Re: Ethernet vswitch definition
Thanks for the replies, Alan David. I appreciate it. My networking group is pretty flexible and asked me what *I* wanted, for the most part. Nice to have that option. :) Dave -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Alan Altmark Sent: Friday, January 09, 2009 7:26 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Ethernet vswitch definition On Thursday, 01/08/2009 at 06:09 EST, KEETON Dave * SDC dave.kee...@state.or.us wrote: Scenario: If you had an environment that consisted of Administration, Production networks and you wanted a guest to participate in both, wouldn't you just create two VLAN memberships to eth0 (ala vconfig)? Or would it be prudent to create a separate VSWITCH for Administration and Production and use eth0 and eth1 nics (using the PORTTYPE ACCESS method)? This will be driven by your Networking folks. If they would normally configure a trunk port for a distributed system, then it's ok for a guest. If not, no. From a z/VM security point of view, it's the same, though the increased complexity of trunk ports can trigger a failure in the human element of the equation. As David says, this may make the Network Gods nervous. Trunk v. Access: Sometimes the 'obvious' solution is the 'wrong' (or unworkable) solution. For instance, most sites will not mix Internet and Intranet traffic on the same physical switch. Ergo you cannot use a trunk port to carry both. Or they will not carry traffic in different security domains, as represented by a VLAN, on the same wire, so again, a trunk won't help. While on one level it may seem silly, being largely based on history and Everyone Knows kinds of things, ranking right up there with telnet is not secure. On the other hand, using separate switches to carry Internet traffic can be a wise thing for other reasons, including ease of physical audit (put red tape on it and allowo only red ethernet cables) and the ability to just turn it off in an emergency without affecting your ability to access the systems internally. Don't fight with your networking people about this stuff - it's their territory and their responsibility, not yours. If you need to buy additional OSAs, for example, then just say so and TPTB will decide whether the expense is worth the risk. (Hint: Network folks almost always get their way on this soft of stuff. It's ok. Breathe in. Breathe out. In. Out.) It goes without saying, but it must be said, that involving network AND security people *early* in the design is far better (for you) than surprising them at the 11th hour. Talk about cranky Alan Altmark z/VM Development IBM Endicott
Filezilla FTP client and the DIR command
I'm having problems getting Filezilla from displaying the directory of my files on the screen. I reviewed the list for past posts and have changed my LISTFormat to UNIX without success. Filezilla does make a SSL connect to my system but the directory display is failing at this point. What am I missing? Secondly is there a windows batch FTP with SSL support to replace the current CMD FTP command? Thanks in advance Hans
LOGO CONFIG
I thought that I had, in the past, been able to make a change to LOGO CONFIG and have CP pick up the change without an IPL. I tried it and just a new CPACCESS MAINT CF1 A didn't pick up the change. Am I not remembering correctly? Should I be able to have the change show up? Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: Filezilla FTP client and the DIR command
I had this problem also and was never resolved to my satisfaction. You may call me if you wish to discuss. Jim Dodds Systems Programmer Kentucky State University 400 East Main Street Frankfort, Ky 40601 502 597 6114 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Hans Rempel Sent: Monday, January 12, 2009 11:59 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Filezilla FTP client and the DIR command I'm having problems getting Filezilla from displaying the directory of my files on the screen. I reviewed the list for past posts and have changed my LISTFormat to UNIX without success. Filezilla does make a SSL connect to my system but the directory display is failing at this point. What am I missing? Secondly is there a windows batch FTP with SSL support to replace the current CMD FTP command? Thanks in advance Hans
Re: LOGO CONFIG
Check out refresh logo The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 01/12/2009 09:02:23 AM: I thought that I had, in the past, been able to make a change to LOGO CONFIG and have CP pick up the change without an IPL. I tried it and just a new CPACCESS MAINT CF1 A didn't pick up the change. Am I not remembering correctly? Should I be able to have the change show up? Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: LOGO CONFIG
CP REFRESH ... JR (Steven) Imler CA Senior Sustaining Engineer Tel: +1 703 708 3479 steven.im...@ca.com -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Monday, January 12, 2009 12:02 PM To: IBMVM@LISTSERV.UARK.EDU Subject: LOGO CONFIG I thought that I had, in the past, been able to make a change to LOGO CONFIG and have CP pick up the change without an IPL. I tried it and just a new CPACCESS MAINT CF1 A didn't pick up the change. Am I not remembering correctly? Should I be able to have the change show up? Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: LOGO CONFIG
You need to do a REFRESH for CP and VTAM -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Monday, January 12, 2009 10:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: LOGO CONFIG I thought that I had, in the past, been able to make a change to LOGO CONFIG and have CP pick up the change without an IPL. I tried it and just a new CPACCESS MAINT CF1 A didn't pick up the change. Am I not remembering correctly? Should I be able to have the change show up? Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: LOGO CONFIG
The previous replies should do the trick this time. But for next time, maybe you want to include something like the following at the top of your LOGO CONFIG file. I put comments where I will probably trip over them the next time I need them. You can see that this set if pretty old. /* Just a reminder that once the SNA logo has been updated, and the */ /* command: CPACCess MAINT CF1 A SR */ /* has been entered, you won't see and update on the logo until after*/ /* command: CP REFRESH LOGOinfo LOGO CONFIG */ /* and: CP REFRESH LOGOVSM VSCS */ /* mrw 03/17/99 */ Mike Walter Hewitt Associates Any opinions expressed herein are mine alone and do not necessarily represent the opinions or policies of Hewitt Associates. Jim Bohnsack jab...@cornell.edu Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 01/12/2009 11:02 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject LOGO CONFIG I thought that I had, in the past, been able to make a change to LOGO CONFIG and have CP pick up the change without an IPL. I tried it and just a new CPACCESS MAINT CF1 A didn't pick up the change. Am I not remembering correctly? Should I be able to have the change show up? Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
VSWITCH LINUX Connection Problem
We are getting a connection problem with our first LINUX guest on z/VM 5.3. I am new to z/VM and do not know networking. I created a TCP/IP stack that appears to be working through an OSA card (9F00). We were able to FTP the SUSE Linux install. I created a Virtual Switch that uses another OSA device (9E00). When we start up the Linux virtual machine, it apears to connect to the Virtual Switch. When I do a q vswitch details, I see a line like the following. Adapter Connections: Adaptor Owner : NOVSTART NIC: 0600 Name: UNASSIGNED We are not able to ping outside the Linux virtual machine or connect to the virtual machine. I am including an ifconfig -a and q vswitch details command output (without the Linux virtual machine being active) . I do not know what to do next to resolve the problem. Any help from the list would be appreciated. ifconfig -a DMSACC724I 191 replaces A (191) Ready; T=0.01/0.01 12:46:21 ETH0 inet addr: 172.19.110.100 mask: 255.255.0.0 UP BROADCAST MULTICAST MTU: 1500 vdev: 9F00 rdev: 9F00 type: QDIO ETHERNET portname: UNASSIGNED ipv4 router type: NONROUTER ipv6: DISABLED cpu: 0 forwarding: ENABLED RX bytes: 3642430945 TX bytes: 91662059 Ready; T=0.01/0.02 12:46:21 q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 0Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 0 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 0 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Ready; T=0.01/0.01 12:51:13
Re: VSWITCH LINUX Connection Problem
You'll need to give the server authority to the vswitch first: set vswitch vswitch1 grant novstart Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Charles Brosemer Sent: Monday, January 12, 2009 9:58 AM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] VSWITCH LINUX Connection Problem We are getting a connection problem with our first LINUX guest on z/VM 5.3. I am new to z/VM and do not know networking. I created a TCP/IP stack that appears to be working through an OSA card (9F00). We were able to FTP the SUSE Linux install. I created a Virtual Switch that uses another OSA device (9E00). When we start up the Linux virtual machine, it apears to connect to the Virtual Switch. When I do a q vswitch details, I see a line like the following. Adapter Connections: Adaptor Owner : NOVSTART NIC: 0600 Name: UNASSIGNED We are not able to ping outside the Linux virtual machine or connect to the virtual machine. I am including an ifconfig -a and q vswitch details command output (without the Linux virtual machine being active) . I do not know what to do next to resolve the problem. Any help from the list would be appreciated. ifconfig -a DMSACC724I 191 replaces A (191) Ready; T=0.01/0.01 12:46:21 ETH0 inet addr: 172.19.110.100 mask: 255.255.0.0 UP BROADCAST MULTICAST MTU: 1500 vdev: 9F00 rdev: 9F00 type: QDIO ETHERNET portname: UNASSIGNED ipv4 router type: NONROUTER ipv6: DISABLED cpu: 0 forwarding: ENABLED RX bytes: 3642430945 TX bytes: 91662059 Ready; T=0.01/0.02 12:46:21 q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 0Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 0 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 0 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Ready; T=0.01/0.01 12:51:13
Re: VSWITCH LINUX Connection Problem
Charles, Did you grant access to the VSwitch for the virtual machine? SET VSWITCH VSWITCH1 GRANT NOVSTART Charles Brosemer wrote: We are getting a connection problem with our first LINUX guest on z/VM 5.3. I am new to z/VM and do not know networking. I created a TCP/IP stack that appears to be working through an OSA card (9F00). We were able to FTP the SUSE Linux install. I created a Virtual Switch that uses another OSA device (9E00). When we start up the Linux virtual machine, it apears to connect to the Virtual Switch. When I do a q vswitch details, I see a line like the following. Adapter Connections: Adaptor Owner : NOVSTART NIC: 0600 Name: UNASSIGNED We are not able to ping outside the Linux virtual machine or connect to the virtual machine. I am including an ifconfig -a and q vswitch details command output (without the Linux virtual machine being active) . I do not know what to do next to resolve the problem. Any help from the list would be appreciated. ifconfig -a DMSACC724I 191 replaces A (191) Ready; T=0.01/0.01 12:46:21 ETH0 inet addr: 172.19.110.100 mask: 255.255.0.0 UP BROADCAST MULTICAST MTU: 1500 vdev: 9F00 rdev: 9F00 type: QDIO ETHERNET portname: UNASSIGNED ipv4 router type: NONROUTER ipv6: DISABLED cpu: 0 forwarding: ENABLED RX bytes: 3642430945 TX bytes: 91662059 Ready; T=0.01/0.02 12:46:21 q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 0Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 0 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 0 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Ready; T=0.01/0.01 12:51:13 -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009
Re: VSWITCH LINUX Connection Problem
Yes we did do the grant for novstart. Rich Smrcina rsmrc...@wi.rr.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 01/12/2009 01:05 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: VSWITCH LINUX Connection Problem Charles, Did you grant access to the VSwitch for the virtual machine? SET VSWITCH VSWITCH1 GRANT NOVSTART Charles Brosemer wrote: We are getting a connection problem with our first LINUX guest on z/VM 5.3. I am new to z/VM and do not know networking. I created a TCP/IP stack that appears to be working through an OSA card (9F00). We were able to FTP the SUSE Linux install. I created a Virtual Switch that uses another OSA device (9E00). When we start up the Linux virtual machine, it apears to connect to the Virtual Switch. When I do a q vswitch details, I see a line like the following. Adapter Connections: Adaptor Owner : NOVSTART NIC: 0600 Name: UNASSIGNED We are not able to ping outside the Linux virtual machine or connect to the virtual machine. I am including an ifconfig -a and q vswitch details command output (without the Linux virtual machine being active) . I do not know what to do next to resolve the problem. Any help from the list would be appreciated. ifconfig -a DMSACC724I 191 replaces A (191) Ready; T=0.01/0.01 12:46:21 ETH0 inet addr: 172.19.110.100 mask: 255.255.0.0 UP BROADCAST MULTICAST MTU: 1500 vdev: 9F00 rdev: 9F00 type: QDIO ETHERNET portname: UNASSIGNED ipv4 router type: NONROUTER ipv6: DISABLED cpu: 0 forwarding: ENABLED RX bytes: 3642430945 TX bytes: 91662059 Ready; T=0.01/0.02 12:46:21 q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 0Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 0 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 0 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Ready; T=0.01/0.01 12:51:13 -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009
Re: VSWITCH LINUX Connection Problem
On 1/12/2009 at 1:16 PM, Charles Brosemer charles_broseme...@ohionational.com wrote: Yes we did do the grant for novstart. It doesn't appear that the NIC is COUPLEd to the VSWITCH. At least the q vswitch details command didn't show that. Mark Post
Re: VSWITCH LINUX Connection Problem
Your Q VSWITCH DETAILS shows 'Connected: 0'. So no virtual machines are connected to the vswitch. Check your NICDEF directory setting. Charles Brosemer wrote: Yes we did do the grant for novstart. *Rich Smrcina rsmrc...@wi.rr.com* Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 01/12/2009 01:05 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: VSWITCH LINUX Connection Problem Charles, Did you grant access to the VSwitch for the virtual machine? SET VSWITCH VSWITCH1 GRANT NOVSTART Charles Brosemer wrote: We are getting a connection problem with our first LINUX guest on z/VM 5.3. I am new to z/VM and do not know networking. I created a TCP/IP stack that appears to be working through an OSA card (9F00). We were able to FTP the SUSE Linux install. I created a Virtual Switch that uses another OSA device (9E00). When we start up the Linux virtual machine, it apears to connect to the Virtual Switch. When I do a q vswitch details, I see a line like the following. Adapter Connections: Adaptor Owner : NOVSTART NIC: 0600 Name: UNASSIGNED We are not able to ping outside the Linux virtual machine or connect to the virtual machine. I am including an ifconfig -a and q vswitch details command output (without the Linux virtual machine being active) . I do not know what to do next to resolve the problem. Any help from the list would be appreciated. ifconfig -a DMSACC724I 191 replaces A (191) Ready; T=0.01/0.01 12:46:21 ETH0 inet addr: 172.19.110.100 mask: 255.255.0.0 UP BROADCAST MULTICAST MTU: 1500 vdev: 9F00 rdev: 9F00 type: QDIO ETHERNET portname: UNASSIGNED ipv4 router type: NONROUTER ipv6: DISABLED cpu: 0 forwarding: ENABLED RX bytes: 3642430945 TX bytes: 91662059 Ready; T=0.01/0.02 12:46:21 q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 0Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 0 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 0 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Ready; T=0.01/0.01 12:51:13 -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009 -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009
Re: Filezilla FTP client and the DIR command
On Monday, 01/12/2009 at 12:01 EST, Hans Rempel h...@hmrconsultants.com wrote: I?m having problems getting Filezilla from displaying the directory of my files on the screen. I reviewed the list for past posts and have changed my LISTFormat to UNIX without success. Filezilla does make a SSL connect to my system but the directory display is failing at this point. This is often due to Encryption Meets Firewall. Deep-inspection firewalls watch the FTP control connection and only open the needed ports based on seeing the port numbers on the PORT and PASV commands. (A DIR opens a data connection just like GET or PUT.) With the control connection encrypted, the firwall can't read the control connection. And it doesn't matter whether you are operating in passive or active mode. With z/VM 5.4 you can use the FTP CCC (Clear Command Channel) subcommand to return to plain-text after entering your user ID and password. Then the fw can see the PORT and PASV commands, but the data transfer will be encrypted. If you don't like that (or are using earlier release of z/VM, or workstation ftp client doesn't support it), then you have to drill holes in the firewall. (a) Use passive FTP, (b) Code PassivePortRange in SRVRFTP CONFIG, (c) RESERVE those ports for your FTP server in PROFILE TCPIP (c) open the port range specified in (b) in the firewall. Alan Altmark z/VM Development IBM Endicott
Re: VSWITCH LINUX Connection Problem
On Monday, 01/12/2009 at 01:27 EST, Mark Post mp...@novell.com wrote: On 1/12/2009 at 1:16 PM, Charles Brosemer charles_broseme...@ohionational.com wrote: Yes we did do the grant for novstart. It doesn't appear that the NIC is COUPLEd to the VSWITCH. At least the q vswitch details command didn't show that. To look for errors, actually LOGON to the Linux id (after is has been completely logged off) and watch the console. You will see NICDEF errors that are not trappable via the console log or SCIF. :-( Alan Altmark z/VM Development IBM Endicott
Re: VSWITCH LINUX Connection Problem
We have just brought up the Linux vritual machine. We get these errors in the LINUX startup. Setting up network interfaces: lo loIP address: 127.0.0.1/8 Checking for network time protocol daemon (NTPD): ..unused [1A..doneWaiting for mandatory devices: qeth-bus-ccw-0.0.0340 __NSC__ 20 19 18 17 16 15 13 12 11 10 9 8 7 6 5 4 3 2 1 0 qeth-bus-ccw-0.0.0340 No interface found [1A..failedSetting up service network . . . . . . . . . . . . . . . ...failed I also have a query of the virtual machine after the startup q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 1Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 0 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 0 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Adapter Connections: Adapter Owner: NOVSTART NIC: 0600 Name: UNASSIGNED Ready; T=0.01/0.01 13:47:24 We think we have to define the 340 NIC and couple it to the vswitch. The define works OK but we are having trouble with the couple command. We did the follwoing commands from maint. set vswitch vswitch1 grant novstart Ready; T=0.01/0.01 13:57:52 HCPSWS2858I NOVSTART connection to SYSTEM VSWITCH1 has been updated by MAINT. Command complete Ready; T=0.01/0.01 13:57:52 define nic 340 NIC 0340 is created; devices 0340-0342 defined Ready; T=0.01/0.01 13:58:39 couple 340 to system vswitch1 HCPNDF6024E Incompatible LAN - SYSTEM VSWITCH1 is a VSWITCH LAN. Ready(06024); T=0.01/0.01 13:59:36 We are haqving trouble with the couple command. Are these the correct commands to use? Mark Post mp...@novell.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 01/12/2009 01:26 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: VSWITCH LINUX Connection Problem On 1/12/2009 at 1:16 PM, Charles Brosemer charles_broseme...@ohionational.com wrote: Yes we did do the grant for novstart. It doesn't appear that the NIC is COUPLEd to the VSWITCH. At least the q vswitch details command didn't show that. Mark Post
Re: VSWITCH LINUX Connection Problem
I think we have a connection to the VSWITCH. We had to grant our Linux user novstart access to the vswitch from maint. There were command in the start of novstart that we uncommented. We had to define the nic with type qdio and couple the nic to the vswitch. I did a display on the vswitch and it looks like we are connected. Below is the display. We are getting closer, but I cant't can't ping from tcpmaint to 172.19.110.180 (novstart). We do have networking looking at this, but it looks like the vswitch may not be defined correctly. q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 2Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 8 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 564 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Adapter Connections: Adapter Owner: NOVSTART NIC: 0340 Name: UNASSIGNED RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 8 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 564 Device: 0342 Unit: 002 Role: DATA Port: 0080 Index: 0002 Options: Broadcast Multicast IPv6 IPv4 VLAN Unicast IP Addresses: 172.19.110.180 MAC: 02-00-00-00-00-03 FE80::200:0:100:3MAC: 02-00-00-00-00-03 Local Multicast IP Addresses: 224.0.0.1MAC: 01-00-5E-00-00-01 224.0.1.22 MAC: 01-00-5E-00-01-16 239.255.255.253 MAC: 01-00-5E-7F-FF-FD FF02::1 MAC: 33-33-00-00-00-01 Local FF02::1:FF00:3 MAC: 33-33-FF-00-00-03 Local Adapter Owner: NOVSTART NIC: 0600 Name: UNASSIGNED Ready; T=0.01/0.01 14:35:19
Re: VSWITCH LINUX Connection Problem
Make sure that the netmask and the default route that you put into the network configuration file for NOVSTART are correct. Verify this with your networking peeps. Charles Brosemer wrote: I think we have a connection to the VSWITCH. We had to grant our Linux user novstart access to the vswitch from maint. There were command in the start of novstart that we uncommented. We had to define the nic with type qdio and couple the nic to the vswitch. I did a display on the vswitch and it looks like we are connected. Below is the display. We are getting closer, but I cant't can't ping from tcpmaint to 172.19.110.180 (novstart). We do have networking looking at this, but it looks like the vswitch may not be defined correctly. q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 2Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 8 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 564 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Adapter Connections: Adapter Owner: NOVSTART NIC: 0340 Name: UNASSIGNED RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 8 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 564 Device: 0342 Unit: 002 Role: DATA Port: 0080 Index: 0002 Options: Broadcast Multicast IPv6 IPv4 VLAN Unicast IP Addresses: 172.19.110.180 MAC: 02-00-00-00-00-03 FE80::200:0:100:3MAC: 02-00-00-00-00-03 Local Multicast IP Addresses: 224.0.0.1MAC: 01-00-5E-00-00-01 224.0.1.22 MAC: 01-00-5E-00-01-16 239.255.255.253 MAC: 01-00-5E-7F-FF-FD FF02::1 MAC: 33-33-00-00-00-01 Local FF02::1:FF00:3 MAC: 33-33-FF-00-00-03 Local Adapter Owner: NOVSTART NIC: 0600 Name: UNASSIGNED Ready; T=0.01/0.01 14:35:19 -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009
Re: VSWITCH LINUX Connection Problem
in your previous post I saw netmask 255.255.0.0. Are you sure that is correct? Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Charles Brosemer Sent: Monday, January 12, 2009 12:41 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] VSWITCH LINUX Connection Problem I think we have a connection to the VSWITCH. We had to grant our Linux user novstart access to the vswitch from maint. There were command in the start of novstart that we uncommented. We had to define the nic with type qdio and couple the nic to the vswitch. I did a display on the vswitch and it looks like we are connected. Below is the display. We are getting closer, but I cant't can't ping from tcpmaint to 172.19.110.180 (novstart). We do have networking looking at this, but it looks like the vswitch may not be defined correctly. q vswitch details VSWITCH SYSTEM VSWITCH1 Type: VSWITCH Connected: 2Maxconn: INFINITE PERSISTENT RESTRICTEDNONROUTER Accounting: OFF VLAN Unaware MAC address: 02-00-00-00-00-01 State: Ready IPTimeout: 5 QueueStorage: 8 RDEV: 9E00 VDEV: 9E00 Controller: DTCVSW1 VSWITCH Connection: MAC address: 00-11-25-BD-A6-A0 RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 8 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 564 Device: 9E02 Unit: 002 Role: DATA Port: 0001 Index: 0001 Adapter Connections: Adapter Owner: NOVSTART NIC: 0340 Name: UNASSIGNED RX Packets: 0 Discarded: 0 Errors: 0 TX Packets: 8 Discarded: 0 Errors: 0 RX Bytes: 0TX Bytes: 564 Device: 0342 Unit: 002 Role: DATA Port: 0080 Index: 0002 Options: Broadcast Multicast IPv6 IPv4 VLAN Unicast IP Addresses: 172.19.110.180 MAC: 02-00-00-00-00-03 FE80::200:0:100:3MAC: 02-00-00-00-00-03 Local Multicast IP Addresses: 224.0.0.1MAC: 01-00-5E-00-00-01 224.0.1.22 MAC: 01-00-5E-00-01-16 239.255.255.253 MAC: 01-00-5E-7F-FF-FD FF02::1 MAC: 33-33-00-00-00-01 Local FF02::1:FF00:3 MAC: 33-33-FF-00-00-03 Local Adapter Owner: NOVSTART NIC: 0600 Name: UNASSIGNED Ready; T=0.01/0.01 14:35:19
WebSphere CPU starvation Message
We are migrating from WebSphere V5 to V6. Also going from Single Server mode to Network Configuration. We are going from 1 Production guest per server to 1 Production guest for 3 production Servers. Each WAS Server i s doing the same work as before ie Server1 is App1 and so on, we are not mixing workloads. The application response time is not as good in V6 vs V5. I'm not looking for WAS help, but in the log they are receiving 'cpu starvation' messages. Linux/UNIX admins running VMSTAT say they see idle of 0. Yet when I log on to the linux guest I dont have any problems 'running' things and neither do they (linux unix admins). Also VELOCITY shows this guest averaging approx 25-50% of 1 IFL (we have 2). I'm perplexed, is this guest actually suffering from 'lack of cpu' during some peak periods? How do I verify? Any thoughts suggestions are much appreciatted.
Re: WebSphere CPU starvation Message
On Mon, Jan 12, 2009 at 10:03 PM, Steve Mitchell steve.mitch...@bcbsks.com wrote: I'm perplexed, is this guest actually suffering from 'lack of cpu' during some peak periods? How do I verify? Any thoughts suggestions are much appreciatted. Since you confirm it *is* getting CPU resources, it sounds like the JVM is not dispatching the threads because it is doing something for itself. Maybe the heap configured is too small and causing very frequent garbage collections. There's some Java tools that allow you to analyze the GC log to produce the heap statistics. Or maybe the heap is defined too large in that it gets swapped by Linux and stalls the JVM. Rob -- Rob van der Heij Velocity Software http://www.velocitysoftware.com/
Re: WebSphere CPU starvation Message
First, open a problem with IBM WAS support. Start right away - WAS is not z/VM :) We saw this once upon a long time ago. I'll have to ask a WAS admin here if she remembers this one. But it wasn't a shortage of cpu on either Linux or VM here. It was some WAS tuning thing. Do you have latest fixpack on WAS ND? V6 initially ran slower here too for our big big clustered application, but lots and lots of tuning evetually got it better than V5. Hopefully you have something like Introscope. Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Steve Mitchell Sent: Monday, January 12, 2009 1:03 PM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] WebSphere CPU starvation Message We are migrating from WebSphere V5 to V6. Also going from Single Server = mode to Network Configuration. We are going from 1 Production guest per = server to 1 Production guest for 3 production Servers. Each WAS Server i= s doing the same work as before ie Server1 is App1 and so on, we are not = mixing workloads. The application response time is not as good in V6 vs = V5. I'm not looking for WAS help, but in the log they are receiving 'cpu= starvation' messages. Linux/UNIX admins running VMSTAT say they see idle= of 0. Yet when I log on to the linux guest I dont have any problems 'running' things and neither do they (linux unix admins). Also = VELOCITY shows this guest averaging approx 25-50% of 1 IFL (we have 2). = I'm perplexed, is this guest actually suffering from 'lack of cpu' during= some peak periods? How do I verify? Any thoughts suggestions are much = appreciatted.
Re: Secure FTP
Hi Terry, I just finished setting this up using v/VM 5.4 with the new sslserv, if you're interested. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (CMS/CTR) (CTR) Sent: Thursday, January 08, 2009 2:31 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Secure FTP Hi I am trying to figure out how to set up Secure FTP on z/VM so that I can send data from my z/VM LPARS to my z/OS LPARS. Mostly I want to get my z/VM z/Linux performance data over to my capacity folks on the z/OS for reporting. I am not sure how to go about setting Secure FTP up on z/VM. Any thoughts on this would be much appreciated. Thanks in advance for your help! Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.ma...@cms.hhs.gov Email Firewall made the following annotations. -- Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. ==
Re: WebSphere CPU starvation Message
sigh. You may be hitting what I refer to as the q4 problem - WAS machines never leaving the queue due to some silly yet evil was work that insists on popping up in less than the vm test idle time. I am pursuing some ways out of this. Check how many WAS virtual machine are in Q3, and never get to the dormant list. With ESAMON check which queues your v.m.'s are in along with paging rates. David Kreuter From: The IBM z/VM Operating System on behalf of Steve Mitchell Sent: Mon 1/12/2009 4:03 PM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] WebSphere CPU starvation Message We are migrating from WebSphere V5 to V6. Also going from Single Server = mode to Network Configuration. We are going from 1 Production guest per = server to 1 Production guest for 3 production Servers. Each WAS Server i= s doing the same work as before ie Server1 is App1 and so on, we are not = mixing workloads. The application response time is not as good in V6 vs = V5. I'm not looking for WAS help, but in the log they are receiving 'cpu= starvation' messages. Linux/UNIX admins running VMSTAT say they see idle= of 0. Yet when I log on to the linux guest I dont have any problems 'running' things and neither do they (linux unix admins). Also = VELOCITY shows this guest averaging approx 25-50% of 1 IFL (we have 2). = I'm perplexed, is this guest actually suffering from 'lack of cpu' during= some peak periods? How do I verify? Any thoughts suggestions are much = appreciatted.
Re: Secure FTP
Hi Howard. What PC (windows) client to do you use for secure FTP with your z/VM 5.4 system? I just downloaded the latest version of WS FTP and got it working but it is not the one we use at our site. I'm still trying to get FileZilla to work but have not had much success. Alan's given me some suggestions I will pursue them tomorrow. Hans From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of HOWARD MCCORKLE Sent: January 12, 2009 5:22 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Secure FTP Hi Terry, I just finished setting this up using v/VM 5.4 with the new sslserv, if you're interested. _ From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (CMS/CTR) (CTR) Sent: Thursday, January 08, 2009 2:31 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Secure FTP Hi I am trying to figure out how to set up Secure FTP on z/VM so that I can send data from my z/VM LPARS to my z/OS LPARS. Mostly I want to get my z/VM z/Linux performance data over to my capacity folks on the z/OS for reporting. I am not sure how to go about setting Secure FTP up on z/VM. Any thoughts on this would be much appreciated. Thanks in advance for your help! Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.ma...@cms.hhs.gov Email Firewall made the following annotations. -- Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. ==
Re: WebSphere CPU starvation Message
From the WAS 6.1 documentation: CPU starvation messages in the system log file CPU starvation detected error messages are displayed in the system log file whenever there is not enough physical memory available to allow the high availability manager threads to have consistent runtimes. When the CPU is spending the majority of its time trying to load swapped-out processes while processing incoming work, thread starvation might occur. The high availability manager detects this condition, and logs these error messages informing you that threads are not getting the required runtime. To achieve good performance and avoid receiving these error messages, it is recommended that you allocate at least 512 MB of RAM for each Java process running on a single machine Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Kreuter Sent: Monday, January 12, 2009 5:36 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] WebSphere CPU starvation Message sigh. You may be hitting what I refer to as the q4 problem - WAS machines never leaving the queue due to some silly yet evil was work that insists on popping up in less than the vm test idle time. I am pursuing some ways out of this. Check how many WAS virtual machine are in Q3, and never get to the dormant list. With ESAMON check which queues your v.m.'s are in along with paging rates. David Kreuter From: The IBM z/VM Operating System on behalf of Steve Mitchell Sent: Mon 1/12/2009 4:03 PM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] WebSphere CPU starvation Message We are migrating from WebSphere V5 to V6. Also going from Single Server = mode to Network Configuration. We are going from 1 Production guest per = server to 1 Production guest for 3 production Servers. Each WAS Server i= s doing the same work as before ie Server1 is App1 and so on, we are not = mixing workloads. The application response time is not as good in V6 vs = V5. I'm not looking for WAS help, but in the log they are receiving 'cpu= starvation' messages. Linux/UNIX admins running VMSTAT say they see idle= of 0. Yet when I log on to the linux guest I dont have any problems 'running' things and neither do they (linux unix admins). Also = VELOCITY shows this guest averaging approx 25-50% of 1 IFL (we have 2). = I'm perplexed, is this guest actually suffering from 'lack of cpu' during= some peak periods? How do I verify? Any thoughts suggestions are much = appreciatted.
Re: Secure FTP
On Monday, 01/12/2009 at 10:10 EST, Hans Rempel h...@hmrconsultants.com wrote: Hi Howard. What PC (windows) client to do you use for secure FTP with your z/VM 5.4 system? I just downloaded the latest version of WS FTP and got it working but it is not the one we use at our site. I?m still trying to get FileZilla to work but have not had much success. Alan?s given me some suggestions I will pursue them tomorrow. One of our testers has indicated a failure with the latest Filezilla. We haven't yet narrowed the problem down to find out if it's a bug in FZ, VM, or a new firewall issue, but we're working on it. Alan Altmark z/VM Development IBM Endicott
