CISCO CIP Migration Scenario
CISCO CIP Migration Scenario
CISCO CIP Migration Scenario
Migration Scenarios
This chapter describes basic configuration and shows several sample networks. For each network, it
describes the network design, explains when and why to use that network design, and in some cases
briefly describes how to migrate from or coexist with a FEP. Examples include:
• Single CIP to a single host
• Dual CIP to a single host
• Multi-LPAR single CIP
• APPN network
• APPN in a sysplex environment
• SNI-to-APPN border node migration
Figure 3-1 Communication between CSNA in the CIP and SNA Nodes
Mainframe
XCA
VTAM
FID2, FID4
CIP
CIP LLC2
7500
Internal Rings ...
LLC2 RP
Token Virtual
End Station Ring Ring
LLC2
DLSw+
APPN
The CIP running CSNA will support multiple internal LAN interfaces, each of which looks like a
LAN port to VTAM. (VTAM supports a maximum of 18 LAN ports.) However, only a single LAN
port is required. CSNA also supports up to 256 open LLC2 SAPs per LAN port.
VTAM Definitions
The CIP running CSNA is not an SNA addressable node—it has no PU or LU appearance. CSNA is
defined to the host control program (MVS or VM) as a channel-to-channel machine (a 3088). This
provides VTAM a physical connection out to the LAN through a subchannel.
To enable VTAM communication over the CIP to SNA devices, you must configure an XCA major
node and a switched major node to VTAM. The XCA major node allows VTAM to communicate
with the CIP, and the switched major node definition allows SNA devices to communicate with
VTAM over the CIP.
ISTATUS=ACTIVE **
LUNAME1 LU LOCADDR=02
LUNAME2 LU LOCADDR=03
LUNAME3 LU LOCADDR=04
LUNAME4 LU LOCADDR=05
LUNAME5 LU LOCADDR=06
Router Configuration
The router must be configured to:
• Bridge traffic from a physical LAN or a router component (DLSw+, SRB, SR/TLB, and so forth)
onto the router virtual ring
• Bridge data from the router virtual ring to one of the CIP internal rings, or connect a data link
user (APPN, DSPU) to one of the CIP internal rings
• Connect the CIP to VTAM
Figure 3-2 shows the major configuration parameters of the CIP and of the Token Ring interfaces
and how they are logically combined using the source-bridge definition. The CIP ring is referred to
as an internal ring. The RSP ring is referred to as a virtual ring.
Bridge 1
Virtual Ring
Group 100
source-bridge ring-group 100
interface tokenring 1
Bridge 1 source-bridge 1 1 100
TRIP
Token
Ring
Real Segment
Configure an adapter on the CIP to be associated with the XCA major node definition. For each
adapter configured, CSNA creates an internal Token Ring. A virtual bridge connects the CSNA
internal ring to a virtual ring group in the router. The Token Ring interface processor (TRIP) is also
configured to connect to the same virtual ring group as the CIP.
Figure 3-3 Relationship among MVS, VTAM, and Router Configurations: ESCON
Figure 3-4 Relationship among MVS, VTAM, and Router Configurations: Bus and Tag
VTAM Configuration
vbuild type=xca
port adapno= 0 ,cuaddr= 110,
sapaddr=04, medium=ring
group answer=no, autogen=(25,I,p),
call=inout,dial=yes
Before
Cluster Controller
Token
Host A
Ring
Cluster Controller
After
Cluster
Controller CIP Router A
Token
Ring
Cluster
Controller
Host A
Design Choices
This customer opted to combine SNA functionality (DLSw+) and WAN connections in the CIP
router, because the network was very small (25 sites). The design provides a very safe fallback to the
FEP, but at the same time enables SRB dynamics and configuration simplicity.
Configuration
XCA Major Node Configuration
XCANODE VBUILD TYPE=XCA
PRTNODE PORT ADAPNO=0,CUADDR=770,SAPADDR=04,MEDIUM=RING,TIMER=30
*
GRPNODE GROUP ANSWER=ON, X
AUTOGEN=(100,L,P), X
CALL=INOUT, X
DIAL=YES, X
ISTATUS=ACTIVE
Router Configuration
!
source-bridge ring-group 100
!
interface tokenring 1/0
no ip address
no ip route-cache
ring-speed 16
source-bridge 200 1 100
!
interface Channel1/0
no ip address
csna 0100 70
!
interface Channel1/2
no ip address
no keepalive
lan TokenRing 0
source-bridge 300 1 100
adapter 0 4000.7000.0001
!
end
Implementation Overview
The first step is to implement DLSw+ from the remote site to the central site and to change the FEP
access from SDLC to Token Ring. As part of this step, configure the VTAM switched major nodes.
