Import TCP/IP Profiles Into the IBM Configuration Assistant for z/OS Communications Server
The Network Configuration Assistant (NCA) provides a rich, user-friendly set of functions for managing your TCP/IP configuration.
By Mike Fox09/03/2019
The NCA can also be used to produce OBEY files for TCP/IP dynamic reconfiguration, by using the Change Set support that was delivered on z/OS V2R2 in APAR PI80101 and included in z/OS V2R3 and subsequent releases.
Starting with APAR PI97737 on z/OS V2R3 and in the base of z/OS V2R4 and subsequent releases, the NCA can also manage TCP/IP configurations for alternate locations to help you manage relocation of z/OS images for disaster recovery and planned outages.
With these functions, the NCA provides a rich, user-friendly set of functions for managing your TCP/IP configuration. However, you likely already have a complete TCP/IP configuration that you manage using ISPF editing of the MVS configuration data sets. How do you get started if you want to explore or migrate to using the NCA to manage your TCP/IP configuration? It would be tedious and error-prone to recreate your TCP/IP configuration from scratch in the GUI.
TCP/IP Profile Import FunctionStarting z/OS V2R3, or z/OS V2R2 with APARs PI66143 and PI63449 applied, you can import your existing TCP/IP profiles into the NCA. This function eliminates the need to recreate your TCP/IP configuration by hand in the NCA, giving you an accurate representation of your existing configuration within the NCA GUI and enabling you to begin working with your existing configuration right away. This import function supports configurations that use INCLUDE files and MVS system symbols.
How TCP/IP Profile Import Function WorksTCP/IP Profile import works in three major steps:
- Export a TCP/IP profile from z/OS Communications Server
- Read the exported configuration into the NCA
- Fix any ambiguity or errors that result from the import
Because of this method of operation, you can use a TCP/IP stack to export any TCP/IP profile, unless the profile contains MVS system symbols. If the profile contains MVS systems symbols, you must export it from a TCP/IP stack that is running on the same image where the profile runs, so that correct MVS system symbol values can be exported with the configuration.
The JSON file created by running the VARY TCPIP,,EXPORTPROFILE command will reside in the z/OS UNIX file system in directory /var/exportprof. The name of the generated file is provided as a console message when the export completes.
Figure 1 shows an example of execution of the VARY TCPIP,,EXPORTPROFILE command. The first red box shows the names of two include files that were found and read in. The second red box shows the name of the created export file, which can be found in z/OS UNIX directory /var/exportprof.
Figure 1: VARY TCPIP,,EXPORTPROFILE example
Reading the exported configuration into the NCA: To read the exported configuration into the NCA, navigate to the TCP/IP systems tree and select a TCP/IP stack that doesn’t yet have any configuration defined, then select Actions -> Manage Import of Formatted Configuration Data. If the stack already has TCP/IP configuration defined, it cannot import configuration. Selecting this option starts the TCP/IP profile import wizard. First, you specify the name and location of the export file created by z/OS Communications Server. The file can be on the local system or you can order NCA to retrieve it by using FTP, as show in Figure 2.
Figure 2: TCP/IP profile import wizard, screen 1
After you click Next, the export file is retrieved and read into the NCA. If there were INCLUDE files, they will be converted to reusable configuration objects. On the next panel, you are asked to select which file is the base configuration, and to name the reusable configuration objects for the remaining files, as shown in Figure 3.
If you later import another configuration that uses the same include files, the NCA will recognize that and give you an opportunity to either reuse the already-created reusable configuration or create a new one. Also note that the NCA only preserves one level of INCLUDE files. This means that if an INCLUDE file includes another INCLUDE file, that file and all of its INCLUDEs will be treated as a single reusable configuration object.
Figure 3: TCP/IP profile import wizard, screen 2
After you click Next on the second screen of the wizard, you see the import results.
Fixing ambiguity or errors that result from import: Because of the sophistication and variety of TCP/IP configuration, the NCA might not be able to completely resolve an import file. In addition, you might have errors in your TCP/IP configuration that you are ignoring that the NCA doesn’t ignore. You might import profiles in an order that doesn’t resolve all sysplex references at first. And finally, you might have symbol ambiguity to resolve.
When there are errors in the imported configuration, for example multiple IP interfaces with the same address or similar context errors that the syntax checker didn’t catch on export, the affected resources are marked incomplete with error messages in the NCA and you need to manually fix them. In the example in Figure 4, three interfaces were imported with the same IP address. You need to fix this manually by either deleting duplicate interfaces or changing their IP addresses to not be duplicates.
Figure 4: Example of imported duplicate interface errors
Another example of an error that may need fixing is symbol ambiguity. Because of the way the stack’s EXPORTPROFILE processing works, the NCA must reverse engineer MVS system symbols into your configuration. If multiple symbols have the same value, the NCA may not be able to resolve the ambiguity. In this case, the NCA marks the affected resources incomplete and inserts all possible symbol names into the field. You resolve the ambiguity by deleting the incorrect symbol representations and leaving the correct one. In the example shown in Figure 5, both have a value of “MVS220.”
Figure 5: Imported symbol ambiguity
The NCA couldn’t unambiguously tell which, if any, symbol belongs in this field so it provided you with both symbol possibilities plus a constant. You resolve the ambiguity by deleting the two incorrect representations, leaving the correct one in place.
IBM offers an online course on TCP/IP profile configuration with the NCA. After completing this course you will be able to use the NCA to to create and manage TCP/IP profiles, including import of existing profiles, dynamic reconfiguration of running stacks, and configuration for disaster recovery and planned outages. If you pass the final assessment of this course you will earn an IBM Open Badge of z/OS TCP/IP Configuration with Network Configuration Assistant. With IBM open badges, you can easily and quickly share verified proof of your achievements both within IBM and externally.
Course link: http://ibm.biz/NCATCPIPcourse
Estimated time: 3 hours and 30 minutes
Mike Fox is a senior software architect with IBM Enterprise Network Solutions.
Sponsored ContentAchieve Compliance Without Impacting Productivity
Post a Comment
Note: Comments are moderated and will not appear until approvedcomments powered by Disqus