Revision Information: This is a revised manual.
Operating Systems: OpenVMS Alpha Version 6.2, 7.0, 7.1 OpenVMS VAX Version 6.2, 7.0, 7.1
Software Version:
DIGITAL TCP/IP Services
for OpenVMS Version 4.2
Digital Equipment Corporation Maynard, Massachusetts
Digital Equipment Corporation makes no representations that the use of its products in the manner described in this publication will not infringe on existing or future patent rights, nor do the descriptions contained in this publication imply the granting of licenses to make, use, or sell equipment or software in accordance with the description.
Possession, use, or copying of the software described in this publication is authorized only pursuant to a valid written license from DIGITAL or an authorized sublicensor.
DIGITAL conducts its business in a manner that conserves the environment and protects the safety and health of its employees, customers, and the community.
© DIGITAL Equipment Corporation 1997. All rights reserved. The following are trademarks of DIGITAL Equipment Corporation: ACMS, DECdtm, DDCMP, DEC, DECnet, DECNIS, DECserver, DECsystem, DECwindows, DIGITAL, DNA, InfoServer, LAT, OpenVMS, PATHWORKS, POLYCENTER, VAX, VAXstation, VMS, VMScluster, and the DIGITAL logo.
The following are third-party trademarks:
HP and Hewlett-Packard are registered trademarks of Hewlett Packard Company.
IBM and OS/2 are registered trademarks of International Business Machines Corporation.
MS-DOS is a registered trademark of Microsoft Corporation.
OSF/1 is a registered trademark of Open Software Foundation, Inc.
PostScript is a registered trademark of Adobe Systems, Inc.
Sun, NFS, and PC-NFS are registered trademarks of Sun Microsystems, Inc.
UNIX is a registered trademark of UNIX System Laboratories, Inc., a wholly-owned subsidiary of Novell, Inc.
All other trademarks and registered trademarks are the property of their respective holders.
ZK6526
This document is available on CD-ROM.
This manual provides system and network managers with information needed for the day-to-day management of the DIGITAL TCP/IP Services for OpenVMS (UCX) software product. This manual is best used in conjunction with the DIGITAL TCP/IP Services for OpenVMS Management Command Reference manual.
See the DIGITAL TCP/IP Services for OpenVMS Installation and Configuration manual for information about installing, configuring, and starting this product.
This manual is for experienced OpenVMS and/or UNIX system managers and assumes a working knowledge of TCP/IP networking, TCP/IP terminology, and some familiarity with the DIGITAL TCP/IP Services for OpenVMS product.
If you are not familiar with the DIGITAL TCP/IP Services for OpenVMS product, please review the DIGITAL TCP/IP Services for OpenVMS Concepts and Planning Guide before using this manual to configure and manage UCX components.
If you are familiar with DIGITAL TCP/IP Services for OpenVMS software components, DIGITAL recommends spending a few minutes reading the "Reviewing Key Concepts" section of each chapter before modifying or working with individual software components.
This manual contains six parts as follows:
| Part 1 | Describes how to configure network interfaces, how to set up serial lines, and how to configure and manage routing. |
| Part 2 |
Describes how to set up and manage the following network services:
|
| Part 3 |
Describes how to configure network applications that let users send and
receive electronic mail from the internet; establish login sessions
with a remote host; and transfer files. Part 3 describes how to
configure these applications on the local host to provide the following
support to remote and local users:
|
| Part 4 | Describes how to configure, use, and manage the components that enable transparent network file sharing: NFS server, PC-NFS, and NFS client. |
| Part 5 | Describes how to configure and manage network printing services: LPD/LPR and TELNETSYM. |
| Part 6 |
Provides appendixes that:
|
This manual uses the following terminology:
For a complete list of acronyms used throughout this and other manuals in the DIGITAL TCP/IP Services for OpenVMS documentation set, see the DIGITAL TCP/IP Concepts and Planning guide.
All IP addresses in this book represent fictitious addresses. The following conventions apply to this book.
| Convention | Meaning |
|---|---|
| UPPERCASE TEXT | Indicates names of OpenVMS and UCX commands, options, utilities, files, directories, hosts, and users. |
| lowercase special type | Indicates UNIX system output or user input, commands, options, files, directories, utilities, hosts, and users. |
| italic type | Indicates a variable. |
| [Return] | Indicates that you press the Return key. |
| [Ctrl/] x | Indicates that you press the Control key while you press the key noted by x. |
| [ ] | In command format descriptions, indicates optional elements. The elements are separated by vertical bars (|). You can enter as many as you want. |
| { } | In command format descriptions, indicates you must enter at least one listed element. The elements are separated by bars (|). |
DIGITAL welcomes your comments on this manual or any of the DIGITAL TCP/IP Services for OpenVMS documents. Send us your comments through any of the following channels:
| Internet | openvmsdoc@zko.mts.dec.com |
| Fax | 603 884-0120, Attention: OSSG Documentation, ZKO3-4/U08 |
|
OSSG Documentation Group, ZKO3-4/U08
110 Spit Brook Rd. Nashua, NH 03062-2698 |
Use the following table to order additional documentation or information. If you need help deciding which documentation best meets your needs, call 800-DIGITAL (800-344-4825).
| Location | Call | Fax | Write |
|---|---|---|---|
| U.S.A. |
DECdirect
800-DIGITAL 800-344-4825 |
Fax: 800-234-2298 |
Digital Equipment Corporation
Mailstop: TAY2-2/11D 153 Taylor Street Littleton, MA 01460 |
| Puerto Rico | 787-781-0505 | Fax: 787-749-8300 | Local DIGITAL subsidiary |
| Canada |
DTN: 621-6005
800-DIGITAL |
Fax: 613-592-1946 |
Digital Equipment of Canada, Ltd.
