Problems in establishing a 5250 session to an AS400 via VPN

[pedro_malheiro]

We have implemented a Cisco VPN with a PIX 520 as the endpoint, and with the dial-up clients with the VPN client 1.1. The VPN clients have full ip connectivity to the internal network, but they cannot connect to the AS400 via a 5250 session (telnet) although they can ping it.

Any help on this one ? Thanks.

[smahbub]

I wonder if it’s a problem with NAT. Can you sniff the packets and see what they look like?

[robert.berger]

Mai be a problem on iSeries (AS/400).

Check following Systemvalues.

QAUTOCFG = 1

QAUTORMT = 1

QAUTOVRT <> 0 (more then even exists QPADEV****)

QRETSVRSEC = 1

If you want to use client access express functionality, you need also NT Netbios Ports

(udp 137+138 tcp 137+139) for logon.

Robert