Remove TCP/IP Port Restriction (RMVTCPPORT)

The Remove TCP/IP Port Restriction (RMVTCPPORT) command removes a particular user profile from the list of user profiles that are allowed to use a port or range of ports. The removal of the user profile takes effect as soon as that user profile being removed is no longer using the port or any of the ports within the range of ports.

There are two independent sets of ports. One set is for TCP processing and the other is for UDP processing. They are completely independent sets of ports and have no relationship to one another.

Restrictions:

You must have input/output system configuration (*IOSYSCFG) special authority to run this command.

Keyword	Description	Choices	Notes
PORT	Range of port values	Element list	Required, Positional 1
Element 1: Lower value	1-65535, *ALL
Element 2: Upper value	1-65535, *ONLY
PROTOCOL	Protocol	UDP, TCP	Required, Positional 2
USRPRF	User profile	Character value	Required, Positional 3

Range of port values (PORT)

Specifies the port number or range of port numbers that are having the user profile removed from the list of user profiles that are allowed to use that port or range of ports. Valid values range from 1 through 65535. However, ports 1 through 1023 are reserved for use by system-supplied TCP/IP applications. If the user specifies ports 1 through 1023, it can affect the operation of those applications.

This is a required parameter.

Element 1: Lower value

1-65535: Specify the port value or the lower port value (in a range) from which you want the user profile removed.

Element 2: Upper value

*ONLY: The port value specified in the lower port value is the only port value that has the user profile removed.
*ALL: The port range values that are removed are 1-65535.
1-65535: Specify the upper port value (in a range) from which you want the user profile removed.

Protocol (PROTOCOL)

Specifies the transport protocol associated with the port or range of ports having the user profile removed from the list of user profiles that have exclusive use of a port or range of ports.

This is a required parameter.

*UDP: The port is a User Datagram Protocol (UDP) transport protocol port.
*TCP: The port is a Transmission Control Protocol (TCP) transport protocol port.

Examples

Example 1: Removing Restriction on a Single User Profile

RMVTCPPORT   PORT(1590)  PROTOCOL(*UDP)  USRPRF(USER1)

This command removes the restriction for the user profile named USER1 for UDP port 1590. This user profile is removed from the list of user profiles that are allowed to use port number 1590.

Example 2: Removing Restriction on a Range of Ports

RMVTCPPORT   PORT(1590 2000)  PROTOCOL(*TCP)  USRPRF(USER2)

This command removes the restriction for the user profile named USER2 for TCP ports 1590 through port 2000. This user profile is removed from the list of user profiles that are allowed to use ports 1590 though 2000.

Example 3: Removing All Ports

RMVTCPPORT   PORT(*ALL)  PROTOCOL(*TCP)  USRPRF(USER3)

This command removes the restriction for the user profile named USER3 for TCP port 1 through port 65535. The command will complete successfully even if the user did not have a port within this range restricted. This user profile is removed from the list of user profiles that are allowed to use any of the TCP ports.

Error messages

*ESCAPE Messages

TCP1D03: &1 member record length not correct.
TCP1D04: Error occurred processing member &1 of &2/&3.
TCP26E2: User profile &1 damaged.
TCP26E4: Port restriction action successful, but TCP/IP errors occurred.
TCP26E7: You cannot have '*ALL' and '*ONLY'.
TCP26FA: Port restriction &1 - &2 not removed.
TCP26FB: The user profile &1 does not exist
TCP26FC: Upper port value must be *ONLY.
TCP26FD: Port &1 not found.
TCP26F1: Range of ports not valid.
TCP26F2: Removal of port restriction &1 - &2 not valid.
TCP8050: *IOSYSCFG authority required to use &1.
TCP9503: File &3 in library &2 not available.
TCP9526: User profile &1 not found.
TCP9999: Internal system error in program &1.