Connectivity Guide

After you congure the remote VTEP, when the IP routing path to the remote VTEP IP address in the underlay IP network is known,
the virtual network is enabled to send and receive VXLAN-encapsulated trac from and to downstream servers and hosts. All
broadcast, multicast, and unknown unicast (BUM) trac received on access interfaces is replicated and sent to all congured remote
VTEPs. Each packet contains the VXLAN VNI in its header.
By default, MAC learning from a remote VTEP is enabled and unknown unicast packets are ooded to all remote VTEPs. Re-enter the
remote-vtep ip-address command to congure additional remote VTEPs.
4 Return to VIRTUAL-NETWORK mode.
exit
5 Return to CONFIGURATION mode.
exit
Congure VLAN-tagged access ports
Congure local access ports in the VXLAN overlay network using either a switch-scoped VLAN or port-scoped VLAN. Only one method is
supported. You cannot assign tagged VLAN member interfaces to a virtual network using both switch-scoped and port-scoped VLANs.
• To use a switch-scoped VLAN to add VLAN-tagged member ports to a virtual network:
a Assign a VLAN to the virtual network in VLAN Interface mode.
interface vlan vlan-id
virtual-network vn-id
b Congure port interfaces as trunk members of the VLAN in Interface mode.
interface ethernet node/slot/port[:subport]
switchport mode trunk
switchport trunk allowed-vlan vlan-id
exit
The local physical ports assigned to the VLAN transmit packets over the virtual network.
NOTE
: A switch-scoped VLAN assigned to a virtual network cannot have a congured IP address and cannot
participate in L3 routing; for example:
OS10(config)# interface vlan 102
OS10(conf-if-vlan-5)# ip address 1.1.1.1/24
% Error: vlan102, IP address cannot be configured for VLAN attached to Virtual
Network.
• To use a port-scoped VLAN to add VLAN-tagged member ports to a virtual network:
a Congure interfaces as trunk members in Interface mode.
interface ethernet node/slot/port[:subport]
switchport mode trunk
exit
b Assign a trunk member interface as a Port,VLAN ID pair to the virtual network in VIRTUAL-NETWORK mode. All trac sent and
received for the virtual network on the interface carries the VLAN tag. Multiple tenants connected to dierent switch interfaces
can have the same vlan-tag VLAN ID.
virtual-network vn-id
member-interface ethernet node/slot/port[:subport] vlan-tag vlan-id
The Port,VLAN pair starts to transmit packets over the virtual network.
c Repeat Steps a) and b) to assign additional member Port,VLAN pairs to the virtual network.
– You cannot assign the same Port,VLAN member interface pair to more than one virtual network.
– You can assign the same vlan-tag VLAN ID with dierent member interfaces to dierent virtual networks.
– You can assign a member interface with dierent vlan-tag VLAN IDs to dierent virtual networks.
The VLAN ID tag is removed from packets transmitted in a VXLAN tunnel. Each packet is encapsulated with the VXLAN VNI in the packet
header before it is sent from the egress source interface for the tunnel. At the remote VTEP, the VXLAN VNI is removed and the packet is
transmitted on the virtual-network bridge domain. The VLAN ID is regenerated using the VLAN ID associated with the virtual-network
egress interface on the VTEP and included in the packet header.
Congure untagged access ports
VXLAN
517