Use the IPCONFIG statement to update the IPv4 IP layer of TCP/IP.
Tip: Specify the parameters for this statement in any order.
>>-IPCONFig-----------------------------------------------------> .------------------------------------------------------------------------------------------------------------. V | >----+--------------------------------------------------------------------------------------------------------+-+->< | .-ARPTO 1200-----------------. | +-+----------------------------+-------------------------------------------------------------------------+ | '-ARPTO --ARP_cache_timeout-' | | .-CHECKSUMOFFLoad---. | +-+-------------------+----------------------------------------------------------------------------------+ | '-NOCHECKSUMOFFLoad-' | +-+------------------+-----------------------------------------------------------------------------------+ | '-CLAWUSEDoublenop-' | | .-NOFWDMULTipath---------. | | .-DATAGRamfwd--+------------------------+-. | | | '-FWDMULTipath PERPacket-' | | +-+-----------------------------------------+------------------------------------------------------------+ | '-NODATAGRamfwd---------------------------' | | .-DEVRETRYDURation 90-------------------. | +-+----------------------------------------+-------------------------------------------------------------+ | '-DEVRETRYDURation --dev_retry_duration-' | | .-NODYNAMICXCF---------------------------------------------------------------------------------------. | +-+----------------------------------------------------------------------------------------------------+-+ | | .---------------------------------------. | | | | V | | | | '-DYNAMICXCF--+-ipv4_address subnet_mask---+--cost_metric----+-----------------------------------+-+-' | | '-ipv4_address/num_mask_bits-' | .-SECCLASS 255------------. | | | +-+-------------------------+-------+ | | | '-SECCLASS security_class-' | | | '---SOURCEVIPAINTerface vipa_name---' | +-FORMat--+-LONG--+--------------------------------------------------------------------------------------+ | '-SHORT-' | +-+----------------+-------------------------------------------------------------------------------------+ | '-IGNORERedirect-' | +-+------------+-----------------------------------------------------------------------------------------+ | '-IPSECURITY-' | | .-NOIQDIORouting--------------------------. | +-+-----------------------------------------+------------------------------------------------------------+ | | .-QDIOPriority 1--------. | | | '-IQDIORouting--+-----------------------+-' | | '-QDIOPriority priority-' | | .-NOMULTIPATH------------------. | +-+------------------------------+-----------------------------------------------------------------------+ | | .-PERConnection-. | | | '-MULTIPATH--+---------------+-' | | '-PERPacket-----' | | .-NOPATHMTUDISCovery-. | +-+--------------------+---------------------------------------------------------------------------------+ | '-PATHMTUDISCovery---' | | .-NOQDIOACCELerator--------------------------. | +-+--------------------------------------------+---------------------------------------------------------+ | | .-QDIOPriority 1--------. | | | '-QDIOACCELerator--+-----------------------+-' | | '-QDIOPriority priority-' | | .-REASSEMBLytimeout 60-------------------. | +-+----------------------------------------+-------------------------------------------------------------+ | '-REASSEMBLytimeout --reassembly_timeout-' | | .-NOSEGMENTATIONOFFLoad-. | +-+-----------------------+------------------------------------------------------------------------------+ | '-SEGMENTATIONOFFLoad---' | | .-NOSOURCEVIPA-. | +-+--------------+---------------------------------------------------------------------------------------+ | '-SOURCEVIPA---' | +-+-----------------+------------------------------------------------------------------------------------+ | '-STOPONclawerror-' | | .-NOSYSPLEXRouting-. | +-+------------------+-----------------------------------------------------------------------------------+ | '-SYSPLEXRouting---' | | .-NOTCPSTACKSOURCEVipa---------. | +-+------------------------------+-----------------------------------------------------------------------+ | '-TCPSTACKSOURCEVipa vipa_addr-' | | .-TTL 64-----------. | '-+------------------+-----------------------------------------------------------------------------------' '-TTL time_to_live-'
This parameter serves the same purpose as the ARPAGE statement, but the value specified on ARPAGE is in minutes while the value specified on the ARPTO parameter is in seconds.
Because ARP cache entries for MPCIPA and MPCOSA interfaces are not managed by the TCP/IP stack, they are not affected by the ARPTO statement. For more information about devices that support ARP Offload, see z/OS Communications Server: IP Configuration Guide.
