z/VM: CP Commands and Utilities Reference - z/VM - IBM

Usage Notes
Examples
Responses
Messages
External Security Manager (ESM) is in control of the LAN, it may override the
CP access list. Existing connections to the LAN are not affected.
ACCOUNTing ON
ACCOUNTing OFF
allows a Class B user to control whether accounting records are created for the
LAN specified.
1. If the VM LAN is defined with the UNRESTRICTED attribute, any user can
connect a virtual adapter to that LAN. The CP access list has no meaning for an
UNRESTRICTED LAN. This will be overridden if an External Security Manager
(ESM) is in control of the Virtual Switch.
The following examples apply when CP, not an ESM, is protecting the VM LAN:
1. SET LAN - Class G:
To modify a user LAN named TECHINFO by adding user REYNOLDS to the
access list, enter:
cp set lan techinfo grant reynolds
command complete
2. SET LAN - Class B:
To modify a SYSTEM LAN named ADMIN by adding user MAINT to the access
list, enter:
cp set lan admin ownerid system grant maint
command complete
Note: This must be done by a user with Class B privileges since the LAN is not
owned by the invoker.
3. SET LAN - Class B:
To begin generating account records for a SYSTEM LAN named ADMIN enter:
cp set lan BKT614 accounting on
command complete
Note: This must be done by a user with Class B privileges since the
ACCOUNTing option is specified.
Response 1:
command complete
is the normal response from this command.
HCP2783E LAN ownerid lanname does not exist
HCP2795E You are not authorized to SET LAN
lanname for OWNERID ownerid
HCP2795E You are not authorized to override LAN
ACCOUNTING
SET LAN
Chapter 2. CP Commands 1269