Architecture for agentless monitoring on IBM MQ
When used in this configuration, MVMM utilizes the IBM MQ client bindings and the IBM MQ MQCONNX call to connect to the remote IBM MQ queue managers via a CLNTCONN/SVRCONN channel pair. By default, the MVMM Agentless Services connect using the SYSTEM.ADMIN.SVRCONN server connection channel to each queue manager and send messages to the SYSTEM.ADMIN.COMMAND.QUEUE and retrieve replies from a dynamic queue created based upon the SYSTEM.MQSC.REPLY.QUEUE model queue. The actual names of the channel and reply queue can be changed. See the Agentpref Utility for details.
Because no BMC software is installed on the monitored MQ Server, the MQ Administrator must ensure that the specified queues and channel are defined and that the Agentless Services can connect to the monitored queue manager as a client and perform administrative operations. These operations include, but are not limited to:
- Opening the required port in any firewalls
- Verifying network connectivity and host resolution between the MVMM Agentless Services and the monitored queue manager
- Ensuring that the MVMM Agentless Services have and are configured for any required SSL certificates, security exits
- Ensuring that no MQ ChannelAuth rules block access to the target queue manager
- Ensuring that the MVMM Agentless Services run under or are mapped to a user with full MQ administrative authority on the monitored queue manager
See the IBM documentation for details of establishing an MQ Client Connection.