|
|
|
| Home | Products & services | Support & downloads | My account | ||
|
| ||
 |
Q: How do I install the SecurID® client on the IBM Firewall? A: The SecurID client is built into the Firewall, so you do not need to install it separately. However, you do need to copy the sdconf.rec file from the ACE Server into the /var/ace directory. For more information, refer to the Security Dynamics ACE/Server Installation Guide.Q: How do I configure the IBM Firewall for MTU negotiation between different LAN types? A: If you deploy different types of LANs, you might need to configure a rule for Maximum Transmission Unit (MTU) negotiation on your firewall. IBM has screened subnet firewall architecture with an external network (representing the Internet), a perimeter network (a "DMZ"), and an internal network (intranet). The perimeter network is Ethernet, and the internal network is Token Ring. Maximum sizes of data fields in Ethernet and Token-Ring packets differ, with Token-Ring maximum size data fields being larger. When a DB2 or SAP™ client (or a Tivoli-managed node) running on a Windows NT server in the perimeter (Ethernet) network requests data from the corresponding server in the internal (Token-Ring) network, the request might not be successful. This is because Windows NT servers do not allow fragmentation. Instead, you must configure the firewall adapter interface to the perimeter network for MTU negotiation between that interface and the Windows NT server(s) in the perimeter network. For a list of links to other IBM technical support sites, visit www.ibm.com/support/tcp/links.html. You can access some other useful non-IBM support sites at www.ibm.com/support/tcp/summer99/hotsites.html. | IBM Networking Home Page | Contents of This Issue | Next Article | Find a Different Issue |
© International Business Machines Corporation 1999 |
|
|
