HP Network Protector SDN Application Administrator Guide

Figure 3 DNS inspection using an instance approach
Aggregate approach to DNS inspection
In Aggregation mode, all VLANs in the switch are part of an OpenFlow instance. The exception
is the management VLAN and a VLAN that communicates to the controller. Similar to a lab
environment the OpenFlow controller manages all the switching and routing for the switch. This
example shows the aggregate mode configuration on the EDGE switches. This example has similar
advantages and disadvantages as the instance approach (see “Instance approach to DNS
inspection” (page 11)), but does not require you to configure as many OpenFlow instances.
Figure 4 (page 14) illustrates this example.
In this example:
• Each edge device, such as an HP 2920 switch or an HP 3800 series switch, is connected to
the HP VAN SDN Controller and is configured to use OpenFlow.
• The L2 aggregation switch, such as an HP 5406 switch, is not configured to use OpenFlow
and is not connected to the HP VAN SDN Controller.
• The application performs inspection and control on VLAN 20, 30, 40, 50, 60, and 70.
12 Deployment examples