Lanfreessl

Use the lanfreessl option to enable Secure Sockets Layer (SSL) to provide secure client and Storage Agent communications. This option is deprecated if you are connecting to an IBM Spectrum Protect server V8.1.2 and later levels, and V7.1.8 and later V7 levels.

To enable SSL for data movement, set SSL YES on the client and the storage agent. To disable SSL for data movement, set SSL NO on the client and the storage agent. When the client and storage agent are on the same system, use of SSL between them is not recommended for performance reasons. Use shared memory or named pipes instead.

The client SSL option is set in the client options file. For more information, see Ssl.

The storage agent SSL option is set when it is defined by the DSMSTA SETSTORAGESERVER command. For more information, see Configuring a storage agent to use SSL.

Note: Authentication is always achieved by using SSL, regardless of the SSL option setting.

Supported Clients

This option is supported on all clients, except for Mac OS X clients.

Options File

Place this option in the client options file. You cannot set this option in the GUI or on the command line.

Syntax

Parameters

No: Specifies that the backup-archive client does not use SSL when communicating with the Storage Agent. No is the default.

Yes: Specifies that the backup-archive client enables SSL when communicating with the Storage Agent. To enable SSL, specify lanfreessl=yes and change the value of the lanfreetcpport option. Changing the value of the lanfreetcpport option is necessary because the IBM Spectrum Protect Storage Agent is typically set up to listen for SSL connections on a separate port.

Examples

Options file:

lanfreessl yes
lanfreessl no

Command line:

Not applicable. You cannot set this option on the command line.