Deployment Guide

1. Assign a VLAN to the virtual network in VLAN Interface mode.
interface vlan vlan-id
virtual-network vn-id
2. Configure port interfaces as trunk members of the VLAN in Interface mode.
interface ethernet node/slot/port[:subport]
switchport mode trunk
switchport trunk allowed-vlan vlan-id
exit
The local physical ports assigned to the VLAN transmit packets over the virtual network.
NOTE: A switch-scoped VLAN assigned to a virtual network cannot have a configured IP address and cannot
participate in L3 routing; for example:
OS10(config)# interface vlan 102
OS10(conf-if-vlan-102)# ip address 1.1.1.1/24
% Error: vlan102, IP address cannot be configured for VLAN attached to Virtual
Network.
● To use a port-scoped VLAN to add VLAN-tagged member ports to a virtual network:
1. Configure interfaces as trunk members in Interface mode.
interface ethernet node/slot/port[:subport]
switchport mode trunk
exit
2. Assign a trunk member interface as a Port,VLAN ID pair to the virtual network in VIRTUAL-NETWORK mode. All traffic
sent and received for the virtual network on the interface carries the VLAN tag. Multiple tenants connected to different
switch interfaces can have the same vlan-tag VLAN ID.
virtual-network vn-id
member-interface ethernet node/slot/port[:subport] vlan-tag vlan-id
The Port,VLAN pair starts to transmit packets over the virtual network.
3. Repeat Steps 1 and 2 to assign additional member Port,VLAN pairs to the virtual network.
○ You cannot assign the same Port,VLAN member interface pair to more than one virtual network.
○ You can assign the same vlan-tag VLAN ID with different member interfaces to different virtual networks.
○ You can assign a member interface with different vlan-tag VLAN IDs to different virtual networks.
The VLAN ID tag is removed from packets transmitted in a VXLAN tunnel. Each packet is encapsulated with the VXLAN
VNI in the packet header before it is sent from the egress source interface for the tunnel. At the remote VTEP, the VXLAN
VNI is removed and the packet transmits on the virtual-network bridge domain. The VLAN ID regenerates using the VLAN ID
associated with the virtual-network egress interface on the VTEP and is included in the packet header.
Configure untagged access ports
Add untagged access ports to the VXLAN overlay network using either a switch-scoped VLAN or port-scoped VLAN. Only one
method is supported.
● To use a switch-scoped VLAN to add untagged member ports to a virtual network:
1. Assign a VLAN to a virtual network in VLAN Interface mode.
interface vlan vlan-id
virtual-network vn-id
exit
2. Configure port interfaces as access members of the VLAN in Interface mode.
interface ethernet node/slot/port[:subport]
switchport access vlan vlan-id
exit
Packets received on the untagged ports transmit over the virtual network.
● To use a port-scoped VLAN to add untagged member ports to a virtual network:
10
VXLAN