Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network
-
Upload
rene-winkelmeyer -
Category
Technology
-
view
2.187 -
download
0
description
Transcript of Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network
![Page 1: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/1.jpg)
© 2013 IBM Corporation
SHOW101Making IBM Traveler High Available – Part 2:Extending And Securing The NetworkRené Winkelmeyer | midpoints GmbHDetlev Pöttgen | midpoints GmbH
![Page 2: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/2.jpg)
2 © 2013 IBM Corporation
About us
René Winkelmeyer
Senior Consultant at midpoints GmbHIBM Advanced Business Partner from Germanyhttp://www.midpoints.de
Specialized in RCP development, XPagesdevelopment and building mobile infrastructures
IBM Design Partner for Notes/Domino Next and Mobile
OpenNTF Contributor─ File Navigator (http://filenavigator.openntf.org)
─ Generic NSF View Widget for IBM Connections
![Page 3: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/3.jpg)
3 © 2013 IBM Corporation
About us
Detlev Pöttgen
Co-Founder and CTO of midpoints GmbHIBM Advanced Business Partner from Germanyhttp://www.midpoints.de
Specialized in Domino & IMC Administration andbuilding mobile infrastructures
IBM Design Partner for Notes/Domino Next and Mobile
![Page 4: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/4.jpg)
4 © 2013 IBM Corporation
How to get in touch with us?
René─ Mail: [email protected] / [email protected]
─ Blog: http://www.midpoints.de / http://blog.winkelmeyer.com
─ Skype: muenzpraeger
─ Twitter: muenzpraeger
─ LinkedIn: http://de.linkedin.com/in/muenzpraeger
─ XING: https://www.xing.com/profile/Rene_Winkelmeyer
─ Slideshare: http://www.slideshare.net/muenzpraeger
─ G+: http://www.winkelmeyer.com/+
Detlev─ Mail: [email protected]
─ Blog: http://www.netzgoetter.de
─ Twitter: netzgoetter
─ LinkedIn: http://de.linkedin.com/in/netzgoetter
─ XING: https://www.xing.com/profile/Detlev_Poettgen
![Page 5: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/5.jpg)
5 © 2013 IBM Corporation
Legal first!
This slide presentation may contain the following copyrighted, trademarked and/or restricted terms:
─ IBM® DB2®, IBM® Domino®, IBM® Notes®, IBM® WebSphere®, Microsoft® Windows®, Linux®
![Page 6: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/6.jpg)
6 © 2013 IBM Corporation
Agenda High Availability in the context of IBM Notes Traveler
Using IBM WebSphere Edge Components as Load Balancer
Using IBM Mobile Connect as Reverse Proxy
Additional Notes
Q & A
![Page 7: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/7.jpg)
7 © 2013 IBM Corporation
Agenda High Availability in the context of IBM Notes Traveler
Using IBM WebSphere Edge Components as Load Balancer
Using IBM Mobile Connect as Reverse Proxy
Additional Notes
Q & A
![Page 8: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/8.jpg)
8 © 2013 IBM Corporation
High Availability in the context of IBM Notes Traveler
![Page 9: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/9.jpg)
9 © 2013 IBM Corporation
High Availability in the context of IBM Notes Traveler
See SHOW100 for this.
![Page 10: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/10.jpg)
10 © 2013 IBM Corporation
Agenda High Availability in the context of IBM Notes Traveler
Using IBM WebSphere Edge Components as Load Balancer
Using IBM Mobile Connect as Reverse Proxy
Additional Notes
Q & A
![Page 11: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/11.jpg)
11 © 2013 IBM Corporation
Agenda – Using WebSphere Edge Components What is WebSphere Edge Components?
Preparing the environment – Operating System, DNS, Software
Installation of IBM Installation Manager
Installation of IBM WebSphere Edge Components
Configuration of IBM WebSphere Edge Components Load Balancing
Configuration of the backend IBM Notes Traveler servers
![Page 12: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/12.jpg)
12 © 2013 IBM Corporation
What is WebSphere Edge Components?
IBM WebSphere Edge Components is a set of networking tools. The set contains─ Network Dispatcher (aka Load Balancer), optional with Content Distribution
─ Caching Proxy
In this session we'll use the Load Balancing component.
![Page 13: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/13.jpg)
13 © 2013 IBM Corporation
What is WebSphere Edge Components?
![Page 14: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/14.jpg)
14 © 2013 IBM Corporation
Agenda – Using WebSphere Edge Components What is WebSphere Edge Components?
Preparing the environment – Operating System, DNS, Software
Installation of IBM Installation Manager
Installation of IBM WebSphere Edge Components
Configuration of IBM WebSphere Edge Components Load Balancing
Configuration of the backend IBM Notes Traveler servers
![Page 15: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/15.jpg)
15 © 2013 IBM Corporation
Preparing the environment – Operating System
The demo system runs a newly fresh installed CentOS 6.3 64bit.
The installation and administration is done in graphical mode. A console mode is also available, but we are preferring a GUI for demoing purposes.
![Page 16: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/16.jpg)
16 © 2013 IBM Corporation
Preparing the environment – DNS
The IP-based communication between all components is based on DNS (Domain Name System).
When talking about DNS I assume that you're running a real DNS server in your company.
For the demo system all used DNS names are mapped via the Linux hosts files.─ Edge: mobile-edge.curi0.us / edge1.curi0.us / edge2.curi0.us
─ Traveler: traveler1.curi0.us / traveler2.curi0.us
![Page 17: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/17.jpg)
17 © 2013 IBM Corporation
Preparing the environment – DNS (locals hosts editing)
Open your favorite shell and open the the local hosts file using a text editor like “vi” or “vim” (depends on how hardcore you're)
![Page 18: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/18.jpg)
18 © 2013 IBM Corporation
Preparing the environment – DNS (locals hosts editing)
Change the settings as needed for your environment. Use “i” as key to start inserting text.
Save the modifications using the key combination “ESC” and then “wq!” (== save and close)
Check the modifications using ping
![Page 19: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/19.jpg)
19 © 2013 IBM Corporation
Preparing the environment – Software
For the installation of the IBM WebSphere Edge Components you have to download the appropriate package from the IBM Passport Advantage website.
The following packages/part numbers are available for the WebSphere Network Deployment of the Edge Components Load Balancer:
─ CI3HKML (Part 1/3)
─ CI3HLML (Part 2/3)
─ CI3HMML (Part 3/3)
Save the package to /tmp/downloads/ibm/was_edge
![Page 20: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/20.jpg)
20 © 2013 IBM Corporation
Preparing the environment – Software
In addition you'll need the IBM Installation Manager (former Rational Installation Manager) to install the WebSphere Edge Components.
As we're installing V8.5 of the Edge Components you'll need to use the most current IBM Installation Manager 1.6.1.
─ Download can be found here:http://www-947.ibm.com/support/entry/portal/Recommended_fix/Software/Rational/IBM_Installation_Manager
![Page 21: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/21.jpg)
21 © 2013 IBM Corporation
Preparing the environment –Download of IBM Installation Manager
Following the previous shown link you'll be directed to a list of available download links. Click on the link for the “Installation Manager and Packaging Utility download links”
![Page 22: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/22.jpg)
22 © 2013 IBM Corporation
Preparing the environment –Download of IBM Installation Manager
On the newly shown website you'll a list of available versions. Click the link for the “Installation Manager” in the most current (in our case 1.6.1) version.
