× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



The ability to use VLAN tags truly simplifies everything. Why would I want a separate Ethernet line, controller, and device for every separate VLAN? In addition I need to configure each virtual network adapter so I end up with a whole bunch of stuff to no gain. If you can tag, tag. Simple, Quick, Efficient.

That said, it's not for everything! For example if you have PowerHA Geomirror or Mimix or other HA software that really pounds a pipe I would keep that traffic on a separate Ethernet line to avoid queuing issues that might slow production traffic.

Another other use I like is the ability to install or upgrade or PTF a partition using network based virtual optical. I always keep that on a separate virtual adapter as you cannot use the same one for both IBM i and the Service Tools adapter at the same time. Additionally you need to tag that adapter as the alternate restart device in the partition profile.

SECURITY NOTE however. DO pay attention to the allowed VLANs on the virtual adapters!! This is especially true in a multi-tenant environment. If you open that up you theoretically allow someone to add an interface in a VLAN you don't want them in and thus security is compromised.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 5/29/2018 9:50 AM, Steve Pavlichek wrote:
What are best practices for configuring VLANs to IBM I LPARs running under VIOS? Prior to v7r2, we would configure the VLAN on the virtual ethernet adapter on the LPAR profile. Now that v7r2/v7r3 support VLAN tagging at the OS, which is preferred, on the Profile or in the OS?

Say I need to support 5 interfaces each on different VLANs. Should I define 5 virtual ethernet adapters on the Profile and then have ETHLIN01-05 or should I define 1 virtual ethernet adapter on the Profile and add the VLAN tag to the TCP/IP Interface and share ETHLIN01 between all 5? I would think the second option sounds like a cleaner configuration, but networking has never been my strongest area.


As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow-Ups:
Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.