Page History

...

• Though CloudStack didn't control switch, the switches must support Private VLAN in order to get the whole setup work. This would require certain Cisco Catalyst switches.
  • It's likely we would need Catalyst 4500 series for PVLAN promiscuous trunk support.
• The topological of switch and router would be:
  • All L2 switch(which are aware of PVLAN) connected to each other, and one of them(and only one of them) connect to router.
  • All the ports connected to the host would be configured in trunk mode, allow mgmt vlan, primary vlan(public vlan) and secondary isolated vlan.
  • The switch port connect to the router would be configured in PVLAN promiscuous trunk mode, which would translate secondary isolated vlan to primary vlan for router(which doesn't have knowledge of PVLAN).
  • If your Catalyst switch support PVLAN but not PVLAN promiscuous trunk mode(AFAIK, only Catalyst 4500 series support the mode), you need:
    • 1. Configure one of switch port as trunk for mgmt network(mgmt vlan)
    • 2. For each PVLAN, connect one port of Catalyst switch to upper switch, set the port in Catalyst Switch in promiscuous mode for one pair of PVLAN, set the port in upper switch to "access" mode, only allow traffic of primary vlan of the PVLAN pair.

Web Services APIs

Modify createNetworkCmd:

...