Once that is done, the following steps enable the CIP in this configuration:
Step 1 Perform IOCP generations to configure the channel definitions, as shown in either
Figure 3-3 or Figure 3-4.
Step 2 Configure VTAM XCA major node.
Step 3 Configure the attached router with the CIP definitions and bridge traffic from the internal
ring group to the CIP virtual ring.
Step 4 Vary the channel online (Vary E00,ONLINE).
Step 5 Confirm the CIP is online (Display U,,,E00,1).
Step 6 Activate the VTAM XCA (Vary NET,ACT,ID=name_of_member).
from a CCU hardware check. Note that the idle CCU is totally inactive unless a failure is detected.
With the inclusion of duplicate Token Ring, addressing this design can also provide another level of
network redundancy.
Optionally, the 3745-410 could be configured in twin-backup mode, where each CCU controls
approximately half the network. It is the equivalent of having two 210s running at half capacity. If
there is a failure in one CCU, the other CCU can take over, just as in the first example. However,
only half the resources are impacted and hence recovery is faster.
Irrespective of the configuration in use, the use of CSNA on two Cisco 7500 series routers with one
or more CIP cards can provide better load sharing and redundancy features, as described in the
previous chapter in the section titled “Designing for High Availability.”
The After scenario is designed so there is no single point of failure in the network. The redundant
CIP to a single host scenario is often used when the end systems cannot afford the downtime of a
failure. For many companies that require online access to provide 24 by 7 customer support, the loss
of host access for even a short period of time can incur a significant loss in both income and
credibility. It is important for these networks to implement a solution that will avoid or minimize the
amount of downtime due to network problems.
Also for these companies the redundancy option provides the necessary network configuration to
perform maintenance or configuration changes to the network with minimal impact to the
end-system users.
Providing redundancy to the single CIP to single host solution is quite straightforward. In Figure 3-6,
two Cisco 7500 routers, each with a CIP, are deployed in place of the 3745-410. In this example both
CIPs have the same virtual MAC address. When one router is not available, the SNA end system will
automatically find the backup router using standard SRB protocols. Note that in both the Before and
the After networks, loss of a channel-attached gateway is disruptive.
Before
Token
Ring
After
Token
Ring
Token
Ring
7000/7500
Design Choices
In this network they opted to separate DLSw+ from the channel-attached router. This minimizes both
scheduled and unscheduled outages in their network. Also, they already had DLSw+ installed in
these routers before they installed the CIPs. Hence, this simplified migration. Finally, as their
DLSw+ routers (Cisco 4700s) reach capacity, it is less costly to add a Cisco 4700 router than a Cisco
7500 with a CIP. Either of the channel-attached routers can handle their entire capacity today, and if
the network grows, they have sufficient slots in their 7500s to add CIPs to their channel-attached
routers.
The network uses load balancing across central site DLSw+ routers and duplicate Token Rings to
ensure there is no single point of failure, as shown in Figure 3-7.
Channel Channel
RTRA Adapter Adapter RTRB
CIP CIP
4000.0000.0001 4000.0000.0001
Virtual Virtual
Ring Ring
300 400
Virtual Virtual
Ring Ring
100 101
Ring 200
Dual Apex Rings
Ring 201
DLSw+ DLSw+
Router Configuration
This configuration uses the same MAC address on internal Token Ring LANs of two different
routers.
RTRA
!
source-bridge ring-group 100
int tok 0/0
source-bridge 200 1 100
int tok 0/1
source-bridge 201 2 100
!
interface Channel1/0
no ip address
csna 0100 70
!
lan TokenRing 0
source-bridge 300 1 100
adapter 0 4000.0000.0001
!
RTRB
!
source-bridge ring-group 101
int tok 0/0
source-bridge 200 1 101
int tok 0/1
source-bridge 201 2 101
!
interface Channel1/0
no ip address
csna 0100 80
!
lan TokenRing 0
source-bridge 400 1 101
adapter 0 4000.0000.0001
!