See Steps for modifying for information about changing this parameter while the TCP/IP stack is active. See Checksum offload in z/OS Communications Server: IP Configuration Guide for more information about the checksum offload support and for specific information about which packets can have checksum processing performed by the OSA-Express.
EZZ0337I CLAWUSEDOUBLENOP IS SET
EZZ0334I IP FORWARDING IS DISABLED
Tip: The FWDMULTIPATH and NOFWDMULTIPATH keywords used with DATAGRAMFWD are independent of the MULTIPATH keyword on the IPCONFIG statement.
EZZ0641I IP FORWARDING NOFWDMULTIPATH SUPPORT IS ENABLED
EZZ0641I IP FORWARDING FWDMULTIPATH PERPACKET SUPPORT IS ENABLED
Guideline: If the TCP/IP stack is also configured to be a sysplex distributor (see VIPADYNAMIC statement summary for more information), datagrams destined to a sysplex-distributed dynamic VIPA are forwarded to stacks, whether or not forwarding is enabled.
Guideline: The default 90–seconds retry duration is sufficient for transparent recovery following many types of device or channel errors. However, certain ESCON-attached routers cannot complete a microcode load in 90 seconds and installations might want to increase the DEVRETRYDURATION to automatically recover the device following these longer outages. On the other hand, installations running extensive automation built upon SNMP status and alerts can choose to code a small (nonzero) value in DEVRETRYDURATION, such that device recovery is deferred to external automation software, rather than a function of TCP/IP. For IPv4 interfaces that are defined with DEVICE and LINK statements, see also the AUTORESTART parameter in Overview of DEVICE and LINK statements. For IPv6 interfaces and IPv4 interfaces that are defined with the INTERFACE statement, the autorestart function is always active.
EZZ0624I DYNAMIC XCF DEFINITIONS ARE DISABLED
NODYNAMICXCF is the default value.
When DYNAMICXCF is coded in the profile, the purpose is to generate dynamic XCF interfaces, if possible. When TCP/IP is active, but ISTLSXCF is not active, dynamic creation is deferred. Later, when a TCP/IP command such as VARY TCPIP,,OBEYFILE or VARY TCPIP,,START is executed, triggering profile processing, the stack again checks to see if ISTLSXCF is active. If ISTLSXCF is active at that time, then the dynamic XCF interfaces are generated.
Dynamic XCF definitions are not generated if there is a DEVICE and LINK definition with the same device or link name that dynamic XCF would generate, or if there is an INTERFACE definition with the same interface name that dynamic XCF would generate.
Activation of dynamic XCF interfaces is delayed if VTAM® is not up or if OMPROUTE is not up and DELAYJOIN is coded on the GLOBALCONFIG SYSPLEXMONITOR statement. For more information about connectivity problems in a sysplex, see z/OS Communications Server: IP Configuration Guide.
When using dynamic XCF for Sysplex configuration, make sure that XCFINIT=YES or XCFINIT=DEFINE is coded in the VTAM start options, or if XCFINIT=NO was specified, ensure that a VARY ACTIVATE command is issued for the ISTLSXCF major node. This ensures that XCF connections between TCP stacks on different VTAM nodes in the sysplex can be established. See z/OS Communications Server: SNA Resource Definition Reference for directions to code the XCFINIT VTAM start option. The DISPLAY NET,VTAMOPTS command can be used to determine the XCFINIT setting.
Valid security classes are identified as a number in the range 1 - 255. The default value is 255. For more information about security class values, see z/OS Communications Server: IP Configuration Guide.
This value is used only when IPSECURITY is specified on the IPCONFIG statement.
The use of the SOURCEVIPAINTERFACE parameter can be overridden. See Source IP address selection in z/OS Communications Server: IP Configuration Guide for the hierarchy of ways that the source IP address of an outbound packet is determined.
Restriction: A mix of static and dynamic IPv4 and IPv6 definitions for a device are not allowed. For example, if a static IUTSAMEH IPv4 interface is defined, then the IPv6 dynamic definition for IUTSAMEH is not created. If a static IUTSAMEH IPv6 interface is defined, then the IPv4 dynamic definition for IUTSAMEH is not created. The same logic is also applied for XCF interfaces; a mix of static and dynamic IPv4 and IPv6 definitions is not allowed for an XCF interface.