![Page 23: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/23.jpg)
23 © 2013 IBM Corporation
Preparing the environment –Download of IBM Installation Manager
Now select the link (FC) for your operating system.
![Page 24: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/24.jpg)
24 © 2013 IBM Corporation
Preparing the environment –Download of IBM Installation Manager
You'll be redirected to the Fix Central. Select the package and click “Continue” to proceed.
![Page 25: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/25.jpg)
25 © 2013 IBM Corporation
Preparing the environment –Download of IBM Installation Manager
Now you can download the installation package. Save it in /tmp/downloads/ibm/installation_manager.
![Page 26: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/26.jpg)
26 © 2013 IBM Corporation
Agenda – Using WebSphere Edge Components What is WebSphere Edge Components?
Preparing the environment – Operating System, DNS, Software
Installation of IBM Installation Manager
Installation of IBM WebSphere Edge Components
Configuration of IBM WebSphere Edge Components Load Balancing
Configuration of the backend IBM Notes Traveler servers
![Page 27: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/27.jpg)
27 © 2013 IBM Corporation
Installation of IBM Installation Manager
Login as user “root” and start the File Browser (Nautilus in our case)
![Page 28: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/28.jpg)
28 © 2013 IBM Corporation
Installation of IBM Installation Manager
Navigate to the directory /tmp/downloads/ibm/installation_manager and start the installation with a double click on the install executable
![Page 29: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/29.jpg)
29 © 2013 IBM Corporation
Installation of IBM Installation Manager
Proceed with “Next”
![Page 30: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/30.jpg)
30 © 2013 IBM Corporation
Installation of IBM Installation Manager
Accept the license terms and proceed with “Next”.
![Page 31: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/31.jpg)
31 © 2013 IBM Corporation
Installation of IBM Installation Manager
Leave the installation directory as defined and proceed with “Next”.
![Page 32: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/32.jpg)
32 © 2013 IBM Corporation
Installation of IBM Installation Manager
Proceed with “Install” to start the installation of the IBM Installation Manager.
![Page 33: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/33.jpg)
33 © 2013 IBM Corporation
Installation of IBM Installation Manager
Finish the installation with “Restart Installation Manager”.
![Page 34: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/34.jpg)
34 © 2013 IBM Corporation
Agenda – Using WebSphere Edge Components What is WebSphere Edge Components?
Preparing the environment – Operating System, DNS, Software
Installation of IBM Installation Manager
Installation of IBM WebSphere Edge Components
Configuration of IBM WebSphere Edge Components Load Balancing
![Page 35: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/35.jpg)
35 © 2013 IBM Corporation
Installation of WebSphere Edge Components
The IBM Installation Manager allows to install, update or remove IBM products. As we're installing a new product select “Install”.
![Page 36: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/36.jpg)
36 © 2013 IBM Corporation
Installation of WebSphere Edge Components
The IBM Installation Manager can install software from varying repositories:─ Local files
─ HTTP site
─ Passport Advantage
As we don't want to rely on an internet connection we'll use a local file repository. The next slides are showing how to setup a new one.
![Page 37: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/37.jpg)
37 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Selecte the “Repositories” link.
![Page 38: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/38.jpg)
38 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Now select “Repositories” in the left menu and then “Add Repository...” on the right side.
![Page 39: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/39.jpg)
39 © 2013 IBM Corporation
Installation of WebSphere Edge Components
This will show an empty file dialog. Select “Browse” to open the file manager.
![Page 40: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/40.jpg)
40 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Navigate to the directory /tmp/downloads/ibm/was_edge/disk1. Select the file “diskTag.inf” and confirm the selection with “OK”.
![Page 41: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/41.jpg)
41 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Confirm the selection with “OK”.
![Page 42: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/42.jpg)
42 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Press “Test Connections” to verify the successful setup of the repository.
![Page 43: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/43.jpg)
43 © 2013 IBM Corporation
Installation of WebSphere Edge Components
You'll see this dialog if all repositories have been verified. Close the dialog with “OK”.
![Page 44: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/44.jpg)
44 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Close the preferences with “OK”.
![Page 45: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/45.jpg)
45 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Closing the preferences will automatically launch the installation/selection dialog for the available software.
![Page 46: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/46.jpg)
46 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Proceed with “Next”.
![Page 47: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/47.jpg)
47 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Accept the license terms and proceed with “Next”.
![Page 48: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/48.jpg)
48 © 2013 IBM Corporation
Installation of WebSphere Edge Components
As it's a new installation of the IBM Installation Manager some shared resources need to be installed. Leave the directory settings as they are and proceed with “Next”.
![Page 49: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/49.jpg)
49 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Proceed with “Next”.
![Page 50: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/50.jpg)
50 © 2013 IBM Corporation
Installation of WebSphere Edge Components
If needed you can select more languages. Proceed with “Next”.
![Page 51: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/51.jpg)
51 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Leave the predefined selection (no Metric Server) and proceed with “Next”.
![Page 52: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/52.jpg)
52 © 2013 IBM Corporation
Installation of WebSphere Edge Components
Start the installation with a click on “Install”.
![Page 53: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/53.jpg)
53 © 2013 IBM Corporation
Installation of WebSphere Edge Components
We want to start directly, so click on finish (that'll start the Load Balancer Administration Console).
![Page 54: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/54.jpg)
54 © 2013 IBM Corporation
Agenda – Using WebSphere Edge Components What is WebSphere Edge Components?
Preparing the environment – Operating System, DNS, Software
Installation of IBM Installation Manager
Installation of IBM WebSphere Edge Components
Configuration of IBM WebSphere Edge Components Load Balancing
Configuration of the backend IBM Notes Traveler servers
![Page 55: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/55.jpg)
55 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
The automatic startup lauches the Load Balancer configuration GUI.
![Page 56: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/56.jpg)
56 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Select “Dispatcher” in the left menu tree.
![Page 57: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/57.jpg)
57 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Make a right click on “Dispatcher” and select “Start Configuration Wizard”. That'll start the configuration dialog.
![Page 58: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/58.jpg)
58 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Proceed with “Next”.
![Page 59: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/59.jpg)
59 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Proceed with “Next”.
![Page 60: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/60.jpg)
60 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check the preconditions – the setup won't work if you don't respect them.
![Page 61: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/61.jpg)
61 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
As we're on Linux => start the server. You won't get a direct feedback!
![Page 62: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/62.jpg)
62 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check if the local hostname is correct and proceed with a click on “Update Configuration & Continue”.
![Page 63: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/63.jpg)
63 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Add the Cluster name. It needs to be equal to the URL which the clients are using, in our case “mobile-edge.curi0.us”. Proceed with “Update Configuration & Continue”.
![Page 64: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/64.jpg)
64 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check if the cluster has been added successfully. Then proceed with “Next”.
![Page 65: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/65.jpg)
65 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Now we need to set the port which will be used by the clients. The default is set to “80”.
![Page 66: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/66.jpg)
66 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Change the value to “443” as we'll run HTTPS. Proceed with “Update Configuration & Continue”.
![Page 67: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/67.jpg)
67 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check if the port has been added successfully. Proceed with “Next”.
