Previous Topic: Define a NodeNext Topic: Extending Security Using the Application Interface


CPF Gateway Support

CPF gateway support is an option that allows a CPF node to connect to a CPF network via a single connection point. Using this option, one CPF node acts as a "CPF gateway" through which another node can gain access to the entire CPF network. When used, the named CPF node must be connected to the CPF network only via this one definition and connection point.

Whenever a command is received from a remote system, CPF determines if the command was received from, or must be forwarded to, any CPF gateway node(s). Commands from a gateway node are then re‑propagated to other CPF nodes as though they had originated locally. Commands from non‑gateway nodes are re‑propagated to gateway nodes.

A gateway connection is specified when a TSS CPFNODES() control option statement includes the GW option.

The CPFNODES control option and connection method must be used when a CA Common Services node is added to a CPF network containing more than one mainframe. A CA Common Services node must be connected only to one CA Top Secret mainframe within a CPF network, and that mainframe must specify the GW option on the CPFNODES() statement used to define the CA Common Services node.

This diagram illustrates how the gateway operand would be correctly used at only three points of an hypothetical network. Node C acts as the CPF gateway/server for node D. Node D acts as the CPF gateway/server for node E and node F.