It may be n/a to those in the know... And of course we are :) --- all of our 
prod systems are perfectly in-the-know... But we have some in dev that are 
waiting for the OSA fairy to make them look like the rest of the crowd and 
their vswitches seem to be from the dark ages ...  And I'm guessing we are not 
the only ones being somewhat aware :) --- should be in the PSP bucket r.s.n. or 
you'll get a lot of phone calls at 3am.




Marcy 
"This message may contain confidential and/or privileged information. If you 
are not the addressee or authorized to receive this for the addressee, you must 
not use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation."


-----Original Message-----
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf 
Of Alan Altmark
Sent: Sunday, July 12, 2009 10:06 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: [IBMVM] Change in RSU 0902 on vswitches?

On Monday, 07/13/2009 at 12:44 EDT, Marcy Cortes 
<marcy.d.cor...@wellsfargo.com> wrote:
> That's what I suspected.
> The PSP bucket needs a warning for the folks whose networks don't work 
after 
> 902.

I have forwarded your concern to the developers, though it is N/A to 
people who follow the listserver or attend my presentations on the subject 
 :-)  where I have been exhorting people for some time to 
DEFINE VSWITCH ....   NATIVE xxx VLAN yyy

- where xxx is the native VLAN of the attached switch.  It is given to you 
by the switch administrator.
- where yyy is a VLAN id that your switch admins have reserved for ports 
that have yet been assigned to a VLAN.  That VLAN is not routed anywhere; 
it is a dead-end.

And to explicitly GRANT each guest to ONLY the specifc VLAN it requires, 
NOT to VLAN yyy or VLAN xxx.  (xxx is ok if you want the guest to be able 
to send untagged frames to the switch - a generally Bad Idea since 
untagged frames are used to communicate with the switch itself!)

This way a QUERY will immediately reveal any basic misconfigurations and 
can be an audit point.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to