Box 13000 Kanata, Ontario, Canada K2K2A6 Attn: CICC |
| International | --- | --- |
Local DIGITAL subsidiary or
approved distributor |
| Internal Orders |
DTN: 261-2010
603-791-2010 |
Fax: 800-741-6970 |
U.S. Software Supply Business
Digital Equipment Corporation 8 Cotton Road Nashua, NH 03063-1260 |
Part 1 provides the information you need to get started after installing and configuring DIGITAL TCP/IP Services for OpenVMS software.
Chapter 1 provides the following topics:
Chapter 2 describes how to set up network interfaces.
Chapter 3 describes how to set up serial lines.
Chapter 4 describes how to configure and manage network routing.
This chapter provides a brief review of information you need to get started with the DIGITAL TCP/IP Services for OpenVMS (UCX) software. Topics include:
This manual assumes you installed and configured DIGITAL TCP/IP Services for OpenVMS software with the UCX configuration procedure called UCX$CONFIG. This menu-driven procedure configures the software components you select or all of the UCX software components. The "out-of-the-box" defaults are designed to get your system up and running as an internet host with minimal effort.
UCX$CONFIG creates several database files described in Table 1-1
| Database | File Name |
|---|---|
| BOOTP Database | SYS$COMMON:[SYSEXE]UCX$BOOTP.DAT |
| Configuration Database | SYS$COMMON:[SYSEXE]UCX$CONFIGURATION.DAT |
| Export Database | SYS$COMMON:[SYSEXE]UCX$EXPORT.DAT |
| Hosts Database | SYS$COMMON:[SYSEXE]UCX$HOST.DAT |
| Networks Database | SYS$COMMON:[SYSEXE]UCX$NETWORK.DAT |
| Proxy Database | SYS$COMMON:[SYSEXE]UCX$PROXY.DAT |
| Routes Database | SYS$COMMON:[SYSEXE]UCX$ROUTE.DAT |
| Services Database | SYS$COMMON:[SYSEXE]UCX$SERVICE.DAT |
| Printcap Database (used by LPR/LPD) | SYS$SPECIFIC:[UCX_LPD]UCX$PRINTCAP.DAT |
UCX provides logical names to customize or modify component behavior. Logical names also point to directories, database files, and log files.
UCX$CONFIG (a logical name that represents the UCX configuration procedure) defines the following logical names for the UCX databases listed in Table 1-1.
See individual component chapters in this manual for information on how
specific components use logical names.
1.1.2 Modifying Your Configuration
After the initial configuration, you may want to reconfigure existing components or configure new ones; disable and re-enable components; add hosts; reconfigure routing; and so forth.
When making any configuration modifications, DIGITAL strongly recommends that you rerun the configuration procedure UCX$CONFIG¹.
In some instances, however, (for example, when configuring a BIND name server) UCX$CONFIG only partially configures a component. You may need to run additional setup programs or issue UCX management commands to complete the configuration and fine-tune your environment.
Component-specific chapters in this manual describe additional configuration tasks and explain how to configure and manage specific components. These tasks may include:
Throughout this manual, all commands are assumed to be UCX management commands. The few mentioned DCL commands are identified as such.
For a full description of the UCX management commands and a discussion
of how to use them, see the DIGITAL TCP/IP Services for OpenVMS Management Command Reference manual.
1.1.3 Saving Changes
The configuration procedure UCX$CONFIG saves configuration and initialization information in the file UCX$CONFIGURATION.DAT. You can modify the configuration database dynamically, or permanently, as follows:
In order to make changes take effect immediately and modify permanent settings, issue both the interactive SET and permanent SET CONFIGURATION commands.
The following commands permanently modify the configuration database:
DIGITAL strongly recommends you use UCX$CONFIG to start and stop UCX software. If you need to start and stop the software manually, use the following commands:
To start UCX:
$ @UCX$STARTUP
The startup procedure enables the configured services and initializes the configured network interfaces
To stop UCX:
$ UCX$SHUTDOWN
The shutdown procedure:
DIGITAL TCP/IP Services for OpenVMS software includes the PATHWORKS Internet Protocol (PWIP) driver and the PATHWORKS network ancillary control process (ACP).
The PWIP driver makes possible communication between OpenVMS systems, running both PATHWORKS server and UCX software, and personal computers running PATHWORKS client software. It also enables the DECnet-over-TCP/IP feature included with the DECnet-Plus for OpenVMS Version 6.0 and later software. For more information, see the DECnet-Plus for OpenVMS documentation.
