Re: TERSE/DETERSE
Hi, Florian. Yes, there is a VM version of the TERSE/DETERSE utilities. On z/VM 5.4, the DETERSE module is found on MAINT's 5E5 disk. I think you can download the TERSE module for VM from an IBM web site. Florian Bilek wrote: Dear all, Under z/OS there exists a Terse Program to make terse files. Is there also a z/VM Version? Kind regards, Florian -- DJ V/Soft z/VM and mainframe Linux expertise, training, consulting, and software development www.vsoft-software.com
Re: Unable to PING the LINUX server
Is it possible that 172.27.28.2 is the gw not 172.27.24.2? David Kreuter From: The IBM z/VM Operating System on behalf of Ray Waters Sent: Tue 12/16/2008 8:47 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Unable to PING the LINUX server David, You were correct; I had to enter the NETSTAT command twice: NETSTAT ARP ALL TCP DTCVSW1 VM TCP/IP Netstat Level 540 TCP/IP Server Name: DTCVSW1 DTCNET338E * MAC address is not in the ARP table. Ready(4); T=0.01/0.01 08:43:29 NETSTAT ARP ALL TCP DTCVSW1 VM TCP/IP Netstat Level 540 TCP/IP Server Name: DTCVSW1 ARP Age: 5 Querying ARP cache for address * Adapter-maintained data as of: 12/16/08 08:43:29 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.24.129 Link VSWITCH10C30LINK: QDIOETHERNET: 00-16-9C-0E-5B-40 IP: 172.16.28.2 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.101 (VSE GUESTS for 101 thru 110) Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.102 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.103 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.104 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.106 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.108 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.109 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.110 Ready; T=0.01/0.01 08:45:03 Ray From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Kreuter Sent: Monday, December 15, 2008 3:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Unable to PING the LINUX server 'k thanks. What does NETSTAT ARP ALL TCP DTCVSW1 show from TCPMAINT? You may have to do the command twice a few seconds apart. David From: The IBM z/VM Operating System on behalf of Alan Altmark Sent: Mon 12/15/2008 4:27 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Unable to PING the LINUX server On Monday, 12/15/2008 at 04:20 EST, David Kreuter dkreu...@vm-resources.com wrote: What are the results from a Q VSWITCH DETAILS? Ray showed that in one of his prior posts. Alan Altmark z/VM Development IBM Endicott NOTICE: This e-mail is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the original message at the listed email address. Thank You.
Re: Unable to PING the LINUX server
David, You were correct; I had to enter the NETSTAT command twice: NETSTAT ARP ALL TCP DTCVSW1 VM TCP/IP Netstat Level 540 TCP/IP Server Name: DTCVSW1 DTCNET338E * MAC address is not in the ARP table. Ready(4); T=0.01/0.01 08:43:29 NETSTAT ARP ALL TCP DTCVSW1 VM TCP/IP Netstat Level 540 TCP/IP Server Name: DTCVSW1 ARP Age: 5 Querying ARP cache for address * Adapter-maintained data as of: 12/16/08 08:43:29 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.24.129 Link VSWITCH10C30LINK: QDIOETHERNET: 00-16-9C-0E-5B-40 IP: 172.16.28.2 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.101 (VSE GUESTS for 101 thru 110) Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.102 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.103 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.104 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.106 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.108 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.109 Link VSWITCH10C30LINK: QDIOETHERNET: 00-14-5E-B7-26-99 IP: 172.16.28.110 Ready; T=0.01/0.01 08:45:03 Ray From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Kreuter Sent: Monday, December 15, 2008 3:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Unable to PING the LINUX server 'k thanks. What does NETSTAT ARP ALL TCP DTCVSW1 show from TCPMAINT? You may have to do the command twice a few seconds apart. David From: The IBM z/VM Operating System on behalf of Alan Altmark Sent: Mon 12/15/2008 4:27 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Unable to PING the LINUX server On Monday, 12/15/2008 at 04:20 EST, David Kreuter dkreu...@vm-resources.com wrote: What are the results from a Q VSWITCH DETAILS? Ray showed that in one of his prior posts. Alan Altmark z/VM Development IBM Endicott NOTICE: This e-mail is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the original message at the listed email address. Thank You.
