SNA Server (HIS) - Tie LU2 to IP Address 1

[Concepts2000]

Rather than using an LU2 Pool for TN3270E connections, we'd like to insist that a given LUname can be used only by a specific IP address. Is this possible with the base HIS product 3270 client?. Is it possible with third party clients?

 

[markharr]

I'm sure that you can do this but I can't give you the exact steps today as I don't have a working machine to test this on today.

However, I would strongly advise against doing this unless you have COMPELLING security reasons for doing this. My reason for advising against is that this will become a monumental pain.

Of course, if you are not going to be the maintainer of this system then it doesn't matter

If you still want to do this, write back and I will try to get the information you need.

 

[lring]

You can assign specific LU(s) to specific workstations by defining a workstation name. This is how we do this. I think you can setup the workstation to identify by IP address but I will double check.

 

[Concepts2000]

Thanks for the helpful posts. Yes, the security considerations are compelling. The app is a mainframe 390 3270 data stream. What it looks like where we will end up is disconnecting the session unless the mainframe signon matches the local LU2 name, and matching the LU2 name to a specific terminal.

 

[lring]

I have done this due to security reasons. It is a management nightmare like Mark said but we had to assign static LU(s) to workstations names and to user id's. I have done this both with the SNA Server 4.0 Product and also by using a product by FARABI called Host Front as a front end to SNA Server for Web Access. If you are interested in how we did this you can email me and I will send you more info. Latifa.ring@eds.com