It's time for me to update my Best Practice for VSWITCH definition With
the changes that were made to z/VM 6.1 for zEnterprise ensembles, but
which benefit non-ensemble configurations, there's a new sheriff in town.
Forget "VLAN 666". Here's what you really want to see:
DEFINE VSWITCH ... VLAN AWARE NATIVE NONE
This does the following:
1. Sets the VSWITCH in trunk mode
2. Requires that you explicitly authorize a guest to use one or more VLAN
IDs.
3. If you don't provide an authorization, outbound traffic from the guest
will be discarded.
4. No untagged frames from VLAN-aware guests will be emitted by the
VSWITCH.
The new "VLAN AWARE" and "NATIVE NONE" are not available on z/VM 5.4. You
will have to continue with the VLAN 666 trick.
Regards,
Alan
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