Re: TERSE/DETERSE
IBM release at least one version of TERSE. When we used Publication Maste r, we found DZATERSE MODULE and HELPCMS. It worked rather nicely to compress some large files for online archive. The normal DETERSE program worked fi ne to uncompress these files later. /Tom Kern On Tue, 16 Dec 2008 03:08:53 -0600, Florian Bilek florian.bi...@gmail.co M wrote: Dear all, Under z/OS there exists a Terse Program to make terse files. Is there also a z/VM Version? Kind regards, Florian = ===
Re: The new RACF and FCP disks?
I speak EDEVs, but for various reasons EDEV is not a choice for this customer. They only have SAN disks - raw LUNs. (The VM system itself is installed on the few ECKD volumes -- all the Linuxen are on SAN only.) Lee Richard Troth wrote: You want EDEV. EDEV lets FCP disks look like traditional FBA DASD, so you can slice them up into minidisks, quite like CKD. The way it works is you define an EDEV at some otherwise not-in-use RDEV address, then add WWPN and LUN for each path to the intended FCP disk. You then VARY ON the EDEV and you can ATTACH it to a guest directly or to SYSTEM for minidisk slicing. -- R; On Mon, Dec 15, 2008 at 7:36 PM, Lee Stewart lstewart.dsgr...@attglobal.net wrote: Hi allDoes the new RACF (VM Security Server) handle protecting FCP disks? If so, how? By FCP device/CHPID? By target WWPN? By target LUN? I browsed the books but didn't find any FCP references... Thanks, Lee -- Lee Stewart, Senior SE Sirius Computer Solutions Phone: (303) 798-2954 Fax: (720) 228-2321 Email: lee.stew...@siriuscom.com Web: www.siriuscom.com -- Lee Stewart, Senior SE Sirius Computer Solutions Phone: (303) 798-2954 Fax: (720) 228-2321 Email: lee.stew...@siriuscom.com Web: www.siriuscom.com
Re: Unable to PING the LINUX server
On 12/15/2008 at 3:22 PM, Ray Waters ray.wat...@opensolutions.com wrote: Mark, I can PING the GATEWAY from NOVSTART but not my pc. My pc is not running a FTP server so it should not respond, right? Wrong. If your PC is running a TCP/IP stack, and isn't firewalling off ICMP packets, it should respond. Gateway ping 172.16.24.2 ping 172.16.24.2 PING 172.16.24.2 (172.16.24.2) 56(84) bytes of data. This is _not_ showing a successful ping of the gateway. So, your problem lies there. As Alan Altmark suggested, you now need to get your network team involved. Something very fundamental is wrong in your setup, and that's going to be very specific to your particular site. As a starting point, take David's question about the correct IP address for the gateway to them, but Alan's suggestion for an overall review is best. Mark Post
Re: The new RACF and FCP disks?
