Storing configuration files and policy definition files

You can store configuration files and policy definition files in the z/OS® UNIX file system or in traditional MVS™ data sets.

Some definitions are shared by all TCP/IP stacks on a z/OS image, and some definitions are specific to individual TCP/IP stacks on a z/OS image.

For example, if you are using the z/OS UNIX file system to store your configuration files and policy definition files, a directory structure for z/OS image SYSA with TCP/IP stacks TCPIP1 and TCPIP2 might look as follows:

• Staging

  Image-wide

  /etc/tcpip/POLTRANS/SYSA/

  TCPIP1

  /etc/tcpip/POLTRANS/SYSA/TCPIP1/

  TCPIP2

  /etc/tcpip/POLTRANS/SYSA/TCPIP2/

• Production

  Image-wide

  /etc/tcpip/POLPROD/SYSA/

  TCPIP1

  /etc/tcpip/POLPROD/SYSA/TCPIP1/

  TCPIP2

  /etc/tcpip/POLPROD/SYSA/TCPIP2/

• Backup and recovery

  Image-wide

  /etc/tcpip/POLBACK/SYSA/

  TCPIP1

  /etc/tcpip/POLBACK/SYSA/TCPIP1/

  TCPIP2

  /etc/tcpip/POLBACK/SYSA/TCPIP2/

Similarly, you can use MVS partitioned data set (PDS) or partitioned data set extended (PDSE) libraries to store the configuration files and policy definition files as follows:

• Staging

  Image-wide

  hlq.TCPPARMS.POLTRANS.SYSA

  TCPIP1

  hlq.TCPPARMS.POLTRANS.SYSA.TCPIP1

  TCPIP2

  hlq.TCPPARMS.POLTRANS.SYSA.TCPIP2

• Production

  Image-wide

  hlq.TCPPARMS.POLPROD.SYSA

  TCPIP1

  hlq.TCPPARMS.POLPROD.SYSA.TCPIP1

  TCPIP2

  hlq.TCPPARMS.POLPROD.SYSA.TCPIP2

• Backup and recovery

  Image-wide

  hlq.TCPPARMS.POLBACK.SYSA

  TCPIP1

  hlq.TCPPARMS.POLBACK.SYSA.TCPIP1

  TCPIP2

  hlq.TCPPARMS.POLBACK.SYSA.TCPIP2

You can maintain a number of members in each of these libraries, using your own naming convention or the following suggested naming convention:

• LPAR-wide configuration files

  CONF (configuration file)

• Stack-specific configuration and policy definition files
  • TLSPOL (AT-TLS policy definitions)
  • IDSPOL (IDS policy definitions)
  • IPSPOL (IPSec policy definitions)
  • QOSPOL (QoS policy definitions)
  • PBRPOL (Policy-based routing policy definitions)

The following example shows the IKE daemon configuration file and the IPSec policy definitions for stack TCPIP1 as members of PDS or PDSE libraries:

USER.LPAR1.POLTRANS.SYSA.IKED(CONF)
USER.LPAR1.POLTRANS.SYSA.TCPIP1(IPSPOL)