In zOSMF Configuration Assistant, how do I discover and include local IP addresses from TCP/IP stacks on my z/OS systems?
When using z/OSMF Configuration Assistant I would like to be able to discover and include in the Configuration Assistant local IP addresses from TCP/IP stacks on my z/OS systems. Is this function available in z/OSMF Configuration Assistant?
The Configuration Assistant can include configuration information that is discovered from TCP/IP stacks. For example local IP addresses can be discovered, saving you from having to manually enter all of the IP addresses. Currently, the only information that is discovered is the list of local IP addresses for the IPSec technology.
The discovery function connects to an active Policy Agent application running on a target TCP/IP stack, and requests the information which is then returned to the Configuration Assistant.
To enable Configuration Assistant discovery of configuration information, you need to complete the following tasks, in the following sequence:
Configure the Policy Agent to allow the discovery of TCP/IP profile information:
Specify the ServicesConnection statement in the main Policy Agent configuration file.
Enable AT-TLS for secure connections:
If you specify the Security Secure parameter on the ServicesConnection statement, enable AT-TLS processing for the TCP/IP stack by configuring the TTLS parameter on the TCPCONFIG statement in the TCP/IP profile.
Specify the affected TCP/IP stack by using the ImageName parameter on the ServicesConnection statement, or use the name specified (or specified by default) on the TCPIPUSERID statement or TCPIPJOBNAME statement in TCPIP.DATA. If the default TCP/IP image cannot be determined, the Policy Agent uses the image name INET.
Authorize the user IDs that the import requestors use to access the requested profile information.
1. Issue security product commands to permit the import requestor user IDs to the following SERVAUTH profile:
EZB.PAGENT.sysname.image.ptype
The image value is the import request name used by the import requestor. For TCP/IP profile information, this name is the TCP/IP stack name specified on the TcpImage statement. Set the ptype value to CFGSERV or specify a wildcard value.
Start Policy Agent from a started procedure or from the UNIX shell.
Import TCP/IP profile information into the IBM Configuration Assistant for z/OS Communications Server.
in the IPSec perspective, select a stack from the navigation tree.
Click the Local Addresses tab.
Select Discover... from the Select Action table menu to query the TCP/IP stack and automatically populate the panel with the stack's local addresses.
Complete the information on the Discover Stack Local Addresses panel and click Go.
For more information, see the IBM Configuration Assistant online help.