To start the PWIP driver, rerun UCX$CONFIG or issue the following command:
$ @SYS$COMMON:[SYSMGR]UCX$PWIP_STARTUP.COM
To shut down the connection to PATHWORKS, type:
$ @SYS$COMMON:[SYSMGR]UCX$PWIP_SHUTDOWN.COM
You will need to set up accounts for local users, coordinate the establishment of corresponding accounts on remote systems, and create accounts for remote users who will be accessing server components on the local host.
When creating accounts for remote users, you can create one account for all remote users, an account for groups of remote users, or accounts for individual users. The strategy you use depends on your organization, system resources, and security needs.
Certain UCX components (for example, LPD/LPR, RMT/RCD, and NFS) act as servers for remote clients. You control access to your system and to these services by giving remote users proxy identities. A proxy identity simply maps a user account on one host to an account on another host. The entries you make and the information you provide with each let you specifically grant or deny access to your system.
The configuration procedure UCX$CONFIG creates a proxy database file called UCX$PROXY. You add proxies to this database with the ADD PROXY command. UCX allows two types of proxies as follows:
UCX> ADD PROXY user /HOST=host /REMOTE_USER=user
UCX> ADD PROXY STAFF /HOST=STAR /REMOTE_USER=*
UCX> ADD PROXY CHESTER /NFS=OUTGOING /UID=23 /GID=34 /HOST="orbit"
See the DIGITAL TCP/IP Services for OpenVMS Management Command Reference manual for a complete description of the ADD PROXY
command. For a more complete discussion about UNIX-style identities and
how the NFS server and client use the proxy database, see Part 4 in
this manual.
1.3 Configuring a TCP/IP Cluster
If your host is part of an OpenVMS Cluster, you can use a cluster alias to represent the entire cluster or selected host members. In such a case, the network sees the cluster as a single system with one name.
Incoming requests are switched among the cluster hosts at the end of each cluster time interval (specified with the SET COMMUNICATION command). The cluster name is not switched away from a host if there are any active TCP/IP connections to the cluster interface on that host.
A remote host can use the cluster alias to address the cluster as a single host or the host name of the cluster member to address a cluster member individually.
If more than one host in the cluster is running the NFS server, the
cluster can appear to an NFS client as a single host. This
configuration provides automatic failover.
1.3.1 Setting Up a TCP/IP Cluster
DIGITAL strongly recommends using the configuration procedure UCX$CONFIG to configure a TCP/IP cluster. If you cannot run UCX$CONFIG, configure a TCP/IP cluster by completing the following steps.
UCX> SET INTERFACE QE0 /CLUSTER=ALLOFUS - _UCX> /C_NETWORK=255.255.0.0 /C_BROADCAST=128.44.55.0
UCX> SET CONFIGURATION INTERFACE QE0 /CLUSTER=ALLOFUS - _UCX> /C_NETWORK=255.255.0.0 /C_BROADCAST=128.45.0.0
UCX> SET COMMUNICATION /CLUSTER_TIMER=30
UCX> SET COMMUNICATION /CLUSTER_TIMER=0
The auxiliary server is the UCX implementation of the UNIX internet daemon (inetd). In addition to standard inetd functions, the auxiliary server provides access control and event logging.
The auxiliary server listens continuously for incoming requests and acts as a master server for programs specified in its configuration file. The auxiliary server reduces the load on the system by invoking services only as they are needed.
In addition to listening for and responding to requests, the auxiliary
server provides access control and event logging.
1.4.1 How the Auxiliary Server Works
The auxiliary server listens for connections on the internet addresses of the services that its configuration file specifies. When a connection is found, it invokes the server daemon for the service requested. Once a server is finished, the auxiliary server continues to listen on the socket.
When it receives a request, the auxiliary server dynamically creates a network process, obtaining user account information from one or all of the following sources:
Once a process is created, the auxiliary server starts the requested service. All services except RLOGIN and TELNET must have access to their default device and directories and to the command procedures within them.
You can provide additional access control by using your own customized
security driver (see Appendix D).
1.4.2 Rejecting Client Requests
The auxiliary server rejects client requests for the following reasons:
The post-installation configuration procedure, UCX$CONFIG, creates an entry in the services database for each service you configure. If you need to modify your initial configuration, simply rerun UCX$CONFIG or use individual UCX commands.
The configuration file UCX$SERVICE includes information about the service name, the socket and protocol type associated with the service, the user name under which the service should run, and any arguments to be passed to the service program.
Before you manually activate a service, configure the auxiliary server as follows:
UCX> SET SERVICE service /PROCESS_NAME=process
Note
For TELNET and RLOGIN, the process name is set by either the system or users.
UCX> SET COMMUNICATION /SERVICES=n
UCX> SET CONFIGURATION COMMUNICATION /SERVICES
$ SET PROTECTION=(W:RE) SYS$MANAGER:SYSLOGIN.COM
The services you configure are started during the UCX startup procedure. Afterwards, to initialize (enable) a service, issue:
UCX> ENABLE SERVICE UCX> SET CONFIGURATION ENABLE SERVICE