Modifying Firewall Settings for IPv6 Telnet Logons

To modify Firewall settings for Telnet logins from an IPv6 address range, enter 1 in the Opt field for that address range on the Work with Telnet Logon Security IPv6 screen (STRFW  > 12 > 1) as shown in Setting Additional Controls for IPv6 Telnet Logons.

The Modify TELNET Logon Security Setting IPv6 screen appears:

​                  ​ Modify TELNET Logon Security setting IPv6​                                                                                                      ​ Type information, press Enter.                                                ​  ​ Selection criteria:​                                                               ​ IPv6 Address  . . . . .​ ​ 55:66:77:88::                                 ​         ​ Address prefix length .​ ​ 128​             ​ 1-128​                                 ​ Incoming terminal name ​ ​ *ALL      ​      ​ Generic*, *ALL, *BLANKS, F4=List​      ​ Minimum pwd validation ​ ​ 0​               ​ 0=No password, 1=With password​      ​ Process:​                                   ​ 2=Encrypted pwd, 3=Connection SSL ​    ​ Time group  . . . . . .​ ​           ​      ​ Name, F4 for list             ​        ​ Logon . . . . . . . . .​ ​ 3​               ​ 1=*ACCEPT, 2=*REJECT, 3=*AUTOSIGNON ​ For Logon= 1/3/4/5:​                        ​ 4=*FRCSIGNON, 5=*ACCEPT FOR SAME IP ​  ​ Assign terminal name  .​ ​ *SAME     ​      ​ Generic*, *SAME, *SYSTEM, F4=List​     ​ Set new Code page . . .​ ​      ​                                                          ​ Character set .​ ​      ​                                                          ​ Keyboard layout​ ​    ​                                                  ​ For *AUTOSIGNON Logon:​                                                            ​ Alt User  . . . . . . .​ ​ PSGTEL    ​      ​ Name, *SAME, F4 for list​              ​ Alt Current library . .​ ​           ​      ​ Name, *SAME             ​              ​ Alt Program to call . .​ ​           ​      ​ Name, *SAME             ​              ​ Alt Initial Menu  . . .​ ​           ​      ​ Name, *SAME             ​            ​                                                                                 ​ F3=Exit​  ​ F4=Prompt​  ​ F12=Cancel​                                                ​                                                                                 ​

Enter or change values for the following fields:

IPv6 Address

The IPv6 address for the range, or *ALL, representing all addresses that are not otherwise listed.

Address prefix length

The prefix length for the range of addresses.

Incoming terminal name

The terminal sending the request. This can be a single name, a generic* name, *ALL, or *BLANKS. For a list of known terminal names, press the F4 key.

Minimum pwd validation

The minimum password validation level needed for the logon. The possibilities include:

• 0: No password
• 1: With password
• 2: Encrypted password
• 3: SSL connection

 

Time group

If set, Telnet connections from this IPv6 range can only be made during the times defined for this time group (as shown in Defining Time Groups).

Logon

How Firewall responds to the logon request. The possibilities include:

• 1: *ACCEPT: Accept logon request
• 2: *REJECT: Reject logon request
• 3: *AUTOSIGNON: Sign on automatically if permitted by system configuration
• 4: *FRCSIGNON: Force the user to sign on even if the system is configured to accept an automatic signon.
• 5: *ACCEPTSIP: Accept logon request if it is from the same IP as your system.

Assign terminal name

The name assigned to the terminal if the logon is accepted. This can be an exact name, a generic* name, *SAME, or *SYSTEM.

Set new

Code page

Character set

Keyboard layout

Set these fields as needed, as described in IBM documentation at https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_71/rzaiw/rzaiwdevdesc.htm

After entering information in these fields, press the Enter key.

If you have set the Logon field to 3 (*AUTOSIGNON), set the fields in the For *AUTOSIGNON Logon section to appropriate values, as indicated by OS/400 documentation.