EE doesn't preclude you from using it ont he same processor complex. In fact, that's one of the methods in the example where the site has 3 (or 4) LPARs all interconnected via EE to provide cross domain access.
On Wed, 7 Mar 2018 17:31:21 +0000, Rob Schramm <[email protected]> wrote: >Tim, > >It sounds like you are recommending using EE for all communication between >a z/OS 1.4 system and a z/OS 2.2 system where the z/OS 2.2 system would be >a CMC. If I use CTC connections encryption isn't really an issue since all >the systems are on the same CEC. Additionally, it seems that EE has gone >thru some pretty good growing pains thru the years.. and the z/OS 1.4 >systems are firmly stuck in the past. > >Thoughts? > >Rob Schramm > >On Wed, Mar 7, 2018 at 2:16 AM Timothy Sipples <[email protected]> wrote: > >> If I understand the question correctly, I'd recommend Enterprise Extender >> (EE). It's likely to be the more future proof option in various ways, and >> that'll be helpful. EE is also proving to be broadly interoperable across >> long spans of time. >> >> z/OS 1.4 supported IPv6 fairly well but not for EE, so it looks like you'll >> have to use IPv4 on both ends, for the UDP connectivity that EE uses. It >> wasn't really until z/OS 2.1 that EE was fully IPv6 enabled. If IPv6 is a >> necessity (and probably even if not) then, going from memory (please double >> check this) you should be able to set up an IPv6 IPsec tunnel between z/OS >> 1.4 and z/OS 2.2 -- i.e. the tunnel gets established using IPv6 addresses >> at both ends -- and then run IPv4 EE across that tunnel. Bear in mind that >> the security characteristics of that IPsec tunnel will be governed by its >> lowest denominator: z/OS 1.4. >> >> Speaking of security, EE also supports SNA Session-Level Encryption (SLE) >> and always has, although I'd want more than that. SNA SLE only supports the >> DES and 3DES algorithms. >> >> The usual, wise advice applies here about trying to bring up z/OS 1.4 and >> the applications it's running to a supported z/OS release as expeditiously >> as possible. >> >> >> -------------------------------------------------------------------------------------------------------- >> Timothy Sipples >> IT Architect Executive, Industry Solutions, IBM Z & LinuxONE, >> Multi-Geography >> E-Mail: [email protected] >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [email protected] with the message: INFO IBM-MAIN >> >-- > >Rob Schramm > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
