Configuring Access Guardian Configuring Port-Based Network Access Control
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-60
• The egress VLAN translation status for the SPB service or the VXLAN service mapping associated
with the profile is also configurable. By default, VLAN translation is disabled.
– When enabled, the VLAN tags for profile traffic are processed according to the settings for the SAP
on which the frames will egress, not according to the settings for the SAP on which the frames were
received.
– Enabling VLAN translation at the service level is only applicable if the corresponding access ports
for the SAPs also have VLAN translation enabled.
Configuring an SPB Service Mapping
To configure the mapping of SPB service parameters to an existing UNP profile, use the unp profile map
service-type spb command. For example, the following command configures a service mapping for the
“vNP1” profile that will dynamically create an SPB SAP to carry traffic tagged with VLAN 10 on SPB
service instance 1500 and will bind the service instance to SPB backbone VLAN (BVLAN) 500:
-> unp profile vNP1 map service-type spb tag-value 10 isid 1500 bvlan 500
By default, the multicast replication mode is set to head-end and VLAN translation is disabled for the SPB
service mapping. To change these settings, use the unp profile-map service-type spb command with the
optional multicast-mode or vlan-xlation parameters. For example, the following command changes the
multicast replication mode to tandem and enables egress VLAN translation for the service profile:
-> unp profile vNP1 map service-type spb tag-value 10 isid 1500 bvlan 500
multicast-mode tandem vlan-xlation
To verify the SPB service profile configuration for the switch, use the show unp profile map command
with the service-type spb parameter. For example:
-> show unp profile vNP1 map service-type spb
Profile Tag Vlan Mcast
Name Isid Value BVlan Xlation Mode
--------------------------------+--------+--------+--------+--------+---------
vNP1 1500 10 500 Ena Tandem
Configuring a VXLAN Service Mapping
To configure the mapping of VXLAN service parameters to an existing UNP profile, use the unp profile
map service-type vxlan command.For example, the following command creates the “vmCluster1” profile
to assign device traffic tagged with VLAN 12 to VXLAN segment 100 which will participate in the
225.1.1.1 multicast group to tunnel traffic:
-> unp profile vmCluster1 map service-type vxlan tag-value 12 vnid 2300
multicast-group 225.1.1.1
The following command example creates the “vmCluster2” profile to assign device traffic tagged with
VLAN 15 to VXLAN segment 150 which will participate in tunneling traffic to the VTEP IP addresses
contained in the “vteps” far-end IP list:
-> unp profile vmCluster2 map service-type vxlan tag-value 15 vnid 2301 far-end-
ip-list vteps
The far-end-ip-list parameter that is specified when creating a VXLAN service profile is the name of a
list of IP addresses that was previously configured. These IP addresses identify the VTEPs to which
VXLAN traffic classified into the VXLAN service is tunneled.
To create a list of VTEP IP addresses, use the unp vxlan far-end-ip-list command. For example, the
following command creates the “vteps” list and adds IP addresses to that list:
To Next Page
Loading...