Before
Token
Ring
After
7000/7500
Token
Ring
Design Choices
This enterprise chose not to implement APPN even though they had multiple mainframes. The
reason is that all SNA sessions were in the same domain. The VTAM in the second mainframe was
simply used for testing and backup. They chose not to implement two channel-attached routers for
redundancy, but they did select to use two CIPs in a single channel-attached router. This created
higher availability than they had previously, and provided an option in the future to separate CIP
functionality across multiple CIPs. In the future they plan to add TN3270 server capability to the CIP
to allow access to VTAM applications from Web-based clients, and they also anticipate a need for
TCP/IP on the mainframe. Figure 3-9 shows the logical configuration.
CIP CIP
LLC2 LLC2
502 505
4000.3745.5001 4000.3745.5001
Virtual
Ring
501
Ring 200
Ring 201
Router Configuration
!
source-bridge ring-group 501
int tok 0/0
source-bridge 200 1 501
int tok 0/1
source-bridge 201 2 501
!
interface Channel1/0
no ip address
csna 0100 70
!
interface Channel1/1
no ip address
csna 0101 80
!
interface Channel1/2
no ip address
no keepalive
lan TokenRing 0
source-bridge 502 1 501
adapter 0 4000.3745.5001
lan TokenRing 1
source-bridge 505 1 501
adapter 1 4000.3745.5001
!
Note For more detail on APPN, refer to the Cisco APPN Design and Implementation guide.
Before
Token 3745-410
Ring
Token
Ring
After
Token
Ring
Token
Ring
7000/7500
Design Choices
This enterprise chose to put DLUR functionality in their existing data center routers to maximize the
scalability of their channel-attached routers and minimize the cost of their total network. In addition,
when they migrate to HPR, this design will allow them to nondisruptively reroute around the failure
of a channel-attached router by configuring the channel-attached router as an ANR node.
Router Configuration
This partial router configuration shows that there are three required parameters and one optional
parameter for defining an APPN connection. Refer to the VTAM configuration manuals for more
details on the changes required to VTAM.
The APPN CONTROL-POINT command is used to identify the router.
The LINK-STATION defines the connection to the router. (This statement is required in at least one
of two APPN nodes connected over a link.)
The PORT defines a point of connection into the APPN network.
The APPN ROUTING command is optional and will automatically start APPN routing when the
router is started.
!
appn link-station linkA
complete
!
appn port porta dlsw
complete
!
appn routing
!
end
center routers to maximize scalability and availability. The DLUR router routes traffic directly to the
correct migration data host using APPN routing. (In the After picture, if there were really no FEPs,
you could convert the ICNs to NNs and the MDHs to ENs.)
ESCON Coupling
Director Facility
ESCON Coupling
Director Facility
APPN
NN/DLUR NN/DLUR
but uses APPN for attaching to this network. In the future, as more enterprises select this
connectivity option, the value-added network provider hopes to replace some FEPs with Cisco
channel-attached routers.
Note For more detail on APPN, refer to the Cisco APPN Design and Implementation guide.
Before
Value Added
Enterprise A Network
NETID A NETID B
SNI
Back-to-Back
SDLC
Token
Ring
Value Added
Enterprise A Network
NETID A NETID B
VTAM
VTAM Border
Network SNI Node
Node Back-to-Back /ICN CNN
SDLC
After
Design Choices
Enterprise A and the value-added service provider chose to use the border node (BN) function of
APPN. They selected this alternative because Enterprise A was already migrating to APPN/DLUR,
and this option gave them the most application flexibility (either session end could initiate the
connection) while at the same time providing topology independence. Additional design alternatives
for SNI are discussed in the section, “The Cisco Channel-Attached Router as a FEP Alternative” in
the chapter, “Introduction to SNA on the CIP.”
Router Configuration
The following shows the router configuration in the final phase.
interface Channel 1/0
no ip address
no keepalive
csna 0100 00
interface Serial4/0
no ip address
encapsulation sdlc
no ip route-cache optimum
bandwidth 64
no keepalive
nrzi-encoding
sdlc vmac 4000.3745.0000
sdlc address 01
sdlc partner 4000.7507.0000 01
sdlc dlsw 1
complete
!
appn routing
!
end