RE: Can't reach HMC remotely

["Thomas Garvey" <tgarvey@xxxxxxxxxx>]

Can't bypass VPN remotely.  It's the only way to get into our network from
outside.  When I am inside the net (actually at the corporate site and
hard-wired into the net) I had no trouble getting on to the HMC.  Didn't get
any certificate notices either.

BTW, I can even get a console session running on the HMC remotely (using
Client Access, port 2300, user Q#HMC, etc). 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jack Kingsley
Sent: Friday, February 18, 2011 1:36 PM
To: Midrange Systems Technical Discussion
Subject: Re: Can't reach HMC remotely

Can you bypass the VPN and try to connect.

On Fri, Feb 18, 2011 at 2:06 PM, Thomas Garvey <tgarvey@xxxxxxxxxx> wrote:

> Nope.  On my laptop, it never gets to the point of asking me to accept 
> the certificate.  Also, popups are disabled.
> I've also removed IE8 (which automatically reinstalls IE7) and sett 
> all the options to default.  I've also uninstalled and reinstalled 
> Java.  Since both desktops that it works on are wired and my laptop is 
> wireless, I disabled the wireless and connected to router directly 
> with wire.  No help.  Also, the co-coworker's laptop is NOT wireless 
> so that was drawing at straws anyway.
>
> It sure SEEMS like there must be something different between my laptop 
> and desktop, but I sure can't figure out what it is.  All known settings
match.
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jack Kingsley
>  Sent: Friday, February 18, 2011 12:34 PM
> To: Midrange Systems Technical Discussion
> Subject: Re: Can't reach HMC remotely
>
> Could be pop up blocker turned on maybe as well.
>
> On Fri, Feb 18, 2011 at 1:33 PM, Jack Kingsley
> <iseriesflorida@xxxxxxxxx>wrote:
>
> > Ah, you need to accept the certficate.
> >
> >
> > On Fri, Feb 18, 2011 at 12:20 PM, Thomas Garvey <tgarvey@xxxxxxxxxx
> > wrote:
> >
> > > Yep.  I can connect to everything available on the network: both 
> > > IBM i's and partitions, the PC server also on the net, the new tape 
> > > autoloader for the 720.
> > > I actually get the HMC initially.  I get a page saying...
> > >
> > > There is a problem with this website's security certificate.
> > >
> > >
> > >  The security certificate presented by this website was issued for 
> > > a different website's address.
> > >
> > > Security certificate problems may indicate an attempt to fool you 
> > > or intercept any data you send to the server.
> > >  We recommend that you close this webpage and do not continue to 
> > > this website.
> > >  Click here to close this webpage.
> > >  Continue to this website (not recommended).
> > >     More information
> > >
> > > When the 'Continue to this website' link is clicked, the laptops 
> > > get a white page, the desktops get the HMC login page.
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: midrange-l-bounces@xxxxxxxxxxxx 
> > > [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jack Kingsley
> > >  Sent: Friday, February 18, 2011 10:16 AM
> > > To: Midrange Systems Technical Discussion
> > > Subject: Re: Can't reach HMC remotely
> > >
> > > Maybe it's a driver issue with the NIC card or the VPN software is 
> > > having an issue, can you connect to other things via the VPN on the 
> > > same network.
> > >
> > > On Fri, Feb 18, 2011 at 10:47 AM, Thomas Garvey 
> > > <tgarvey@xxxxxxxxxx>
> > > wrote:
> > >
> > > > I have both IBM and Sun Javas installed.  I've tried disabling 
> > > > each respectively, to no avail.
> > > > Java Sun:       JRE 1.6.0_23
> > > > Java IBM:       Java 2 v1.4.2
> > > >
> > > > Here's a new wrinkle...
> > > >
> > > > My co-worker that got it working?  It was on his desktop.  When 
> > > > he tries his laptop, it DOES NOT work (that is, it stops exactly 
> > > > where mine stops).
> > > >  When
> > > > I installed our VPN client on my wife's desktop and tried 
> > > > connecting to the HMC, IT WORKS FINE!
> > > >
> > > > So, connecting to the HMC remotely via browser works on desktops, 
> > > > NOT laptops?
> > > >
> > > > Does that make anyone think of something that might help?
> > > >
> > > > Tom Garvey
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: midrange-l-bounces@xxxxxxxxxxxx 
> > > > [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jack 
> > > > Kingsley
> > > > Sent: Friday, February 18, 2011 8:37 AM
> > > > To: Midrange Systems Technical Discussion
> > > > Subject: Re: Can't reach HMC remotely
> > > >
> > > > What version of Java do you have installed on your PC.
> > > >
> > > > You on a different subnet then the other folks possibly.
> > > >
> > > > On Fri, Feb 18, 2011 at 9:07 AM, Thomas Garvey 
> > > > <tgarvey@xxxxxxxxxx>
> > > wrote:
> > > > > Here's a tough one...
> > > > >
> > > > > Just installed new HMC (v7r7 Release 2, service pack 1: latest
> > > > > available) and installed new 720.  HMC is configured and 
> > > > > managing two systems.  Tried reaching HMC remotely and can't do 
> > > > > it from my PC.  (We use a VPN to tunnel in remotely).  Thing 
> > > > > is, everybody else
> > > CAN!
> > > > > I've tried IE8, Firefox, disabling Norton firewall, checked 
> > > > > ports used by HMC are open, made sure popups are enabled in 
> > > > > browser, Java is enabled in browser, and even spent an hour on 
> > > > > the phone with IBM support, and they're baffled as well.  I can 
> > > > > reach the IBM i, the TS2900 tape (via the browser), I can ping the
HMC.
> > > > > I've compared all the Internet options with the other users and 
> > > > > all settings match.  Other
> > > > users are using Windows XP, like me.
> > > > > Any ideas?
> > > > >
> > > > > I've thought of removing Firefox and IE8 and reinstalling IE8 
> > > > > but I don't think Windows allows removing the web browser.
> > > > >
> > > > >
> > > > >
> > > > > Best Regards,
> > > > >
> > > > > Thomas Garvey
> > > > > Corporate Scientist
> > > > > Unbeaten Path International
> > > > > 630-462-3991
> > > > >  <http://www.unpath.com/> www.unpath.com 
> > > > > <http://www.unbeatenpath.com/compass>
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> > > > > mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx 
> > > > > To subscribe, unsubscribe, or change list options,
> > > > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > > > or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, 
> > > > > please take a moment to review the archives at 
> > > > > http://archive.midrange.com/midrange-l.
> > > > --
> > > > This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> > > > mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To 
> > > > subscribe, unsubscribe, or change list options,
> > > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > > or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please 
> > > > take a moment to review the archives at
> > > http://archive.midrange.com/midrange-l.
> > > > --
> > > >  This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> > > > mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To 
> > > > subscribe, unsubscribe, or change list options,
> > > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > > or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please 
> > > > take a moment to review the archives at 
> > > > http://archive.midrange.com/midrange-l.
> > > --
> > > This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> > > mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To 
> > > subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please 
> > > take a moment to review the archives at
> http://archive.midrange.com/midrange-l.
> > > --
> > > This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> > > mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To 
> > > subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please 
> > > take a moment to review the archives at 
> > > http://archive.midrange.com/midrange-l.
> --
>  This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To 
> subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take 
> a moment to review the archives at 
> http://archive.midrange.com/midrange-l.
>
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, 
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take 
> a moment to review the archives at 
> http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.