[cross-posted to IBMVM and LINUX-390] I just want to bring to everyone's attention some new support for the Virtual Switch. APAR VM64281 for z/VM 5.3 (only) provides a "port isolation" function that prevents guests on the same VSWITCH or VLAN (if the VSWITCH is VLAN-aware) from talking directly to each other. You can decide what to do with packets destined for other guests on the LAN segment: silently drop them or forward them, as-is, out to the switch.
This new function became available on February 26th. For more information, see p.58 of the -05 edition of the z/VM Connectivity book, http://publibz.boulder.ibm.com/epubs/pdf/hcsc9b21.pdf. If you have any questions, please post them to IBMVM. Thanks. Regards, Alan Alan Altmark Sr. Software Engineer IBM z/VM Development
