| Author |
Message
|
| masteringmq |
 Posted: Sun Jan 11, 2009 10:12 pm Post subject: MQ IPT |
 |
|
Master
Joined: 20 Oct 2008
Posts: 200
|
IBM website says:
| Quote: |
| This article shows you how to use WebSphere MQ to connect internal business applications to external information sources without the complexity of getting access to corporate firewalls. |
Does it mean that with the use of MQ IPT there is no longer a need to worry about configuring the firewall to enable message flow between a queue manager sitting outside a firewall and behind a firewall?.
MQ Server (QM1) -> MQ IPT -> MQ Server (QM2)
- QM2 sits behind a firewall |
|
| Back to top |
|
 |
| Mr Butcher |
| Posted: Mon Jan 12, 2009 12:21 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
| Quote: |
| This article shows you how to use ..... |
After reading the article, are you able to answer the question yourself?
_________________
Regards, Butcher |
|
| Back to top |
|
|
| masteringmq |
| Posted: Mon Jan 12, 2009 1:52 am Post subject: |
|
|
Master
Joined: 20 Oct 2008
Posts: 200
|
Yes.   |
|
| Back to top |
|
|
| masteringmq |
| Posted: Mon Jan 12, 2009 5:22 pm Post subject: |
|
|
Master
Joined: 20 Oct 2008
Posts: 200
|
I followed what the article said. Only difference is in my mqipt.conf file I set SSLProxyMode=false as I am not using SSL in this case for authentication. But when I start the channel XYZ.TO.ABC which is a requester channel but it returns to the status inactive rather than running as indicated at the IBM website. Also I tried to google for SSLProxyMode=false and found no result. Does this mean that when SSL is not in use we simply remove the line SSLProxyMode because the default value for SSLProxyMode is false? But when I run mqipt {dirname} command where the directory name is the location of the mqipt.conf no error was indicated. The result:
MQCPI001 WebSphere MQ internet pass-thru Version 1.3.3 starting
MQCPI004 Reading configuration information from C:\mqipt\mqipt.conf
MQCPI011 The path C:\mqipt\logs will be used to store the log files
MQCPI006 Route 14000 has started and will forward messages to :
MQCPI034 ....127.0.0.1 (14001)
MQCPI035 ....using MQ protocols
MQCPI078 Route 14000 ready for connection requests
I check the error log and there was no error. Also without the MQ IPT I tested a direct [requester - server channel] connection between two queue manager and the status is running. This indicate that the definition is correct. But with MQ IPT sitting in between the queue manager it does not work. Also I would like to highlight that my firewall settings is set to allow the connection. Any suggestion on how I can resolve this problem?.
Your help is kindly appreciated. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Jan 13, 2009 2:10 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
What is your setup?
MQ->mqipt->mqipt->MQ ?
Do both mqipt have the right SSL info?
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| PhilBlake |
| Posted: Tue Jan 13, 2009 6:18 am Post subject: |
|
|
Acolyte
Joined: 25 Oct 2005
Posts: 64
|
| masteringmq wrote: |
I check the error log and there was no error. Also without the MQ IPT I tested a direct [requester - server channel] connection between two queue manager and the status is running. This indicate that the definition is correct. But with MQ IPT sitting in between the queue manager it does not work. Also I would like to highlight that my firewall settings is set to allow the connection. Any suggestion on how I can resolve this problem?.
Your help is kindly appreciated. |
I presume you changed the CONNAME attribute on the requester channel to point the IPT route ? You can turn on IPT tracing (Trace=5) and then try the connection again. The trace file will show if IPT received the connection request and tried to make a new connection to the target queue manager.
Can you ping IPT machine from QM1 and ping QM2 from IPT ?
If you're not using MQ-SSL then you don't need to specify SSLProxyMode on the IPT route. |
|
| Back to top |
|
|
| masteringmq |
| Posted: Tue Jan 13, 2009 6:46 am Post subject: |
|
|
Master
Joined: 20 Oct 2008
Posts: 200
|
| Quote: |
What is your setup?
MQ->mqipt->mqipt->MQ ?
Do both mqipt have the right SSL info? |
MQ Server (QM1) -> MQ IPT -> MQ Server (QM2)
In my case I am not using SSL. Therefore I will be removing SSLProxyMode as suggested by PhilBlake. |
|
| Back to top |
|
|
| masteringmq |
| Posted: Tue Jan 13, 2009 6:56 am Post subject: |
|
|
Master
Joined: 20 Oct 2008
Posts: 200
|
| Now it works perfectly fine. |
|
| Back to top |
|
|
|
|
