0% found this document useful (0 votes)
436 views14 pages

VXLAN Overview

INE lectures notes

Uploaded by

Damilola Adebolu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
436 views14 pages

VXLAN Overview

INE lectures notes

Uploaded by

Damilola Adebolu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 14

VxLAN Overview

3 Tier Design Issues


» Access layer is a single points of failure
• Typically for both links and nodes
» Layer 2 multipath isn’t supported
• Result is wasted links and link bandwidth
» Scaling CE is a function of the MAC table
• All switches must learn all MACs
• Access layer switches typically have small TCAM
• I.e. Catalyst 2960 can hold only 8000 MAC addresses
» Routed access layer breaks layer 2 adjacencies
• Are apps like vMotion a requirement?

Copyright © www.ine.com
Improving on the 3-Tier Design
» What technologies can we implement to eliminate
some of these problems?
• vPC?
• FabricPath?
• VxLAN
• OTV?
• LISP?
• ACI?
» Which aspects of the problems do these solutions
address?
Copyright © www.ine.com
VXLAN Resources
» Documentation
• VXLAN Overview: Cisco Nexus 9000 Series Switches
• VXLAN Design with Cisco Nexus 9300 Platform Switches
• VXLAN Network with MP-BGP EVPN Control Plane Design Guide
• Cisco Programmable Fabric with VXLAN BGP EVPN Configuration
Guide
» Cisco Live
• BRKRST-3045 - Introduction to LISP and VXLAN - Scalable
Technology Overlays for Switching
• BRKDCT-3378 - Building Data Centre Networks with VXLAN BGP-
EVPN

Copyright © www.ine.com
What is VXLAN?
» Virtual eXtensible Local Area Network
» A layer 2 in layer 3 overlay tunnel
• Specifically an Ethernet in UDP tunnel
» Standards based
• RFC 7348 - Virtual eXtensible Local Area Network (VXLAN):
A Framework for Overlaying Virtualized Layer 2 Networks
over Layer 3 Networks
• RFC 7432 - BGP MPLS-Based Ethernet VPN
• Technically agnostic to the data plane encapsulation

Copyright © www.ine.com
Why use VXLAN?
» Expands VLAN name space
• VLANs use 12 bit space – 4096 values
• VXLAN uses 24 bit space – 16,777,216 values
» Allows layer 2 multipathing
• Doesn’t need STP for loop prevention
• Uses layer 3 ECMP over CLOS fabric
• Similar logic to FabricPath

Copyright © www.ine.com
Why use VXLAN?
» Includes scaling enhancements
• Optimizations for control plane, MAC learning, ARP
tables, BUM replication, etc.
• More on this later…
» Allows for break layer 2 adjacency requirements
• Allows for any to any stateless layer 2 and layer 3
transport
• E.g. vMotion
Copyright © www.ine.com
Why use VXLAN?
» Allows for multi-tenancy
• Separation of customer traffic over shared underlay
fabric
• Allows for overlapping layer 2 and layer 3 addresses
• E.g. VLANs & IPs are locally significant

Copyright © www.ine.com
VXLAN Terminology
» Underlay Network – provides the transport for
VXLAN
• OSPF/EIGRP/IS-IS routed fabric
» Overlay Network – uses the service provided
by VXLAN
• E.g. web server in rack 1 calling the database server in
rack 2

Copyright © www.ine.com
VXLAN Terminology
» VXLAN - Virtual eXtensible Local Area Network
» VNI / VNID - VXLAN Network Identifier
• Replaces the VLAN ID
» VTEP - VXLAN Tunnel End Point
• Box that performs VXLAN encap/decap
• Could be hardware or software
• E.g. Nexus 5600 vs. Nexus 1000v

Copyright © www.ine.com
VXLAN Terminology
» VXLAN Segment
• The resulting Layer 2 overlay network
» VXLAN Gateway
• Device that forwards traffic between VXLANs
• Can be both layer 2 and layer 3 forwarding
» NVE – Network Virtualization Edge
• Logical representation of the VTEP
• I.e. NVE is the tunnel interface
Copyright © www.ine.com
VXLAN Encapsulation

Copyright © www.ine.com
Basic VXLAN Workflow
» Receive ARP from local host
• Assume a miss occurs
» Find the remote VTEP…
• Multicast flood and learn
• Ingress replication
• MP-BGP L2VPN EVPN
» Unicast encap frame towards the VTEP
• Throw away the VLAN
• Replace it with the VNID
Copyright © www.ine.com
Q&A

Copyright © www.ine.com All rights reserved.

You might also like