But, using simulated FBA minidisks incur higher CP overheads that letting Linux use the FCP channels. 2008/12/16 Alan Altmark alan_altm...@us.ibm.com On Tuesday, 12/16/2008 at 11:07 EST, Lee Stewart lstewart.dsgr...@attglobal.net wrote: I speak EDEVs, but for various reasons EDEV is not a choice for this customer. They only have SAN disks - raw LUNs. (The VM system itself is installed on the few ECKD volumes -- all the Linuxen are on SAN only.) Sorry, Lee; I misread your original post where you asked how RACF *protects* FCP disks. It doesn't. CP doesn't allow ESMs to control ATTACH/DEDICATE. (It's on the to-do list.) If they want RACF control over what guests can see the LUN, then they have to use EDEVs, since that's the only way to get minidisks, where the ESMs hold sway. Alan Altmark z/VM Development IBM Endicott -- Kris Buelens, IBM Belgium, VM customer support
Re: SLES10-SP2 Guest on VSWITCH w/2 VLANs
Can anyone point me to documents that cover the more complex vswitch and multi-VLAN configurations? -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Alan Altmark Sent: Monday, December 15, 2008 10:05 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SLES10-SP2 Guest on VSWITCH w/2 VLANs On Monday, 12/15/2008 at 11:53 EST, KEETON Dave * OR SDC dave.kee...@state.or.us wrote: If I need to access more than one VLAN on a VSWITCH configured for ETHERNET, do I need to create a separate virtual nic for each VLAN or can all the VLANs be associated to one adapter, such as eth0? I've been trying to get the latter configuration to work without any success. 1. You need a virtual trunk port. Contrary to Marcy's post, specify the VLANs the guest is authorized to use. (SET VSWITCH GRANT ... PORTTYPE TRUNK VLAN vlan1 vlan2) 2. Use a single NIC and assign it eth0. 3. Use vconfig to create eth0.1 for vlan1 and eth0.2 for vlan2. Alan Altmark z/VM Development IBM Endicott
Re: Installing PTF for TCPIP (Enabling SSL Server)
I did the same today. Worked perfectly. On Tue, Dec 16, 2008 at 12:32 AM, O'Brien, Dennis L Dennis.L.O'br...@bankofamerica.com dennis.l.o%27br...@bankofamerica.comwrote: Florian, I use SERVICE and PUT2PROD for TCP/IP service, just like I do for the other z/VM components: SERVICE ALL VPTF4545 PUT2PROD SERVICE takes care of setting up the environment for you. You can run it on MAINT, even if the component has a separate service userid. I ran SERVICE and PUT2PROD for the SSL server PTF today, and it worked just fine. I haven't actually started the server, but I'm confident that if the service process ran without errors, the code got loaded correctly. Dennis O'Brien Thank God, we've won the war. -- Winston Churchill, on hearing of the attack on Pearl Harbor. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Florian Bilek Sent: Sunday, December 14, 2008 07:53 To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] Installing PTF for TCPIP (Enabling SSL Server) Dear all, I have noted that APAR PK65850 for enabling the CMS SSL Server is closed and a PTF is available. I ordered and downloaded the PTF. However I am not totally sure how to apply this PTF. Up to now I had only appied the stacked RSU from MAINT. When I try to run a VMFREC ppf 5VMTCP40 TCPIP (env vptf4545 setup on user MAINT it delivers a error messages for the setup of the respectiv e minidisks. Do I have to use the user 5VMTCP40 for that or what is the recommended way to apply this PTF? Thank you very much in advance. Best regards, Florian -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: The new RACF and FCP disks?
On Tuesday, 12/16/2008 at 11:07 EST, Lee Stewart lstewart.dsgr...@attglobal.net wrote: I speak EDEVs, but for various reasons EDEV is not a choice for this customer. They only have SAN disks - raw LUNs. (The VM system itself is installed on the few ECKD volumes -- all the Linuxen are on SAN only.) Sorry, Lee; I misread your original post where you asked how RACF *protects* FCP disks. It doesn't. CP doesn't allow ESMs to control ATTACH/DEDICATE. (It's on the to-do list.) If they want RACF control over what guests can see the LUN, then they have to use EDEVs, since that's the only way to get minidisks, where the ESMs hold sway. Alan Altmark z/VM Development IBM Endicott
Re: Unable to PING the LINUX server
Will get our network people involved. Thanks to all who responded. Ray -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mark Post Sent: Tuesday, December 16, 2008 10:30 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Unable to PING the LINUX server On 12/15/2008 at 3:22 PM, Ray Waters ray.wat...@opensolutions.com wrote: Mark, I can PING the GATEWAY from NOVSTART but not my pc. My pc is not running a FTP server so it should not respond, right? Wrong. If your PC is running a TCP/IP stack, and isn't firewalling off ICMP packets, it should respond. Gateway ping 172.16.24.2 ping 172.16.24.2 PING 172.16.24.2 (172.16.24.2) 56(84) bytes of data. This is _not_ showing a successful ping of the gateway. So, your problem lies there. As Alan Altmark suggested, you now need to get your network team involved. Something very fundamental is wrong in your setup, and that's going to be very specific to your particular site. As a starting point, take David's question about the correct IP address for the gateway to them, but Alan's suggestion for an overall review is best. Mark Post NOTICE: This e-mail is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the original message at the listed email address. Thank You.
