Users Guide

All broadcast, multicast, and unknown unicast (BUM) traffic received on access interfaces replicate and are sent to all
configured remote VTEPs. Each packet contains the VXLAN VNI in its header.
By default, MAC learning from a remote VTEP is enabled and unknown unicast packets flood to all remote VTEPs. To
configure additional remote VTEPs, re-enter the remote-vtep ip-address command.
4. Return to VIRTUAL-NETWORK mode.
exit
5. Return to CONFIGURATION mode.
exit
Configure VLAN-tagged access ports
Configure local access ports in the VXLAN overlay network using either a switch-scoped VLAN or port-scoped VLAN. Only one
method is supported. You cannot assign tagged VLAN member interfaces to a virtual network using both switch-scoped and
port-scoped VLANs.
● To use a switch-scoped VLAN to add VLAN-tagged member ports to a virtual network:
1. Assign a VLAN to the virtual network in VLAN Interface mode.
interface vlan vlan-id
virtual-network vn-id
2. Configure port interfaces as trunk members of the VLAN in Interface mode.
interface ethernet node/slot/port[:subport]
switchport mode trunk
switchport trunk allowed-vlan vlan-id
exit
The local physical ports assigned to the VLAN transmit packets over the virtual network.
NOTE:
A switch-scoped VLAN assigned to a virtual network cannot have a configured IP address and cannot
participate in L3 routing; for example:
OS10(config)# interface vlan 102
OS10(conf-if-vlan-102)# ip address 1.1.1.1/24
% Error: vlan102, IP address cannot be configured for VLAN attached to Virtual
Network.
●
To use a port-scoped VLAN to add VLAN-tagged member ports to a virtual network:
1. Configure interfaces as trunk members in Interface mode.
interface ethernet node/slot/port[:subport]
switchport mode trunk
exit
2. Assign a trunk member interface as a Port,VLAN ID pair to the virtual network in VIRTUAL-NETWORK mode. All traffic
sent and received for the virtual network on the interface carries the VLAN tag. Multiple tenants connected to different
switch interfaces can have the same vlan-tag VLAN ID.
virtual-network vn-id
member-interface ethernet node/slot/port[:subport] vlan-tag vlan-id
The Port,VLAN pair starts to transmit packets over the virtual network.
3. Repeat Steps 1 and 2 to assign additional member Port,VLAN pairs to the virtual network.
○ You cannot assign the same Port,VLAN member interface pair to more than one virtual network.
○ You can assign the same vlan-tag VLAN ID with different member interfaces to different virtual networks.
○ You can assign a member interface with different vlan-tag VLAN IDs to different virtual networks.
The VLAN ID tag is removed from packets transmitted in a VXLAN tunnel. Each packet is encapsulated with the VXLAN
VNI in the packet header before it is sent from the egress source interface for the tunnel. At the remote VTEP, the VXLAN
VNI is removed and the packet transmits on the virtual-network bridge domain. The VLAN ID regenerates using the VLAN ID
associated with the virtual-network egress interface on the VTEP and is included in the packet header.
878
VXLAN