Use Subsystems With Many Devices

For those of you with larger environments where you may have hundreds to thousands of users on a single partition, you’re probably aware of the old recommendation to spread the allocation of those devices across multiple subsystems by using workstation entries or communications device entries. The IBM-documented recommendation was no more than 250-300 devices per subsystem. The communications-device issue has generally resolved itself since fewer shops are using SNA today, and TCP/IP communications support doesn’t use communications devices.

(more…)

Secure my Telnet Remote Terminal Session

IBM i has had the capability to utilize Secure Sockets Layer (SSL) and Transport Security Layer (TLS) to secure the Telnet server for several releases. This feature was only for the server, until last year. Now instead of needing third-party Telnet clients to connect to your IBM i over TLS/SSL, you can use the native Telnet client. This is a necessary enhancement for customers who need to completely disable unsecure Telnet terminal sessions on port 23 on their IBM i servers. Starting with IBM i 5.4, it’s possible to use SSL with the Telnet client (TELNET or STRTCPTELN CL command) from IBM i to any SSL Telnet server.

(more…)