5.1

VXLAN Virtual Wires Management 8
In large cloud deployments, applications within virtual networks may need to be logically isolated. For
example, a three-tier application can have multiple virtual machines requiring logically isolated networks
between the virtual machines. Traditional network isolation techniques such as VLAN (4096 LAN segments
through a 12-bit VLAN identifier) may not provide enough segments for such deployments. In addition, VLAN
based networks are bound to the physical fabric and their mobility is restricted.
The vShield VXLAN virtual wire is a scalable flat Layer 2 network segment. This feature allows you provides
network agility by allowing you to deploy an application on any available cluster and transport virtual
machines across a broader diameter. The underlying technology, referred to as Virtual eXtensible LAN (or
VXLAN), defines a 24-bit LAN segment identifier to provide segmentation at cloud-deployment scale. VXLAN
virtual wires enable you to grow your cloud deployments with repeatable pods in different subnets. Cross
cluster placement of virtual machines helps you to fully utilize your network resources without any physical
re-wiring. VXLAN virtual wires thus provide application level isolation.
Figure 8-1. VXLAN Virtual wire overview
VM VM VM
Virtual Network
Virtual Wire
VM VM
VXLAN
Distributed
switches
You must be a Security Administrator in order to create VXLAN virtual wires.
This chapter includes the following topics:
n
“Preparing your Network for VXLAN Virtual Wires,” on page 48
n
“Create a VXLAN Virtual Wire,” on page 49
n
“Connect Virtual Machines to a VXLAN Virtual Wire,” on page 51
n
“Test VXLAN Virtual Wire Connectivity,” on page 52
VMware, Inc.
47