When the SAG is located in a demilitarized zone

The MSIF services use the following subsystems:
  • IBM® MQ, which provides the queues used to pass messages to an SAG workstation
  • NFS or MQHA, which allows the system hosting these services and the SAG workstation to share files
If an SAG operates in a demilitarized zone (DMZ), you must open destination ports for the server portions of the following programs:
The portmapper daemon
Port number 111 is assigned by the Internet Assigned Numbers Authority to the portmapper daemon. If NFS is used, open this port number for both the TCP and UDP protocols.
The nfs daemon
If NFS is used, port number 2049 is assigned by the Internet Assigned Numbers Authority to the nfs daemon. Open this port number for the protocol (TCP or UDP) that is used.
The mount daemon
The mount daemon has no fixed port assigned. You can control the port assigned to it by inserting an entry in the /etc/services file. If NFS is used, open this port number together with the protocol (TCP or UDP) that is used.

If the SAG is located within a DMZ without a Domain Name System (DNS) server, when defining the client connection to the queue manager used by the SAG, you must specify the IP address instead of the host name.