Configure a direct Internet connection

Use the following Universal Connection wizard procedure to create a Universal Connection to any of the following services through a direct Internet connection:

Electronic customer support
Electronic service agent
Information Center Update

Note:

See Scenario: Configure a direct Internet connection and Scenario: Configure a direct Internet connection from a server that provides connectivity for other systems or partitions for specific configuration examples.

Prerequisites

The prerequisites for enabling electronic customer support over a direct Internet connection include:

The iSeries™ server must have a globally routable IP address, or the server must be behind a NAT firewall with a globally routable address.
Ensure that you install all of the latest service packs for iSeries Navigator. The scenarios show using the V5R4 version of the software.
Ensure that TCP/IP is active. You can start TCP/IP through the Start TCP/IP (STRTCP) command.
You must have security officer (*SECOFR) authority with *ALLOBJ, *IOSYSCFG, and *SECADM special authorities in your i5/OS™ user profile and *USE authority to WRKCNTINF in order to configure the connection using the Universal Connection wizard.
You must install the TCP/IP Connectivity Utilities (5722–TC1).
You must install the Digital Certificate Manager (DCM) (5722-SS1 option 34).
Ensure that the QRETSVRSEC system value is set to 1. You can check this value with the Display System Value (DSPSYSVAL) command. If this value is not set to 1, enter a Change System Value (CHGSYSVAL) command.
Ensure that a TCP/IP route exists to route the Universal Connection Packets to the Internet. In most situations the default route will work.
Ensure your filter rules allow Universal Connection traffic to flow to the Internet. See IP Packet Filter Firewall for details.

Configuring a Universal Connection from your server through a direct Internet connection

Assuming that TCP/IP configuration already exists and works, complete the following steps to set up the Universal Connection if you connect to electronic customer support through a local server:

Start the iSeries Navigator and select the Universal Connection wizard.
Select either primary or backup connection configuration. The default is primary.
Check the box to view and modify contact information.
Enter the service, address, and country (or region) information on the Universal Connection wizard dialog.
Connect from the current system with a direct connection to the Internet as a connection type.
Check the box if you want to configure a proxy, then fill out the proxy information.
Indicate that this server does not provide connectivity for other servers or partitions.
Review the Summary window to ensure that the configuration meets your requirements, and click Finish to save your configuration.
When prompted, test the connection from your server to electronic customer support.

Configuring a Universal Connection from your server that provides connectivity for other systems through a direct Internet connection

Complete the following steps to set up the Universal Connection when you connect to electronic customer support through your local server that acts as a connecting point for other servers:

Start the iSeries Navigator and select the Universal Connection wizard.
Select either primary or backup connection configuration. The default is primary.
Check the box to view and modify contact information.
Enter the service, address, and country (or region) information on the Universal Connection wizard screens.
Connect from the current system with a direct connection to the Internet as a connection type.
Check the box if you want to configure a proxy, then fill out the proxy information.
Specify that you want this iSeries server to function as a connecting point through which other servers or partitions connect to electronic customer support.
Select an interface or interfaces through which the other servers or partitions will be allowed to connect to electronic customer support.
Create or select an L2TP terminator profile. You need this profile to recognize the other systems or servers that connect to electronic customer support through your server.
Configure a Service and Support proxy server.
Review the Summary window to ensure that the configuration meets your requirements, and click Finish to save your configuration.
When prompted, test the connection from your server to IBM® customer support.