HP Integrity Virtual Machines 4.3: Installation, Configuration, Administration

Using HP-UX VLANs manual. Do not use the hpvmnet command to create a virtual switch that
is associated with a VLAN port on the VM Host (that is, a LAN created with lanadmin -V).
This “nested VLAN” configuration is not supported.
Frames arriving at the vswitch from a guest can be “tagged” by the vswitch. Tagging consists of
inserting the VLAN ID information into the MAC header before forwarding the frame on. Tagged
frames destined for a guest are always stripped of the tag information in the frame before being
forwarded. For Integrity VM, only tag-unaware guests are supported.
To configure a VLAN, follow this procedure:
1. Create and start the vswitch. For example, to create and boot vswitch vmlan4 on lan1,
enter the following command:
# hpvmnet -c -S vmlan4 -n 1
# hpvmnet -b -S vmlan4
2. Use the hpvmnet command with the —u option to create the port and assign it a VLAN ID.
For example, to create ports 1 and 2 for VLAN 100, enter the following command:
# hpvmnet -S vmlan4 -u portid:1:vlanid:100
# hpvmnet -S vmlan4 -u portid:2:vlanid:100
3. Add the vswitch ports to the guest configuration using the hpvmmodify command. For
example, to add the new VLAN ports to guests vm1 and vm2, enter the following command:
# hpvmmodify -P vm1 -a network:lan::vswitch:vmlan4:portid:1
# hpvmmodify -P vm2 -a network:lan::vswitch:vmlan4:portid:2
The following command shows the resulting configuration:
# hpvmnet -S vmlan4
Name Number State Mode PPA MAC Address IP Address
======== ====== ======= ========= ====== ============== ===============
vmlan4 2 Up Shared lan4 0x00127942fce3 192.1.2.205
[Port Configuration Details]
Port Port Untagged Number of Active VM
Number state VLANID Reserved VMs
======= ============ ======== ============ ============
1 Active 100 2 vm1
2 Active 100 1 vm2
3 Active none 2 vm1
4 Active none 1 vm2
The two virtual machines, vm1 and vm2, have access to the virtual switch vmlan4 and are active
on VLAN 100. Specifically, port 1 (guest vm1) and port 2 (guest vm2) can communicate with each
other. Port 1 (guest vm1) and port 4 (guest vm2) cannot communicate with each other.
The hpvmnet command displays the following information about the VLAN ports:
• Port number.
• State of the port. Table 7-2 describes the possible VLAN port states:
Table 7-2 VLAN Port States
DescriptionState
The port is active and is allocated to a running guest. No other guests with the same vNIC
with the same vswitch and port can start
Active
The port is inactive and is allocated to a running guest. No other guests with the same vNIC
with the same vswitch and port can start.
Down
At least one guest reserved the port for its vNIC, but no guest that uses the port is running.
Reserved
No guest reserved the port for its vNIC. When a VLAN is configured on the port, that port
is displayed as Available. If no VLAN is configured, the port is not displayed at all.
Available
• The untagged VLAN ID number (if any)
134 Creating Virtual Networks