An IBM® zEnterprise® System (zEnterprise) node participating in an ensemble has access to the following networks:
The IEDN is accessed through OSA-Express for zBX (OSX) interfaces and through a HiperSockets™ channel path that is configured to use the Internal Queued Direct I/O extensions (IQDX) function.
The INMN is accessed through OSA-Express for Unified Resource Manager (OSM) interfaces.
The IEDN should be treated the same way as any other data network in a multilevel secure environment. The INMN is handled differently.
The INMN is for only IPv6 and provides a path for some authorized zEnterprise applications, such as those providing platform performance management functions, to communicate with another authorized system performing platform management. For more information about these applications, see IBM z Systems Ensemble Planning Guide.
All traffic flowing over an OSM interface is protected by OSM access control rather than network access control. The INMN uses automatically generated IPv6 link-local addresses, so individual systems do not have statically assigned addresses. OSM interfaces provide isolation so that traffic can flow only between a stack connected to an OSM interface and the authorized system performing platform management.