![Page 68: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/68.jpg)
68 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Now we need to add the server names of the used backend servers (here: the Traveler servers). Click on “Add a server”.
![Page 69: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/69.jpg)
69 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Enter the first server name, in our case “traveler1.curi0.us”. Proceed with “Next”.
![Page 70: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/70.jpg)
70 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check if the server name has been added successfully. Click on “Add a server” to add the second server.
![Page 71: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/71.jpg)
71 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Enter the second server name, in our case “traveler2.curi0.us”. Proceed with “Next”.
![Page 72: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/72.jpg)
72 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check if the server name has been added successfully. Click on “Update Configuration & Continue” to proceed.
![Page 73: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/73.jpg)
73 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
We need to start an Advisor as we want the Traveler servers to be monitored. Enter “HTTPS” as the Advisor name and proceed with “Update Configuration & Continue”.
![Page 74: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/74.jpg)
74 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Check if the Advisor has been started successfully. Proceed with “Next”.
![Page 75: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/75.jpg)
75 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
The cluster's IP address needs to be set on the backend servers. Select your operating system (here: Linux) and click on “View Loopback Instructions” to show the instructions.
![Page 76: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/76.jpg)
76 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Excursion / Repeat – read it often:─ To work properly the cluster's IP address needs to be added to the local loopback adapter of the
application servers.
─ To work properly the cluster's IP address needs to be added to the local loopback adapter of the application servers.
─ To work properly the cluster's IP address needs to be added to the local loopback adapter of the application servers.
─ To work properly the cluster's IP address needs to be added to the local loopback adapter of the application servers.
─ To work properly the cluster's IP address needs to be added to the local loopback adapter of the application servers.
That means: add the Edge servers IP address to the local loopback adapter of each Traveler server.
![Page 77: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/77.jpg)
77 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Read the configuration settings (better: write them down). Click “Exit” to close the information dialog.
![Page 78: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/78.jpg)
78 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Done – the Edge server is ready. Click on “Exit” to proceed.
![Page 79: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/79.jpg)
79 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Close the confirmation dialog with “Yes”.
![Page 80: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/80.jpg)
80 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
Right click on “Dispatcher” and select “Connect to Host...” to see the configured Load Balancer.
![Page 81: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/81.jpg)
81 © 2013 IBM Corporation
Configuration of WebSphere Edge Components Load Balancing
You now can see, configure and manage the Load Balancer. Done!
![Page 82: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/82.jpg)
8 2 © 20 1 3 IBM Corporation
Agenda – Using WebSphere Edge Components What is WebSphere Edge Components?
Preparing the environment – Operating System, DNS, Software
Installation of IBM Installation Manager
Installation of IBM WebSphere Edge Components
Configuration of IBM WebSphere Edge Components Load Balancing
Configuration of the backend IBM Notes Traveler servers
![Page 83: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/83.jpg)
83 © 2013 IBM Corporation
Configuration of the backend IBM Notes Traveler servers
As previous stated you'll have to add the WebSphere Edge's cluster address to each (repeat: each) backend server.
![Page 84: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/84.jpg)
84 © 2013 IBM Corporation
Agenda High Availability in the context of IBM Notes Traveler
Using IBM WebSphere Edge Components as Load Balancer
Using IBM Mobile Connect as Reverse Proxy
Additional Notes
Q & A
![Page 85: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/85.jpg)
85 © 2013 IBM Corporation
Agenda – Using IBM Mobile Connect What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 86: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/86.jpg)
86 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 87: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/87.jpg)
87 © 2013 IBM Corporation
What is IBM Mobile Connect?
![Page 88: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/88.jpg)
88 © 2013 IBM Corporation
What is IBM Mobile Connect?
![Page 89: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/89.jpg)
89 © 2013 IBM Corporation
What is IBM Mobile Connect?
![Page 90: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/90.jpg)
90 © 2013 IBM Corporation
What is IBM Mobile Connect?
Connection Manager (server-side)─ Software that runs on the server and controls access to enterprise resources Support for IP and
non-IP network protocols
─ Mobile Network Connections (MNC) for combinations of public/private networks
Distributed Administration (“Gatekeeper”)─ Java based administrator console that can run on various platforms Policy Management is an
integral part of Administration
Mobility Client (client-side)─ Software that runs on the mobile device and interfaces to Connection Manager Mobility Client
authenticates and establishes VPN with Connection Manager Includes toolkit for creating network-aware applications
HTTP Access (client-less)─ HTTP access services provide a SSL secured tunnel for HTTP communication to any HTTP
Version 1.1 application
![Page 91: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/91.jpg)
91 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 92: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/92.jpg)
92 © 2013 IBM Corporation
Preparing the environment – Operating System, DNS, Software
The session's demo installation of IBM DB2 and IBM Mobile Connect runs on SUSE Linux Enterprise Server (SLES) 11.
All components (IBM DB2®, IBM Mobile Connect®, IBM Domino®) are running for demo purposes on the same machine – for a production environment it is highly recommended to install the components on separate machines.
All DNS settings are referring to the same physical IP. You should use your companies DNS.
The demo system doesn't use a firewall as all communication happens locally.
![Page 93: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/93.jpg)
93 © 2013 IBM Corporation
Preparing the environment – Operating System
The demo system runs a newly fresh installed SUSE Linux Enterprise Server (SLES) 11.
The installation of DB2 requires an installed X-Windows system like KDE or Gnome (the last one is used here).
Furthermore you need a working Korn Shell (ksh) on the Linux system. It is required by the IBM Mobile Connect installation.
![Page 94: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/94.jpg)
94 © 2013 IBM Corporation
Preparing the environment – DNS
The IP-based communication between all components is based on DNS (Domain Name System).
When talking about DNS we assume that you're running a real DNS server in your company.
For the demo system all used DNS names are mapped to the local IP address via the Linux hosts file.
─ DB2: db2-imc.curi0.us
─ IBM Mobile Connect: imc1.curi0.us
─ Traveler: traveler1.curi0.us / traveler2.curi0.us
─ External Single URL: mobile.curi0.us
Never ever give the local loopback adapter (127.0.0.1) an alias! That will lead to errors during the installation process!
![Page 95: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/95.jpg)
95 © 2013 IBM Corporation
Preparing the environment – DNS (local hosts editing)
Open your favorite shell (like the Gnome Terminal).
Open the local hosts file using a text editor like “vi”.
![Page 96: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/96.jpg)
96 © 2013 IBM Corporation
Preparing the environment – DNS (local hosts editing)
Modify the name settings for the used DNS names (key “i” for inserting).
Save the modifications using the key combination “ESC” and then “wq!” (== save and close).
Check the modifications using ping.
127.0.0.1 localhost192.168.100.50 imc1.curi0.us imc1192.168.100.50 db2-imc.curi0.us 192.168.100.51 traveler1.curi0.us192.168.100.52 traveler2.curi0.us192.168.100.50 mobile.curi0.us
![Page 97: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/97.jpg)
97 © 2013 IBM Corporation
Preparing the environment – DNS (local name resolving)
The server needs to be able to to resolve it's simple name. If the machines name is “imc1.curi0.us” the name “imc1” needs to be pinged.
If that's not possible the installations of DB2 and IBM Mobile Connect won't work!
![Page 98: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/98.jpg)
98 © 2013 IBM Corporation
Preparing the environment – Software (DB2)
First you need DB2 (any edition, we're using DB2 Express-C 10.1.2).
