Re: LOAD from ... SERVER option?

2013-01-25 Thread Alan Altmark
On Tue, 22 Jan 2013 18:54:41 +, Lund James E james-l...@tamu.edu wrote:
I have been looking into the LOAD from Removable Media or Server option 
available for remotely using these utilities, but, for lack of documentation, 
I'm unable to get the environment setup properly. Has anyone had success using 
an FTP server as a LOAD source?

I do have a PMH opened with IBM (15964,004). They are telling me my SEs need 
to be on the same network as the locally-accessible FTP server (we're not 
comfortable doing this and were under the impression it was a *bad* thing to 
do). We are looking for a better explanation, or even a better method to 
manage these utilities.

Too bad the books don't explain this well.  The SE and the FTP server must be 
able to talk to each other, but they do NOT have to be in the same subnet 
(local network).  As long as you assign valid public IP addresses (i.e. for 
your intranet) and set the SE network configuration to point to a router that 
is plugged into your HMC-SE network, you can load from an FTP server anywhere 
in your network.

I would suggest that you use the firewall functions of that router to allow 
only outbound TCP connections from the SE, as the SE uses passive ftp.  Of 
course, if you have an application firewall, it will handle active and passive 
ftp, opening the needed ports on demand, in the correct directions.

Alan Altmark
IBM Senior Managing System z IT Consultant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: LOAD from ... SERVER option?

2013-01-23 Thread Dana Mitchell
James,

You say your virtual tape is available at that site.  Could you create 
standalone IPLable tapes of ICKDSF and FDR  and IPL from the tapes when needed?

Dana

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: LOAD from ... SERVER option?

2013-01-22 Thread John McKown
I can't think of a way to directly do what you want. Do you have
control at the remote site? My thought (possibly insane) is to put up
a PC running Linux which has two ethernet NICs. One the same back-end
network as the SE. And one on the LAN segment that you're using to
get to the HMC. On this Linux box, I'd put up a proxy server. This
would be more secure than just putting the SEs on the same segment.

I did a Google search and found this:

http://linuxpoison.blogspot.com/2011/02/transparent-caching-ftp-proxy-server.html

Or you might want to go with a vendor solution of some sort. I'm sure
Cisco would love to help you with this.

Hook'em Horns! (no, I'm not a UT alumnus)

On Tue, Jan 22, 2013 at 12:54 PM, Lund James E james-l...@tamu.edu wrote:
 Howdy,

 So, where to start...
 We have a co-located machine we are setting up for DR (CBU). In short, it is 
 a warm site until we declare an official (or test) disaster and make it a 
 hot site. Virtual tape system there is grid'ed to one locally, so tape 
 backups are no more than 24 hours old. The restore plan is to populate disk 
 when a disaster is declared. The co-located HMC is accessible locally over 
 its web interface. The SE's are only accessible over the back-end network it 
 shares with its HMC (you'll understand the significance of this later).

 In the case of a live scenario, we'd hop in our cars and drive the 3 hours 
 to the site to be in front of the hardware to do our recovery. I'm looking 
 for a way to avoid this long trip in the case of testing and maintenance of 
 the co-located environment. For example, each time our local environment 
 changes (ie. disk structure, new version of utility software, etc.), we would 
 like to propagate this change to the co-located machine's environment (reduce 
 configuration when we *really* need to do a disaster recovery - reality or 
 testing). For example, we might change some disk from 3390-9 to 3390-15 to 
 accommodate a new zFS sizing need. Also, as new ICKDSF and/or FDRSAR 
 utilities become available, we'd like to get them to this site without a 
 physical visit. Storing these utilities in a locally and remotely accessible 
 place would be helpful (FTP server).

 With that said -
 I have been looking into the LOAD from Removable Media or Server option 
 available for remotely using these utilities, but, for lack of documentation, 
 I'm unable to get the environment setup properly. Has anyone had success 
 using an FTP server as a LOAD source?

 I do have a PMH opened with IBM (15964,004). They are telling me my SEs need 
 to be on the same network as the locally-accessible FTP server (we're not 
 comfortable doing this and were under the impression it was a *bad* thing to 
 do). We are looking for a better explanation, or even a better method to 
 manage these utilities.

 Thanks for listening.

 Regards,
 James Lund
 Texas AM University, College Station, TX
 Home of Johnny Heisman

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



-- 
Maranatha! 
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: LOAD from ... SERVER option?

2013-01-22 Thread Harry Wahl
James,
 
I use the Load from Removable Media or Server function on the HMC frequently, 
for many purposes. We run z9s, z10s and z196s. I always access HMCs via their 
web interfaces.
 
All of our mainframes are in two sites 17 miles apart. They are mirrors of each 
other and except by special permission, no one is allowed in these buildings. 
They are patroled by armed guards.
 
I usually load from an FTP server, I have IPLed from a DVD drive on an HMC, on 
occasion.
 
I don't have any problems, so I don't understand your question.
 
What problems are you having? 
 
I can send screen shots, if you tell me what you're trying to do.
 
Harry
 

 

 Date: Tue, 22 Jan 2013 18:54:41 +
 From: james-l...@tamu.edu
 Subject: LOAD from ... SERVER option?
 To: IBM-MAIN@LISTSERV.UA.EDU
 
 Howdy,
 
 So, where to start...
 We have a co-located machine we are setting up for DR (CBU). In short, it is 
 a warm site until we declare an official (or test) disaster and make it a 
 hot site. Virtual tape system there is grid'ed to one locally, so tape 
 backups are no more than 24 hours old. The restore plan is to populate disk 
 when a disaster is declared. The co-located HMC is accessible locally over 
 its web interface. The SE's are only accessible over the back-end network it 
 shares with its HMC (you'll understand the significance of this later).
 
 In the case of a live scenario, we'd hop in our cars and drive the 3 hours 
 to the site to be in front of the hardware to do our recovery. I'm looking 
 for a way to avoid this long trip in the case of testing and maintenance of 
 the co-located environment. For example, each time our local environment 
 changes (ie. disk structure, new version of utility software, etc.), we would 
 like to propagate this change to the co-located machine's environment (reduce 
 configuration when we *really* need to do a disaster recovery - reality or 
 testing). For example, we might change some disk from 3390-9 to 3390-15 to 
 accommodate a new zFS sizing need. Also, as new ICKDSF and/or FDRSAR 
 utilities become available, we'd like to get them to this site without a 
 physical visit. Storing these utilities in a locally and remotely accessible 
 place would be helpful (FTP server).
 
 With that said -
 I have been looking into the LOAD from Removable Media or Server option 
 available for remotely using these utilities, but, for lack of documentation, 
 I'm unable to get the environment setup properly. Has anyone had success 
 using an FTP server as a LOAD source?
 
 I do have a PMH opened with IBM (15964,004). They are telling me my SEs need 
 to be on the same network as the locally-accessible FTP server (we're not 
 comfortable doing this and were under the impression it was a *bad* thing to 
 do). We are looking for a better explanation, or even a better method to 
 manage these utilities.
 
 Thanks for listening.
 
 Regards,
 James Lund
 Texas AM University, College Station, TX
 Home of Johnny Heisman
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN