• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 19962
  • Last Modified:

Getting IBM Client Access to Work via VPN

Hi Guys,

I am trying to get IBM Client Access V5R2 5250 to work via the internet using VPN. I have configured the VPN Appliance to allow the following IBM Client Access Ports through to my ISeries i810 it:

PORT 23
PORT 5544
PORT 8470
PORT 8471
PORT 8472
PORT 8473
PORT 8474
PORT 8475
PORT 8476

However when i try to logon to a 5250 session i get the following error message:

CWBCO 1003 - sockets error, functionreturned 10065.

They can ping the Iseries however.

Is there something i am missing?
0
biggiesmallzz
Asked:
biggiesmallzz
  • 8
  • 6
  • 2
1 Solution
 
_b_hCommented:
First steps:
1) Can you telnet to the 810?
2) Can you CWBping the iSeries?
This will confirm your ports, and make sure the servers are running on the 810.
3) Is there a service pack installed on the PC?
0
 
_b_hCommented:
Open port 449 as well.
0
 
biggiesmallzzAuthor Commented:
Thanks.

Will try these things and get back to you.

0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
biggiesmallzzAuthor Commented:

Hi b h,

I have some results for you below. The remainder will follow shortly.

Regards

biggie

Adding Port 449 helped (Thanks)

E:\>PING SIF

Pinging SIF [127.0.1.10] with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.1.10:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

E:\>C:

C:\>cwbping sif

IBM iSeries Access for Windows
Version 5  Release 2  Level 0
Connection Verification Program
(C) Copyright IBM Corporation and Others 1984, 2002.  All rights reserved.
U.S. Government Users Restricted Rights - Use, duplication or disclosure
  restricted by GSA ADP Schedule Contract with IBM Corp.
Licensed Materials - Property of IBM

To cancel the CWBPING request, press CTRL-C or CTRL-BREAK
I - Verifying connection to system SIF...
I - Successfully connected to server application: Central Client
I - Successfully connected to server application: Network File
I - Successfully connected to server application: Network Print
I - Successfully connected to server application: Data Access
I - Successfully connected to server application: Data Queues
I - Successfully connected to server application: Remote Command
I - Successfully connected to server application: Security
E - CWBCO1003 - Sockets error, function connect() returned 10061
E - CWBCO1049 - The iSeries server application (DDM) is not started
E - CWBCO1008 - Unable to connect to server application DDM, returned 10061

I - Successfully connected to server application: Telnet
E - CWBCO1003 - Sockets error, function connect() returned 10061
E - CWBCO1049 - The iSeries server application (Management Central) is not start
ed
E - CWBCO1008 - Unable to connect to server application Management Central, retu
rned 10061

W - CWBCO1015 - Connection verified to system SIF, but there were warnings

C:\>

The error message generated now on the 5250 client is as follows:
CWBLM0040 - unknown Failure
mainRC=9051 rc=102 rc2=0

Hope this makes sense.

biggie
0
 
_b_hCommented:
What client access service pack is installed on the PC?
0
 
_b_hCommented:
The client access service level on the PC is found by:
Start/All Programs/IBM iSeries Access for Windows/iSeries Access for Windows
For example, my service level is:
Version 5 Release 3 Modification level 0     Service level SI18651

The latest service pack can be downloaded from:
http://www-03.ibm.com/servers/eserver/iseries/access/casp.html
The service pack for V5R2 is SI18400

Barry
0
 
biggiesmallzzAuthor Commented:
Hi  b h

Installing the above service pack appears to have fixed the problem. I will also need to create a desktop print session so that users can print  from a 5250 session to a locally attached printer. Is there anything special i would have to do with that.

Regards

biggie
0
 
_b_hCommented:
Once the display emulation is working, the printer emulation connects the same way, so it should work fine.

Barry
0
 
biggiesmallzzAuthor Commented:
Barry

I have two users that try to use 5250 at different sites that get the same error message when they try to use it. The error is as follows:

CWBCO 1003 - sockets error, function returned 10065.SIF

This is after applying the service pack SI18400

Regards

biggie
0
 
_b_hCommented:
b
Did you verify the comms using ping, CWBping, telnet?
Barry
0
 
biggiesmallzzAuthor Commented:
Hi Barry,

Telnet does not appear to work and the results of cwbping are as follows:

IBM iSeries Access for Windows
Version 5  Release 2  Level 0
Connection Verification Program
(C) Copyright IBM Corporation and Others 1984, 2002.  All rights reserved.
U.S. Government Users Restricted Rights - Use, duplication or disclosure
  restricted by GSA ADP Schedule Contract with IBM Corp.
Licensed Materials - Property of IBM

To cancel the CWBPING request, press CTRL-C or CTRL-BREAK
I - Verifying connection to system 172.16.1.44...
E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Central Client, returned
 10060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Network File, returned 1
0060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Network Print, returned
10060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Data Access, returned 10
060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Data Queues, returned 10
060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Remote Command, returned
 10060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Security, returned 10060


E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application DDM, returned 10060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Telnet, returned 10060

E - CWBCO1003 - Sockets error, function connect() returned 10060
E - CWBCO1048 - A time-out occurred trying to connect to the iSeries
E - CWBCO1006 - Unable to connect to server mapper
E - CWBCO1011 - Remote port could not be resolved
E - CWBCO1008 - Unable to connect to server application Management Central, retu
rned 10060

E - CWBCO1016 - Connection verify to system 172.16.1.44 failed

Regards

biggie
0
 
tliottaCommented:
biggie:

The CWBPING function attempts to do a socket connect to a set of server applications on the AS/400. If those servers haven't been started, then no connection will succeed. Commonly, sites start the whole suite of servers with:

 ==>  strhostsvr  *ALL

But you can prompt the STRHOSTSVR command with <F4> and start individual host server functions if necessary. If the system is properly secured, there's usually no good reason not to start them all. The STRHOSTSVR command is commonly run as part of the system startup program(s). Very little (if any at all) network access can be done through iSeries Access clients if the host servers aren't running.

Tom
0
 
_b_hCommented:
Not even telnet works? Are the correct ports open for those sites?
I am assuming that the servers are started on the as/400 since the first site can connect.

Barry
0
 
tliottaCommented:
Note that 'telnet' may be misleading. There is "telnet" and then there's "TN5250". Further, there is also "TN5250E". While tn5250 does make use of telnet, there are additional host server functions that might be required.

When using "telnet", it should be tested by entering an actual "telnet" command on a Windows (or whatever) command line. (Just a comment...)

Tom
0
 
biggiesmallzzAuthor Commented:
Thanks Barry.

It turns out that the PCs in question had environemental problems outside of IBM Client Access. Thanks again Barry, as i would not have been able to solve it without your assistance.

biggie!!!!!!!!!!!!!!
0
 
_b_hCommented:
You're welcome!
Thanks for the points, and the grade.
Barry
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

  • 8
  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now