A virtual extensible LAN (VXLAN) extends Layer 2 (L2) server connectivity over an underlying Layer 3 (L3) transport network in a virtualized data center. A virtualized data center consists of virtual machines (VMs) in a multitenant environment. OS10 supports VXLAN as described in RFC 7348.
VXLAN provides a L2 overlay mechanism on an existing L3 network by encapsulating the L2 frames in L3 packets. The VXLAN-shared forwarding domain allows hosts such as virtual and physical machines, in tenant L2 segments to communicate over the shared IP network. Each tenant L2 segment is identified by a 24-bit ID called a VXLAN network identifier (VNI).
Deployed as a VXLAN gateway, an OS10 switch performs encapsulation/de-encapsulation of L2 frames in L3 packets while tunneling server traffic. In this role, an OS10 switch operates as a VXLAN tunnel endpoint (VTEP). Using VXLAN tunnels, server VLAN segments communicate through the extended L2 forwarding domain.
Figure 1. VXLAN topology. VXLAN topology
NOTE
The platforms that support only L2 VXLAN gateway include: S4048-ON, Z9100-ON, and Z9264F-ON
The platforms that support both L2 VXLAN and L3 VXLAN routing (Routing In and Out of Tunnels (RIOT)) include:
Symmetric IRB: S4048T-ON, S4100-ON series, S5200-ON series, and S6010-ON
After VXLAN decapsulation, routing between virtual networks and regular VLANs (VLAN that is not configured as a virtual network) is supported only on the following platforms:
S4200-ON series
S5200-ON series
On other platforms, routing after decapsulation is performed only between virtual networks. If routing is needed for a regular VLAN after decapsulation, a virtual network should be configured instead of a regular VLAN (even though that VLAN exists only on access ports) to overcome this limitation on other platforms. On border leaf switches, an access port of this virtual network could then be connected to an external router and a protocol such as BGP or static routing could be used on this virtual network interface for external reachability.
This feature is not supported on the following platforms:
S3048-ON
Z9332F-ON
N3224F-ON
NOTE The Layer 2 service in the VXLAN overlay network does not participate in the Spanning tree protocol. As a result, blocking of a link in a loop-free overlay network does not prevent a loop. To prevent the network from forming loops, you can perform either of the following two actions:
Ensure that the network topology is loop free.
Configure BPDU gaurd on all the access ports.
NOTE Z9100-ON platform supports 16K port, VLAN combination table (hash table), but about 90% of this table only can be used due to hash collision. Due to this hardware constraint, using whole 16K is not supported.
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\