topic Re: Create InterVSX VLAN/Subnet? in General Topics

Create InterVSX VLAN/Subnet?

Andrew_Larrick — Tue, 16 May 2023 15:34:55 GMT

I am working on a project to Isolate multiple legacy applications that cannot, or its far too much work to re-ip.

I have figured out how to do this at a layer 3 level with 2 firewalls and a dummy network in between them. I plan to do this on a pair of virtual systems in a VSX cluster.

My Question is, is it possible to create a VLAN/Subnet combo that exists ONLY between two virtual systems in the same cluster? Or do I have to send this traffic out a switch just to have it come right back to the same hardware cluster?

Thanks for any help.

Drew Larrick

Re: Create InterVSX VLAN/Subnet?

genisis__ — Tue, 16 May 2023 18:39:24 GMT

I believe you can just create an internal WRP link if you want it to be just directly connect, you might also be able to create a virtual switch and link that way as well.

Re: Create InterVSX VLAN/Subnet?

Bob_Zimmerman — Tue, 16 May 2023 19:53:49 GMT

Yes, both of these definitely work.

Re: Create InterVSX VLAN/Subnet?

Andrew_Larrick — Thu, 18 May 2023 13:52:02 GMT

Can someone point me to a Doc that explains how to create a Vswitch with just an interal link? When I go to create a Vswitch it asks what Interface and/or VLAN, Do I just make something up even if it doesn't really exist in my Trunk?

Thanks,

Re: Create InterVSX VLAN/Subnet?

genisis__ — Thu, 18 May 2023 20:50:31 GMT

Create the vsw from the DMS that controls the VSX appliance. The from the individual DMS you should be able to create a WRP link

Re: Create InterVSX VLAN/Subnet?

Wolfgang — Fri, 19 May 2023 06:09:33 GMT

Communication between the two virtual systems via the virtual switch works only if both virtual systems are active on the same clusternode. Using VSLS and running one virtual system on node A and the other virtual system on node B requires communication via an external switch.

Re: Create InterVSX VLAN/Subnet?

genisis__ — Fri, 19 May 2023 20:09:11 GMT

That would make sense, so the design of this would require by VS's to be activate on one node.