%BOOK_ENTITIES; ]>
Security Groups in Advanced Zones (KVM Only) &PRODUCT; provides the ability to use security groups to provide isolation between guests on a single shared, zone-wide network in an advanced zone where KVM is the hypervisor. Using security groups in advanced zones rather than multiple VLANs allows a greater range of options for setting up guest isolation in a cloud. Limitations The following are not supported for this feature: Two IP ranges with the same VLAN and different gateway or netmask in security group-enabled shared network. Two IP ranges with the same VLAN and different gateway or netmask in account-specific shared networks. Multiple VLAN ranges in security group-enabled shared network. Multiple VLAN ranges in account-specific shared networks. Security groups must be enabled in the zone in order for this feature to be used.