Re: Custom Service Ports in IBM ACS

[Franz.Rauscher@xxxxxxxxxxx]

i am aware of vpn, socks proxy and ssh tunnel but i would like to do it 
without that. 

now my employees are using tn5250j. they connect to a port eg 9999 which 
is mapped to 992 on the IBMi. I like this solution but i would even more 
like if they could use IBM ACS instead of tn5250j. 

the real problem here is that the port for the server-mapper is fixed 449. 
i dont know if it is a good idea to expose the default ports to the 
internet because aof security reasons

does noone know a way to configure IBM ACS to ignore the Server-Mapper?







From:   "DrFranken" <midrange@xxxxxxxxxxxx>
To:     "Midrange Systems Technical Discussion" 
<midrange-l@xxxxxxxxxxxxxxxxxx>
Cc:     "David Gibbs" <david@xxxxxxxxxxxx>
Date:   18.06.2019 16:46
Subject:        Re: Custom Service Ports in IBM ACS
Sent by:        "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>



Second this.

         - Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 6/18/2019 10:12 AM, David Gibbs via MIDRANGE-L wrote:
> On Tue, Jun 18, 2019 at 9:01 AM <Franz.Rauscher@xxxxxxxxxxx> wrote:
> > i want to use my IBM ACS 5250 Terminal application from outside or 
local
> > Network (from Internet). I would like to map the IBM i Service ports to
> > differnt external ports BUT i dont want to change the ports for 
internal
> > users.
>
> VPN would probably be a better approach.
>
> Alternatively, consider opening port 22 and using a SSH tunnel.
>
> david