Starting Telnet control - step by step

Step 1

Call maintenance of system values via option 2 in CHGPCS. On page 4, change field TELNET-control from 1 = no Control to 2 = Control.

Additionally, the kind of protocol creation can be specified. Output can be blocked or FEOD format. If 1 has been selected for logging, records for signon and signoff will be written. 0 no records will be written. Value 2 will log rejected accesses only.

All accesses should be written into protocol file.

 back to top

In CHGPCS, call the TELNET-menu via option 20 and from there TELNET maintenance via option 1. The field for access control has to be set to 1 in record *.*.*.*

If the record does not exist, it has to be created. This record is managing the default access as long as no user IP address records are being stored.

 back to top

Step 2

Activate TELNET control via PCSNETA, by using option 1 = activate for TELNET.

After restarting TELNET controlling will be active. Starting with OS/400 V4R4 and OS/400 V4R5, use of END/STRTCPSVR *TELNET will no longer be sufficient, as QTVDEVICE-jobs also have to be ended. The provided menu (F9/F10) should be used instead.

This job can only be performed via twinax device, or any other sna device as all TELNET jobs have to be ended.

IPL or TCP/IP restart provides the same results.

Starting with V5R1, TELNET exit programs become active immediately without restart.

 back to top

Step 3

TELNET-exit programs now are active. Either all accesses will be accepted or logged. At the beginning, accesses should be logged. From this moment system value QRMTSIGN *FRCSIGNON is overwritten by the exit program. In record *.*.*.*, field Auto signon allowed? has been adjusted automatically to system
value during installation.

 back to top

Step 4

The recorded log entries can now be converted into IP records.

 back to top

Call option 08 and submit the job to batch via F02. Currently, automatic conversion is not possible.

 back to top

Step 5

These records can be modified to individual needs.

Further controlling can now be specified in the IP address record:

Name assignment
Fixed names
Generic names

Controlling of active sessions

Printer naming control

Weekly calender

Auto signon control

 back to top