EZZ0624I DYNAMIC XCF DEFINITIONS ARE ENABLED
The FORMAT keyword is meaningful only for stacks that are not enabled for IPv6. It controls the format of the command output. If FORMAT SHORT is specified and the stack is enabled for IPv6, then an error message is displayed. If the stack is not enabled for IPv6 and the user specified LONG format, the command output is displayed as if it could contain IPv6 addresses. If the stack is not enabled for IPv6 and the user specified SHORT format or did not specify the FORMAT keyword, then the command output is displayed as if it could contain only IPv4 addresses and not the longer IPv6 addresses.
If the stack is enabled for IPv6, then specifying the FORMAT keyword does not make any difference to the command format
EZZ0335I ICMP WILL IGNORE REDIRECTS
If you are using OMPROUTE and you have IPv4 interfaces configured to OMPROUTE and this option is not specified, IGNOREREDIRECT is enabled automatically.
If you are using intrusion detection services (IDS) policy to detect and discard ICMP Redirects and this option is not specified, ICMP Redirects are discarded anyway while the policy is active.
If this option is not specified, and an ICMP redirect is received for a destination for which there is a HOST route in the routing table, then the original route is deleted and replaced by the redirect. This applies to all routes, including static routes.
EZZ0753I IPV4 SECURITY SUPPORT IS ENABLED
Restriction: IPSec functions can be activated only at initial activation of TCP/IP.
EZZ0688I IQDIO ROUTING IS DISABLED
EZZ0688I IQDIO ROUTING IS ENABLED
If HiperSockets Accelerator support cannot be enabled, message EZZ0689I is issued with the reason. This message is also issued if IQDIOROUTING is specified in the data set that is used with the VARY TCPIP,,OBEYFILE command, if TCP/IP was activated with NOIQDIOROUTING and NOQDIOACCELERATOR on the initial profile.
Rule: This parameter is ignored if QDIOACCELERATOR is specified.
EZZ0817I QDIO ACCELERATOR IS DISABLED
These packets do not need to be sent to this TCP/IP stack for forwarding. This also applies to packets that would be forwarded by the Sysplex Distributor. This type of routing is called QDIO Accelerator. See the information about QDIO Accelerator in z/OS Communications Server: IP Configuration Guide for more details on this function.
EZZ0817I QDIO ACCELERATOR IS ENABLED
EZZ0819I QDIO ACCELERATOR IS ENABLED FOR SYSPLEX DISTRIBUTOR ONLY
EZD2020A QDIO ACCELERATOR IS ENABLED ONLY FOR SYSPLEX DISTRIBUTOR BECAUSE OF TCPIP PROFILE FILTER RULES
EZD2021A QDIO ACCELERATOR IS ENABLED ONLY FOR SYSPLEX DISTRIBUTOR BECAUSE OF POLICY FILTER RULES
EZD2022A QDIO ACCELERATOR IS ENABLED ONLY FOR SYSPLEX DISTRIBUTOR BECAUSE OF DEFENSIVE FILTER RULES
EZD2023I QDIO ACCELERATOR IS ENABLED WITH CURRENTLY INSTALLED IP FILTER RULES
EZZ0818I CANNOT ENABLE QDIO ACCELERATOR - reason
Rule: IQDIOROUTING is ignored if QDIOACCELERATOR is specified.
EZZ0615I MULTIPATH SUPPORT IS DISABLED
This is the default value.
Guideline: In some cases, it might appear data is not being equally distributed among each of the equal-cost interfaces. This depends upon the characteristics of the application that is sending or receiving data. For example, when osnmp walk is issued, the application initially sends data using a source IP address of INADDR_ANY. Subsequently, when the application receives a response, all future sends use the source IP address of the interface where data was just received. The result is that all data is sent out on a single interface, independent of any multipath setting.
EZZ0632I MULTIPATH PERCONNECTION SUPPORT IS ENABLED
For
more information about EE load balancing and standard logic for a
UDP application, see z/OS Communications Server: SNA Network Implementation
Guide.EZZ0632I MULTIPATH PERPACKET SUPPORT IS ENABLED
EZZ0763I CANNOT ENABLE IPV4 MULTIPATH PERPACKET SUPPORT WHEN
IPV4 SECURITY IS ENABLED
EZZ0615I MULTIPATH SUPPORT IS DISABLED
EZZ0623I PATH MTU DISCOVERY SUPPORT IS DISABLED
EZZ0623I PATH MTU DISCOVERY SUPPORT IS ENABLED
Requirement: PATHMTUDISCOVERY uses ICMP fragmentation-needed errors to detect the PMTU for a path. If you use PATHMTUDISCOVERY, you must permit ICMP errors to flow at all hosts along the path of a connection. PATHMTUDISCOVERY does not function if a firewall blocks ICMP errors.
