Protecting Guest LANs and Virtual Switches

RACF® can be used to protect Guest LANs and virtual switches using profiles in the VMLAN class. From an access control perspective, guest LANs and virtual switches are treated the same way. In this document, the term "LAN" will be used to mean both guest LANs and virtual switches. When differences exist, they will be identified. For more information on Guest LANs and virtual switches, see z/VM Connectivity.

The VMLAN class contains two sets of profiles to protect LANs; base profiles that control the ability of a z/VM® user to use a LAN, and, for IEEE VLAN-aware virtual switches, VLAN ID-qualified profiles that are used to assign a user to one or more IEEE VLANs.