Re: OSA layer 2 protocol connections...
I've answered 1 question. I can not define a layer2 switch 2nd level and attach it to a 1st level layer3. On Tue, Dec 16, 2008 at 10:01 AM, Mark Pace mpac...@gmail.com wrote: If I update one VM to 5.4 before another running 5.2, can one be layer 2 while the other is layer 3? Each is sharing the same physical OSA, but different addresses. While I am installing the new VM 2nd level I have it connected to my 1st level vswitch. Can the 2nd level vswitch be layer 2 while the 1st level switch it is connected to is layer 3? On Wed, Dec 10, 2008 at 4:29 PM, Alan Altmark alan_altm...@us.ibm.comwrote: On Wednesday, 12/10/2008 at 08:39 EST, RPN01 nix.rob...@mayo.edu wrote: I attempted this yesterday, and I haven?t searched the archives yet, so if this has been gone over, I apologize. Looking through the books, it would appear that the changes needed to go from layer 3 to layer 2 protocol would be to add ?ETHERNET? to the vSwitch definition, and to add ?ETHERNET? to the DEVICE description in the profile TCPIP file. Now, as you may well have guessed by the fact that I?m posting this message, doing this didn?t produce desirable results. I.E. The connection doesn? t ping or work in any other useful way. There is no ETHERNET option on the DEVICE statement, so you're probably getting configuration errors and the device isn't activating. Check the TCPIP console log. In z/VM 5.4 there is an ETHERNET statement on the LINK (type QDIOETHERNET) statement. This capability is not in z/VM 5.3. Do I need to talk to the network people? Is there something they need to do in the OSA, or on the network? Have I missed something in the configuration? Do I need to check for more current maintenance? (Right now, this is on z/VM 5.3... Soon to be 5.4) Layer 2 vs. 3 is set entirely within the OSA by the host. There's nothing for your networking people to do. Remember, however, that with Layer 2 the virtual MAC address will appear on the REAL network. Therefore it must be unique within the LAN segment. With a single VM system you're ok, but with two or more systems on the same LAN segment, you need to use the MACPREFIX in SYSTEM CONFIG to set the prefix to be unique. Alan Altmark z/VM Development IBM Endicott -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317 -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: Unable to PING the LINUX server
On Tuesday, 12/16/2008 at 10:24 EST, David Kreuter dkreu...@vm-resources.com wrote: Is it possible that 172.27.28.2 is the gw not 172.27.24.2? Can't be. With netmask 255.255.252.0, .24 and .28 are in separate subnets. Your gw must be in your subnet. (And the assigned IP addresses were .24) Alan Altmark z/VM Development IBM Endicott
Re: OSA layer 2 protocol connections...
