Authorizing Virtual Machines for IUCV

Any virtual machine requiring Entire Net-Work IUCV services must be authorized to use IUCV. This is accomplished by coding the IUCV statement in the CP directory to authorize either:

  • the virtual machines where Entire Net-Work Communicators are installed (global); or

  • specific connections (individual).


Coding the IUCV Statement

For both types of authorization, the PRIORITY parameter is optional. If specified, PRIORITY allows the Entire Net-Work IUCV line driver to issue priority messages when establishing sessions. Priority messages are not used for normal message traffic.

The MSGLIMIT parameter of the IUCV statement should not be coded. If required, it can be specified as a parameter on the Entire Net-Work LINK statement for the IUCV line driver.

For Global Authorization

Global authorization has the advantage that no CP directory modifications are required for existing entries when new virtual machines are added to the network.

Global authorization is defined in the CP directory for a virtual machine as follows:

IUCV ALLOW (PRIORITY)
IUCV ANY (PRIORITY)

The ALLOW option indicates that communication paths can be established from any other virtual machine to this virtual machine. No specific authorization is required for the virtual machine initiating the connection.

The ANY option indicates that this virtual machine can establish communication paths to any other virtual machine.

To Authorize Specific Connections

You may individually authorize each virtual machine using IUCV communications by coding an IUCV statement for each connect. For example:

IUCV vmid1 (PRIORITY)
IUCV vmid2 (PRIORITY)