IBM Universal Connection and non-Cisco firwalls with NAT?

["Roger Vicker, CCP" <rv-lists@xxxxxxxxxx>]

I just had a conversation with a lovely lady at Support Line and after 
wrapping up the issue I asked her if IBM had gotten UC to work through 
NAT yet. She gave me a pair of PTFs (one on last 2003 CUME and one new) 
that are required and a red piece that details UC setup.

However, the red piece states that the iSeries has to have a public 
address instead of an internal private address and gives details for 
specific rules in Cisco routers. It also details going to the Registered 
Knowledge Base to get IBM's TCP/IP address to use in the Cisco rules. 
That document mentions in the bottom that since 10/2003 V5R2 has been 
able to setup a direct UC that allows the iSeries with a private address 
and going through NAT. The only firewall rules are to allow general 
in/out ESP and UDP 500 & 4500.

Has anyone actually setup UC with: V5R2, NAT firewall, non-Cisco router, 
private iSeries address?

Is it as simple as the knowledge base makes it seem? Just open the three 
ports on the firewall and run the wizard as a direct connection. Do you 
need to setup port mapping so that one or more of the ports have 
incoming traffic go directly to the private address?

If you run the wizard for both the ECS and Service Agent does that cover 
any other IBM functions like PM/400? Prior experience says yes but I 
would like to confirm it with NAT.

I've set up some iSeries at V5R1 with public addresses but have never 
had success yet with others behind NAT and would love to move to it for 
the speed and avoidance of using a phone line.

Thanks.

Roger Vicker, CCP


--
*** Vicker Programming and Service *** Have bits will byte *** www.vicker.com 
***
No battle plan has ever survived contact with the enemy.