Dell SmartFabric OS10 User Guide Release 10.5.3

Configure VLAN-tagged access ports

Configure local access ports in the VXLAN overlay network using either a switch-scoped VLAN or port-scoped VLAN. Only one method is supported. You cannot assign tagged VLAN member interfaces to a virtual network using both switch-scoped and port-scoped VLANs.

• You cannot assign the same Port, VLAN member interface pair to more than one virtual network.
• You can assign the same vlan-tag VLAN ID with different member interfaces to different virtual networks.
• You can assign a member interface with different vlan-tag VLAN IDs to different virtual networks.

• To use a switch-scoped VLAN to add VLAN-tagged member ports to a virtual network:
  1. Assign a VLAN to the virtual network in VLAN Interface mode.

     interface vlan vlan-id
     virtual-network vn-id

  2. Configure port interfaces as trunk members of the VLAN in Interface mode.

     interface ethernet node/slot/port[:subport]
     switchport mode trunk
     switchport trunk allowed-vlan vlan-id
     exit

     The local physical ports assigned to the VLAN transmit packets over the virtual network.
     NOTE: A switch-scoped VLAN assigned to a virtual network cannot have a configured IP address and cannot participate in L3 routing; for example:

     OS10(config)# interface vlan 102
     OS10(conf-if-vlan-102)# ip address 1.1.1.1/24
     % Error: vlan102, IP address cannot be configured for VLAN attached to Virtual Network.

• To use a port-scoped VLAN to add VLAN-tagged member ports to a virtual network:
  1. Configure interfaces as trunk members in Interface mode.

     interface ethernet node/slot/port[:subport]
     switchport mode trunk
     exit

  2. Assign a trunk member interface as a Port,VLAN ID pair to the virtual network in VIRTUAL-NETWORK mode. All traffic sent and received for the virtual network on the interface carries the VLAN tag. Multiple tenants connected to different switch interfaces can have the same vlan-tag VLAN ID.

     virtual-network vn-id
     member-interface ethernet node/slot/port[:subport] vlan-tag vlan-id

     The Port,VLAN pair starts to transmit packets over the virtual network.

The VLAN ID tag is removed from packets transmitted in a VXLAN tunnel. Each packet is encapsulated with the VXLAN VNI in the packet header before it is sent from the egress source interface for the tunnel. At the remote VTEP, the VXLAN VNI is removed and the packet transmits on the virtual-network bridge domain. The VLAN ID regenerates using the VLAN ID associated with the virtual-network egress interface on the VTEP and is included in the packet header.