Re: How to bind FTP to a specific address.

I use the preferred interface technique when accessing remote systems
- I didn't know it didn't work with local systems. We have to do that
with a trading partner because their firewall is configured for one of
our interface addresses. We have two interfaces, and traffic would
always go out the 'lower' address, which is not the one configured by
the trading partner. I think the preferred interface technique will
work if the remote system is not on the same subnet as the iSeries
interface, and maybe Schowler routes would work if they were on the
same subnet?

On 7/26/07, Bryan Dietz <bdietz400@xxxxxxxxx> wrote:

Rob. I think you are going to need to use the Schowler Routes.

<snip>
Another common use of Schowler routes is to force local traffic out of a
specific interface. Without Schowler routes, the system always uses the
first *DIRECT route that it reads from the routing table and will use
the local interface that is dynamically bound to that route when sending
to a local system. Because *DIRECT routes are the highest precedence
route, there is no way to configure the system to use a preferred
interface. However, by creating Schowler routes, these *DIRECT routes
become Indirect routes and, therefore, other routes (for example, host
routes) can be configured to have higher precedence than these Schowler
routes.
</snip>

http://www-1.ibm.com/support/docview.wss?rs=0&context=SWG60&dc=DB520&dc=D900&dc=D800&dc=DA900&dc=DA800&q1=schowler+AND+AS400KBXXYYZZRCH&uid=nas1eb95209430bbcb7486256d170047484a&loc=en_US&cs=UTF-8&lang=all

Bryan

rob@xxxxxxxxx said the following on 7/26/2007 9:38 AM:
> Yeah, the remote site expects it to come from a particular IP address.
> I can "fix" one situation. When I ftp from one lpar to a lpar in the DMZ
> I can open up the exit point on the lpar in the dmz to accept the whole
> range of addresses served by this source lpar.
> However the other situation requires I talk to the "consultant".
> Apparently certain bar code printers accept ftp commands. And these are
> locked down by the IP address they expect communications to come from.
>
> Rob Berendt
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.