You can download DB2 Express-C via this URL.http://www-01.ibm.com/software/data/db2/express/download.html
Choose the package which is appropriate for the used operating system – in our case for Linux x86 - 64 Bit.
Save the package to /root/install/db2
![Page 99: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/99.jpg)
99 © 2013 IBM Corporation
Preparing the environment – Software (IBM Mobile Connect)
Then download the two IBM Mobile Connect installation packages from Passport Advantage.
The product numbers are “CID7DML_connection_manager.tar” and “CID79ML_Gatekeeper.tar”
Save the package to /root/install/imc
![Page 100: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/100.jpg)
100 © 2013 IBM Corporation
Preparing the environment – Software (Domino & Traveler)
Besides DB2 and IBM Mobile Connect you'll need one or two running IBM Domino servers and two or more IBM Notes Traveler server. We're not describing here how to setup Domino and Traveler – that was part of SHOW100.
![Page 101: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/101.jpg)
101 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 102: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/102.jpg)
102 © 2013 IBM Corporation
Installation of DB2
Logon to the Linux system as user “root”
Open your favorite shell (like the “Gnome Terminal”)
![Page 103: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/103.jpg)
103 © 2013 IBM Corporation
Installation of DB2
Change to the directory “/root/install/db2”
Unpack the downloaded DB2 installation package using “tar” (you may use the additional “v” parameter for getting a verbose output of the unpacking)
![Page 104: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/104.jpg)
104 © 2013 IBM Corporation
Installation of DB2
Switch to the extracted DB2 installation folder expc.
Launch the db2setup (please remember: you need X-Window for this!)
![Page 105: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/105.jpg)
105 © 2013 IBM Corporation
Installation of DB2
The startup screen (aka “DB2 Setup Launchpad”) shows up.
![Page 106: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/106.jpg)
106 © 2013 IBM Corporation
Installation of DB2
Choose “Install a product” and select “Install New”.
![Page 107: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/107.jpg)
107 © 2013 IBM Corporation
Installation of DB2
Click “Next” to step over to the License Agreement Dialog.
![Page 108: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/108.jpg)
108 © 2013 IBM Corporation
Installation of DB2
Click “Next” to step over to the License Agreement Dialog. After you've read and accepted it (click the radio button) click on “Next” to proceed.
![Page 109: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/109.jpg)
109 © 2013 IBM Corporation
Installation of DB2
Select “Custom” as the installation type and proceed with “Next”.
![Page 110: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/110.jpg)
110 © 2013 IBM Corporation
Installation of DB2
Save the installation details in a response file (good practice!) and proceed with “Next”.
![Page 111: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/111.jpg)
111 © 2013 IBM Corporation
Installation of DB2
Deselect “Getting started” from the feature list and proceed with “Next” (that will accept the default installation location “/opt/ibm/db2/V10.1”).
![Page 112: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/112.jpg)
112 © 2013 IBM Corporation
Installation of DB2
Optional: choose an additional language (we don't prefer any other language then English, even as we're German) and proceed with “Next”.
![Page 113: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/113.jpg)
113 © 2013 IBM Corporation
Installation of DB2
Leave the default value for the location of the DB2 Information center and proceed with “Next”.
![Page 114: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/114.jpg)
114 © 2013 IBM Corporation
Installation of DB2
Enter the credentials for the DB2 administrator “dasusr1” and proceed with “Next”. This step will setup a new Linux user including home directory.
![Page 115: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/115.jpg)
115 © 2013 IBM Corporation
Installation of DB2
Leave the default value to create a new DB2 instance and proceed with “Next”.
![Page 116: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/116.jpg)
116 © 2013 IBM Corporation
Installation of DB2
Enter the credentials for the DB2 instance owner “db2inst1” and proceed with “Next”. This step will setup a new Linux user including home directory.
![Page 117: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/117.jpg)
117 © 2013 IBM Corporation
Installation of DB2
Enter the credentials for the DB2 fenced user “db2fenc1” and proceed with “Next”. This step will setup a new Linux user including home directory.
![Page 118: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/118.jpg)
118 © 2013 IBM Corporation
Installation of DB2
Create a TCP/IP configuration for DB2 to allow access from external hosts on port 50001. Leave the autostart checkbox as it is and proceed with “Next”.
![Page 119: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/119.jpg)
119 © 2013 IBM Corporation
Installation of DB2
Optional: Setup notifications from DB2. As we don't need it here deselect it and proceed with “Next”.
![Page 120: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/120.jpg)
120 © 2013 IBM Corporation
Installation of DB2
Check the setup instructions in the setup dialog and finish the installation with “Finish”.
![Page 121: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/121.jpg)
121 © 2013 IBM Corporation
Installation of DB2
You'll see a progress dialog during the installation process in a separate window.
![Page 122: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/122.jpg)
122 © 2013 IBM Corporation
Installation of DB2
Done!
![Page 123: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/123.jpg)
123 © 2013 IBM Corporation
Installation of DB2
You can validate the successful installation in various ways─ Check the installation log located in /tmp/db2setup.log
─ Login to DB2 with the db2inst1 user
─ Run the DB2 validation tool
![Page 124: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/124.jpg)
124 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring Notes Traveler
![Page 125: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/125.jpg)
125 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Connection Manager
Logon to the Linux system as user “root”
Open your favorite shell (like the “Gnome Terminal”)
![Page 126: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/126.jpg)
126 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Connection Manager
Change to the directory “/root/install/imc”
Unpack the downloaded IBM Mobile Connect installation package of the Connection Manager using “tar”.
![Page 127: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/127.jpg)
127 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Connection Manager
Display the extracted content using “ls”. There are two files:
./linux-gw-x86_64-image.tar.gz
./linux-gw-x86-image.tar.gz
If you are running a 64-Bit Linux, then you should extract the linux-gw-x86_64-image using “tar”.
![Page 128: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/128.jpg)
128 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Connection Manager
Switch to the inst.images Subfolder
First you need to setup the IBM Mobile Connect Connection Manager. For that issue the command “./install_wg” from within the sub-directory.
![Page 129: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/129.jpg)
129 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Connection Manager
Specify if you want to start the IBM Mobile Connect Connection Manager at system startup. This setting defaults to “yes” (it is recommended to keep this setting).
![Page 130: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/130.jpg)
130 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Connection Manager
The IBM Mobile Connect Connection Manager is installed within /opt/ibm/ConnectionManager.
Important: Ensure that the service “xinetd” is running on the machine on which the IBM Mobile Connect Connection Manager is installed.
Done!
![Page 131: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/131.jpg)
131 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Gatekeeper
Logon to the Linux system as user “root”
Open your favorite shell (like the “Gnome Terminal”)
![Page 132: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/132.jpg)
132 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Gatekeeper
Change to the directory “/root/install/imc”
Unpack the downloaded IBM Mobile Connect installation package of the Gatekeeper using “tar”.
![Page 133: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/133.jpg)
133 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Gatekeeper
Change to the directory “/root/install/imc/pkglinux”
If IBM Java JRE 7.0.2 isn't installed you need to install it. The needed installation file is located within the extracted pkglinux subfolder.
![Page 134: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/134.jpg)
134 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Gatekeeper
Now proceed with the installation of the IBM Mobile Connect Gatekeeper.
