Create a connection security configuration object
A connection security network server configuration (NWSCFG subtype CNNSEC)
object must be created to define the IP security (IPSec) rules that are used
to secure the storage and virtual Ethernet data flows over the iSCSI network
between the iSeries™ and xSeries® or IBM® BladeCenter™ blade servers.
Note:
If the iSCSI HBA hardware on either the iSeries or xSeries or IBM BladeCenter side
of the iSCSI connection does not support IPSec, then IPSec cannot be used
to secure the data flows over the iSCSI network. If the iSCSI HBA hardware
does not support IPSec, then a connection security object still needs to be
created, but do not define any IP security rules.
To create a connection security configuration using iSeries Navigator,
follow these steps:
- Expand Integrated Server Administration.
- Expand iSCSI Connections.
- Right-click Connection Security.
- Select New Connection Security Configuration.
- On the General tab:
- Enter the Name and Description.
- Select the Object authority
- On the IP Security Rules tab:
- If your iSCSI HBA hardware supports IPSec, define the IP security rules
that will be used to secure the storage and virtual Ethernet data flows over
the iSCSI network.
- Otherwise, do not define any IP security rules.
- Click OK.
If you want to use CL commands, see CRTNWSCFG or WRKNWSCFG.
