SlideShare a Scribd company logo
VXLAN Implementation.
Simplified.
Mohammed Mohsin
CCIE#35485
INTRA-VXLAN COMMUNICATION – HOW COMMUNICATION
HAPPENS BETWEEN TWO HOSTS IN SAME VXLAN ACROSS A LAYER 3
NETWORK
MOHAMMED MOHSIN
CCIE#35485
1
VXLAN demystified!
MOHAMMED MOHSIN
CCIE#35485
2
➡️ VXLAN is in simple terms switching over routing. VXLAN allows you to
create an L2 network on top of an L3 network. Using underlay and overlay
networks.
➡️ Similar to what MPLS VPNs do. PE routers know the endpoint
destinations. But the core P routers along the path have no knowledge
about the overlay networks. They only route based on external MPLS label.
➡️ The difference is MPLS VPNs provide logical layer 3 networks, whereas
VXLAN provides layer 2 overlay networks over existing layer 3 IP networks.
VXLAN demystified!
MOHAMMED MOHSIN
CCIE#35485
3
How VXLAN works?
MOHAMMED MOHSIN
CCIE#35485
4
So, to understand how VXLAN is implemented, we need to know how underlay
network is built. VXLAN utilizes this underlay network to build its overlay network.
The essential questions to ask are:
MOHAMMED MOHSIN
CCIE#35485
5
📌 How is the underlay network built?
📌 Once reachability is established between VTEPs using any IGP or BGP, how they
establish overlay VXLAN tunnels?
📌 How does a VTEP forward layer 2 frames from a locally connected source to a
remote destination mac address behind another VTEP?
📌 How unicast mac addresses are learnt over the VTEP cloud?
The essential questions to ask are:
MOHAMMED MOHSIN
CCIE#35485
6
📌 How broadcast, unknown unicast and multicast (BUM) traffic is sent across the
VTEP cloud?
📌 How to make sure there are no loops?
📌 How to best utilize the bandwidth of the underlay network using ECMP?
📌 How to adapt to dynamic changes to endpoint mac addresses? Think of VM
mobility.
Below is a primer for implementation steps
MOHAMMED MOHSIN
CCIE#35485
7
➡️ VXLAN adds 50+ bytes of overhead to the layer 2 frame. So be prepared to
increase the default MTU along the path.
➡️ A loopback interface to be used as Network Virtualization Endpoint (NVE)
interface on all VTEPs. This will be the source of VTEP through which other VTEPs
will be reachable.
Below is a primer for implementation steps
MOHAMMED MOHSIN
CCIE#35485
8
Below is a primer for implementation steps
MOHAMMED MOHSIN
CCIE#35485
9
➡️ An interior gateway protocol (IGP) such as OSPF or BGP can be used as the
underlay routing protocol for VTEP reachability through NVE.
➡️ Multicast group to VNI mapping on the VTEP external interfaces.
➡️ VNI to VLAN mapping on the VTEP internal interfaces.
Intra-VXLAN communication
MOHAMMED MOHSIN
CCIE#35485
10
Intra-VXLAN communication
MOHAMMED MOHSIN
CCIE#35485
11
➡️ Intra-VXLAN communication also referred to as L2 VNI communication is
packet transfer between two hosts in same VXLAN across the Layer 3
network between two VTEPs. In this demonstration implementation EVPN is
used to carry MAC addresses between VTEPs.
➡️ EVPN is an extension to BGP that allows the network to carry endpoint
reachability information such as Layer 2 MAC addresses (L2 VNI) and Layer 3
IP addresses (L3 VNI). This control plane technology uses MP-BGP for MAC
and IP address endpoint distribution, where MAC addresses are treated as
routes. Without EVPN, VXLAN overlay networks operate in the flood-and-
learn mode.
Underlay Network – Building the foundation. It is
also called transport network.
MOHAMMED MOHSIN
CCIE#35485
12
➡️ IP reachability between VTEPs can be achieved using any IGP like OSPF or even
BGP which will enable loopback interface on each VTEP to be reachable from other
VTEPs.
➡️ Multicast routing is required to process BUM (broadcast, unknown unicast and
multicast) traffic over the VTEP cloud. VTEPs join a particular multicast group for
each VNI. Each VNI is mapped to a multicast address so that only VTEPs that host a
particular VNI will receive BUM traffic and not flooded to all VTEPs. Think of
ethernet broadcast domains! Without multicast, there is unnecessary flooding.
Underlay Network
MOHAMMED MOHSIN
CCIE#35485
13
Overlay network – That is VXLAN.
Tunneling the frames!
MOHAMMED MOHSIN
CCIE#35485
14
➡️ Configure VLAN to VNI mappings to identify packets at the source VTEPs.
➡️ Configure NVE interface on each VTEP and assign the local loopback interface
as the source. Also configured under NVE interface is the mapping between
multicast group and VNI.
Overlay network – VXLAN.
Tunneling the frames!
MOHAMMED MOHSIN
CCIE#35485
15
➡️ Configure MP-BGP EVPN neighborships between VTEPs to advertise mac-
addresses reachable between VTEPs. It is like each VTEP telling other VTEPs what
all mac-addresses are reachable through it or residing behind it. Do remember we
are configuring this for known unicast mac-addresses.
➡️ MP-BGP uses route targets to import and export L2 VNI routes containing mac-
addresses similar to how MPLS VPNs work.
Overlay network – VXLAN.
Tunneling the frames!
MOHAMMED MOHSIN
CCIE#35485
16
Host A to Host B Communication
MOHAMMED MOHSIN
CCIE#35485
17
Host A to Host B Communication
MOHAMMED MOHSIN
CCIE#35485
18
For two hosts in same VXLAN to communicate across the VXLAN overlay network,
below steps happen.
1️⃣ Host A sends ARP request for Host B mac-address which is behind remote
VTEP.
2️⃣ Local VTEP will identify the correct VNI and send the ARP broadcast request to
the multicast group address for that VNI. It will learn Host A mac-address and VNI
mapping.
Host A to Host B Communication
MOHAMMED MOHSIN
CCIE#35485
19
3️⃣ Remote VTEP will receive the ARP broadcast request and forward it on its local
L2 interface towards the destination host. It will record the source VTEP, VNI and
Host A mac-address.
4️⃣ Once reply is received from the destination host, remote VTEP will learn the
mac-address of Host B and reply to source VTEP with IP to MAC binding in ARP
response.
5️⃣ Host A can communicate with Host B over the VXLAN overlay network as if
they are connected to same switch!
Let's understand the technologies in a simple way!
linkedin.com/in/mohsinccie
MOHAMMED MOHSIN
CCIE#35485
20

