© 2016 Unisys Corporation. All rights reserved. This video is provided “AS IS,” with all faults for informational purposes only and without warranty of any kind. It is not intended and cannot be relied upon as definitive instructions or advice in relation to the matters depicted therein. CPCommOS VLAN Support Jason Schultz, Software Engineer, Network Communications Unisys ClearPath OS 2200 Release 17.0 Technical Update

© 2016 Unisys Corporation. All rights reserved. 2 2 Agenda Virtual LAN overview Virtual LANs and Secure Fabrics Virtual LAN configuration example in CPCommOS

© 2016 Unisys Corporation. All rights reserved. Virtual LAN (VLAN) Overview

© 2016 Unisys Corporation. All rights reserved. 4 4 VLAN Basics What is a VLAN? –A software-defined capability supported at Layer 2 of a network that allows a local area network (LAN) to be segmented. Advantages of using VLANs –Have the same attributes as a physical LAN but allow end hosts to be easily grouped together even if they are not on the same network switch. –VLAN membership can be configured through software instead of physically relocating devices or connections. –Provides better security by isolating traffic based on the VLAN definitions. For more information see these Wikipedia topics –Virtual LAN –IEEE 802.1Q

© 2016 Unisys Corporation. All rights reserved. 5 5 Ethernet and InfiniBand VLANs Ethernet vs InfiniBand –CPCommOS in CP 17.0 supports VLANs in both Ethernet and InfiniBand networks Terminology Differences –Ethernet: VLAN / VLAN ID –InfiniBand: subinterface / PKey (Partition Key) Other Differences –Ethernet VLAN ID range 1 to 4096 –InfiniBand PKey range 0 to CPCommOS supports full InfiniBand range

© 2016 Unisys Corporation. All rights reserved. 6 6 VLAN Requirements Dorado 4300/6300 or newer system XNIOP level 5.43 or later –Available on Dorado 4300/6300 Plateau 2.3 –Available on Dorado 8300 Plateau 2.1 Network configured to support VLANs –Switch specific

© 2016 Unisys Corporation. All rights reserved. VLANs and Secure Fabrics

© 2016 Unisys Corporation. All rights reserved. 8 8 VLANs and Secure Fabrics Introduced in CPCommOS to support Secure Fabrics –InfiniBand based Interconnect –Logical subsets of the physical Interconnect –Provide an automated method to divide the physical fabric into multiple independent fabrics –Enables definition of a set of NEPPs/PEPPs that can communicate with each other but cannot communicate with other NEPPs/PEPPs that are not part of the secure fabric NEPP – nonpartitionable enterprise partition platform PEPP – partitionable enterprise partition platform For more information on Secure Fabrics –Section 4.7 of “ClearPath Forward Overview and Planning Guide” Unisys Document

© 2016 Unisys Corporation. All rights reserved. CPCommOS Configuration Example Ethernet-based VLAN

© 2016 Unisys Corporation. All rights reserved. 10 VLAN Configuration Example: VLAN-ID New VLAN-ID field on NIC-INTERFACE configuration statement. NIC-INTERFACE,NIC1 ; SLOT,1 ; DEVICE,2 ; FUNCTION,0 ; VLAN-ID,401 ; IPV4-ADDRESS,IPADDR1 ; IP-ADDRESSES, The VLAN-ID configured in CPCommOS must be configured in the network –Switch specific – see next slide –CPCommOS allows multiple VLANs on a NIC port; not all Ethernet switches support this.

© 2016 Unisys Corporation. All rights reserved. 11 VLAN Configuration Example: Netgear Switch

© 2016 Unisys Corporation. All rights reserved. 12 VLAN Configuration Example: BONDs BONDs can specify NIC-INTERFACE statements that all belong to the same VLAN NIC-INTERFACE,NIC1 ; SLOT,1 ; DEVICE,2 ; FUNCTION,0 ; VLAN-ID,401 ; IPV4-ADDRESS,IPADDR1 NIC-INTERFACE,NIC2 ; SLOT,2 ; DEVICE,2 ; FUNCTION,0 ; VLAN-ID,401 ; IPV4-ADDRESS,IPADDR1 IPV4-ADDRESS,IPADDR1 ; IP-ADDRESSES, BOND,BOND1 NIC-INTERFACE,NIC1,NIC2 VLAN-ID 401 is defined on both NIC-INTERFACEs NIC1 is the primary active interface NIC2 is the inactive backup

© 2016 Unisys Corporation. All rights reserved. 13 Summary VLANs are a new feature of CPCommOS, but not CPComm VLANs enable increased security and convenience for isolating LAN traffic VLANs enable Secure Fabrics on ClearPath Forward VLANs must be configured in both CPCommOS and your switches

© 2016 Unisys Corporation. All rights reserved. Thank You Unisys offers a comprehensive set of ClearPath Forward® services to enrich the value of your ClearPath Forward applications, data and systems. Please contact your Unisys representative for more information. Unisys and other Unisys products and services mentioned herein, as well as their respective logos, are trademarks or registered trademarks of Unisys Corporation. All other trademarks referenced herein are the property of their respective owners.