On Wed, Nov 14, 2018 at 2:24 PM <d.gengenbach@patagona.de> wrote:

We would like to separate our VM traffic completely from our host/storage network. As far as I can see, there is no definitive guide to achieve this by using VLANs/separate VM networks/subnetting.

Having separate NICs you don't even need separate VLANs. You can just use one NIC for your host/storage network, and use another NIC to create a VM network. You must of course make sure to separate these outside of the hosts.

VLANs are useful if you have just one NIC on your host, or want to have multiple networks on a single NIC. You can then create multiple VLAN networks (VLAN devices) on top of your NIC, and so achieve network separation.

In our current setup:
- the storage traffic happens in a separate VLAN (configured directly on the switch) on separate NICs on both hosts/storages in the 192.168.179.0/24 subnet
- all other infrastructure (oVirt hosts, gateway, DHCP, DNS, VM thinclients, switches, ...) are in the 192.168.178.0/24 subnet
We now want to separate the oVirt hosts/engine completely from the other infrastructure, eg. the VMs and thinclients.

If you have your VM networks and host network use different NICs, your networks are already separated (L2).

I am not experienced in networking and would be very thankful for all hints/tipps!

Thanks in advance,
David
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/FKDIYT5MUOFSZ444VARD7MVN5M5ANUKA/