Re: iSeries in the DMZ?

["Patrick Trapp" <ptrapp@xxxxxxxxxxxx>]

I'm thinking that the LPAR route is what you would have to do to keep the 
servers distinct.  You can have the server available inside the DMZ and 
inside the firewall with the multiple NICs, but I'm not sure how secure 
you can make it if you are just putting multiple NICs on the same server 
instance.

There used to be a redbook out there that discussed this type of stuff, 
but it's been years since I needed to see it, so I'm sure it's way out of 
date.  Might still be of use to you...

Patrick




rob@xxxxxxxxx 
Sent by: domino400-bounces+ptrapp=nex-tech.com@xxxxxxxxxxxx
05/18/2005 10:54 AM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Subject
Re: iSeries in the DMZ?






1 - Not sure if the NIC solution would work.  Don't you have to ADDTCPIFC 
the new nic anyway, and if so, wouldn't that open it up to the 400?
2 - We have a 570.  It has multiple lpars.  One of these is in the DMZ and 

supports our domino based http://www.dekko.com.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





gregg.eldred@xxxxxxxxxxx 
Sent by: domino400-bounces+rob=dekko.com@xxxxxxxxxxxx
05/18/2005 10:37 AM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Subject
Re: iSeries in the DMZ?






domino400-bounces+gregg.eldred=ns-tech.com@xxxxxxxxxxxx wrote on 
05/18/2005 11:33:35 AM:

>    Would using multiple NIC's in the iSeries provide the necessary 
> security ?  For example one NIC visable to the outside world, the
> other NIC only visible to the inside world ?
> 
>    Bob
> 
Bob:

Excellent idea! I was thinking only of the Domino portion and didn't see 
the forest for the trees. That sounds really good.

Thanks.

Gregg
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.


_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.