I can't believe there isn't a single place that has worked examples of
virtual Ethernet between IBM i partitions, but if there is one I can't
find it. I have an IBM i 7.2 partition that is the host for an IBM i
7.2 guest partition. The host partition has the physical Ethernet
adapters. What I want to do is create a Virtual Ethernet between the
two partitions so I can FTP between them. I'll worry about routing
external clients (like 5250 sessions) later.

I followed the instructions for creating Virtual Ethernet adapters with
the HMC.
http://www-01.ibm.com/support/knowledgecenter/POWER8/p8hat/p8hat_configvirtethp6.htm?cp=POWER8%2F1-6-1-0-3-4-2-2
This looks so straightforward I may be lulling myself into complacency.
Here are the two adapter configurations:

Host:
Adapter id: 2
Virtual switch: ETHERNET0
VLAN ID: 1
Required: False
IEEE 802.1q: False
Additional VLAN IDs:
Access external network: True
Trunk priority: 1

Guest:
Adapter id: 3
Virtual switch: ETHERNET0
VLAN ID: 1
Required: True
IEEE 802.1q: False
Additional VLAN IDs:
Access external network: False


The closest thing I could find to 'How to create Virtual Ethernet for
IBM i 7.2' is this:
http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_72/rzai2/rzai2virtethernet.htm
which describes how to share a physical adapter between a host and
guest. Which I probably eventually want. I followed the instructions
and came up with these line descriptions:

Host:
wrkhdwrsc *cmn

Resource name . . . . . . . : CMN13
Text . . . . . . . . . . . . : Ethernet Port
Type-model . . . . . . . . . : 268C-002
Serial number . . . . . . . : 00-00000
Part number . . . . . . . . :
Location : U8286.41A.21EF0DV-V1-C2-T1

dsplind veth1

LIND VETH1
OPTION *BASIC
*ELAN

RSRCNAME CMN13
BRIDGE *NONE
ONLINE *YES
VRYWAIT *NOWAIT
NETCTL VETH1NET
ADPTADR 621B5A661102
EXCHID 056FBAF0
ETHSTD *ETHV2
LINESPEED 1G
*AUTO
DUPLEX *FULL
*AUTO
SRVOPT *NONE


Guest:

wrkhdwrsc *cmn

Resource name . . . . . . . : CMN04
Text . . . . . . . . . . . . : Ethernet Port
Type-model . . . . . . . . . : 268C-002
Serial number . . . . . . . : 00-00000
Part number . . . . . . . . :
Location : U8286.41A.21EF0DV-V2-C3-T1

dsplind veth1

Line description . . . . . . . . . : VETH1
Option . . . . . . . . . . . . . . : *BASIC
Category of line . . . . . . . . . : *ELAN

Resource name . . . . . . . . . . : CMN04
Bridge identifier . . . . . . . . : *NONE
Online at IPL . . . . . . . . . . : *YES
Vary on wait . . . . . . . . . . . : *NOWAIT
Network controller . . . . . . . . : VETH1NET
Local adapter address . . . . . . : 621B54F2DE03
Exchange identifier . . . . . . . : 056FBA0F
Ethernet standard . . . . . . . . : *ETHV2
Line speed . . . . . . . . . . . . : 1G
Current line speed . . . . . . . . : *AUTO
Duplex . . . . . . . . . . . . . . : *FULL
Current duplex . . . . . . . . . . : *AUTO
Serviceability options . . . . . . : *NONE


All of that seems straightforward, no drama. Now comes the part that
seems insurmountable: assigning IP addresses. Just to try to get
something going, I have tried host = 10.1.10.1 and guest = 10.1.10.2.

Host TCP/IP config:

cfgtcp 1

Internet Subnet Line Line
Address Mask Description Type

10.1.0.4 255.255.255.0 ETHLINE *ELAN
10.1.10.1 255.255.255.0 VETH1 *ELAN
10.1.241.4 255.255.255.0 ETHLINEPVT *ELAN
127.0.0.1 255.0.0.0 *LOOPBACK *NONE
192.168.101.2 255.255.255.0 ETHLINEPUB *ELAN

cfgtcp 2

Route Subnet Next Preferred
Destination Mask Hop Interface

*DFTROUTE *NONE 10.1.0.1 10.1.0.4
*DFTROUTE *NONE 10.1.241.2 10.1.241.4
*DFTROUTE *NONE 192.168.101.1 192.168.101.2
10.0.2.0 255.255.255.0 10.1.0.1 *NONE
...
10.1.10.2 *HOST 10.1.10.2 10.1.10.1
...

wrkcfgsts *lin veth1

VETH1 ACTIVE
VETH1NET ACTIVE
VETH1TCP ACTIVE

Guest TCP/IP config:

cfgtcp 1

Internet Subnet Line Line
Address Mask Description Type

10.1.10.2 255.255.255.0 VETH1 *ELAN
127.0.0.1 255.0.0.0 *LOOPBACK *NONE

cfgtcp 2

Route Subnet Next Preferred
Destination Mask Hop Interface

*DFTROUTE *NONE 10.1.10.1 10.1.10.2

wrkcfgsts *lin veth1

VETH1 ACTIVE
VETH1NET ACTIVE
VETH1TCP ACTIVE

Everything seems to come up OK when I do a STRTCPIFC.
I can ping the local machine, ie from host ping '10.1.10.1' works.
Likewise from guest ping '10.1.10.2' works, so the interface seems OK,
but ping to the opposite LPAR does not work.

(on the guest)
PING reply 5 from 10.1.10.2 took 0 ms. 256 bytes.
Round-trip (in milliseconds) min/avg/max = 0/0/0.
Connection verification statistics: 5 of 5
4 > ping '10.1.10.1'
Verifying connection to host system 10.1.10.1.
No response from host within 1 seconds
No response from host within 1 seconds
No response from host within 1 seconds
No response from host within 1 seconds
No response from host within 1 seconds
Connection verification statistics: 0 of 5

I used netstat 2 to look at the routes, and on the guest LPAR, I get this:

Route Subnet Next Route
Destination Mask Hop Available
10.1.10.0 255.255.255.0 *DIRECT *YES
10.1.10.1 *HOST 10.1.10.1 *NO
127.0.0.0 255.0.0.0 *DIRECT *YES
224.0.0.0 240.0.0.0 *DIRECT *YES
224.0.0.0 240.0.0.0 *DIRECT *YES
*DFTROUTE *NONE 10.1.10.1 *NO

It looks better on the host:

Route Subnet Next Route
Destination Mask Hop Available
10.1.241.0 255.255.255.0 *DIRECT *YES
10.1.10.0 255.255.255.0 *DIRECT *YES
10.1.0.0 255.255.255.0 *DIRECT *YES
10.1.10.2 *HOST 10.1.10.2 *YES
...

No route available from the guest to the host. I've hit the limit of my
understanding of how to manipulate TCP/IP configuration with IBM i.
Shouldn't a packet from .2 which is bound for .1 go out the one and only
interface configured (10.1.10.2)? Which is VLAN 1 on the guest. And
shouldn't VLAN 1 on the guest be connected to VLAN 1 on the host? Which
line is attached to TCP/IP interface 10.1.10.1?


This thread ...

Follow-Ups:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].