Skip to content

Commit 002893c

Browse files
Extend PVLAN documentation (#86)
* Extend PVLAN documentation * Commnity type note * Update source/adminguide/networking/isolation_in_advanced_zone_with_vlan.rst * Update source/adminguide/networking/isolation_in_advanced_zone_with_vlan.rst Co-authored-by: Andrija Panic <45762285+andrijapanicsb@users.noreply.github.com>
1 parent 947eb27 commit 002893c

File tree

1 file changed

+26
-12
lines changed

1 file changed

+26
-12
lines changed

source/adminguide/networking/isolation_in_advanced_zone_with_vlan.rst

Lines changed: 26 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -40,16 +40,19 @@ Supported Secondary VLAN types
4040
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4141

4242
Of the three types of Private VLAN (promiscuous, community and isolated),
43-
CloudStack supports **one promiscuous** PVLAN and **one isolated** PVLAN **per
44-
primary VLAN**. Ergo, community PVLANs are not currently supported.
45-
PVLANs are only currently supported on shared networks.
43+
CloudStack supports **one promiscuous** PVLAN, **one isolated** PVLAN and **multiple community** PVLANs **per
44+
primary VLAN**.
45+
PVLANs are currently supported on shared and layer 2 networks.
4646
The PVLAN concept is supported on KVM (when using OVS), XenServer (when using OVS), and VMware hypervisors
4747

4848
.. note::
4949
OVS on XenServer and KVM does not support PVLAN natively. Therefore,
5050
CloudStack managed to simulate PVLAN on OVS for XenServer and KVM by
5151
modifying the flow table.
5252

53+
.. note::
54+
Community PVLANs are only currently supported on VMware hypervisors.
55+
5356
Prerequisites
5457
~~~~~~~~~~~~~
5558

@@ -77,23 +80,34 @@ Prerequisites
7780
- Before you use PVLAN on XenServer and KVM, enable Open vSwitch (OVS).
7881

7982

80-
Creating a PVLAN-Enabled Shared Network
81-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
83+
Creating a PVLAN-Enabled Network
84+
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
85+
86+
PVLAN-enabled networks can be either shared or layer 2 networks.
8287

83-
For a general description of how to create a shared netowrk see `"configuring a shared guest network" <#configuring-a-shared-guest-network>`_.
88+
For a general description of how to create a shared network see `"configuring a shared guest network" <#configuring-a-shared-guest-network>`_.
8489

85-
On top of the parameters required to create a *normal* shared network, the following
90+
On top of the parameters required to create a *normal* shared or layer 2 network, the following
8691
parameters must be set:
8792

8893
- **VLAN ID**: The unique ID of the primary VLAN that you want to use.
8994

90-
- **Secondary Isolated VLAN ID**:
95+
- **Secondary Isolated VLAN ID**: The PVLAN ID to use within the primary VLAN.
96+
97+
- **PVLAN Type**: The PVLAN type corresponding to the PVLAN ID to use within the primary VLAN.
98+
99+
Creating a PVLAN-enabled network can be done in multiple ways depending on the PVLAN type:
100+
101+
- For a **promiscuous** PVLAN:
102+
- Set the secondary VLAN ID to the same VLAN ID as the primary VLAN that the promiscuous PVLAN will be inside (available only via API, not UI), or
103+
- Set the PVLAN type to "Promiscuous" and do not set the secondary VLAN ID.
91104

92-
- For a **promiscuous** PVLAN, set this to the same VLAN ID as the primary VLAN
93-
that the promiscuous PVLAN will be inside.
94-
- For an **isolated** PVLAN, set this to the PVLAN ID which you wish to use
95-
inside the primary VLAN.
105+
- For an **isolated** PVLAN:
106+
- Set the secondary VLAN ID to the PVLAN ID which you wish to use inside the primary VLAN (available only via API, not UI), or
107+
- Set the PVLAN type to "Isolated" and set the secondary VLAN ID to the PVLAN ID which you wish to use inside the primary VLAN.
96108

109+
- For a **community** PVLAN:
110+
- Set the PVLAN type to "Community" and set the secondary VLAN ID to the PVLAN ID which you wish to use inside the primary VLAN.
97111

98112
.. |pvlans.png| image:: /_static/images/pvlans.png
99113
:alt: Diagram of PVLAN communications

0 commit comments

Comments
 (0)