z/VM: CP Commands and Utilities Reference - z/VM - IBM

SET VSWITCH
Examples
The PORTNAME operand is optional. However, some levels of the OSA
Express adapters require that the PORTNAME operand is specified. When
such an adapter is in use and the PORTNAME operand is omitted, an error
message is displayed during switch initialization.
If the device is already started, you must stop it by issuing the SET VSWITCH
switchname DISCONNECT command before changing the port name.
6. VLAN configuration information can be found in Planning for Guest LANs and
Virtual Switches in z/VM: Connectivity.
7. PRIROUTER is required only when IP forwarding (routing) nodes will be
coupled to the switch. Router nodes provide connectivity for their LAN
segments (remote nodes) through their switch connection. When Router nodes
are deployed, their switch connection must be configured as PRIROUTER. In
addition to this, the switch itself must also be configured as PRIROUTER to
the OSA-E adapter. This will insure delivery of datagrams destined for LAN
segments that are connected through routers coupled to a switch. Only one
connection on each OSA-Express card can be designated as PRIROUTER. If
the switch is successful in establishing PRIROUTER on the OSA-Express
card, no other node (or switch) sharing the same OSA-Express card will be
able to act as PRIROUTER. If another connection has already been
established as PRIROUTER, the switch will be left with NONROUTER status
(which is reflected in the QUERY VSWITCH response).
8. NONROUTER is the default mode for the switch. Every node is directly
coupled to the switch and the associated IP destinations are registered with
the OSA Express connection. This is the most efficient way to use the virtual
switch. In this mode, packets with an unrecognized IP destination are
automatically sent out through the switch connection.
9. If the Virtual Switch has been defined as VLAN UNAWARE, the PORTTYPE
option and the VLAN option on GRANT are not allowed.
10. If the Virtual Switch has been defined as VLAN aware and no VLAN
membership is given with the GRANT (or provided by an external security
manger), the guest is a member of the Virtual Switch’s default VLAN ID
(defvid).
11. If the Virtual Switch has been defined as VLAN aware and no PORTTYPE is
given with the GRANT, the guest is assigned the porttype of the Virtual
Switch’s default porttype (defporttype).
The following examples apply when CP, not an ESM, is protecting the VM LAN:
1. To allow user VMTCPIP to connect to virtual switch BIGANG and filter any
incoming traffic using VLAN 9, specify the following:
set vswitch bigang grant vmtcpip vlan 9
2. To remove the authority of LINUX1 to connect to virtual switch BIGANG, specify
the following:
set vswitch bigang revoke linux1
3. To connect virtual switch BIGANG to a real LAN using device FD00, specify the
following:
set vswitch bigang rdev fd00
1424 z/VM: CP Commands and Utilities Reference
4. To disconnect virtual switch BIGANG from device FD00 and reconnect it to a
real LAN using device FE00 and portname ableport, specify the following:
set vswitch bigang disconnect
set vswitch bigang portname ableport
set vswitch bigang rdev fe00
set vswitch bigang connect