DOCUMENT:Q151629  13-JUN-2001  [sna]
TITLE   :INFO: TN3270 LU Assignment and the Use of Submasks
PRODUCT :Microsoft SNA Server
PROD/VER:WINDOWS:2.11,3.0,4.0
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft SNA Server, versions 2.11, 3.0, 4.0, on platform(s):
    - the operating system: Microsoft Windows NT 
-------------------------------------------------------------------------------

SUMMARY
=======

When an IP subnet mask is defined in TN3270 Admin for an LU resource, the SNA
Server 2.11 Service Pack 1 TN3270E Server checks the range of addresses used by
the subnet mask to determine if a TN3270 user has access to the LU.

For example,

1. Add four LUA LUs to the TN3270E configuration.

2. Use any text editor to modify the Tn3270E configuration file
   (<tnroot>\Tnsvrcfg.tnc).

3. Define Three of the LUs with a class B ip address of 130.9.x.x and subnet
   mask of 255.255.0.0.

4. Define one LU with an address of 130.8.8.1 and subnet mask of 255.255.0.0.

LUs added to the config:

   LU3 assigned to 130.9.5.1
   LU2 assigned to 130.9.5.2
   LU4 assigned to 130.9.8.1
   LU5 assigned to 130.8.8.1

Sample TN3270 configuration file:

      [Group 1]
      Name=LU3
      Comment=
      SNAResource1=LU3
      IPConnection1=130.009.005.001,255.255.000.000,00000,65535

A user with an IP address of 130.9.5.1 will be able to get any LU, except the one
configured for 130.8.8.1, even though the users IP address is explicitly
configured for one LU.

MORE INFORMATION
================

When a client tries to connect to the server, the IP address of the client is
masked (bitwise AND) by the subnet mask of each resource. The result from this
mask is compared to the result from masking the subnet mask of the resource by
the IP address configured for the resource.

The default subnet mask is 255.255.255.255. When this is used as a mask value it
has no effect; therefore, in this case, when a client connects the IP address of
the client is compared to the IP address configured for the resource.

In the example, the subnet mask is 255.255.0.0. When this is used as a mask, it
makes the final two octets in the masked result zero. Therefore, in this case, a
client that has the address 130.9.5.1 will be able to connect to any resource
that has the configured IP address of 130.9.xxx.xxx, if that resource's mask is
255.255.0.0.

Additional query words: 2.11 prodsna snafaqtop

======================================================================
Keywords          :  
Technology        : kbAudDeveloper kbSNAServSearch
Version           : WINDOWS:2.11,3.0,4.0
Issue type        : kbinfo

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.