More Related Content

Similar to VxLAN.pdf

Branching out with SDN
Branching out with SDNBranching out with SDN
Branching out with SDN
APNIC
 
OTV(Overlay Transport Virtualization)
OTV(Overlay  Transport  Virtualization)OTV(Overlay  Transport  Virtualization)
OTV(Overlay Transport Virtualization)
NetProtocol Xpert
 
Flexible NFV WAN interconnections with Neutron BGP VPN
 Flexible NFV WAN interconnections with Neutron BGP VPN Flexible NFV WAN interconnections with Neutron BGP VPN
Flexible NFV WAN interconnections with Neutron BGP VPN
Thomas Morin
 
Webinar NETGEAR - Prosafe Switch - Come configurare il supporto del Multicast
Webinar NETGEAR - Prosafe Switch - Come configurare il supporto del MulticastWebinar NETGEAR - Prosafe Switch - Come configurare il supporto del Multicast
Webinar NETGEAR - Prosafe Switch - Come configurare il supporto del Multicast
Netgear Italia
 
EVPN Introduction
EVPN IntroductionEVPN Introduction
Migrating from dynamic multipoint vpn phase 2 to phase 3
Migrating from dynamic multipoint vpn phase 2 to phase 3Migrating from dynamic multipoint vpn phase 2 to phase 3
Migrating from dynamic multipoint vpn phase 2 to phase 3
vijayd2015
 
