132 lines
9.2 KiB
HTML
132 lines
9.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
|||
|
|
<!DOCTYPE html
|
|||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|||
|
|
<html lang="en-us" xml:lang="en-us">
|
|||
|
|
<head>
|
|||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|||
|
|
<meta name="security" content="public" />
|
|||
|
|
<meta name="Robots" content="index,follow" />
|
|||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|||
|
|
<meta name="DC.Type" content="reference" />
|
|||
|
|
<meta name="DC.Title" content="Scenario: Connect remote dial-in clients to your iSeries server" />
|
|||
|
|
<meta name="abstract" content="Remote users, such as telecommuters or mobile clients, often require access to a company's network. These dial-in clients can gain access to an iSeries server with PPP." />
|
|||
|
|
<meta name="description" content="Remote users, such as telecommuters or mobile clients, often require access to a company's network. These dial-in clients can gain access to an iSeries server with PPP." />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiyscenarios.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiychap.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiyplan.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiyprofile.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiylinkcfg.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiylinepool.htm" />
|
|||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
|||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
|
|||
|
|
<meta name="DC.Format" content="XHTML" />
|
|||
|
|
<meta name="DC.Identifier" content="rzaiyclients" />
|
|||
|
|
<meta name="DC.Language" content="en-us" />
|
|||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|||
|
|
<!-- US Government Users Restricted Rights -->
|
|||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|||
|
|
<title>Scenario: Connect remote dial-in clients to your iSeries server</title>
|
|||
|
|
</head>
|
|||
|
|
<body id="rzaiyclients"><a name="rzaiyclients"><!-- --></a>
|
|||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|||
|
|
<h1 class="topictitle1">Scenario: Connect remote dial-in clients to your iSeries server</h1>
|
|||
|
|
<div><p>Remote users, such as telecommuters or mobile clients, often require
|
|||
|
|
access to a company's network. These dial-in clients can gain access to an iSeries™ server
|
|||
|
|
with PPP.</p>
|
|||
|
|
<div class="section"><h4 class="sectiontitle">Situation</h4><p>As an administrator of your company's
|
|||
|
|
network, you must maintain both your iSeries server and network clients. Instead
|
|||
|
|
of coming into work to troubleshoot and fix problems, you need the capability
|
|||
|
|
to work from a remote location, such as your home. Because your company does
|
|||
|
|
not have an Internet-bound network connection, you can dial into your iSeries server
|
|||
|
|
using a PPP connection. Additionally, the only modem you currently have is
|
|||
|
|
your 7852-400 electronic customer support (ECS) modem and you need to use
|
|||
|
|
this modem for your connection.</p>
|
|||
|
|
</div>
|
|||
|
|
<div class="section"><div class="fignone"><span class="figcap">Figure 1. Connect remote clients to your iSeries server</span><br /><img src="rzaiy505.gif" alt="Connect remote clients to your iSeries server" /><br /></div>
|
|||
|
|
</div>
|
|||
|
|
<div class="section"><h4 class="sectiontitle">Solution</h4><p>You can use PPP to connect your home PC
|
|||
|
|
to your iSeries server
|
|||
|
|
using your modem. Because you are using your ECS modem for this type of PPP
|
|||
|
|
connection, you must ensure that your modem is configured for both synchronous
|
|||
|
|
and asynchronous modes. This illustration depicts an iSeries server with PPP services that
|
|||
|
|
is connected to a LAN with two PCs. The remote worker then dials into the iSeries server,
|
|||
|
|
authenticates itself, and then becomes part of the work network (<samp class="codeph">192.168.1.0</samp>).
|
|||
|
|
In this case, it is easiest to assign a static IP address to the dial-in client.</p>
|
|||
|
|
</div>
|
|||
|
|
<div class="section"><p>The remote worker uses CHAP-MD5 to authenticate with the iSeries server.
|
|||
|
|
The iSeries cannot
|
|||
|
|
use MS_CHAP, so you must make sure your PPP client is set to use CHAP-MD5.</p>
|
|||
|
|
</div>
|
|||
|
|
<div class="section"><p>If you want your remote workers to have access to the company
|
|||
|
|
network as implied above, IP forwarding needs to be set on in the TCP/IP stack
|
|||
|
|
as well as your PPP receiver profile, and IP routing must be configured correctly.
