Question & Answer
Question
I would like to dynamically enable or disable IPSecurity on the z/OS TCPIP stack, using the VARY OBEYFILE command. Is that possible?
Answer
z/OS IPSec functions cannot be dynamically activated or deactivated using VARY TCPIP,,OBEYFILE on an active TCP/IP stack.
To activate z/OS IPSec, halt all traffic on the designated TCP/IP stack, stop the stack, modify the TCP profile to include IPCONFIG IPSECURITY, and restart the stack.
To deactivate z/OS IPSec, halt all traffic on the designated TCP/IP stack, stop the stack, modify the TCP profile to comment out IPCONFIG IPSECURITY, and restart the stack.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSSN3L","label":"z\/OS Communications Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]
Product Synonym
ZOSCS COMMSERVER
Was this topic helpful?
Document Information
Modified date:
07 September 2016
UID
dwa1201695