ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaja_5.4.0.1/rzajaactvpnrules.htm

86 lines
6.1 KiB
HTML
Raw Normal View History

2024-04-02 14:02:31 +00:00
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Activate the VPN packet rules" />
<meta name="abstract" content="You must activate the VPN packet rules before you can start your VPN connections." />
<meta name="description" content="You must activate the VPN packet rules before you can start your VPN connections." />
<meta name="DC.Relation" scheme="URI" content="rzajapolicyfilter.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajadefseccon.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajapolicyfilter.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajadefineinterface.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajastartdyncon.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajastartdyncon.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzajaactvpnrules" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Activate the VPN packet rules</title>
</head>
<body id="rzajaactvpnrules"><a name="rzajaactvpnrules"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Activate the VPN packet rules</h1>
<div><p>You must activate the VPN packet rules before you can start your
VPN connections.</p>
<div class="section"><p>You cannot activate (or deactivate) packet rules when you have
VPN connections running on your system. So, before you activate your VPN filter
rules, ensure that there are no active connections associated with them.</p>
<p>If
you created your VPN connections with the New Connection wizard, you can choose
to have the associated rules activated, automatically, for you. Be aware that,
if there are other packet rules active on any of the interfaces you specify,
the VPN policy filter rules will replace them.</p>
<p>If you choose to activate
your VPN generated rules by using the Packet Rules Editor, follow these steps:</p>
</div>
<ol><li><span>In <span class="keyword">iSeries™ Navigator</span>,
expand your <span class="menucascade"><span class="uicontrol">server</span> &gt; <span class="uicontrol">Network</span> &gt; <span class="uicontrol">IP Policies</span></span>.</span></li>
<li><span>Right-click <span class="uicontrol">Packet Rules</span> and select <span class="uicontrol">Activate</span>.
This opens the <span class="uicontrol">Activate Packet Rules</span> dialog box.</span></li>
<li><span>Select whether you want to activate only the VPN generated rules,
only a selected file, or both the VPN generated rules and a selected file.
You might choose the latter, for instance, if you have miscellaneous PERMIT
and DENY rules that you want to enforce on the interface in addition to the
VPN generated rules.</span></li>
<li><span>Select the interface on which you want the rules activated. You
can choose to activate on a specific interface, on a point-to-point identifier,
or on all interfaces and all point-to-point identifiers.</span></li>
<li><span>Click <span class="uicontrol">OK</span> on the dialog box to confirm that
you want to verify and activate the rules on the interface or interfaces you
specified. After you click OK, the system checks the rules for syntax and
semantic errors and reports the results in a message window at the bottom
of the editor. For error messages that are associated with a specific file
and line number, you can right-click the error and select <span class="uicontrol">Go To
Line</span> to highlight the error in the file.</span></li>
</ol>
<div class="section"><p>After you activate your filter rules, you can start your VPN connection.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajapolicyfilter.htm" title="If you are creating a connection for the first time, allow VPN to automatically generate the VPN packet rules for you. You can do this by either using the New Connection wizard or the VPN properties pages to configure your connection.">Configure VPN packet rules</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzajapolicyfilter.htm" title="If you are creating a connection for the first time, allow VPN to automatically generate the VPN packet rules for you. You can do this by either using the New Connection wizard or the VPN properties pages to configure your connection.">Configure VPN packet rules</a></div>
</div>
<div class="reltasks"><strong>Related tasks</strong><br />
<div><a href="rzajadefseccon.htm" title="After you have configured the security policies for your connection, you must then configure the secure connection.">Configure the VPN secure connection</a></div>
<div><a href="rzajadefineinterface.htm" title="After you configure your VPN packet rules and any other rules that you need to enable your VPN connection, you must define the interface to which to they apply.">Define an interface for the VPN filter rules</a></div>
<div><a href="rzajastartdyncon.htm" title="Complete this task to start connections you will initiate locally.">Start a VPN connection</a></div>
</div>
</div>
</body>
</html>