TCP/IP Network configuration

1. Use the following command to verify that TCP/IP is running on each of the systems in the BRMS network:

   PING RMTSYS(remote-system-name)

   If TCP/IP is not running, then you will need to configure and/or start TCP/IP.

2. You need to determine whether you intend to use secured or non-secured DDM connections to the remote systems in the BRMS network. Non-secured DDM connections perform no password validation, but requires the user profile to exist on the remote system. Secured DDM connections perform password validation, require the user profile to exist on the remote system, and require the password to be the same on the current system as well as the remote system. You may want to review these requirements with your site security administrator before taking specific actions.
   • For non-secured DDM connections:
     1. Use the following command to change the TCP/IP DDM attributes for non-secured operations:

        CHGDDMTCPA PWDRQD(*NO)

     2. If you are going from a secured DDM connection to a non-secured DDM connection, make sure to remove the server authentication entries. Use the following command to remove server authentication entries for each user:

        RMVSVRAUTE USRPRF(user-profile) SERVER(QDDMSERVER)

     3. Go to step 3.
   • For secured DDM connections:
     1. Use the following command to change the TCP/IP DDM attributes for secured operations:

        CHGDDMTCPA PWDRQD(*YES)

     2. Automated secure TCP/IP DDM operations are not possible if authentication passwords cannot be stored. Use the following command to change the QRETSVRSEC system value so that passwords used for authentication can be stored on the system:

        CHGSYSVAL QRETSVRSEC VALUE('1')

     3. Use the following command to add server authentication entries for each user who will be authorized to perform secured TCP/IP operations to the remote systems.

        ADDSVRAUTE USRPRF(user-profile) SERVER(QDDMSERVER)
                   USRID(remote-system-userid)
                   PASSWORD(remote-system-password)

        Notes:

        1. A server authorization entry can be removed using the RMVSVRAUTE command or change using the CHGSVRAUTE command. See the Control language topic for a complete description of these commands and command parameters. To see this topic in the IBM i Information Center, expand i5/OS information->Programming->Control language.
        2. There can only be one server authorization entry for a user no matter what remote system is specified. This means that for a user to access multiple systems in the network, the userid and passwords must be the same on all BRMS networked systems.
     4. Use the following command to add a server authentication entry for BRMS. This entry is used to perform secured TCP/IP network synchronization to the remote systems.

        ADDSVRAUTE USRPRF(QBRMS) SERVER(QDDMSERVER)
                   USRID(remote-system-userid)
                   PASSWORD(remote-system-password)

        Notes:

        1. Do not use user profile QBRMS for the remote system userid. Create a new user profile and specify user profile QBRMS for the Group profile (GRPPRF) parameter of the remote system user profile. Use this new remote system userid for the User ID (USRID) parameter of the Add Server Authentication Entry (ADDSVRAUTE) command.
        2. You must also have *USE authority to the Create DDM File (CRTDDMF) command on the current system.
3. Use the following command to change the TCP/IP DDM server attributes if you want the server automatically started when TCP/IP is started:

   CHGDDMTCPA AUTOSTART(*YES)

4. Use the following commands to end and restart the TCP/IP DDM server if you changed any of the attributes:

   ENDTCPSVR SERVER(*DDM)
   STRTCPSVR SERVER(*DDM)

5. Enable BRMS to use TCP/IP:
   • V5R1 system:

     Use the following command to create a specific data area object that BRMS uses to determine whether to perform TCP/IP operations:

     CRTDTAARA DTAARA(QUSRBRM/Q1ATCPIP) TYPE(*CHAR) 
                  LEN(1) TEXT('TCP/IP Enabled system') 

   • V5R2, V5R3 and V5R4 releases:
     Note:

     Users upgrading from V5R1 also needs to follow these steps even though your TCP/IP is currently enabled.

     Use the following steps to enable TCP/IP.

     1. Type the following command:

        WRKPCYBRM TYPE(*SYS)

     2. Press Enter.
     3. Select option 4 to Change network group.
     4. Enter *YES for Enable for TCP/IP.
     5. Press Enter.
   • V6R1 or later releases:

     Use the following steps to enable TCP/IP.

     1. Type the following command:

        WRKPCYBRM TYPE(*SYS)

     2. Press Enter.
     3. Select option 4 to Change network group.
     4. Enter *AVAIL or *IP for Communication method.
        Note:

        Value *AVAIL indicates to first use TCP/IP for a communication method, but if unavailable, will then use SNA for the communication method. The value *IP indicates to only use TCP/IP as the communication method.
     5. Press Enter.

You have completed enabling this system for TCP/IP operations. You need to indicate to BRMS that you have enabled this system for BRMS network operations when you configure the network group for this system.