Configuring Access Guardian Access Guardian Overview
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-20
The type of SAP that the switch will dynamically create for the System Default profile is based on the
dynamic service setting for the UNP access port on which the SAP is created. For example:
• If the dynamic service port parameter is set to SPB, then the SPB control BVLAN, a calculated default
I-SID number, and an incremental reserved service ID number are used to dynamically create a SAP
for SPB service traffic received on the UNP access port.
• If the dynamic service port parameter is set to VXLAN, then a calculated VNI number, a default
multicast group IP address, and an incremental reserved service ID number are used to dynamically
create a SAP for VXLAN service traffic received on the UNP access port.
For information about how to configure the dynamic service port parameter, see “Configuring UNP Port
Parameters” on page 28-38.
The attributes specified through the System Default profile are derived using the system parameter values
and calculations described in the following sections.
SPB System Default Profile
UNP derives the System Default profile attributes as follows to dynamically create a SAP for SBP traffic:
• I-SID number—The I-SID number for the dynamic SAP is calculated using the following values:
– System default I-SID number = 10,000,000
– System default I-SID mod = 512
– The VLAN tag of the traffic stream received on the UNP port (0 is used for untagged traffic).
– The domain ID assigned to the UNP port (0 by default) multiplied by 10,000.
Based on the above values, if traffic tagged with VLAN 30 is received on a UNP port belonging to
domain 10, the calculation to determine the I-SID number is as follows:
10,000,000 + (10 * 10,000) + (30 % 512) = 10100030
• BVLAN—The BVLAN ID number for the dynamic SAP is calculated using the following values:
– The I-SID value as determined by the I-SID number calculation.
– System default BVLAN mod = 8.
– BVLAN index = I-SID value % 8.
– The number of existing BVLANs configured on the switch.
Based on the above values, if there are 8 BVLANs configured on the switch (4001, 4002, 4003, 4004,
4005, 4006, 4007, 4008) and the calculated I-SID is 10100030, the calculation to determine the
BVLAN ID number is as follows:
10100030 % 8 = 6
8[6] = 4007
In the above example, the BVLAN index is calculated as 6. This index number is then used to pick one
of the 8 existing BVLANs to use for the dynamic SAP, which calculates out to 4007. As a result,
BVLAN 4007 will serve as the BVLAN ID for the dynamic SAP.
• SPB Service ID number—A reserved service ID (32768) that represents the association between the
default system I-SID and the control BVLAN. This value increments by 1 for each additional dynamic
service (SPB or VXLAN) that is created and only has local significance.
• Multicast Mode—The multicast mode for the dynamic SAP is set to head-end.
• SAP VLAN translation—The VLAN translation attribute for the dynamic SAP is disabled.
To Next Page
Loading...