Yes, you can have an OSA triplet attached to a z/VM tcpip in layer3 mode and another triplet from the same OSA attached to a z/VM tcpip in layer2 mode. On Tue, Dec 16, 2008 at 10:01 AM, Mark Pace mpac...@gmail.com wrote: If I update one VM to 5.4 before another running 5.2, can one be layer 2 while the other is layer 3? Each is sharing the same physical OSA, but different addresses. While I am installing the new VM 2nd level I have it connected to my 1st level vswitch. Can the 2nd level vswitch be layer 2 while the 1st level switch it is connected to is layer 3? On Wed, Dec 10, 2008 at 4:29 PM, Alan Altmark alan_altm...@us.ibm.comwrote: On Wednesday, 12/10/2008 at 08:39 EST, RPN01 nix.rob...@mayo.edu wrote: I attempted this yesterday, and I haven?t searched the archives yet, so if this has been gone over, I apologize. Looking through the books, it would appear that the changes needed to go from layer 3 to layer 2 protocol would be to add ?ETHERNET? to the vSwitch definition, and to add ?ETHERNET? to the DEVICE description in the profile TCPIP file. Now, as you may well have guessed by the fact that I?m posting this message, doing this didn?t produce desirable results. I.E. The connection doesn? t ping or work in any other useful way. There is no ETHERNET option on the DEVICE statement, so you're probably getting configuration errors and the device isn't activating. Check the TCPIP console log. In z/VM 5.4 there is an ETHERNET statement on the LINK (type QDIOETHERNET) statement. This capability is not in z/VM 5.3. Do I need to talk to the network people? Is there something they need to do in the OSA, or on the network? Have I missed something in the configuration? Do I need to check for more current maintenance? (Right now, this is on z/VM 5.3... Soon to be 5.4) Layer 2 vs. 3 is set entirely within the OSA by the host. There's nothing for your networking people to do. Remember, however, that with Layer 2 the virtual MAC address will appear on the REAL network. Therefore it must be unique within the LAN segment. With a single VM system you're ok, but with two or more systems on the same LAN segment, you need to use the MACPREFIX in SYSTEM CONFIG to set the prefix to be unique. Alan Altmark z/VM Development IBM Endicott -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317 -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: OSA layer 2 protocol connections...
On Tuesday, 12/16/2008 at 10:02 EST, Mark Pace mpac...@gmail.com wrote: If I update one VM to 5.4 before another running 5.2, can one be layer 2 while the other is layer 3? Each is sharing the same physical OSA, but different addresses. I don't recall the machine on which it first occurred (z9?), but you can talk between L2 and L3 on the same OSA. While I am installing the new VM 2nd level I have it connected to my 1st level vswitch. Can the 2nd level vswitch be layer 2 while the 1st level switch it is connected to is layer 3? No. z/VM does not virtualize the mixed L2/L3 nature of OSA. Alan Altmark z/VM Development IBM Endicott
Re: The new RACF and FCP disks?
On Monday, 12/15/2008 at 07:36 EST, Lee Stewart lstewart.dsgr...@attglobal.net wrote: Hi allDoes the new RACF (VM Security Server) handle protecting FCP disks? If so, how? By FCP device/CHPID? By target WWPN? By target LUN? I browsed the books but didn't find any FCP references... As Rick says, it's done with EDEVs. Follow all of the RACF rules for FBA. In particular, you MUST NOT share the database with any other instance of RACF. Alan Altmark z/VM Development IBM Endicott
Re: OSA layer 2 protocol connections...
If I update one VM to 5.4 before another running 5.2, can one be layer 2 while the other is layer 3? Each is sharing the same physical OSA, but different addresses. While I am installing the new VM 2nd level I have it connected to my 1st level vswitch. Can the 2nd level vswitch be layer 2 while the 1st level switch it is connected to is layer 3? On Wed, Dec 10, 2008 at 4:29 PM, Alan Altmark alan_altm...@us.ibm.comwrote: On Wednesday, 12/10/2008 at 08:39 EST, RPN01 nix.rob...@mayo.edu wrote: I attempted this yesterday, and I haven?t searched the archives yet, so if this has been gone over, I apologize. Looking through the books, it would appear that the changes needed to go from layer 3 to layer 2 protocol would be to add ?ETHERNET? to the vSwitch definition, and to add ?ETHERNET? to the DEVICE description in the profile TCPIP file. Now, as you may well have guessed by the fact that I?m posting this message, doing this didn?t produce desirable results. I.E. The connection doesn? t ping or work in any other useful way. There is no ETHERNET option on the DEVICE statement, so you're probably getting configuration errors and the device isn't activating. Check the TCPIP console log. In z/VM 5.4 there is an ETHERNET statement on the LINK (type QDIOETHERNET) statement. This capability is not in z/VM 5.3. Do I need to talk to the network people? Is there something they need to do in the OSA, or on the network? Have I missed something in the configuration? Do I need to check for more current maintenance? (Right now, this is on z/VM 5.3... Soon to be 5.4) Layer 2 vs. 3 is set entirely within the OSA by the host. There's nothing for your networking people to do. Remember, however, that with Layer 2 the virtual MAC address will appear on the REAL network. Therefore it must be unique within the LAN segment. With a single VM system you're ok, but with two or more systems on the same LAN segment, you need to use the MACPREFIX in SYSTEM CONFIG to set the prefix to be unique. Alan Altmark z/VM Development IBM Endicott -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: The new RACF and FCP disks?