For a policy-based route table, the IgnorePathMtuUpdate parameter on the Policy Agent RouteTable statement can be used to prevent the path MTU value from being updated for routes in the table. See the information about the IgnorePathMtuUpdate parameter in RouteTable statement for information about determining when you should prevent the path MTU value from being updated for a policy-based route table.
See the steps for modifying topic for information about changing this parameter while the TCP/IP stack is active. See TCP segmentation offload in z/OS Communications Server: IP Configuration Guide for more information about TCP segmentation offload support.
EZZ0351I SOURCEVIPA SUPPORT IS DISABLED.
NOSOURCEVIPA is the default value.
EZZ0351I SOURCEVIPA SUPPORT IS ENABLED
Tip: You can override the SOURCEVIPA or TCPSTACKSOURCEVIPA values. See the information about source IP address selection in z/OS Communications Server: IP Configuration Guide for the hierarchy of ways that the source IP address of an outbound packet is determined.
EZZ0345I STOPONCLAWERROR IS ENABLED
EZZ0350I SYSPLEX ROUTING SUPPORT IS DISABLED
NOSYSPLEXROUTING is the default value.
EZZ0350I SYSPLEX ROUTING SUPPORT IS ENABLED
EZZ0706I TCPSTACKSOURCEVIPA IS IGNORED - SOURCEVIPA IS NOT ENABLED
Restriction: At the time of an outbound TCP request, the TCPSTACKSOURCEVIPA address must be a static VIPA or active dynamic VIPA, or it is not used for the source IP address.
After support is enabled, none of the parameters specified on the IPCONFIG DYNAMICXCF statement can be changed with a VARY TCPIP,,OBEYFILE command. You must first stop the TCP/IP stack, apply changes, and then restart the TCP/IP stack.
If QDIO Accelerator is enabled and IP Forwarding is subsequently disabled using NODATAGRAMFWD in a VARY TCPIP,,OBEYFILE command data set, QDIO Accelerator remains enabled but only for Sysplex Distributor forwarding. If QDIO Accelerator is disabled and IPCONFIG QDIOACCELERATOR is subsequently specified on a VARY TCPIP,,OBEYFILE command for an active TCP/IP stack on which IP forwarding is disabled, QDIO Accelerator is enabled for Sysplex Distributor forwarding only.
If QDIO Accelerator and HiperSockets Accelerator are not active and you want to enable QDIO Accelerator, enable QDIO Accelerator by issuing the VARY TCPIP,,OBEYFILE command and specifying IPCONFIG QDIOACCELERATOR (if either IQDIOROUTING or QDIOACCELERATOR was specified in the initial profile); otherwise, stop the stack, modify the profile to include IPCONFIG QDIOACCELERATOR and restart the stack.
IPCONFIG ARPTO 2400 CLAWUSED NODATAGR STOPON
DYNAMICXCF 9.9.9.9 255.255.255.0 15
This example shows an IPCONFIG statement that does the following tasks:
EZZ0687I FORMAT SHORT IGNORED - IPV6 SUPPORT IS ENABLED
Rule: If you want to communicate the OSPF or RIP protocol over a subset of the XCF links, you must configure the appropriate links in the OMPROUTE configuration file using the OSPF_Interface or RIP_Interface statements. Doing this enables OMPROUTE to communicate to other routers not only the information relative to the XCF links, but also information relative to resources on the other side of the host at the opposite end of the XCF links.
To configure the appropriate links, you can explicitly configure each XCF link as either an OSPF or RIP interface (including those that might become active in the future). Alternatively, you can use the wildcard configuration capability of OMPROUTE to configure your XCF links.
To use the wildcard configuration, use a wildcard address (for example, 9.67.100.*) on the OSPF_Interface or RIP_Interface statement instead of an explicit address. In this way, any interface address falling within that wildcard range (9.67.100.1, 9.67.100.2, and so on) is configured using the parameters specified on the wildcard definition statement.
When adding links, XCF or otherwise, to both OMPROUTE and TCP/IP, it is necessary to add them to OMPROUTE before adding them to TCP/IP for proper routing protocol configuration.