topic RE: virtual router/ virtaul switch in Scripting

virtual router/ virtaul switch

Ian_Worms — Mon, 25 Aug 2014 20:42:00 GMT

Hi,

I are trying to understand from a layer two point of view does each virtual router have its own FDB database, taken in that we will not share any physical ports between the virtual routes.

In my case there will be three virtual routers, thus a requirement for three FDB database.

We are looking at this as more of a virtaul switch than a virtual router.

Thanks
Ian

RE: virtual router/ virtaul switch

Stephane_Grosje — Tue, 26 Aug 2014 22:36:00 GMT

Hi,
As you cannot share a VLAN between multiple VR, you have FDB isolation. But it's rather on a VLAN base.

RE: virtual router/ virtaul switch

Ian_Worms — Wed, 27 Aug 2014 14:34:00 GMT

Hi,

Yes I agree with you on this, but if i have two VR for example --- port 1 in VR-TWO and port 2 in VR-THREE. Port 1 has a vlan tag 10 and port 2 has a vlan 20.

When I do a show FDB in VR-DEFAULT I see MAC address for both VR-TWO and VR-THREE, also when I go into VR-TWO and show fdb I see all MAC.

VR-DEFAULT
X460-48t.25 # show fdb
Mac Vlan Age Flags Port / Virtual Port List
------------------------------------------------------------------------------
00:04:96:6d:00:45 vlan-20(0020) 0032 d m 2
a8:20:66:1b:c1:2e vlan-10(0010) 0055 d m 1

VR-TWO
(vr TWO) X460-48t.27 # show fdb
Mac Vlan Age Flags Port / Virtual Port List
------------------------------------------------------------------------------
00:04:96:6d:00:45 vlan-20(0020) 0047 d m 2
a8:20:66:1b:c1:2e vlan-10(0010) 0010 d m 1

What I understood I would not see it like this, but maybe I misunderstood this.

Thanks
Ian

RE: virtual router/ virtaul switch

Stephane_Grosje — Wed, 27 Aug 2014 19:49:00 GMT

Hi,

Yes.
You have a FDB per VLAN, not per VR.
Your learning domain is the VLAN. And because you can't have a same VLAN on different VR, no leaking/flooding is possible.

RE: virtual router/ virtaul switch

Kawawa — Thu, 23 Apr 2015 15:23:00 GMT

The show fdb command is a global command. When you type it without a context, it shows all your current FDB entries regardless of which ports or VLANs they are specific to. MAC address tables in XOS are specific to VLANS and not VRs. So if you create a VLAN-1 and assign port 1,2 and 3 to it, any MAC addresses learnt on those ports belong to the VLAN-1 FDB as opposed to the VR. You are therefore able to type show fdb vlan that shows all MACs particular to the specified VLAN. You can also specify port, VPLS, etc BUT, you cannot specify VR