|
|||
|
|
If you want to limit or secure what actions your remote client can take in
|
|||
|
|
your network, you can use filtering rules to handle their IP packets.</p>
|
|||
|
|
</div>
|
|||
|
|
<div class="section"><p>The above illustration only has one remote dial-in client, because
|
|||
|
|
the ECS modem can only handle one connection at a time. If your needs require
|
|||
|
|
multiple simultaneous dial-in clients, then see the planning section for both
|
|||
|
|
hardware and software considerations.</p>
|
|||
|
|
</div>
|
|||
|
|
<div class="section"><h4 class="sectiontitle">Sample configuration</h4><ol><li>Configure Dial-up Networking and create a dial-up connection on the remote
|
|||
|
|
PC.</li>
|
|||
|
|
<li>Configure a Receiver Connection Profile on your iSeries server. <p>Ensure that you enter
|
|||
|
|
the following information: </p>
|
|||
|
|
<ul><li><strong>Protocol type</strong>: <tt>PPP</tt></li>
|
|||
|
|
<li><strong>Connection type</strong>: <tt>Switched-line</tt></li>
|
|||
|
|
<li><strong>Operating mode</strong>: <tt>Answer</tt></li>
|
|||
|
|
<li><strong>Link configuration</strong>: <tt>This may be single line, or a line pool,
|
|||
|
|
depending on your environment.</tt></li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
<li>On the General page of the New Point-to-Point Profile Properties, enter
|
|||
|
|
a name and description for the receiver profile. </li>
|
|||
|
|
<li>Click <span class="uicontrol">Connection</span> to open the Connection page. Choose
|
|||
|
|
the appropriate <span class="uicontrol">Line name</span>, or create a new one by typing
|
|||
|
|
a new name, and clicking <span class="uicontrol">New</span>. <ol type="a"><li>On the General page, highlight an existing hardware resource where your
|
|||
|
|
7852–400 adapter is attached and set the Framing to <span class="uicontrol">Asynchronous</span>.</li>
|
|||
|
|
<li>Click <span class="uicontrol">Modem</span> to open the Modem page. From the Name
|
|||
|
|
select list, choose the <span class="uicontrol">IBM 7852–400</span> modem.</li>
|
|||
|
|
<li>Click <span class="uicontrol">OK</span> to return to New Point-to-Point Profile
|
|||
|
|
Properties page.</li>
|
|||
|
|
</ol>
|
|||
|
|
</li>
|
|||
|
|
<li>Click <span class="uicontrol">Authentication</span> to open the Authentication
|
|||
|
|
page. <ol type="a"><li>Select <span class="uicontrol">Require this iSeries server to verify the identity of
|
|||
|
|
the remote system</span>.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Authenticate locally using a validation list</span> and
|
|||
|
|
add a new remote user to the validation list.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Allow encrypted password (CHAP-MD5)</span>. </li>
|
|||
|
|
</ol>
|
|||
|
|
</li>
|
|||
|
|
<li>Click <span class="uicontrol">TCP/IP Settings</span> to open the TCP/IP page. <ol type="a"><li>Select the local IP address of <kbd class="userinput">192.168.1.1</kbd>.</li>
|
|||
|
|
<li>For the remote IP address, select <span class="uicontrol">Fixed IP address</span> with
|
|||
|
|
a starting IP address of <kbd class="userinput">192.168.1.11</kbd>.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Allow remote system to access other networks</span>.</li>
|
|||
|
|
</ol>
|
|||
|
|
</li>
|
|||
|
|
<li>Click <span class="uicontrol">OK</span> to complete the profile.</li>
|
|||
|
|
</ol>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
<div class="familylinks">
|
|||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaiyscenarios.htm" title="The scenarios in this topic help you understand how PPP works, and how you can implement a PPP environment in your network. These scenarios introduce fundamental PPP concepts from which beginners and experienced users can benefit before they proceed to the planning and configuration tasks.">Scenarios</a></div>
|
|||
|
|
</div>
|
|||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
|||
|
|
<div><a href="rzaiyplan.htm" title="You can read this topic for information about creating and administering PPP connections.">Plan PPP</a></div>
|
|||
|
|
</div>
|
|||
|
|
<div class="reltasks"><strong>Related tasks</strong><br />
|
|||
|
|
<div><a href="rzaiyprofile.htm" title="The first step in configuring a PPP connection between systems is to create a connection profile on the iSeries server.">Create a connection profile</a></div>
|
|||
|
|
</div>
|
|||
|
|
<div class="relref"><strong>Related reference</strong><br />
|
|||
|
|
<div><a href="rzaiychap.htm" title="Challenge Handshake Authentication Protocol (CHAP-MD5) uses an algorithm (MD-5) to calculate a value that is known only to the authenticating system and the remote device.">CHAP-MD5</a></div>
|
|||
|
|
<div><a href="rzaiylinkcfg.htm" title="Link configuration defines the type of line service that your PPP connection profile uses to establish a connection.">Link configuration</a></div>
|
|||
|
|
<div><a href="rzaiylinepool.htm" title="Select this line service to set the PPP connection to use a line from a line pool. When the PPP connection starts, the iSeries server selects an unused line from the line pool. For dial on-demand profiles, the server does not select the line until it detects TCP/IP traffic for the remote system.">Line pool</a></div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</body>
|
|||
|
|
</html>
|