Deployment Guide

NOTE: In a scaled scenario where max flows are configured on a Group-FF, the recommended configuration for OF-instance

sndbuf is “32000” as shown below. The speed for management interface should be set to “100”. This will prevent messages sent

to the controller from being dropped.

Dell#show running-config interface managementethernet 1/0

interface ManagementEthernet 1/0

ip address 10.11.55.8/8

speed 100

no shutdown

Dell(conf)#openflow of-instance 1

Dell(conf-of-instance-1)#controller 1 10.11.54.60 tcp sndbuf 32000

Dell#show openflow of-instance 1

Instance : 1

Controller 1 : TCP, 10.11.54.60/6633, rcv/sndbuf 2000/32000, not-connected

Controller 2 : -

In-band Secure Channel

Out-of-band management and In-Band Management can now be used by the controller to manage the OF switch. In-band Secure

Channel is a function used to connect the OF switch with PFC via a data port on the OF switch. The port which is a member of legacy

VLAN will be used for in-band secure channel between the OF switch and PFC controller. Today, out-of-band management is used for

communication with the controller via the management port.

As shown below, the secure channel is connected to PFC via a data port. VLAN 1000 and 2000 are used for Non-OpenFlow control –

L2/L3 forwarding and VLAN 4094 is used for OpenFlow control. OFS #2 sends TCP packets to OFS #1 by Non-OpenFlow control (L2/

L3forwarding), and OFS #1 forwards them to PFC by Non-OpenFlow control (L2/L3forwarding).

Basically in-band secure channel uses a separate non-OF VLAN for management traffic.

Introduction