![Page 135: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/135.jpg)
135 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Gatekeeper
The IBM Mobile Connect Gatekeeper is installed within the directory /opt/ibm/Gatekeeper.The installation also adds symbolic links within /usr/bin for the IBM Mobile Connect Gatekeeper binaries.
Done!
![Page 136: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/136.jpg)
136 © 2013 IBM Corporation
Installation of IBM Mobile Connect – Gatekeeper
Yes, we're running on Linux. But you have to restart the server. ;-)
![Page 137: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/137.jpg)
137 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 138: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/138.jpg)
138 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
The whole configuration of IBM Mobile Connect is done through the IBM Mobile Connect Gatekeeper.
Logon as the Linux user “root”.
Open your favorite console (i. e. the “Gnome Terminal”).
![Page 139: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/139.jpg)
139 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
Start the IBM Mobile Connect Gatekeeper through issuing the command “wgcfg” from the shell. That will start the application in the X-Window system.
![Page 140: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/140.jpg)
140 © 2013 IBM Corporation
Configuration of IBM Mobile Connect - Login profile
At the very first startup IBM Mobile Connect has no configuration. You'll see an empty login screen with no selection values for the so called “Login profile”.
![Page 141: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/141.jpg)
141 © 2013 IBM Corporation
Configuration of IBM Mobile Connect - Login profile
The IBM Mobile Connect Gatekeeper automatically prompts a dialog for the creation of new Login profiles. In our case we're setting up a “non-secure” Login profile through clicking on “Add Profile...”.
![Page 142: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/142.jpg)
142 © 2013 IBM Corporation
Configuration of IBM Mobile Connect - Login profile
In the “Add Login Profile” dialog we have to add two values─ The Login profile name, which is the descriptive name for this profile. For the sake of simplicity
we're using the simple host name of the IBM Mobile Connect server.
─ The host name we want to connect to.
─ The port, which defaults to 9555, could be changed if needed. For our setup we don't need that.
Finish the dialog through clicking the “OK” button.
![Page 143: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/143.jpg)
143 © 2013 IBM Corporation
Configuration of IBM Mobile Connect - Login profile
You'll see now the newly added profile in the Login Profile Details list.
Close the dialog with “OK”.
![Page 144: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/144.jpg)
144 © 2013 IBM Corporation
Configuration of IBM Mobile Connect - Logging in
Now select the profile “imc1” within the Login profile dropdown dialog.
Additionally you have to enter the administrators credentials. For that use the default login credentials which are available after any IBM Mobile Connect installation.
─ User: gkadmin
─ Password: gk4admin (Default)
Confirm the selection and credentials through clicking “Log In”.
![Page 145: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/145.jpg)
145 © 2013 IBM Corporation
Configuration of IBM Mobile Connect - Logging in
“Accept” the upcoming license dialog to proceed.
![Page 146: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/146.jpg)
146 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
Two Dialog Boxes will be opened. Close the Gatekeeper Help Window to start the configuration.
![Page 147: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/147.jpg)
147 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
As we're using DB2 as the backend for IBM Mobile Connect you have to select “An ODBC-compliant relational database”. Proceed with “Next”.
![Page 148: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/148.jpg)
148 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
In the upcoming dialog you have to enter the name of the DB2 instance and the according home folder:
─ DB2 instance name: wgdb
─ DB2 instance home folder: /home/wgdb
Proceed with “Next”.
![Page 149: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/149.jpg)
149 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
Now enter the administrative settings for this new DB2 database.─ Database name: wgdata
─ Database management ID: db2inst1 (we're using the existing standard DB2 administrator)
![Page 150: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/150.jpg)
150 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
We may use the local path, but to have a real world scenario we're “remotely” connecting to the DB2 instance.
Proceed with “Next”.
![Page 151: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/151.jpg)
151 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
In the upcoming dialog you have to enter a base distinguished name (X.500 format) under which the configuration data will be stored. This name is case-sensitive!
─ Base distinguished name: o=midpoints (your organization name, we will use midpoints here)
Additionally you have to define how the data will be stored. Use the same data storage as it is used for the session data.
Proceed with “Next”.
![Page 152: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/152.jpg)
152 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
Now you have to define if administrators should be able to remotely connect to the IBM Mobile Connect Connection Manager. It's recommended to allow this as it makes administrators life somewhat easier.
─ Remote administrators may login with the user “gkadmin”.
Dependant on the internal security policies an SSL based connection to the IBM Mobile Connect Gatekeeper could be enforced. Here it's not needed so leave the default selection (==disabled).
![Page 153: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/153.jpg)
153 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
Now enable the logging of all administrative actions and proceed with “Next”.
![Page 154: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/154.jpg)
154 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The last wizard screen confirms that all settings for the initial setup of this IBM Mobile Connect Connection Manager have been setup. Proceed the setup through clicking “Finish”.
The IBM Mobile Connect Gatekeeper now setups the database and the initial IBM Mobile Connect Connection Manager resources. This may take a while.
![Page 155: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/155.jpg)
155 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 156: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/156.jpg)
156 © 2013 IBM Corporation
Configuring Domino authentication
Authentication profiles in IBM Mobile Connect could be setup to use LDAP binding for HTTP access services and connection profiles.
IBM Domino may serve as a Directory Service provider for LDAP so we're going to leverage that built-in functionality.
As mentioned in the prerequisites we're running a newly fresh installed IBM Domino server without any special configuration. The following slides will show the steps which are needed to setup IBM Domino as a LDAP Directory provider.
![Page 157: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/157.jpg)
157 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
At first you have to create a technical user which will be used by IBM Mobile Connect to make authenticated LDAP lookups.
As this technical user doesn't need to have a Notes id file it is sufficient to create a new person document with HTTP password.
![Page 158: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/158.jpg)
158 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Open the Domino Directory of the IBM Domino Server and switch to the “Peoples” view.
Use the action button “Add Person” to create a new person document.
![Page 159: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/159.jpg)
159 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Enter a first and a last name for the user. Adding a hierarchical full name is recommended as a good practice. And please honor the IBM Domino naming conventions!
─ First name: &lmc
─ Last name: &ldaplookup
─ Full name: &lmc &ldaplookup/tech/midpoints
![Page 160: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/160.jpg)
160 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
The technical user needs a HTTP password. For that click on the “Enter Password” button which is located on the “Basics” tab.
In the upcoming dialog box enter the password “ld4pl00kup” and confirm with the “OK” button.
![Page 161: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/161.jpg)
161 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Check if the HTTP password has been added to the person document. The hashed value should be visible.
Now save the created person document with the “Save & Close” button.
![Page 162: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/162.jpg)
162 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Switch to the “All Server Documents” view in the Domino Directory. Here open the servers document.
![Page 163: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/163.jpg)
163 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
You need to ensure that the previously created technical user has read access to the Domino Directory.
For that we're changing to the “Security” tab and check the “Access server” field. Allowing all users listed in trusted directories is sufficient.
![Page 164: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/164.jpg)
164 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Now set up the LDAP configuration for this server. The needed configuration can be found within “Ports” => “Internet Ports” => “Directory”.
![Page 165: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/165.jpg)
165 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
From a security point of perspective you should disallow non-SSL LDAP access and disable anonymous LDAP access.
