On Wednesday, 06/02/2010 at 09:49 EDT, Offer Baruch <[email protected]> wrote:
> I am sharing 2 OSA with 4 z/OS and 2 z/VMs. > Each z/VM is using its own VLAN using VLAN tagging and the z/OS is using its > own VLAN as a native VLAN. In general, host traffic should not use the native VLAN. There are switch-switch protocols that travel on the native VLAN and any host with native VLAN access can potentially corrupt them if they are active. Some protocols always use VLAN 1, some use the native VLAN. If you've disabled all the management protocols, fine, but IMO is still a Bad Idea. An accident waiting to happen. Any first-level entity connected to a trunk port needs to be tagging frames unless it is specifically doing switch-switch management stuff. Not only is it safer, it's more obvious that you are connected to a network switch with more than the usual privilege. One of the reasons I like to define a VSWITCH with VLAN 666 (for example) is that the default VLAN and the native VLAN are different. This ensures that CP will always tag the frames, even if you fail to explicitly authorize the guest to a VLAN. When the default VLAN and native VLAN are the same, all guest traffic on the default VLAN goes out untagged. As an aside, watch out for switches that have had the native VLAN changed to something other than 1 - the value for DEFINE VSWITCH .. NATIVE x must match. Alan Altmark z/VM Development IBM Endicott ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
