Re: What ports do I need open on firewall to allow remote access to IBMi?

I should have mentioned, these are internal firewalls (for some reason our
security folks like firewalls between different business units!). And for
remote access the users use RAS/VPN to hit a terminal server first and then
run 5250 emulation on it. So it doesn't need SSL but the firewall still
need to have some ports open to allow traffic from the terminal server to
hit the Power server.

(As an aside posting on a phone means you can't explain as much as you want
and my current work environment doesn't allow access to Gmail)

On Mon, Mar 9, 2020 at 4:03 PM DrFranken <midrange@xxxxxxxxxxxx> wrote:

FIrst you will want to install a digital certificate and trust it to all
the servers you need. Failure to do that would mean all user IDs and
passwords will fly in the clear to the server.

For ACS with TLS you will want to have open at least:

449 - Although selecting the option to use standard ports in the
acsconfig.properties file [com.ibm.iaccess.StandardPortLookup=true]
would mean that 449 need not be open.

9470-9746 - for the various server connections, signon, etc.

992 - For Telnet

FOr Navigator for i: 2005

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 3/8/2020 9:41 PM, Laurence Chiu wrote:

I want to enable remote access to a IBMi server remotely. The firewall

team

wants to know what ports to open.

Looking at this document

https://www.ibm.com/support/pages/tcpip-ports-required-ibm-i-access-and-related-functions

Looks like a lot. We would be using IBM Client Access.

For basic 5250 access could I get by with the telnet port that is 23?

Anything else I would need just to access IBMi and run a green screen
application?

Thanks

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com