Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

AS400 remote access over the internet

Posted on 2009-04-13
10
Medium Priority
?
873 Views
Last Modified: 2012-05-06
So I'm trying to set up my AS400 to be able to be accessed over a NS25 juniper firewall the problem is that i ran out of public IPs and im not really sure how to make this work. I currently have a mip configured could i use it to access the AS400 as well? Im kind of new to firewalls i was just wondering if anyone could point me to the right direction.


Thanks
0
Comment
Question by:jimmymcp02
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
10 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24144493
If you already have MIP for the same AS400 then you can use the same MIP address in another firewall policy rule to allow access.
If you have 2 AS400 servers and have run out of public IPs, but the port/protocol pair on untrust IP required to access AS400 is not used, then you can configure VIP for internal IP of AS400 and use it.

If possible, you if you can configure AS400 to listen to other port/protocol pair than default then we can use VIP as well.

Please provide details.

Thank you.
0
 
LVL 20

Author Comment

by:jimmymcp02
ID: 24148540
The MIP is corrently used on a policy to access another server (not the AS400)  so i guess that only leaves me with the VIP but i have never configured a VIP before would that still work?
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24149035
With VIP the outbound traffic is PATted, so if your application is sensitive to port masquerading then it might pose problems.
Can you give it a try so we know.

Thank you.
0
Introducing the WatchGuard 420 Access Point

WatchGuard's newest access point includes an 802.11ac Wave 2 chipset, providing the fastest speeds for VoIP, video and music streaming, and large data file transfers. Additionally, enjoy the benefits of strong security as the 3rd radio delivers dedicated WIPS protection!

 
LVL 20

Author Comment

by:jimmymcp02
ID: 24206987
I have created the VIP and mapped to the AS400 we will be testing this week.
Thank you
0
 
LVL 20

Author Comment

by:jimmymcp02
ID: 24286138
no luck....
 
Im stilll trying to figure out why this is not working.
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 2000 total points
ID: 24286239
Enable debug on Juniper firewall so we would know if the firewall is masquerading ports and the disposition.

Please advice.

Thank you.
0
 
LVL 20

Author Comment

by:jimmymcp02
ID: 24623985
Sorry for the delay we have hired a consultant to assist on the AS400 side. I will keep you post it with the findings from the firewall
0
 
LVL 20

Author Comment

by:jimmymcp02
ID: 25134641
Ok. so i finally figure out what was wrong.
 
My NS25 had the original firmware and after contacting juniper they agreed with what i encounter the original firmware had issues redirecting a vip with multiple ports. even after using the command set vip multi-port the vips did not behaved correctly if using multiple ports. After we upgraded to version 5.4 from 5.0 we were able to see traffic flowing.
 
Thanks for your assistance
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 25139199
Thank you for the update and points! :)
0
 
LVL 20

Author Comment

by:jimmymcp02
ID: 25144138
Anytime :o)
0

Featured Post

Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question