On Sun, May 15, 2011 at 22:17, Xu-Yang <[email protected]> wrote: > I want to isolate several switches from the production network using > flowvisor. > Here's an example of flowspace configure: > dpid1 100 any Slice:test=4 > dpid2 100 any Slice:test=4 > ... > any 10 any Slice:production=4 > But these switches can still ping others while two slices' nox running > 'switch' application. (Though it's not the case I want, it seems to > be correct.) Can flowvisor isolate the network in a way like vlan (but not > using vlan)? I mean, the switches can't connect to others as if they are in > different vlans.
You can isolate them, but perhaps not the way you're doing it. Instead of setting Slice: production to have access to "any" DPID, you may need to explicitly give it access to only the switches you want. Sadly this is no longer dynamic, but I'm not sure there's any amount of priority munging that you can do to get FlowVisor to exclude switches from other slices without explicitly managing the devices in every slice. -- Nick _______________________________________________ openflow-discuss mailing list [email protected] https://mailman.stanford.edu/mailman/listinfo/openflow-discuss
