Prepare for your network environmentThis information assists you in identifying and complying with the minimumnetwork configuration required to set up an Operations Console local console on anetwork (LAN) configuration.Important: You need to install the LAN card for Operations Console according toyour iSeries model. To do this, see Meet Operations Console hardwarerequirements. If your server is new and you ordered a local console on a networkconfiguration, the card should already be configured with the server. The LANcard should be a dedicated LAN adapter for service tools.Network securityIBM recommends treating the console over a LAN connection with the samephysical security considerations and controls as a local console directly attached tothe server or a twinaxial console. For instance, consider configuring a local consoleon a network in a network separate from the main network (or the companyintranet) and strictly control access to the machine acting as the console.BOOTstrap ProtocolAn Operations Console local console on a network uses the BOOTstrap Protocol(BOOTP) to configure the iSeries service IP communications stack. The IP stackconfiguration plus iSeries serial number is requested in the Operations Consoleconfiguration wizard. The iSeries broadcasts a BOOTP request. The OperationsConsole PC replies with the information submitted during the configurationwizard. The iSeries then stores and uses the configuration information for theservice IP communications stack.Notes:1. The Operations Console PC must be placed on a network that is accessible bythe iSeries. This can be the same physical network or a network that permitsbroadcast packets to flow. This is a one-time setup requirement; normal consoleoperation does not require this. It is recommended that this setup occur on thesame physical network.2. The BOOTP request carries the iSeries serial number. The iSeries serial numberis used to assign the IP configuration information. If you are having problemsconfiguring the service IP communications stack, check that the OperationsConsole PC is on the same physical network and the iSeries serial number iscorrect in the configuration.3. Operations Console local console on a network uses ports 2323 and 3001. Touse Operations Console in a different physical network the router and firewallmust allow IP traffic on these ports.4. The success of BOOTP is dependent on the network hardware used to connectthe iSeries and the PC. In some cases you may need an alternate console deviceto configure the connection in DST. To use BOOTP the network hardware usedmust be capable of AutoNegotiation of Speed and Duplex if using the 2838Ethernet Adapter for the console connection.Secure your Operations Console configurationOperations Console security consists of service device authentication, userauthentication, data privacy, and data integrity. Operations Console local consoledirectly attached to the server has implicit device authentication, data privacy, anddata integrity due to its point-to-point connection. User authentication security isrequired to sign on to the console display.Chapter 3. Plan for Operations Console 15