a Twinax Workstation Controller 418 Network Station Manager Installation and Use, SC41066400 Migrating an Existing BOOTP Conguration DHCP Relay Agent Adding Network Stations 420 Network Station Manager Installation and Use, SC41066400 Chapter 18. AS/400 Domain Name System (DNS) How DNS works Additional DNS documentation DNS and BIND third edition AS/400 Tips and Toolsfor Securing Your AS/400 AS/400 TCP/IP Autoconguration: DNS and DHCPSupport Domain names concepts and functions. Chapter 19. Client SOCKS Support Accessing SOCKS Functions through Operations Navigator Page Chapter 20. TCP/IP Performance *BASE Pool Size TCP/IP Jobs TCP/IP Protocol Support Provided by IOP 426 Merge Host Table Performance Running TCP/IP Only: Performance Considerations Page Chapter 21. TCP/IP Problem Analysis Simple Network Management Protocol (SNMP) Support General TCP/IP Problems 430 Page 432 Page 434 Page 436 Remote Address Remote Port PING Command Considerations Concatenating the Domain Name to the Host Name Common Error Messages Working with the Job Log and Message Queues 438 Determining Problems for SNMP Simple Network Management Protocol (SNMP) Support Determining Problems for Serial Line Internet Protocol (SLIP) Problem: SLIP Connection Is Failing 440 Remote service phone number Problem: SLIP Job Hung with STRSSN Status Problem: SLIP Connection Complete but Unable to PING 442 Materials Required for Reporting SLIP Problems Determining Problems with TELNET 444 Materials Needed when Reporting TELNET Problems OS/400 CL Reference TRCTCPAPP Service Program Outputs 446 Page 448 Automatically Generated Diagnostic Information (FFDC Errors) Determining Problems with FTP 450 Page Materials Required for Reporting FTP Problems 452 Tracing FTP Server within system wide 454 system wide Tracing FTP Client debug value cannot Getting a Copy of an FTP Server Job Log 456 Determining Problems for SMTP never Remote name server retries 458 Remote name server retries Page 460 Page Determining Problems for SMTP When Using OfficeVision 462 Page Determining Problems for SMTP Without Using OfficeVision 464 Figure 267. Example of Querying for Distributions for QSECOFR Figure 268. Example of Distributions Received by QSECOFR 466 Figure 271. Received Messages (1 of 8) Figure 272. Received Messages (2 of 8) Figure 273. Received Messages (3 of 8) Figure 274. Received Messages (4 of 8) 468 Figure 275. Received Messages (5 of 8) Figure 276. Received Messages (6 of 8) Figure 277. Received Messages (7 of 8) Tracing SMTP Distributions 470 Page 472 Page Backup and Recovery AnyMail/400 Mail Server Framework Support System API Reference: Program and CL CommandAPIs 474 Materials Required for Reporting SMTP Problems Cleaning Up Unprocessed SMTP Distributions Cold Start Warm Start Determining Problems with the POP Server 476 Problems with Mail Delivery Problem Determination Flows Cause List A 478 Cause List B System message store SMTP name. Cause List C Determining Problems with the Workstation Gateway Server First Failure Data Capture (FFDC) 480 Page Determining Problems for DNS Server Problem Determination Tools 482 Problem Determination Flows 484 Page Determining Problems for LPR LPR Command Considerations Common Error Messages 486 Materials Required for Reporting LPR Problems Determining Problems for LPD Table46. LPD Problem Analysis (continued) 488 Materials Required for Reporting LPD Problems Determining Problems with REXEC 490 Materials Required for Reporting REXEC Problems Getting a Copy of an REXEC Server Job Log Tracing the REXEC Server Tracing TCP/IP Protocol Layer Problems APPC Over TCP/IP Debugging Capabilities 492 Communications Conguration Tracing APPC over TCP/IP Problems Collecting a Communications Trace Planning to Set up a Trace 494 Starting a Communications Trace 496 Buffer size 6. Press the Enter key.The following display appears: prompt. The display should look like this: 7. Press the Enter key.The following display appears: 8. Do one of the following: Table47. Trace Status Stopping a Communications Trace 498 Formatting and Saving the Communications Trace Format TCP/IP data 500 Verifying the Contents of the Communications Trace 502 Additional Information on TCP/IP Communications Trace IBM AS/400 TCP/IP Conguration and Operation TCP/IP Tutorialand Technical Overview Using the Product Activity Log for TCP/IP Problem Analysis 504 Appendix A. Conguring a Physical Line for TCP/IP Communication Create Controller Description (Network) Create Device Description (Network) Change Controller Description (Network) Change Device Description (Network) Conguration Steps Creating the Line Description 506 X.25 Network Support LAN, Frame-Relay and ATMSupport Setting the Maximum Transmission Unit Add TCP/IP Interface on off Create Line Description Page Appendix B. TCP/IP Security . TCP/IP Command Security Table49. OS/400 TCP/IP CL Commands Table49. OS/400 TCP/IP CL Commands (continued) 