WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] XCP 1.1 Management VLAN

To: Brett Westover <bwestover@xxxxxxxxxxx>
Subject: Re: [Xen-users] XCP 1.1 Management VLAN
From: Javier Frias <jfrias@xxxxxxxxx>
Date: Thu, 17 Nov 2011 21:32:04 -0500
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Thu, 17 Nov 2011 18:33:27 -0800
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=TfEXMYJnAnGHK3DPCRh4ySJbKhc5WpEHxWMjOsCMPRo=; b=qr+hPcssTwUK7LDdx/9BJsWGr+7RBW3BOO8l7RLxymFVOSOqIhWcFRAb9WUqVMSLxu PQTjsQhhuJgF5DiOpbjN3S96F3CUAlmoPJ7cWZq9kmoeemThLfuWvgI8maxcEwzcrMQe hV6wjzhTYGwbhPX5c6Uw7quEEq1LYd5CpA0g4=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <2B541E71EE131F4F9F04B30362609C4B013D3D73@xxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <2B541E71EE131F4F9F04B30362609C4B013D3D71@xxxxxxxxxxxxxxxxxxxx> <4EC5B0B8.5030604@xxxxxxxxx> <2B541E71EE131F4F9F04B30362609C4B013D3D73@xxxxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
I've tackled this another way. (assuming you are using XCP )

My XCP vm servers usually have two gigabit ports, each connected to redundant switches. I make all vlan's accessible via each of these ports via  802.1Q trunk, and use active/passive on the bridge. Then I create interfaces  for each  of the vlans, that I bridge to my vm's.  But as you've seen, the management vlan can not be on a tagged interface.

The  trick to have the management interface work on this setup is to have your switch port configured with a native non-tagged vlan.  A slight security issue, just make sure you restrict your vm's to only the tagged interfaces. There's even an example on the manual for this. Hope this helps.

-Javier

On Thu, Nov 17, 2011 at 8:24 PM, Brett Westover <bwestover@xxxxxxxxxxx> wrote:
>No, sorry. You can try to hack the xcp/xapi underlying configuration,
>but this require significant understanding of xapi internals (and, of
>cause, every your change will be your own problem without community
>support).

>But outside this you can not use tagged vlans for management interface
>of xapi.

Do you know the reason for this restriction? It seems like a matter of a
settings change in openvswitch to allow any interface to accept tagged
frames. I must be misunderstanding some requirement of xapi.


So what does one do in my situation? Since I only have two interfaces,
and one essentially gets eaten up for management only, do I put both the
LAN and SAN traffic on the same interface?






_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
<Prev in Thread] Current Thread [Next in Thread>