Configuring VxLAN Flow

VxLAN

Limitations

1. Any Modification to the Tunnel config or Tunnel related Flow will require a 'save and reboot' of the switch for the changes to apply

2. Flow with Tunnel interface cannot have an 'override-to' action in the rule configuration

3. Configure Tunnel Flow only after the VxLAN tunnel is operationally 'UP' in the "show vxlan tunnel all/<tunnel-id>" output

4. Only 1 rule can be configured in tunnel-related flow

5. The current release doesn't support VxLAN tunnel over a LAG interface

6. For remote VxLAN-VTEP(Different subnet), the below order has to be followed for configuration

tunnel tunnel1
interface <interface>
source-ip <src-ip>       
gateway <gateway-ip>
destination-ip <dest-ip>
vni <vni-id>
vlan-tagging disable

Tunnel Configuration

Reference

Command	tunnel <tunnelname> no tunnel <tunnelname>
Description	Create tunnel
Parameters	Tunnelname
Mode	CONFIG

Example

pbnoscli(config)# tunnel tunnel1
pbnoscli(config)# no tunnel tunnel1

Tunnel Attributes

Using this command, you can configure the attributes of the tunnel. Gateway is provisioned only when the nodes are not directly connected

Note: Updation of the tunnel is not supported. The tunnel must be deleted and re-configured for any change

Reference

Command	[no] tunnel <tunnel-name>
Description	Create tunnel
Parameters	interface: Configure tunnel ports source-ip : Source IP address destination-ip : Destination IP address gateway : Gateway IPv4 Address vni : VXLAN network identifier[ range: 4096 - 16777215] source-port : Tunnel Source Port vlan-tagging : Tunnel VLAN Tagging
Mode	TUNNEL

Example

pbnoscli(config)# tunnel tunnel1
pbnoscli(config-tunnel-tunnel1)# interface Ethernet4/1
pbnoscli(config-tunnel-tunnel1)# source-ip 1.1.1.1
pbnoscli(config-tunnel-tunnel1)# destination-ip 2.2.2.2
pbnoscli(config-tunnel-tunnel1)# source-port 10
pbnoscli(config-tunnel-tunnel1)# vlan-tagging enable
pbnoscli(config-tunnel-tunnel1)# vni 4096
pbnoscli(config-tunnel-tunnel1)#

Flow based Encap Configuration

You can set the rules for the VxLAN Encap using flow. Here the tool port must be the tunnel name created using tunnel config command.

Reference

Command	flow flowname network-ports Ethernet4/1 tool-ports tunnel1 rule 1 permit match all
Description	Add flow
Parameters	description Configure description for flow enable Enable the flow end Exit to Exec Prompt exit Exit from the Current Prompt from Configure network or TAP ports no no form rule Configure rule to Configure network tool or analyzer ports
Mode	FLOW

Example

pbnoscli(config)# flow flow1
pbnoscli(config-flow-flow1)# network-ports Ethernet4/1
pbnoscli(config-flow-flow1)# tool-ports tunnel1
pbnoscli(config-flow-flow1)# rule 1 permit match-all
pbnoscli(config-flow-flow1)# end
pbnoscli#

Flow-Based Decap Configuration

You can set the rules for the VxLAN Decap using flow.. Here the Network port must be the tunnel name created using tunnel config command.

Reference

Command	flow flowname network-ports tunnel1 tool-ports Ethernet10/1 rule 1 permit match all
Description	Add flow
Parameters	description Configure description for flow enable Enable the flow end Exit to Exec Prompt exit Exit from the Current Prompt from Configure network or TAP ports no no form rule Configure rule to Configure network tool or analyzer ports
Mode	FLOW

Example

pbnoscli(config)# flow flow1
pbnoscli(config-flow-flow1)# network-ports tunnel1
pbnoscli(config-flow-flow1)# tool-ports Ethernet10/1
pbnoscli(config-flow-flow1)# rule 1 permit match-all
pbnoscli(config-flow-flow1)# end
pbnoscli#

Show VXLAN Tunnel Command

You can display the Vxlan tunnel configurations using this command.

Reference

Command	vxlan ("VxLAN Tunnel") tunnel ("Tunnel Information") (all ("Displays all VXLAN Tunnel configuration") | ("Displays specific VXLAN Tunnel configuration") <tunnelid:string length[10]> ("Tunnel Name")),
Description	Displays VXLAN tunnel

Example

pbnoscli# show vxlan tunnel all

===============================================
VXLAN Tunnel - tunnel
===============================================

===============================================
VXLAN Tunnel - tunnel1
===============================================
Tunnel Port       : Ethernet4/1
Source IP         : 1.1.1.1
Destination IP    : 2.2.2.2
Source MAC        : 1c:34:da:23:77:00
VN-ID             : 1335637472
pbnoscli#