@@ -40,16 +40,19 @@ Supported Secondary VLAN types
4040~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4141
4242Of the three types of Private VLAN (promiscuous, community and isolated),
43- CloudStack supports **one promiscuous ** PVLAN and **one isolated ** PVLAN **per
44- primary VLAN **. Ergo, community PVLANs are not currently supported.
45- PVLANs are only currently supported on shared networks.
43+ CloudStack supports **one promiscuous ** PVLAN, **one isolated ** PVLAN and ** multiple community ** PVLANs **per
44+ primary VLAN **.
45+ PVLANs are currently supported on shared and layer 2 networks.
4646The PVLAN concept is supported on KVM (when using OVS), XenServer (when using OVS), and VMware hypervisors
4747
4848 .. note ::
4949 OVS on XenServer and KVM does not support PVLAN natively. Therefore,
5050 CloudStack managed to simulate PVLAN on OVS for XenServer and KVM by
5151 modifying the flow table.
5252
53+ .. note ::
54+ Community PVLANs are only currently supported on VMware hypervisors.
55+
5356Prerequisites
5457~~~~~~~~~~~~~
5558
@@ -77,23 +80,34 @@ Prerequisites
7780- Before you use PVLAN on XenServer and KVM, enable Open vSwitch (OVS).
7881
7982
80- Creating a PVLAN-Enabled Shared Network
81- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
83+ Creating a PVLAN-Enabled Network
84+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
85+
86+ PVLAN-enabled networks can be either shared or layer 2 networks.
8287
83- For a general description of how to create a shared netowrk see `"configuring a shared guest network" <#configuring-a-shared-guest-network >`_.
88+ For a general description of how to create a shared network see `"configuring a shared guest network" <#configuring-a-shared-guest-network >`_.
8489
85- On top of the parameters required to create a *normal * shared network, the following
90+ On top of the parameters required to create a *normal * shared or layer 2 network, the following
8691parameters must be set:
8792
8893- **VLAN ID **: The unique ID of the primary VLAN that you want to use.
8994
90- - **Secondary Isolated VLAN ID **:
95+ - **Secondary Isolated VLAN ID **: The PVLAN ID to use within the primary VLAN.
96+
97+ - **PVLAN Type **: The PVLAN type corresponding to the PVLAN ID to use within the primary VLAN.
98+
99+ Creating a PVLAN-enabled network can be done in multiple ways depending on the PVLAN type:
100+
101+ - For a **promiscuous ** PVLAN:
102+ - Set the secondary VLAN ID to the same VLAN ID as the primary VLAN that the promiscuous PVLAN will be inside (available only via API, not UI), or
103+ - Set the PVLAN type to "Promiscuous" and do not set the secondary VLAN ID.
91104
92- - For a **promiscuous ** PVLAN, set this to the same VLAN ID as the primary VLAN
93- that the promiscuous PVLAN will be inside.
94- - For an **isolated ** PVLAN, set this to the PVLAN ID which you wish to use
95- inside the primary VLAN.
105+ - For an **isolated ** PVLAN:
106+ - Set the secondary VLAN ID to the PVLAN ID which you wish to use inside the primary VLAN (available only via API, not UI), or
107+ - Set the PVLAN type to "Isolated" and set the secondary VLAN ID to the PVLAN ID which you wish to use inside the primary VLAN.
96108
109+ - For a **community ** PVLAN:
110+ - Set the PVLAN type to "Community" and set the secondary VLAN ID to the PVLAN ID which you wish to use inside the primary VLAN.
97111
98112.. |pvlans.png | image :: /_static/images/pvlans.png
99113 :alt: Diagram of PVLAN communications
0 commit comments