![Page 166: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/166.jpg)
166 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Save the modified server document with the “Save & Close” button.
![Page 167: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/167.jpg)
167 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
Create a new Program document for making sure that the LDAP task runs at server startup .
Go to the “Programs” view of the Domino Directory and create a new Program document through clicking the “Add Program” button.
![Page 168: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/168.jpg)
168 © 2013 IBM Corporation
Configuring Domino authentication – LDAP setup
In the newly created document set the values to startup the LDAP task at server startup
─ Program name: LDAP
─ Enabled/disabled: At server startup only
Click “Save & Close” to save the Program document.
![Page 169: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/169.jpg)
169 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
As you've setup SSL-based usage of the LDAP Directory server you now need to create SSL KeyRings for the Domino server.
There are two kinds of certificates which can be used for that:─ Certificates which are signed by an official SSL Certification Authority
─ Self-signed certificates
For the internal usage it is sufficient to use a self-signed certificate.
The creation of such a self-signed certificate can be done by using the “Server Certificate Admin” Database.
![Page 170: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/170.jpg)
170 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
Press CTRL+N in the IBM Lotus Notes client opens the “New Application” dialog.─ Create the database locally.
─ Enter a descriptive title and file name.
─ Select a Domino server (the template isn'tavailable on a Notes client.
─ Select the “Show advanced templates”checkbox.
─ Scroll down to “Server Certificate Admin”and click “OK”.
![Page 171: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/171.jpg)
171 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
Close the “About this database” tab (1) and go to the Server Certificate Admins tab (2).
![Page 172: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/172.jpg)
172 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
Choose the “Create Key Ring with Self-Certified Certifcate” menu entry.
![Page 173: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/173.jpg)
173 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
Now you need to enter some values in the upcoming form.
At first the file name and the password. It's a good practice to use the DNS host name as file name, because that helps to distinguish if the Domino server uses more than one SSL configuration.
![Page 174: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/174.jpg)
174 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
Second you need to enter the certificate details which will be used to create the certificates hierarchical name.
─ Important: The common name of the certificate must be equal to the DNS name of the server.
Last but not least you have to click the button “Create Key Ring with Self-Certified Certificate” which is located at the bottom of the form.
![Page 175: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/175.jpg)
175 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
The certificate creation process creates two files within the root of the Notes clients data directory.
─ KeyRing file: selfcert-traveler1.kyr
─ Stash file: selfcert-traveler1.sth
Copy both files from the Notes clients data directory into the data directory of the Domino server.
The next step will be to setup SSL on the Domino server.
![Page 176: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/176.jpg)
176 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
We're switching to the “All Server Documents” view in the Domino Directory. Here we're opening the servers document.
![Page 177: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/177.jpg)
177 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
The configuration settings for SSL can be found within “Ports” => “Internet Ports” .
The “SSL key file name” must match the file name of the created keyring.
![Page 178: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/178.jpg)
178 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
The configuration settings for SSL can be found within “Ports” => “Internet Ports” .
Enable the HTTP-SSL Port – and disable the HTTP-Port!
![Page 179: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/179.jpg)
179 © 2013 IBM Corporation
Configuring Domino authentication – SSL setup
Now you need to start the LDAP and HTTP tasks to activate SSL for the Domino server.
For that use this commands via the Domino console:─ Starting the LDAP task: load ldap
─ Starting the HTTP task: load http
![Page 180: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/180.jpg)
180 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 181: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/181.jpg)
181 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL The IBM Mobile Connect Connection Manager could be setup to use SSL in
various ways. For example we can use SSL for LDAP binding or for HTTP Access Services.
SSL configuration for IBM Mobile Connect is done by using the “IBM Key Management” Tool which is contained in each IBM Mobile Connect installation. The tools creates keyfiles in which the certificate public keys are stored. Those keyfiles will be assigned to the corresponding IBM Mobile Connect Gatekeeper resources.
The format of the keyfiles is “Cryptographic Message Syntax” (CMS).
For a production environment it is highly recommended to use certificates from official Certificate Authorities. In our setup we're creating and using self-signed certificates.
![Page 182: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/182.jpg)
182 © 2013 IBM Corporation
Configuration IBM Mobile Connect SSL
Logon to the Linux system as user “root”
Open your favorite shell (like the “Gnome Terminal”)
![Page 183: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/183.jpg)
183 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
Change to the directory “/opt/ibm/Gatekeeper”
Start the “IBM Key Management” tool from the console.
![Page 184: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/184.jpg)
184 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
You'll see the empty screen of the IBM Key Management tool.
![Page 185: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/185.jpg)
185 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
Now you need to create a new key database file. For that select “Key Database File” => “New”.
![Page 186: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/186.jpg)
186 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
As the format needs to be “Cryptographic Message Syntax” you have to select “CMS” as the key database type.
Choose a file name of your choice. It is recommended to choose an easy recognizable file name.
![Page 187: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/187.jpg)
187 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
Enter the password “passw0rd” (or a password of your choice). As a stash file is needed by IBM Mobile Connect you have to select the option “Stash the password to a file?”. Finish the process with “OK”.
![Page 188: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/188.jpg)
188 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
Select “Personal Certificates” from the dropdown dialog.
Then select “New Self-Signed...” to create a new self-signed certificate.
![Page 189: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/189.jpg)
189 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
Enter the values for the self-signed certificate. You need to ensure, that the common name equals the external DNS name of the IBM Mobile Connect server.
![Page 190: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/190.jpg)
190 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
In the “Personal Certificates” section you'll see now the created certificate. The * character indicates that it is a self-signed certificate.
![Page 191: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/191.jpg)
191 © 2013 IBM Corporation
Configuring IBM Mobile Connect SSL
Select “Key Database File” from the action menu and click “Exit” to close the “IBM Key Management” tool.
![Page 192: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/192.jpg)
192 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
If needed the login credentials for the super-user “gkadmin” may be changed at this point. You don't need that for this setup, so we proceed with “No”.
![Page 193: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/193.jpg)
193 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The setup process now proceeds with the setup of a new Connection Manager. Click “Next” to start the setup.
![Page 194: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/194.jpg)
194 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
Entering a unique identifier for this Connection Manager configuration. Using the full qualified hostname is a good practice at this point.
─ Connection manager identifier: imc.curi0.us
Proceed with “Next”.
![Page 195: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/195.jpg)
195 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The next screen displays the primary organizational unit. As it's a new configuration there is (currently) nothing to do. Proceed with “Next”.
![Page 196: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/196.jpg)
196 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The setup of the first Connection Manager can now be finished. Click “Finish” to proceed. The process may take some time.
![Page 197: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/197.jpg)
197 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The Connection Manager is now created. Next we get asked, if we need a HTTP Access Service. We need this one for IBM Notes Traveler, so choose “Yes”.
![Page 198: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/198.jpg)
198 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The external URL (the so called Service URL) the IMC-HTTP Service should listen to is https://mobile.curi0.us.
Proceed with “Next”.
![Page 199: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/199.jpg)
199 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The Application server URL are the internal Traveler Server hostnames, using this syntax:
TRAVELER https://traveler1.curi0.us,TRAVELER https://traveler2.curi0.us
The Authentication Profile and SSO will be configured later.
![Page 200: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/200.jpg)
200 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
Choose “Finish” to create the HTTP Access Service.
