RE: PM/400 via Internet (Wilt, Charles)

I had made a call to IBM a week or so ago because I couldn't get the 
darn thing to work.  Turns out that some of my old dialup 
configurations were preventing it from using the Internet connection 
(those steps were not in the knowledgebase article).  The technician 
from that call told me that it would try HTTP first but then roll to 
VPN is that wasn't sucessful connecting.  Like I mentioned earlier, we 
flag a lot of data to be sent and I was suprised when IBM said they 
hadn't got anything.  That's why I called again today.  The technican 
check somethings, had me delete two validation lists, check a job in 
WRKJOBSCDE.  After it collected all the inventory stuff nothing 
happened.  It was then she had me do WRKJOB JOB(QTOVMAN) and look at 
the ACTIVE jobs joblog.  There were messages TCP8606 reason code 8408 
and TCP8601 reason code 3.

That's when she sent me the link about having HTTP *INBOUND* open.  
That seems crazy.
Figures, the 'FireWall' guy is out today so I can't see if there were 
any denies from some address and if the thing was even trying to do 
HTTP.

mike.

from: "Wilt, Charles" <CWilt@xxxxxxxxxxxx>
subject: RE: PM/400 via Internet

I think somebody's confused somewhere.

We send PM data out to IBM via the internet with no ports open on our
firewall inbound into our iSeries.

I got it to work by following the infocenter/iNav/PM web site
instructions.  Took me a couple of tries, but the data 
transmission has
been working for months now.

HTH,


Charles Wilt
--
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121
 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx 
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of 
msmith6@xxxxxxxxxxxx
Sent: Monday, September 18, 2006 11:17 AM
To: Midrange-L@xxxxxxxxxxxx
Subject: PM/400 via Internet

  I was in the process of configuring my PM/400 to send 

performance 

data to IBM this morning.  Last week I was able to download a 

PTF 

coverl letter to verify I had the connection working through the 
firewall.  I have a bunch of performance data I set to transmit 

last 

week.  I realized today I hadn't received the user id and 

password 

from IBM telling me I have reports to view.
After placing a call to the SupportLine, I found out that you 

need to 

have HTTP (as well as VPN ports 500 and 4500) open.  I found it 

very 

suprising that folks would allow HTTP (port 80) inbound from the 
Internet to have this feature.  I don't think we have any 
INBOUND HTTP 
to our trusted network, and if it is, it's all encrypted via a vpn.


The technician forwarded me this link :
http://www-
912.ibm.com/8625680A007CA5C6/1AC66549A21402188625680B0002037E/
70954A9B9
A81DA3F8625719A0049F3A2

--