The overhead is real, but its cost is not clear. The difference between the performance of direct FCP -vs- EDEV has not been fully measured (or at least not widely reported.) I'm still looking for numbers. Which is faster? For a guest to perform QDIO or for CP to handle it? Traditionally, we have largely agreed that VM (CP) should handle the heavy lifting. Taking off my virtualization purist hat, I say let the guests do DIAG 250 and let CP do the real input/output. -- R; On Tue, Dec 16, 2008 at 11:42 AM, Kris Buelens kris.buel...@gmail.com wrote: But, using simulated FBA minidisks incur higher CP overheads that letting Linux use the FCP channels. 2008/12/16 Alan Altmark alan_altm...@us.ibm.com On Tuesday, 12/16/2008 at 11:07 EST, Lee Stewart lstewart.dsgr...@attglobal.net wrote: I speak EDEVs, but for various reasons EDEV is not a choice for this customer. They only have SAN disks - raw LUNs. (The VM system itself is installed on the few ECKD volumes -- all the Linuxen are on SAN only.) Sorry, Lee; I misread your original post where you asked how RACF *protects* FCP disks. It doesn't. CP doesn't allow ESMs to control ATTACH/DEDICATE. (It's on the to-do list.) If they want RACF control over what guests can see the LUN, then they have to use EDEVs, since that's the only way to get minidisks, where the ESMs hold sway. Alan Altmark z/VM Development IBM Endicott -- Kris Buelens, IBM Belgium, VM customer support
Re: The new RACF and FCP disks?
On Tuesday, 12/16/2008 at 11:44 EST, Kris Buelens kris.buel...@gmail.com wrote: But, using simulated FBA minidisks incur higher CP overheads that letting Linux use the FCP channels. The question was how does RACF protect FCP. If you want RACF to protect access to LUNs there is no choice but to use minidisks. And THAT means FBA or ECKD. Depending on how the particular disk is used, the CP overhead may be important or it may not. Further, z/VM 5.3 significantly reduced the CPU overhead of paging to SCSI. Read http://www.vm.ibm.com/perf/reports/zvm/html/530scsi.html. Alan Altmark z/VM Development IBM Endicott
Re: Unable to PING the LINUX server
The OSA I was using was on our 28 network. I changed to an OSA on our 24 network and now all is connecting. Problem is solved. ping 172.16.24.129 Ping Level 540: Pinging host 172.16.24.129. Enter #CP EXT to interrupt. PING: Ping #1 response took 0.001 seconds. Successes so far 1. NETSTAT ARP ALL TCP DTCVSW1 VM TCP/IP Netstat Level 540 TCP/IP Server Name: DTCVSW1 ARP Age: 5 Querying ARP cache for address * Adapter-maintained data as of: 12/16/08 14:28:16 Link VSWITCH10A28LINK: QDIOETHERNET: 00-16-9C-EC-BC-40 IP: 172.16.24.2 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.100 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.101 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.102 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.103 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.104 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.105 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.106 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.108 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.109 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-B7-18-90 IP: 172.16.24.129 YEA! Link VSWITCH10A28LINK: QDIOETHERNET: 00-0C-29-A2-91-6A IP: 172.16.24.255 Link VSWITCH10A28LINK: QDIOETHERNET: 00-0D-60-D4-91-D2 IP: 172.16.25.159 Link VSWITCH10A28LINK: QDIOETHERNET: 00-0C-29-BE-85-10 IP: 172.16.25.171 Link VSWITCH10A28LINK: QDIOETHERNET: 00-0D-60-D5-7D-BC IP: 172.16.25.196 Link VSWITCH10A28LINK: QDIOETHERNET: 00-14-5E-30-A5-70 IP: 172.16.25.255 Ready; T=0.01/0.01 14:29:05 Thanks for you help, Ray -Original Message- From: Ray Waters Sent: Tuesday, December 16, 2008 11:25 AM To: The IBM z/VM Operating System Subject: RE: Unable to PING the LINUX server Will get our network people involved. Thanks to all who responded. Ray -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mark Post Sent: Tuesday, December 16, 2008 10:30 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Unable to PING the LINUX server On 12/15/2008 at 3:22 PM, Ray Waters ray.wat...