Deployment Guide

Controller-provisioned VXLAN

OS10 supports VXLAN provisioning using an Open vSwitch Database (OVSDB) controller. Currently, the only supported OVSDB controller

is the VMware NSX controller. In a controller-provisioned VXLAN, the controller manages VXLAN-related configurations and other

control-plane operations, such as MAC address propagation.

NOTE: Controller-provisioned VXLAN is not supported on S5148F-ON and S3048-ON switches. Also, controller-

provisioned VXLAN is not supported on VTEPs configured as peers in a VLT domain. Only VTEPs in standalone mode are

supported.

Controller-provisioned VXLAN

The NSX controller communicates with an OS10 VTEP using the OVSDB management protocol over a Secure Sockets Layer (SSL)

connection. Establishing the communication between the controller and VTEP involves generating the SSL certificate at a VTEP and

copying the certificate to the NSX controller. After SSL authentication, a secure connection over SSL is established between the

controller and the VTEP. The VTEP then receives and processes the configuration data from the controller.

Controller-provisioned VXLAN: Manual configuration

You must manually configure the underlay network using the OS10 CLI:

• Configure the L3 protocol used for underlay routing. Underlay reachability to VTEP peers is learned using the configured routing

protocol.

• Configure the loopback interface in the default VRF that is used as the VTEP source IP address for controller-based provisioning.

• Assign the VTEP interfaces to be managed by the controller.

Controller-provisioned VXLAN: Automatic provisioning

The controller automatically provisions:

• L2 overlay network

• VXLAN virtual networks, including remote VTEP source addresses

• Local access ports in a virtual network

An OS10 VTEP sends the addition or deletion of server MAC addresses at the VXLAN access port to the NSX controller using the

OVSDB protocol. The controller then propagates the information to VTEP peers. The VTEPs program their forwarding tables

accordingly.

Controller-provisioned VXLAN 47