cancel
Showing results for 
Search instead for 
Did you mean: 

Attach vlan and L2-VSN on VSP ToR port to vsphere trunk

Attach vlan and L2-VSN on VSP ToR port to vsphere trunk

darvid
New Contributor II

Hi all

My goal is to bring internet acces directly to a VM with L2-VSN

I make a rule in xmc to set vlan/i-sid (MAC auth) for the provider box and my test computer.

ERS where is plugged my box give the right vlan to the port and mlt uplink to VSP core. On another ERS I plug my computer which fall in the same vlan and get internet access through the box (no routing, nothing, it's fabric magic !)

I would like to do the same for a VM. On VSP, vsphere trunk is manually tagged, I thought that I just need to create vlan and its i-sid as do the rule for ERS, but I should miss something else ? 

Regards

2 ACCEPTED SOLUTIONS

gfriedl
Extreme Employee

Darvid,

a tagged trunk is not yet a valid L2 connection to VLANs. 

On fabric side you have two options: CVLAN UNI L2VSN, which consists of VLAN + port members (here the trunk to your VMs) and I-SID.

Other option is flex-uni port (tagged too per default) plus Switched UNI L2VSN, which is, when you don't create a VLAN, just create I-SID and attach the port:

(config)#i-sid xxx

config(i-sid xxx)#c-vid <vlan-id> port x/y

hope that helps!

View solution in original post

TQU
Contributor

Hi Darvid,

If your TOR devices are in virtual-ist cluster mode, you need to define vlan/i-sid association on both members.

Because, through the fabric, trafic is send to the cluster system-id (virtual b-mac) and not to the vsp system-id. By the topology, if packet comes to second cluster member (the one without vlan/i-sid association) the packet is dropped.

So you need define vlan/i-sid association on both cluster member even if servers are connected on only one member.

Regards,

TQU

 

View solution in original post

4 REPLIES 4

darvid
New Contributor II

Thank you for these details, each reply is a part of the explanation.

TQU
Contributor

Hi Darvid,

If your TOR devices are in virtual-ist cluster mode, you need to define vlan/i-sid association on both members.

Because, through the fabric, trafic is send to the cluster system-id (virtual b-mac) and not to the vsp system-id. By the topology, if packet comes to second cluster member (the one without vlan/i-sid association) the packet is dropped.

So you need define vlan/i-sid association on both cluster member even if servers are connected on only one member.

Regards,

TQU

 

gfriedl
Extreme Employee

Darvid,

a tagged trunk is not yet a valid L2 connection to VLANs. 

On fabric side you have two options: CVLAN UNI L2VSN, which consists of VLAN + port members (here the trunk to your VMs) and I-SID.

Other option is flex-uni port (tagged too per default) plus Switched UNI L2VSN, which is, when you don't create a VLAN, just create I-SID and attach the port:

(config)#i-sid xxx

config(i-sid xxx)#c-vid <vlan-id> port x/y

hope that helps!

darvid
New Contributor II

Finally found my mistake, but don't really undersand !

Bellow a little nice diagram :), blue is spbm vsp

Vlan/i-sid must be manualy created on the second Tor (red) 
although it is not used.

How is it that i-side does not transit automatically like on COREs ?Capture du 2024-02-16 13-36-00.png

GTM-P2G8KFN