@opensolutions.com wrote: Mark, I can PING the GATEWAY from NOVSTART but not my pc. My pc is not running a FTP server so it should not respond, right? Wrong. If your PC is running a TCP/IP stack, and isn't firewalling off ICMP packets, it should respond. Gateway ping 172.16.24.2 ping 172.16.24.2 PING 172.16.24.2 (172.16.24.2) 56(84) bytes of data. This is _not_ showing a successful ping of the gateway. So, your problem lies there. As Alan Altmark suggested, you now need to get your network team involved. Something very fundamental is wrong in your setup, and that's going to be very specific to your particular site. As a starting point, take David's question about the correct IP address for the gateway to them, but Alan's suggestion for an overall review is best. Mark Post NOTICE: This e-mail is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the original message at the listed email address. Thank You.
DCSS and NSS backup code
is attached to this note...enjoy. -- DJ V/Soft z/VM and mainframe Linux expertise, training, consulting, and software development www.vsoft-software.com
Re: DCSS and NSS backup code
? nothing attached we will try it soon as we just regained access to the tape drive From: The IBM z/VM Operating System on behalf of Dave Jones Sent: Tue 12/16/2008 3:47 PM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] DCSS and NSS backup code is attached to this note...enjoy. -- DJ V/Soft z/VM and mainframe Linux expertise, training, consulting, and software development www.vsoft-software.com
Re: DCSS and NSS backup code
On Tuesday, 12/16/2008 at 03:48 EST, Dave Jones d...@vsoft-software.com wrote: is attached to this note...enjoy. Attachments not allowed. Alan Altmark z/VM Development IBM Endicott
Re: DCSS and NSS backup code
is attached to this note...enjoy. -- DJ No it isn't, at least not to the one I received.. Regards, Richard Schuh
Re: DCSS and NSS backup code
oopssorry about thatmeant to sent it to the address right below IBMVM in my address book Alan Altmark wrote: On Tuesday, 12/16/2008 at 03:48 EST, Dave Jones d...@vsoft-software.com wrote: is attached to this note...enjoy. Attachments not allowed. Alan Altmark z/VM Development IBM Endicott -- DJ V/Soft z/VM and mainframe Linux expertise, training, consulting, and software development www.vsoft-software.com
Re: OSA layer 2 protocol connections...
Is layer 2 only available to z/VM TCPIP and linux? I'm getting errors on my z/VSE guest and I don't even want to bother starting my z/OS 1.9 guest if it's not going to work on the layer 2 vswitch. I'll just go ahead and change the vswitch and TCPIP back to layer 3. On Tue, Dec 16, 2008 at 1:31 PM, Alan Altmark alan_altm...@us.ibm.comwrote: On Tuesday, 12/16/2008 at 10:02 EST, Mark Pace mpac...@gmail.com wrote: If I update one VM to 5.4 before another running 5.2, can one be layer 2 while the other is layer 3? Each is sharing the same physical OSA, but different addresses. I don't recall the machine on which it first occurred (z9?), but you can talk between L2 and L3 on the same OSA. While I am installing the new VM 2nd level I have it connected to my 1st level vswitch. Can the 2nd level vswitch be layer 2 while the 1st level switch it is connected to is layer 3? No. z/VM does not virtualize the mixed L2/L3 nature of OSA. Alan Altmark z/VM Development IBM Endicott -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: TERSE/DETERSE
Sir Dave the Generous, Pray tell thee great Sir, wherefore might one find such a treasure as TER SE for VM? I have searched futilely over many years through deep blue caves , with torches and swords held high and low. This prize has always eluded mere mortals without close ties to IBM. Be not mislead down the wrongful paths of MVS and VSE, for these lead not to TERSE for the one holy grail system: VM! Though I have been recognized by the SHARE VM Community as having moderat e magical skills, thus far such a magical MODULE for CMS appears available only to those in possession of much more powerful blue magic (or blue entrails - it is often difficult to see through the misty Shroud of Endicott). Perhaps it is time to invoke the spirit of Sir Jim the Evangelist to determine what might cure such a long-lasting, and troubling irritant, by releasing TERSE for VM from whatever dark corner it has been confined? L ET IT BE! Let TERSE for VM be honored in the the full light and goodness of VM! Respectfully, Sir Mike the Prestidigitator AKA: Mike Walter Hewitt Associates Any opinions expressed herein are mine alone and do not necessarily represent the opinions or policies of Hewitt Associates.
