Re: AS/400 on two IP schemes

[Dr Syd Nicholson <sydnic@xxxxxxxxxx>]

Is your current IP scheme on a different LAN to the new IP scheme?

If they are on the same LAN you will have problems limiting them to
their own IP address range. An iSeries network card can have more than
one IP address/network mask, but somebody on the "external" LAN will
still have access to your "internal" IP addresses.

Better to have two network cards in the iSeries, and two separate LANs/WANs

As far as restricting use of the machine. Use OS/400 security as far as
possible. How much you can achieve will depend upon the requirements of
any applications you use. You might also want to consider an exit point
security product if you cannot use OS/400 security for any reason.

Syd Nicholson


Mark A. Manske wrote:

>Hello IP wizards and  security gurus;
>
>I looked over the archives, but did not see what I was looking for -
>We have our AS/400, and all related devices set-up to a certain
>IP scheme, we have been sold, and corporate wants now to place
>our AS/400 on their WAN, my issue is I do not want them to see
>anything else, and even on the AS/400 I only want to give that
>nic card access to one library, and absolutely nothing else.
>
>Can anyone assist me where to look as to how to set-up
>something like this (which books do I need to read)
>
>And can I lock it down this tight?
>
>TIA
>
>Mark A. Manske
>Fleming CSD - Plymouth Division
>Sr. Project Lead
>Phone      (763) 545-3700 extension 273
>Web Site  http://www.minter-weisman.com
>E-Mail      mailto:mmanske@minter-weisman.com
>