Change IP Address

From MidrangeWiki
Revision as of 08:33, 2 June 2017 by Rob@dekko.com (talk | contribs) (AIX Lpar)
Jump to: navigation, search

Changing IP Addresses

Sometimes one has to change the IP Address on an IBM i. Could be a relocation or whatever. There are several places to remember to check.

Recording existing values

First, record your existing values. Maybe off to the right, write down the new address(es).

CFGTCP 1. Work with TCP/IP interfaces

Internet Subnet Line Line

Address Mask Description Type


2. Work with TCP/IP routes. This is the router or gateway this machine will go through to get to the rest of your network. Off to the right record what the new router entries will be.

Route Subnet Next Preferred

Destination Mask Hop Interface


12. Change TCP/IP domain information. If you are relocating, your network administrator may suggest replacing one or more of these with a more local DNS. Write the new address off to the right. Domain name server(s) internet address(es):


Sometimes one would put the interfaces recorded above into the local host table. Record that:


10. Work with TCP/IP host table entries Internet Host Address Name


If you are running DNS on your i (normally configured using iNav) then you will need to go to iNav, Network, Servers, DNS, Open up NS, right click on DNS Server - NS and select Properties. Then open up the Options tab. On interfaces, if you have an entry there, check it out. When done, File, Save Configuration, then Server, Update.


Now you need to check your http configuration. Point your browser to http://youriSeriesName:2001 When that pops up sign on as someone with QSECOFR authority. Select Web Administration. Select Manage, All Servers, All HTTP Servers. Any that are bound to particular old IP addresses record those here.

Check for SMTP bindings. You can either bind to "select all addresses" or bind to a specific address or addresses. Although there are commands like ADDSMTPLE and RMVSMTPLE, I've yet to find any commands like DSPSMTPLE or WRKSMTPLE. Therefore I recommend using iNav. Network, Servers, TCP/IP, right click on SMTP and select Properties. Check the Bindings tab.

Domino Shop?

WRKDOMSVR 13=Edit NOTES.INI by each. Search the notes.ini file for TCPIP_TcpIpAddress. Record the address found there below: Domino server IP Address


Also have your Domino administrator check Server documents for buried IP addresses.

[Sametime] (aka IBM Collaboration Solutions) Shop?

The WAS based Proxy server has a way of binding to a specific address as per Sametime Proxy server is installed on a system with multiple active IP addresses
WRKLNK '/qibm/UserData/WebSphere/AppServer/v7/SametimeWAS/profiles/STPDMgrProfile/config/cells/ProxyCell_Name/nodes/ProxyNode_Name/servers/STProxyServer/*' replacing ProxyCell_Name and ProxyNode_Name with the appropriate values.
Edit the stproxyconfig.xml file.
In the <host> section look for a localip line like
<localip>192.0.2.0</localip>
Record that address.

Time to change

Now you are done recording. Start the change. Coordinate with your network administrator, of course. They will need to change routers, DNS entries, etc.

http://youriSeriesName:2001. Sign on as someone with SECOFR authority. Select Web Administration. Select Manage, All Servers, All HTTP Servers. Stop any that need changing. Hopefully you did not bind 2001 to any particular address. Change those that need changing. An alternative to using the above would be to do a WRKLNK '/www/*', drill down into each directory, drill down into the conf directory below that and edit the httpd.conf file and change the Listen line.

Domino Shop?

WRKDOMSVR
6=End server. Repeat for all present.
9=Work server jobs
Wait until all jobs, indented underneath the top subsystem name are ended. Repeat for all Domino servers.
13=Edit NOTES.INI. Search for TCPIP_Tcp_IpAddress. Replace with new address.
Do not start them yet.

Sametime shop?
Your sametime.ini may have this line in it:
VPS_TRUSTED_IPS=
If so, you may have to change some of those addresses.

ENDHOSTSVR *ALL

ENDTCP

CFGTCP

See the above information you previously recorded. Many of these you may have to delete and readd as changing will certain fields will not be an option.


Fix your Management Central server by CALL QSYS/QYPSCONFIG PARM('QYPS_HOSTNAME' 'aa.xx.yy.zz') where 'aa...' is your new IP address.


Check any other iSeries lpars or servers for host table entries that refer to this server.

BRMS - Backup and Recovery Media Services Shop?

If you use the networking option of BRMS (Backup and Recovery Media Services) they may start a bare minimum of IP when you are in a restricted state for media management. Run the following:
CALL QBRM/Q1AOLD PARM(‘TCPIPIFC’ ‘*REMOVE’ ‘*ALL’)
CALL QBRM/Q1AOLD PARM(‘TCPIPIFC’ ‘*ADD’ 'aa.xx.yy.zz') where 'aa...' is your new IP address.


Mimix Shop?

MIMIX
11. Configuration menu
2. Work with transfer definitions WRKTFRDFN
5=Display
System 1 host name or address:
System 2 host name or address:
Later, after you bring stuff up, try
VFYCMNLNK <F4>

SMTP Do you "bind specific"?