![Page 201: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/201.jpg)
201 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The setup process now asks, if we want to setup a Mobile Access Service. That's needed if you want to use IMC as a VPN Gateway.
We only want to use the HTTP Access Service as a Secure Reverse Proxy for connecting IBM Notes Traveler. So choose “No”.
![Page 202: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/202.jpg)
202 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
We are using LDAP for User authentication. So will need no further Connection Manager Accounts. Click “No” to proceed.
![Page 203: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/203.jpg)
203 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
We would like to start the Connection Manager, so choose “Yes”
![Page 204: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/204.jpg)
204 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
The Connection Manager will start after choosing “OK”.
![Page 205: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/205.jpg)
205 © 2013 IBM Corporation
Configuration of IBM Mobile Connect – First Setup
We are done!
The Connection Manager is now up and running. To see what's configured using the Setup Wizard switch from the Gatekeeper “Tasks”-Navigator to the “Resources”-Navigator
![Page 206: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/206.jpg)
206 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
The “Resources” section shows the contents of the previously setup IBM Mobile Connect Connection Manager (Node “imc1.curi0.us”).
At the bottom of the “Mobile Connect” tree you'll see the created “http service”.
![Page 207: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/207.jpg)
207 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
You start and stop the Connection using the Gatekeeper Client.For that select the name “imc1.curi0.us”, make a right-click and choose “Shutdown”. The shutdown needs to be confirmed.
![Page 208: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/208.jpg)
208 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
You'll get a confirmation dialog for the shutdown.
![Page 209: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/209.jpg)
209 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
To check the successful shutdown right-click on the connections name and select “Properties”.
![Page 210: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/210.jpg)
210 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
The right pane shows the properties of the Connection Manager. Scroll down on the “Gateway” tab and check the state.
![Page 211: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/211.jpg)
211 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
To start the connection select the name “imc1.curi0.us” with a right-click and choose “Startup”.
You'll get a confirmation dialog for the startup then.
![Page 212: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/212.jpg)
212 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
As the previously opened property dialog doesn't refresh the Connection Manager state automatically you need to close and reopen it.
Click on the upper right marked “x” of the property dialog to close it.
![Page 213: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/213.jpg)
213 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
Right-click the connections name and select “Properties”.
![Page 214: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/214.jpg)
214 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
Scroll down on the “Gateway” tab and check the state. It must be “running”.
![Page 215: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/215.jpg)
215 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 216: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/216.jpg)
216 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Now you'll setup a HTTP Access Service which will be used to authenticate via the previously configured Domino LDAP. Furthermore the service will be used to forward the data packets to the IBM Notes Traveler server.
Containing steps of this procedure are─ Setup of a Directory Server Resource
─ Setup of an Authentication Profile Resource
─ Setup of a HTTP Access Service Resources
─ Securing the HTTP Access Service with a SSL certificate
─ Setup of IBM Mobile Connect Single Sign-On (SSO)
─ Creation and export of a LTPA key file
─ Import of the LTPA key file into Domino
![Page 217: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/217.jpg)
217 © 2013 IBM Corporation
Configuration of IBM Mobile Connect
The whole configuration of IBM Mobile Connect is done through the IBM Mobile Connect Gatekeeper.
Logon as the Linux user “root”.
Open your favorite console (i. e. the “Gnome Terminal”).
![Page 218: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/218.jpg)
218 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Start the IBM Mobile Connect Gatekeeper through issuing the command “wgcfg” from the shell. That will start the application in the X-Window system.
![Page 219: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/219.jpg)
219 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Right-click on the top-level resource entry and choose “Add resource” => “Directory Server”.
![Page 220: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/220.jpg)
220 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Enter a descriptive name as the common name for this Directory server.
Enter the hostname for the remote directory server.
![Page 221: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/221.jpg)
221 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Set the default base distinguished name which should be used for LDAP lookups. Leave that one empty if you don't want to restrict LDAP lookups for only special organizations. Proceed with “Next”.
![Page 222: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/222.jpg)
222 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
In the next wizard screen you have to enter the LDAP setting according to the Domino LDAP setup.
First you have to set the used port. Default is 389 (unencrypted).As you've configured LDAP over SSL on port 636 you need to enable “Use secure connection” and point IMC to the Key-Database, which contains the public keys of your Root CA used for your Domino SSL Server Key.
![Page 223: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/223.jpg)
223 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Furthermore you have to enter the filepath and name of the key database file which you've created with the “IBM Key Manager” tool.
─ Key database: /opt/ibm/ConnectionManager/imc-mobile.kdb
─ Stash file: /opt/ibm/ConnectionManager/imc-mobile.sth
![Page 224: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/224.jpg)
224 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Then you have to enter the username and password of the previously setup technical user.
─ Name: cn=&lmc &ldaplookup,ou=tech,o=midpoints
─ Password: ld4pl00kup
Proceed with “Next”.
![Page 225: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/225.jpg)
225 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Select the primary organizational unit (o=midpoints) and click “Finish” to end the setup of the Directory server.
![Page 226: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/226.jpg)
226 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
You'll now see a new “Directory services server definition” within the menu tree.
![Page 227: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/227.jpg)
227 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
If you have to change the LDAP configuration, you can double click the “Directory services server definition” entry within the menu tree. Select your configured LDAP Server and press “Properties”.
This is an optional information and mentioned for further re-configuration!
![Page 228: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/228.jpg)
228 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Now you'll setup an Authentication Profile. This profile defines how IBM Mobile Connect checks and validates users credentials.
Right-click the main menu item and select “Add Resource” => “Authentication Profile” => “LDAP-bind Authentication”.
![Page 229: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/229.jpg)
229 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
In the first wizard form you have to enter a common name for this profile, an optional description and the passcode policy. Leave all other fields empty.
─ Unrestricted Policy defines that there is no limit for false entered passwords.
Proceed with “Next”.
![Page 230: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/230.jpg)
230 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Now select the Directory server which you've setup. For this installation you're using the “uid” as key field for identifying a user.
Leave the other fields as they are and proceed with “Next”.
![Page 231: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/231.jpg)
231 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
As Single-Sign-On for Domino should be used you have to enable the creation of a LTPA token.
Leave the other fields as they are and proceed with “Next”.
![Page 232: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/232.jpg)
232 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Select the primary organizational unit (o=midpoints) and click “Finish” to end the setup of the Authentication Profile.
![Page 233: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/233.jpg)
233 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
You'll now see a new “Authentication profile” within the menu tree.
![Page 234: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/234.jpg)
234 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Now it's time to configure the HTTP Access Service Resource which has been created initially.
Such a resource is responsible for forwarding inbound data traffic – after successful authentication – to a backend system (in our case Domino/Traveler).
The new IBM Mobile Connect Version 6.1.5 is able to assign a single inbound URL to one HTTP Access Service. The HTTP Access Service can forward the request to multiple HTTP backend systems like Traveler, iNotes, Connections, Sametime or a Domino based web application (i. e. XPages).
You can setup additional HTTP Services, but then you'll need additional DNS hostnames, SSL certificates and IP adresses.
![Page 235: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/235.jpg)
235 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
First we open our initially created HTTP Service Profile by double-clicking the “http-service0” entry in the navigator.
![Page 236: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/236.jpg)
236 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
The Service tab
Check if the “Service URL” is configured.This Service URL will be used on a device to connect to Traveler.