510 Table50. TELNET CL Commands Table51. File Transfer Protocol CL Commands Table51. File Transfer Protocol CL Commands (continued) Table52. Simple Mail Transfer Protocol CL Commands Table53. POP Mail Server Commands Table54. Line Printer Daemon CL Commands Table55. Bootstrap Protocol CL Commands 512 Table57. Route Daemon CL Commands Table58. Remote Execution CL Commands Table59. HTTP Server Commands Table60. Workstation Gateway Server commands Object Security for Network Conguration IBM-Written Programs Security File Transfer Protocol (FTP) Line Printer Requester (LPR) Remote Execution (REXEC) Server Customer-Written Programs Security User-Supplied Mapping Tables 514 Page Page Appendix C. Mapping TablesAssociated with TCP/IP Function National Language Support Mapping Summary of Mapping Tables Creating ASCII and EBCDIC Mapping Tables 518 to from Creating a Source Member for Incoming Data Creating a Source Member for Outgoing Data Creating a Mapping Table Specifying User-Dened ASCII and EBCDIC Mapping Tables 520 Creating 3270 Mapping Tables Creating a Source Member for Incoming Data Creating a Source Member for Outgoing Data Creating a Mapping Table 522 Using Mapping Tables for 3270 Full-Screen Mode Reading a Mapping Table Changing a Mapping Table Sample Mappings EBCDIC and ASCII Character Sets 524 International Application Development Table63. EBCDIC Character Set (continued) USA Standard 7-Bit ASCII Character Set 526 Table64. USA Standard Alphabet ASCII Character Set EBCDIC-to-ASCII Mapping Table Table66. EBCDIC-to-ASCII Mapping 528 Table67. EBCDIC-to-ASCII Mapping ASCII-to-EBCDIC Mapping Table ASCII Line Drawing Character Set xxx 530 xxx Appendix D. TELNET 3270 Keyboard Mappings AS/400 CL Programs for the CHGKBDMAP Command Table70. 5250 Keyboard Mapping from DOS TN3270 (PC/TCP) 532 Table71. 5250 Keyboard Mapping from OS/2 TN3270 (PMANT) Table71. 5250 Keyboard Mapping from OS/2 TN3270 (PMANT) (continued) Table72. 5250 Keyboard Mapping from AIX TN3270 Table73. 5250 Keyboard Mapping from VAX/MVS Table73. 5250 Keyboard Mapping from VAX/MVS (continued) 534 Appendix E. TCP/IP Application Exit Points and Programs TCP/IP Exit Points and Exit Programs OS/400 Registration Facility TCP/IP Application Exit Points 536 Creating Exit Programs Adding Your Exit Program to the Registration Facility Step 1. Select your exit point 538 The Work with Exit Programs display is shown. Figure 294. Work with Registration Information Display Display 1 Figure 295. Work with Registration Information Display Display 2 Step 2: Select the Add Exit Program option Step 3: Add your exit program Removing Exit Programs 540 TELNET Exit Points Telnet Device Initialization Exit Program Telnet Exit Point Format INIT0100: Required Parameter Group 542 INIT0100: Format of User Description Information User Description Information Field Descriptions: INIT0100: Format of Device Description Information Device Description Information Field Descriptions: 544 INIT0100: Format of Display Device Description Information (DSPD0100): DSPD0100 Field Descriptions: INIT0100: Format of Connection Description Information Connection Description Information Field Descriptions: TCP/IP Conguration and TELNET Device Termination Exit Program 546 Required Parameter Group Exit Point Interfaces for TCP/IP Application Exit Points TCP/IP Application Request Validation Exit Point Interface Required Parameter Group 548 application identier Usage Notes 550 TCP/IP Application Server Logon Exit Point Interface Remote Execution Server Command Processing Selection Exit Point Required Parameter Group 552 Usage Notes File Transfer Protocol (FTP) Exit Points Considerations and Recommendations for FTP Exit Programs FTP Exit ProgramScenario 554 Sample FTP Server Logon Exit Program (C Language) Figure 300. FTPClient Session Showing Restricted Logon and Restricted FTP Operations Figure 301. Sample FTPLogon Exit Program (Part 1 of 26) 556 Figure 301. Sample FTPLogon Exit Program (Part 2 of 26) Figure 301. Sample FTPLogon Exit Program (Part 3 of 26) Figure 301. Sample FTPLogon Exit Program (Part 4 of 26) Figure 301. Sample FTPLogon Exit Program (Part 5 of 26) 558 Figure 301. Sample FTPLogon Exit Program (Part 6 of 26) Figure 301. Sample FTPLogon Exit Program (Part 7 of 26) Figure 301. Sample FTPLogon Exit Program (Part 8 of 26) Figure 301. Sample FTPLogon Exit Program (Part 9 of 26) 560 Figure 301. Sample FTPLogon Exit Program (Part 10 of 26) Figure 301. Sample FTPLogon Exit Program (Part 11 of 26) Figure 301. Sample FTPLogon Exit Program (Part 12 of 26) Figure 301. Sample FTPLogon Exit Program (Part 13 of 26) 562 Figure 301. Sample FTPLogon Exit Program (Part 14 of 26) Figure 301. Sample FTPLogon Exit Program (Part 15 of 26) Figure 301. Sample FTPLogon Exit Program (Part 16 of 26) Figure 301. Sample FTPLogon Exit Program (Part 17 of 26) 564 Figure 301. Sample FTPLogon Exit Program (Part 18 of 26) Figure 301. Sample