Direct Internet connection

Situation

Suppose that you are responsible for maintaining a system for MyCompany, a small manufacturing company in Boone, Iowa. You need to establish a connection between Electronic Customer Support and MyCompany's system. Because MyCompany has an Internet connection and its system has a fixed global routable IP address or is behind a NAT firewall, you can create a connection from your system through your Internet connection.

Solution

Create a Universal Connection to IBM through a direct Internet connection. The Universal Connection wizard creates all the required definitions for the connection to Electronic Customer Support.

Advantages

This scenario provides the following advantages:

• MyCompany can use its existing hardware and Internet provider to receive benefit from Electronic Customer Support. You can configure this connection through the Universal Connection wizard or CL commands.
• Using an existing Internet connection provides a simple means of ensuring that MyCompany has Electronic Customer Support available for ease of troubleshooting system problems, tracking current system hardware and software, or receiving software updates and fixes.
• This option provides higher speed connections than modem-based solutions.

Objectives

In this scenario, the customer wants to ensure that IBM can support the MyCompany system over the network though a direct connection to the Internet. The objectives of this scenario are as follows:

• To create an Internet connection between MyCompany and Electronic Customer Support through MyCompany's cable modem, or other high-speed connection, over a direct Internet connection.
• To automate customer support through Electronic Customer Support and services
• To enable Electronic Customer Support to create an electronic hardware and software service information of MyCompany's system
• To permit Electronic Customer Support to send software fixes and updates to MyCompany over the network

Details

The following diagram illustrates a connection from MyCompany's system to Electronic Customer Support through a direct connection to the Internet.

Configuring Universal Connection

• IBM Navigator for i launches the Universal Connection wizard to configure the connection. This only needs to be done once unless some configuration information needs to be updated.

Using Universal Connection

When a service application wants to use the Universal Connection to communicate with IBM the following will occur:

• The service application attempts to establish an HTTP (if the service application provides its own encryption) or HTTPS (if the service application uses SSL) connection to IBM. If an HTTP or HTTPS connection cannot be established, the service application attempts to establish a virtual private network (VPN) through the AT&T LIG and the Internet to a VPN gateway at IBM.
• The service application communicates with the appropriate IBM® systems to perform the requested service.

Prerequisites and assumptions

The prerequisites for enabling Electronic Customer Support over a direct Internet connection are as follows:

• The IBM i operating system must have a globally routable IP address, or the system must be behind a NAT firewall with a globally routable address.

• Ensure that the IBM Navigator for i is available on your system.
• Ensure the latest HTTP Server and Java PTF groups are installed on your system.
• Ensure that TCP/IP is active. You can start TCP/IP through the Start TCP/IP (STRTCP) command.
• Ensure the HTTP Administration Server is started. You can start the HTTP Administration Server using the STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN) CL command.
• Ensure that you have security officer (*SECOFR) authority with *ALLOBJ, *IOSYSCFG, and *SECADM special authorities in your IBM i user profile and *USE authority to WRKCNTINF in order to configure the connection using the Universal Connection wizard.
• Ensure that the IBM TCP/IP Connectivity Utilities for i (5770-TC1) licensed program is installed.
• Ensure that the Digital Certificate Manager (DCM) (5770-SS1 option 34) licensed program is installed.
• Ensure that your default TCP/IP route, or a host route, directs traffic out the appropriate TCP/IP interface to the Internet to allow the VPN and other service connections to be established to IBM.
• Ensure that your firewall filter rules allow Universal Connection traffic to flow to the Internet.

Current system configuration steps

After you complete the prerequisites, you are ready to begin configuring the Universal Connection through the wizard.

Assuming that TCP/IP configuration already exists and works, complete these steps to set up the Universal Connection if you connect to Electronic Customer Support through MyCompany's local system.