Second NIC in HMC is used for connectivity with corporate LAN.
Reasons:
1. Remote access to HMC. It's built in for years.
2. Call home. Modem connectivity is abandoned, so VPN is (will be -
depends on your HW level) the only option. That requires connectivity to
corpo lan.
3. NTP.
4. 3270 sessions, available on HMC for years.
- so it would be big surprise if IBM decided to prohibit it.
Regarding "internal LAN" HMC-SE: in the past it was private LAN, but
nowadays there are more and more reasons why one needs to connect
something else to the LAN. Examples:
- NTP with PPS
- ftp access to SE, required to perform some actions
- connection between multiple CPCs required to upload IOCDS to "remote"
CPC (that means: you work on CPC A and want to update IOCDS in CPC B).
Again, all the cases are IBM-designed, so in fact IBM assume such
connectiovity.
The risks: IHMO minimal. Assumed that corpo LAN is not Internet and it's
actually dedicated VLAN for datacenter staff or rather part of the staff
which really need the access. In such case the most dangerous event
which can happen is human error. Result can be temporary lack of
communication between SE and HMC. No big harm.
Disclaimer: I did NOT say that you should connect to internal (and
external) LAN anyhing you imagine, without justification and without any
cosnideration.
--
Radoslaw Skorupka
Lodz, Poland
W dniu 2012-06-19 22:49, Hal Merritt pisze:
I was lead to believe that the second set of NIC's in the SE's and HMC were for
optional redundant connectivity. But I am aware of some exploiting those NIC's
for other things such as automation.
My personal druthers is to use the second NIC on the HMC for external
connectivity to the web server and stay completely off of the HMC/SE circuit.
That said, my current configuration is the recommended physical port on the IBM
supplied switch to a network heavily isolated from the main company network.
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@listserv.ua.edu] On Behalf
Of Jousma, David
Sent: Tuesday, June 19, 2012 1:24 PM
To: IBM-MAIN@listserv.ua.edu
Subject: Re: HMC & EoR SWITCH
Reports? IBM provides a second set of network adapters in the SE and the HMC
just for this purpose. It is a requirement to use CEC operations in SA390.
It is also required to use the Web interface for the HMC.
I seriously doubt that IBM would discontinue having their own private switched
network between the various hardware parts/pieces. It may be that the switch
is built-in to the CEC now, and not a separate standalone box as was in the
past.
_________________________________________________________________
Dave Jousma
Assistant Vice President, Mainframe Services david.jou...@53.com
1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@listserv.ua.edu] On Behalf
Of Hal Merritt
Sent: Tuesday, June 19, 2012 1:11 PM
To: IBM-MAIN@listserv.ua.edu
Subject: Re: HMC & EoR SWITCH
I've heard reports from the CE's about customers trying to interconnect the HMC
and SE's with company LANs and thus causing all kinds of problems.
It would be no surprise to me if IBM decided to prohibit customer supplied
appliances between the HMC and SE's.
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@listserv.ua.edu] On Behalf
Of R Hey
Sent: Monday, June 18, 2012 11:41 PM
To: IBM-MAIN@listserv.ua.edu
Subject: HMC & EoR SWITCH
Hi,
1-
Heard hat IBM won't provide HMC switch in future.
True/F ?
2-
Have you done, or know it can be done:
to remove IBM HMC SWITCH,
hook HMC & SE's to CISCO End of Row switch ?
TIA,
Rez
--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive.
BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2012 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.410.984 zotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