You can check this with iNav, Network, Servers, TCP/IP, right click on SMTP and select properties. However this is how we changed ours:
RMVSMTPLE TYPE(*CLTBIND) INTNETADR('10.10.1.211')
RMVSMTPLE TYPE(*SVRBIND) INTNETADR('10.10.1.211')
ADDSMTPLE TYPE(*CLTBIND) INTNETADR('10.17.6.33')
ADDSMTPLE TYPE(*SVRBIND) INTNETADR('10.17.6.33')

Mail Forwarding

Prompt on CHGSMTPA and see if you have an entry for FWDHUBSVR or Forwarding mailhub server
If so, is it still appropriate?

HTTPAdmin Do you "bind specific"?

EDTF '/qibm/userdata/httpa/admin/conf/admin-cust.conf'
Listen 10.17.6.33:2001
WRKLNK '/www/*'
For each entry drill into the conf directory and edit the httpd.conf file.
General setup directives
Listen 10.17.6.33:83

LDAP aka IBM Tivoli Directory Server Do you "bind specific"?

iNav, Network, Servers, TCPIP, Right click on IBM Tivoli Directory Server select Properties, Network, IP Addresses

SSH Do you "bind specific"?

WRKLNK '/QOpenSys/QIBM/UserData/SC1/OpenSSH' Under this you may notice multiple directories. For example
openssh-3.5p1
openssh-3.8.1p1
openssh-4.7p1
Each of them have an etc subdirectory. In that etc subdirectory is a file called sshd_config. That file will have a line with ListenAddress. If it is preceeded by a pound sign then it has been commented out. A sample might be
EDTF '/qibm/userdata/httpa/admin/conf/admin-cust.conf'
ListenAddress 208.87.182.2

Infor LX ERP LX System Generation

The SYS820D screen of ERP LX System Generation lists a "Mail Host". You can use a name or an IP address. Check this out.

Done Changing, time to start stuff

STRTCP
STRHOSTSVR *ALL

Test communications from/to this lpar by using the PING command. Your network administrator may block pings. However people don't often do that for internal use - just external users.

Domino Shop?

WRKDOMSVR 1=Start

Test Domino from your Notes client by using File, Database, Open and using the server name(s) that you just started. You can type in the server name or select it from the list. You may have to select "Other" to see this server if you don't often access this particular Domino server.


IBM Documentation

Changing the TCP/IP Address of the IBM System i System
http://www-01.ibm.com/support/docview.wss?uid=nas8N1017311

AIX Lpar

Changing it's IP address

smitty chinet

 +--------------------------------------------------------------------------+
 |                       Available Network Interfaces                       |
 |                                                                          |
 | Move cursor to desired item and press Enter.                             |
 |                                                                          |
 |   en0      Standard Ethernet Network Interface                           |
 |   et0      IEEE 802.3 Ethernet Network Interface                         |


...

 Network Interface Name                              en0
 INTERNET ADDRESS (dotted decimal)                  [10.10.6.90]
 Network MASK (hexadecimal or dotted decimal)       [255.255.254.0]

...

Host Table Entries

cat /etc/hosts
To edit this file is beyond the scope of this.

Using vi to edit the file

vi /etc/hosts
Enter until you get to the desired line
:w      Will write the file
:q!     Will quit without writing the file
:wq!    Will write and then quit.
The rest will require you learn how to use vi.

Common clean up tasks

Clearing a Specific ARP Cache Entry

https://www-304.ibm.com/support/docview.wss?uid=nas8N1015699

Clearing routes

Perhaps you just replaced your routers, upgraded them, or are trying to force through an alternative connection but it seems to continue to use your old route.
This problem was resolved by using the Change TCP/IP Attributes (CHGTCPA) command to set the IP reassembly time-out (IPRSBTIMO) parameter to 90. This will cause IBM i to delete aged ICMP redirect routes and allow IP packets to pass through the correct interface.
There is some debate as to whether or not any change to this parameter is effective or if 90 is a hidden reserved value to reset it. Either way, multiple people have reported this solution as effective.

Routes: See also

IT Jungle: Admin Alert: Setting Up IBM i TCP/IP Host Routes
https://www.itjungle.com/2014/03/05/fhg030514-story03/

Flushing DNS Cache

Perhaps you've just changed a DNS entry on some other DNS server and your IBM i is not using it. When you run PING RMTSYS(MYLOCATION) you notice it is using the old IP address.
You've verified that it's not in a host table entry by CFGTCP, 10. Work with TCP/IP host table entries.
The known technique for flushing DNS cache on IBM i is to prompt the CHGTCPDMN command and to press enter on it.
If that continues to use the old IP address then check the DNS entries listed in the CHGTCPDMN command. Perhaps you've changed it on one and it hasn't flushed through to the other. There are a couple of ways to check that. If your IBM i has "57##SS1 31 Domain Name System" loaded on it you can try
NSLOOKUP HOSTNAME('MyEndpoint') DMNNAMSVR('10.10.1.1') in which MyEndpoint is who you are trying to ping and DMNNAMSVR is one of the entries in CHGTCPDMN. You can also try it from Windows DOS prompt with
c:\nslookup MyEndpoint 10.10.1.1
In a location with multiple DNS servers it may take some time for the change to flush through.