Enter the directory and file name of the key database and the stash file we created earlier.
─ Key database: /opt/ibm/ConnectionManager/imc-mobile.kdb
─ Stash file: /opt/ibm/ConnectionManager/imc-mobile.sth
![Page 237: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/237.jpg)
237 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
The Server tab
The “Application server URL” defines thebackend systems to which requests aregetting forwarded.
─ The systems are separated by comma.
─ There are keywords to define the typeof the used backend system:TRAVELER, CONNECTIONS, SAMETIMEINOTES
For every Traveler Server in our HA Pool, weneed to add an entry:
TRAVELER https://traveler1.curi0.us,TRAVELER https://traveler2.curi0.us
![Page 238: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/238.jpg)
238 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
The Server tab
The Scheduling algorithm defines how load balancing and failover take place.
We will setup an “Active / Passive failover”where traveler1.curi0.us will be the definedas the active server.
![Page 239: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/239.jpg)
239 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
The Mode tab
Switch to the “Mode” tab and change the credential challenge type from “Mobile Connect forms challenge” to “HTTP 401 basic authorization challenge”.
As Authentification Profile choose ourconfigured “Auth LDAP Traveler1” Profile.
![Page 240: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/240.jpg)
240 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
The IBM Mobility tab
By enabling the “IBM Notes Traveler integration” checkbox IBM Mobile Connect knows that requests to
/traveler or /servlet/traveler
are Traveler specific and will forward theserequests to the defined TRAVELER servers.
Save your changes to the HTTP Service byusing the “Apply” and “OK” Button.
You have to stop and restart the HTTP Service.
![Page 241: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/241.jpg)
241 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
The last setup step within IBM Mobile Connect Gatekeeper is now to create the LTPA token for Single-Sign-On between IBM Mobile Connect and the backend servers.
For that you'll have to open the created Authentication Profile (double-click the entry).
![Page 242: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/242.jpg)
242 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Double-click the entry of the profile within the list in the right pane.
Then switch to the “LTPA/SSO” tab.
![Page 243: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/243.jpg)
243 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Define the settings for the LTPA/SSO connection.
![Page 244: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/244.jpg)
244 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
Now select the creation of new LTPA keys and enter the password “ltp4p4ssw0rd” (the password should have 6-32 characters). This key will be imported into Domino later on.
Finish the creation with “Apply” (NOT “OK”).
![Page 245: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/245.jpg)
245 © 2013 IBM Corporation
Configuring IBM Mobile Connect - HTTP Access Services
After the creation of the LTPA keys (you won't get a confirmation dialog) you'll have to export them. Select “Export to keyfile” and enter the directory path including the file name.
─ LTPA export keyfile name: /opt/ibm/ConnectionManager/ltpa.token
Click “OK” to start the export.
![Page 246: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/246.jpg)
246 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 247: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/247.jpg)
247 © 2013 IBM Corporation
Configuring Domino-SSO via LTPA token
Now you'll have to import the created LTPA token into the Domino Directory for enabling Single-Sign-On between the IBM Mobile Connect Server and IBM Domino.
Switch to the “All Server Documents” view in the Domino Directory and click the button “Web\Create Web SSO Configuration”.
![Page 248: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/248.jpg)
248 © 2013 IBM Corporation
Configuring Domino-SSO via LTPA token
Now enter a name for this token configuration, your organization, the supported DNS names and the Domino server which should use this token.
![Page 249: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/249.jpg)
249 © 2013 IBM Corporation
Configuring Domino-SSO via LTPA token
Proceed now with importing the LTPA token. For that you have to click the button “Keys...” and select “Import WebSphere LTPA Keys”.
Enter the directory and file name of the LTPA token and confirm with “OK”.
Save and close the Notes document.
![Page 250: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/250.jpg)
250 © 2013 IBM Corporation
Configuring Domino-SSO via LTPA token
Switch to the “All Server Documents” view in the Domino Directory. Here open the servers document.
![Page 251: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/251.jpg)
251 © 2013 IBM Corporation
Configuring Domino-SSO via LTPA token
Goto “Internet Protocols...” => “Domino Web Engine”. Change the session authentication type to “Multiple Servers (SSO)” and select the created SSO configuration.
Save and close the document.
Restart the server.
![Page 252: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/252.jpg)
252 © 2013 IBM Corporation
Agenda What is IBM Mobile Connect?
Preparing the environment – Operating System, DNS, Software
Installation of DB2
Installation of IBM Mobile Connect
Configuration of IBM Mobile Connect Connection Profiles
Configuring Domino LDAP and SSL
Configuring IBM Mobile Connect SSL
Configuring IBM Mobile Connect HTTP Access Services
Configuring Domino-SSO via LTPA-Token
Configuring IBM Notes Traveler
![Page 253: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/253.jpg)
253 © 2013 IBM Corporation
Configuring IBM Notes Traveler
You've already completed 99% of the needed configuration.─ Setting up HTTPS on the IBM Domino Server
─ Enabling Single-Sign-On between IBM Mobile Connect and IBM Domino
The last step to complete this setup now is configuring IBM Notes Traveler.
![Page 254: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/254.jpg)
254 © 2013 IBM Corporation
Configuring IBM Notes Traveler
Switch to the “All Server Documents” view in the Domino Directory. Here open the servers document.
![Page 255: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/255.jpg)
255 © 2013 IBM Corporation
Configuring IBM Notes Traveler
Switch to the “IBM Notes Traveler” tab.
Enter the full qualified internet host name of the IBM Mobile Connect server + “/traveler” as the external URL.
Save and close the Notes document.
Finished!
![Page 256: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/256.jpg)
256 © 2013 IBM Corporation
Agenda High Availability in the context of IBM Notes Traveler
Using IBM WebSphere Edge Components as Load Balancer
Using IBM Mobile Connect as Reverse Proxy
Additional Notes
Q & A
![Page 257: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/257.jpg)
257 © 2013 IBM Corporation
Additional Notes
We only scratched the surface of both products.
You can built real cool environments with them─ High Availability
─ Authentication
─ For a range of ICS products
Just imagine...
![Page 258: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/258.jpg)
258 © 2013 IBM Corporation
Additional Notes
![Page 259: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/259.jpg)
259 © 2013 IBM Corporation
Agenda High Availability in the context of IBM Notes Traveler
Using IBM WebSphere Edge Components as Load Balancer
Using IBM Mobile Connect as Reverse Proxy
Additional Notes
Q & A
![Page 260: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/260.jpg)
260 © 2013 IBM Corporation
Q & A Now and here
─ Get the mic!
Later─ Via any social media – see contact details at the beginning of this slide deck.
(Updated) Slides will be on our blogs and on SlideShare.
![Page 261: Connect 2013 - Making IBM Traveler High Available: Extending And Securing The Network](https://reader034.fdocuments.us/reader034/viewer/2022042814/55514a2bb4c905bd1c8b527b/html5/thumbnails/261.jpg)
261 © 2013 IBM Corporation
Legal disclaimer
© IBM Corporation 2013. All Rights Reserved.
The information contained in this publication is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in this publication, it is provided AS IS without warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and strategy, which are subject to change by IBM without notice. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this publication or any other materials. Nothing contained in this publication is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software.
References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in this presentation may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth or other results.
Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.
Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both.
Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks of others.