Configuring a direct Internet connection

You can configure a connection from your system or partition through a direct Internet connection to IBM customer support. You can also configure your system to act as a connecting point through which other systems or partitions access IBM customer support.

When you configure a direct connection to the Internet, both the HTTP/HTTPS connectivity and the VPN connectivity are configured. HTTP/HTTPS connectivity is always attempted first and if it fails, VPN connectivity is attempted automatically.

Use the following Universal Connection wizard procedure to create a Universal Connection to any of the following services through a direct Internet connection:

  • Electronic Customer Support
  • Electronic Service Agent

Prerequisites

The prerequisites for enabling electronic customer support over a direct Internet connection include the following items:

  • Ensure that the IBM Navigator for i is available on your system.
  • Ensure the latest HTTP Server and Java PTF groups are installed on your system.
  • Ensure that TCP/IP is active. You can start TCP/IP through the Start TCP/IP (STRTCP) command.
  • Ensure the HTTP Administration Server is started. You can start the HTTP Administration Server using the STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN) CL command.
  • You must have security officer (*SECOFR) authority with *ALLOBJ, *IOSYSCFG, and *SECADM special authorities in your IBM i user profile and *USE authority to WRKCNTINF in order to configure the connection using the Universal Connection wizard.
  • Ensure that the IBM TCP/IP Connectivity Utilities for i (5770-TC1) licensed program is installed.
  • Ensure that the Certificate Manager (DCM) (5770-SS1 option 34) licensed program is installed.
  • Ensure that the QRETSVRSEC system value is set to 1. You can check this value with the Display System Value (DSPSYSVAL) command. If this value is not set to 1, enter a Change System Value (CHGSYSVAL) command.
  • Ensure that a TCP/IP route exists to route the Universal Connection Packets to the Internet. In most situations the default route will work.
  • Ensure that your firewall filter rules allow Universal Connection traffic to flow to the Internet.

Configuring Universal Connection from your system through a direct Internet connection

Assuming that TCP/IP configuration already exists and works, follow these steps to set up the Universal Connection if you connect to Electronic Customer Support through a local system:

  1. Start the Universal Connection Wizard.
  2. Select either primary or backup connection configuration. The default is primary.
  3. Check the box to view and modify contact information.
  4. Enter the service, address, and country (or region) information on the Universal Connection wizard dialog.
  5. Connect from the current system with a direct connection to the Internet as a connection type.
  6. Check the box if you want to configure a proxy, then fill out the proxy information.
  7. Indicate that this system does not provide connectivity for other systems or partitions.
  8. Review the Summary window to ensure that the configuration meets your requirements, and click Finish to save your configuration.
  9. When prompted, test the connection from your system to electronic customer support.

Configuring Universal Connection from your system that provides connectivity for other systems through a direct Internet connection

Complete the following steps to set up the Universal Connection when you connect to Electronic Customer Support through your local system that acts as a connecting point for other systems:

  1. Start IBM Navigator for i and select the Universal Connection wizard.
  2. Select either primary or backup connection configuration. The default is primary.
  3. Check the box to view and modify contact information.
  4. Enter the service, address, and country (or region) information about the Universal Connection wizard display screens.
  5. Connect from the current system with a direct connection to the Internet as a connection type.
  6. Check the box if you want to configure a proxy, then fill out the proxy information.
  7. Specify that you want the system to function as a connecting point through which other systems or partitions connect to Electronic Customer Support.
  8. Select an interface or interfaces through which the other systems or partitions will be allowed to connect to Electronic Customer Support.
  9. Create or select an L2TP terminator profile. You need this profile to recognize the other systems or systems that connect to Electronic Customer support through your system.
  10. Configure a service and support proxy server.
  11. Review the Summary window to ensure that the configuration meets your requirements, and click Finish to save your configuration.
  12. When prompted, test the connection from your system to IBM customer support.