On Monday, 01/14/2008 at 03:01 EST, Mark Post <[EMAIL PROTECTED]> wrote:

> That would be what Guest LANs are for, or disconnected VSWITCHes.  You 
can 
> define Guest LANs in either QDIO or HiperSocket modes.  Not too much 
benefit of 
> one type over the other these days.  Alan likes disconnected VSWITCHes 
because 
> by default, no one can connect to them.

Actually, Alan likes them because they have mandatory access and VLAN 
controls.  Guest LANs do not.

Some people have had difficulty with VSWITCH authorization because they 
think they are giving authorization when they really aren't, so we argue 
about whether a directory reference ought to a VSWITCH or Guest LAN is 
de-facto authorization.  (Maybe it should be, but it isn't.)

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to