Re: OSA layer 2 protocol connections...
On Tuesday, 12/16/2008 at 04:33 EST, Mark Pace mpac...@gmail.com wrote: Is layer 2 only available to z/VM TCPIP and linux? I'm getting errors on my z/VSE guest and I don't even want to bother starting my z/OS 1.9 guest if it's not going to work on the layer 2 vswitch. I'll just go ahead and change the vswitch and TCPIP back to layer 3. z/OS does not support Layer 2 (though I think they're working towards it). Alan Altmark z/VM Development IBM Endicott
Re: DCSS and NSS backup code
Now that you have our interest . -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Dave Jones Sent: Tuesday, December 16, 2008 3:21 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: DCSS and NSS backup code oopssorry about thatmeant to sent it to the address right below IBMVM in my address book Alan Altmark wrote: On Tuesday, 12/16/2008 at 03:48 EST, Dave Jones d...@vsoft-software.com wrote: is attached to this note...enjoy. Attachments not allowed. Alan Altmark z/VM Development IBM Endicott -- DJ V/Soft z/VM and mainframe Linux expertise, training, consulting, and software development www.vsoft-software.com
Re: OSA layer 2 protocol connections...
Thanks, Alan. Guess I'll be changing that z/VM back to a layer 3 vswitch. Guess I'll get to try it when I get to my Linux only z/VM system. On Tue, Dec 16, 2008 at 4:49 PM, Alan Altmark alan_altm...@us.ibm.comwrote: On Tuesday, 12/16/2008 at 04:33 EST, Mark Pace mpac...@gmail.com wrote: Is layer 2 only available to z/VM TCPIP and linux? I'm getting errors on my z/VSE guest and I don't even want to bother starting my z/OS 1.9 guest if it's not going to work on the layer 2 vswitch. I'll just go ahead and change the vswitch and TCPIP back to layer 3. z/OS does not support Layer 2 (though I think they're working towards it). Alan Altmark z/VM Development IBM Endicott -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: The new RACF and FCP disks?
Thanks, that's what I thought, but wanted to be sure... Lee Alan Altmark wrote: On Tuesday, 12/16/2008 at 11:07 EST, Lee Stewart lstewart.dsgr...@attglobal.net wrote: I speak EDEVs, but for various reasons EDEV is not a choice for this customer. They only have SAN disks - raw LUNs. (The VM system itself is installed on the few ECKD volumes -- all the Linuxen are on SAN only.) Sorry, Lee; I misread your original post where you asked how RACF *protects* FCP disks. It doesn't. CP doesn't allow ESMs to control ATTACH/DEDICATE. (It's on the to-do list.) If they want RACF control over what guests can see the LUN, then they have to use EDEVs, since that's the only way to get minidisks, where the ESMs hold sway. Alan Altmark z/VM Development IBM Endicott -- Lee Stewart, Senior SE Sirius Computer Solutions Phone: (303) 798-2954 Fax: (720) 228-2321 Email: lee.stew...@siriuscom.com Web: www.siriuscom.com
