Network Virtualization using Extreme Fabric Connect
Table Of Contents
- Table of Contents
- Table of Contents
- Table of Contents
- Table of Figures
- Table of Figures
- Table of Tables
- Conventions
- Introduction
- Reference Architecture
- Guiding Principles
- Architecture Components
- User to Network Interface
- Network to Network Interface
- Backbone Core Bridge
- Backbone Edge Bridge
- Customer MAC Address
- Backbone MAC Address
- SMLT-Virtual-BMAC
- IS-IS Area
- IS-IS System ID
- IS-IS Overload Function
- SPB Bridge ID
- SPBM Nick-name
- Dynamic Nick-name Assignment
- Customer VLAN
- Backbone VLAN
- Virtual Services Networks
- I-SID
- Inter-VSN Routing
- Fabric Area Network
- Fabric Attach / Auto-Attach
- FA Server
- FA Client
- FA Proxy
- FA Standalone Proxy
- VPN Routing and Forwarding Instance
- Global Router Table
- Distributed Virtual Routing
- Zero Touch Fabric (ZTF)
- Foundations for the Service Enabled Fabric
- IP Routing and L3 Services over Fabric Connect
- L2 Services Over SPB IS-IS Core
- Fabric Attach
- IP Multicast Enabled VSNs
- Extending the Fabric Across the WAN
- Distributed Virtual Routing
- Quality of Service
- Consolidated Design Overview
- High Availability
- Fabric and VSN Security
- Fabric as Best Foundation for SDN
- Glossary
- Reference Documentation
- Revisions
Network Virtualization Using Extreme Fabric Connect
© 2019 Extreme Networks, Inc. All rights reserved. 81
Figure 39 FA Zero-Touch-Client Assigns VLAN:I-SID Binding to Discovered FA client
Note
Only Extreme Networks ERS and VSP platforms support FA Zero Touch Client.
• FA Proxy or FA Server have 802.1X NAC enabled on the access port where the FA Client is detected.
RADIUS MAC-based authentication is performed, which is augmented with new Fabric Attach
inbound RADIUS attributes that provide information about the FA Client type, FA Client ID, and FA
operational mode of the authenticator. If the policy decision is to authorize the FA Client, then one,
or more, VLAN:I-SID bindings can be sent back as RADIUS attributes to authorize the FA Client
access port with. The FA Proxy, or FA Server, will then assign those VLAN IDs to the access port and
handle the FA signalling back to the FA Server.
Figure 40 VLAN:I-SID Binding is RADIUS Assigned via NAC
• Manual configuration on the FA Proxy device. A VLAN object can be created on the FA Proxy
switch and assigned to the relevant I-SID. The FA Proxy will then signal this VLAN:I-SID binding
back to the FA Server. This provides the equivalent CVLAN UNI functionality that would have been
available if the access FA Proxy node had been deployed directly with SPB Fabric Connect.
Figure 41 VLAN:I-SID Binding via Manual Configuration