While setting up a schowler route is easy once you understand them as well
as Larry does, 99.8% of the administrators are just not that educated in
networking. BTW here's a site that attempts to explain it.....
https://www.ibm.com/support/pages/schowler-routes-ibm-iseries
If you need them, give up now and just hire Larry. It's faster and much
less stressful. (Might even work when he's done..... ;-) .)
--
Jim Oberholtzer
Agile Technology Architects
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
Berendt
Sent: Wednesday, May 26, 2021 9:36 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: IBM switching from ftp to secure ftp to download PTF's.
There is still one little issue with that thought.
NETSTAT *IFC
Shows a dozen local interfaces. Several Domino servers, web servers, etc.
You initiate a connection to IBM and it picks one to go out on. My RFE to
be able to bind specific was rejected. No comm on a particular IP address
to a particular address and the network guy says "Hassan chops!" I think
the suggested work around by IBM was to set up routes to go out on certain
IP addresses.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
-----Original Message-----
From: Larry "DrFranken" Bolhuis <midrange@xxxxxxxxxxxx>
Sent: Wednesday, May 26, 2021 10:25 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>;
Rob Berendt <rob@xxxxxxxxx>
Subject: Re: IBM switching from ftp to secure ftp to download PTF's.
CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know the
content is safe.
This is one reason I suggest customers regularly test the ability to
contact IBM. Things like SNDPTFORD and Send a *TEST service request.
Some customers even when firewall ports were permitted the firewall team
says: "Well no action on that for 90 days, we're closing it."
- DrF
On 5/26/2021 10:02 AM, Rob Berendt wrote:
I'm anxious to give this SFTP a try. I cannot get all the way through a
ftp session on any of my IBM i lpars anymore. Oh, it starts and downloads a
goodly portion of the number of .iso files but seems to abort a few GB in on
one of the later iso files. I suspect something with changes the network
guy is doing. Now I initiate the ftp from a PC server and when it's done
transfer that to each hosting lpar. Of course I'll have to beg and plead
with the network guy to open up the sftp ports and spend a few days trying
to explain to him why the client side uses random ports. He likes to
Catbert me on this and try to get me to get IBM to change all their code.
He had sniffed the comm for quite some time and locked down a bunch of
stuff that wasn't used. Of course that was during the time he was sniffing
and doesn't include things like quarterly PTF's.
Rob Berendt
--
IBM Champion for Power Systems
www.iInTheCloud.com - Commercial IBM i and Power System Hosting
www.iDevCloud.com - Personal IBM i Hosting
www.Frankeni.com - IBM i and Power Systems Consulting.
midrange.com