FTPLogon Exit Program (Part 19 of 26) Figure 301. Sample FTPLogon Exit Program (Part 20 of 26) Figure 301. Sample FTPLogon Exit Program (Part 21 of 26) 566 Figure 301. Sample FTPLogon Exit Program (Part 22 of 26) Figure 301. Sample FTPLogon Exit Program (Part 23 of 26) Figure 301. Sample FTPLogon Exit Program (Part 24 of 26) Anonymous FTP For information about anonymous FTP,see Figure 301. Sample FTPLogon Exit Program (Part 25 of 26) Figure 301. Sample FTPLogon Exit Program (Part 26 of 26) 568 Sample Scenario for Anonymous FTP Workstation Gateway Server (WSG) Exit Point Workstation Gateway Server Sign-on Exit Point Interface (QAPP0100) Required Parameters Descriptions of Required Parameters for the WSG Exit Point Interface (QAPP0100) op_specic_parm 570 Using a WSG exit progam to bypass the AS/400 Sign-on Display Sample WSG Server Logon Exit Program Figure 302. Sample WSG Server Logon Exit Program (Part 1 of 50) 572 Figure 302. Sample WSG Server Logon Exit Program (Part 2 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 3 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 4 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 5 of 50) 574 Figure 302. Sample WSG Server Logon Exit Program (Part 6 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 7 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 8 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 9 of 50) 576 Figure 302. Sample WSG Server Logon Exit Program (Part 10 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 11of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 12 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 13 of 50) 578 Figure 302. Sample WSG Server Logon Exit Program (Part 14 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 15 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 16 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 17 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 18 of 50) 580 Figure 302. Sample WSG Server Logon Exit Program (Part 19 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 20 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 21 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 22 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 23 of 50) 582 Figure 302. Sample WSG Server Logon Exit Program (Part 24 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 25 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 26 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 27 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 28 of 50) 584 Figure 302. Sample WSG Server Logon Exit Program (Part 29 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 30 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 31 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 32 of 50) 586 Figure 302. Sample WSG Server Logon Exit Program (Part 33 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 34 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 35 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 36 of 50) 588 Figure 302. Sample WSG Server Logon Exit Program (Part 37 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 38 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 39 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 40 of 50) 590 Figure 302. Sample WSG Server Logon Exit Program (Part 41 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 42 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 43 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 44 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 45 of 50) 592 Figure 302. Sample WSG Server Logon Exit Program (Part 46 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 47 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 48 of 50) Figure 302. Sample WSG Server Logon Exit Program (Part 49 of 50) 594 Figure 302. Sample WSG Server Logon Exit Program (Part 50 of 50) Notices Programming Interface Information Trademarks 596 Page Page Bibliography Internetwork Packet Exchange (IPX) Support SNA Distribution Services Printer Device Programming IBM Network Station Manager for AS/400 Integrated Netnity Server Manuals Internet Connection Server Manuals HTTP Server for AS/400 WebmastersGuide Internet Connection Server for AS/400 Web Programming Guide Programming Manuals Security IBM Firewall for AS/400 Administrators Guide System Manuals Systems Network Architecture (SNA) Display Stations 3270 Information Display System: 3274 Control Unit Description and Programmers Guide Request For Comments (RFC) Other Information 602 Page Page Index Special Characters Numerics A B 606 C 608 Page 610 Page D 612 E F 614 Page G H 616 I J K L 618 M N O 620 P 622 Q R 624 Page S 626 Page 628 T 630 U V W 632 X Page Readers Comments Wed Like to Hear from You Readers Comments Wed Like to Hear from You IBMR ___________________________________________________________________________________________________ SC41-5420-03 BUSINESS REPLY MAIL