Re: VLAN and GRANT

2011-04-05 Thread Ronald van der Laan
Terry, To solve the problem of having to grant two accesses for each guest, I have defined RACF groups that have the double access and connect the Linux guests to the RACF groups. As a bonus, a RAC LU userid also shows the vlans the guests is authorised to... and a RAC LG VLN# shows the

VLAN and GRANT

2011-04-04 Thread Martin, Terry R. (CMS/CTR) (CTR)
tagging. Everything looks good on the switch side but when I try testing a z/Linux guest in terms of having it connect to the VSWITCH via VLAN 851 it still does not get to the Subnet pointed to by VLAN 581. I did the GRANT for this guest: SET VSWITCH VSE4DD11 GRANT E49L250D VLAN 851. What am I

Re: VLAN and GRANT

2011-04-04 Thread Alan Altmark
to the Subnet pointed to by VLAN 581. I did the GRANT for this guest: SET VSWITCH VSE4DD11 GRANT E49L250D VLAN 851. What am I missing? Now I did not do anything with RACF for this do I need to allow something in RACF? Please see VLAN ID-qualified profiles in the RACF Security Administrator's Guide

Re: VLAN and GRANT

2011-04-04 Thread Alan Altmark
On Monday, 04/04/2011 at 01:38 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Thanks. One thing since I have never set up anything for the VMLAN RACF class from the get go I displayed what it looks like now and here is what I see. It looks like everything is allowed.

Re: VLAN and GRANT

2011-04-04 Thread Martin, Terry R. (CMS/CTR) (CTR)
] On Behalf Of Alan Altmark Sent: Monday, April 04, 2011 2:50 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VLAN and GRANT On Monday, 04/04/2011 at 01:38 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Thanks. One thing since I have never set up anything for the VMLAN RACF class