topic XCC VE6120 ports: admin, data, vswitch promiscious mode in ExtremeCloud IQ Controller

XCC VE6120 ports: admin, data, vswitch promiscious mode

tfsnetman — Thu, 28 Oct 2021 03:03:00 GMT

Hello,

I am installing a VE6120 and ended up with 3 interfaces (admin, data 1, data 2).
Admin is out of band - VLAN 10
Data 1, data 2 - VLAN 16.

While the documentation is stating that the vswitch should accept promiscious connections, this doesn't seem to make sense.

Please correct me if I am wrong:
- data interfaces are used by APs and controller to talk to each other
- user traffic is locally switched
- no ther VLANs required on data ports
- global default gateway applies to Admin topology, static routes might be required for subnets that should be reachable via data ports / topology.

Thank you,

Klaus

RE: XCC VE6120 ports: admin, data, vswitch promiscious mode

Vellachery__Sum — Thu, 28 Oct 2021 08:57:00 GMT

Klaus,

The admin port should only be used as an out-of-band management port for GUI access only. It should have no connectivity to the access points or the production data network.

The following KB Articles should help you:-
1.Recommendations for configuring Extreme Campus Controller (XCC) ports in a VM

https://extremeportal.force.com/ExtrArticleDetail?an=000097639

2. How to configure vSwitch properties For V2110

https://extremeportal.force.com/ExtrArticleDetail?an=000084612

Regards,
Sumeesh

RE: XCC VE6120 ports: admin, data, vswitch promiscious mode

tfsnetman — Mon, 08 Nov 2021 08:37:00 GMT

Hi Sumesh,

Thank you for getting back to me.
While the recommended setup is ideal when having a dedicated virtualised environmend for XCC, it's not really applicable when adding XCCs to an existing one.

And since traffic is bridged at the AP / switch why would the controller need to see all traffic on all VLANs?

Thanks,
Klaus