Having two separate stacks leads me to think you will have two different IP addresses. I guess using DNS you can get this resolved quick enough to the TN3270 clients. Not sure if this will work but with z/VM 5.2 you can use the VSWITCH to support 2 OSA cards for instant failure over. z/VM 5.3 will actually give you some load balancing. In this way you only have one TCPIP stack and IP address and pretty fast fail over. I would think no manually intervention at all. Alan has made a number of presentations on this subject. Check out High Availability and Automatic Network Failover of the z/VM VSWITCH Presented by Tracy Adams, IBM Endicott on z/VM topics
http://www.vm.ibm.com/events/sysz0610.html Hans _____ From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Mrohs, Ray Sent: September 24, 2007 3:32 PM To: IBMVM@LISTSERV.UARK.EDU Subject: VM SSL Appliance with TCP/IP Hi, We are in the process of hooking up 2 SSL front ends for our VM TN3270 traffic. One box wil be primary, the other backup. For full redundancy, I plan to use 2 OSA ports (separate cards), and 2 TCP/IP stacks in VM. The SSL boxes will be configured identically and cabled directly to the OSAs to eliminate unencrypted data passing through a router. One box, along with it's associated OSA and TCP/IP stack, will be sitting idle 99.999% of the time. Each box is sized to carry the full workload. Are there any additional/better/simpler ways to enhance availability or reliability? BTW, SSLSERV is not an option for us, since we need to support 1200 concurrent user sessions. Ray Mrohs U.S. Department of Justice 202-307-6896
