ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaja_5.4.0.1/rzajaactivatepacketrules2.htm

63 lines
4.2 KiB
HTML
Raw Normal View History

2024-04-02 14:02:31 +00:00
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Activate packet rules" />
<meta name="DC.Relation" scheme="URI" content="rzajaremoteuser.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajaconfigureapppiseriesb.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzajaactivatepacketrules" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Activate packet rules</title>
</head>
<body id="rzajaactivatepacketrules"><a name="rzajaactivatepacketrules"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Activate packet rules</h1>
<div><div class="section"><p>VPN automatically creates the packet rules that this connection
requires to work properly. However, you must activate them on both systems
before you can start the VPN connection. To do this on iSeries-A, follow these
steps:</p>
</div>
<ol><li><span>In <span class="keyword">iSeries™ Navigator</span>,
expand <span class="menucascade"><span class="uicontrol">iSeries-A</span> &gt; <span class="uicontrol">Network</span> &gt; <span class="uicontrol">IP Policies</span></span>.</span></li>
<li><span>Right-click <span class="uicontrol">Packet Rules</span> and select <span class="uicontrol">Activate</span>.
This opens the <span class="uicontrol">Activate Packet Rules</span> dialog box.</span></li>
<li><span>Select whether you want to activate only the VPN generated rules,
only a selected file, or both the VPN generated rules and a selected file.
You might choose the latter, for instance, if you have miscellaneous PERMIT
and DENY rules that you want to enforce on the interface in addition to the
VPN generated rules.</span></li>
<li><span>Select the interface on which you want the rules activated. In
this case, select <span class="uicontrol">All interfaces</span>.</span></li>
<li><span>Click <span class="uicontrol">OK</span> on the dialog box to confirm that
you want to verify and activate the rules on the interface or interfaces you
specified. After you click OK, the system checks the rules for syntax and
semantic errors and reports the results in a message window at the bottom
of the editor. For error messages that are associated with a specific file
and line number, you can right-click the error and select <span class="uicontrol">Go To
Line</span> to highlight the error in the file.</span></li>
<li><span>Repeat these steps to activate packet rules on iSeries-B.</span></li>
</ol>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajaremoteuser.htm" title="In this scenario, you learn how to setup a connection between a branch office host and a corporate office that uses L2TP protected by IPSec. The branch office has a dynamically assigned IP address, while the corporate office has a static, globally routable IP address.">Scenario: Protect an L2TP voluntary tunnel with IPSec</a></div>
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzajaconfigureapppiseriesb.htm">Configure a PPP connection profile and virtual line on iSeries-B</a></div>
</div>
</div>
</body>
</html>