PLNOG 13: Nicolai van der Smagt: SDN
PLNOG 13: Nicolai van der Smagt: SDNPLNOG 13: Nicolai van der Smagt: SDN
PLNOG 13: Nicolai van der Smagt: SDN
PROIDEA
 
Opencontrail network virtualization
Opencontrail network virtualizationOpencontrail network virtualization
Opencontrail network virtualization
Nicolai van der Smagt
 
Vmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologiesVmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologies
CloudSyntrix
 
Vmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologiesVmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologies
Udressme1
 
MadgeOne
MadgeOneMadgeOne
MadgeOne
Ronald Bartels
 
International Journal of Engineering Research and Development (IJERD)
International Journal of Engineering Research and Development (IJERD)International Journal of Engineering Research and Development (IJERD)
International Journal of Engineering Research and Development (IJERD)
IJERD Editor
 
Switching
SwitchingSwitching
Switching
Netwax Lab
 
Www ccnav5 net_ccna_3_v5_final_exam_answers_2014
Www ccnav5 net_ccna_3_v5_final_exam_answers_2014Www ccnav5 net_ccna_3_v5_final_exam_answers_2014
Www ccnav5 net_ccna_3_v5_final_exam_answers_2014Đồng Quốc Vương
 
PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes?
PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes? PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes?
PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes?
PROIDEA
 
ODA000017 MPLS VPN(L3).ppt
ODA000017 MPLS VPN(L3).pptODA000017 MPLS VPN(L3).ppt
ODA000017 MPLS VPN(L3).ppt
marwan76
 
Remote peering
Remote peeringRemote peering
Remote peering
ChristianHuber43
 
10.) vxlan
10.) vxlan10.) vxlan
10.) vxlan
Jeff Green
 
MPLS VPN
MPLS VPNMPLS VPN

Similar to VxLAN.pdf (20)

Branching out with SDN
Branching out with SDNBranching out with SDN
Branching out with SDN
 
OTV(Overlay Transport Virtualization)
OTV(Overlay  Transport  Virtualization)OTV(Overlay  Transport  Virtualization)
OTV(Overlay Transport Virtualization)
 
Flexible NFV WAN interconnections with Neutron BGP VPN
 Flexible NFV WAN interconnections with Neutron BGP VPN Flexible NFV WAN interconnections with Neutron BGP VPN
Flexible NFV WAN interconnections with Neutron BGP VPN
 
Webinar NETGEAR - Prosafe Switch - Come configurare il supporto del Multicast
Webinar NETGEAR - Prosafe Switch - Come configurare il supporto del MulticastWebinar NETGEAR - Prosafe Switch - Come configurare il supporto del Multicast
Webinar NETGEAR - Prosafe Switch - Come configurare il supporto del Multicast
 
EVPN Introduction
EVPN IntroductionEVPN Introduction
EVPN Introduction
 
Ccna 9
Ccna  9Ccna  9
Ccna 9
 
Migrating from dynamic multipoint vpn phase 2 to phase 3
Migrating from dynamic multipoint vpn phase 2 to phase 3Migrating from dynamic multipoint vpn phase 2 to phase 3
Migrating from dynamic multipoint vpn phase 2 to phase 3
 
PLNOG 13: Nicolai van der Smagt: SDN
PLNOG 13: Nicolai van der Smagt: SDNPLNOG 13: Nicolai van der Smagt: SDN
PLNOG 13: Nicolai van der Smagt: SDN
 
Opencontrail network virtualization
Opencontrail network virtualizationOpencontrail network virtualization
Opencontrail network virtualization
 
Vmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologiesVmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologies
 
Vmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologiesVmware vsan-layer2-and-layer3-network-topologies
Vmware vsan-layer2-and-layer3-network-topologies
 
MadgeOne
MadgeOneMadgeOne
MadgeOne
 
International Journal of Engineering Research and Development (IJERD)
International Journal of Engineering Research and Development (IJERD)International Journal of Engineering Research and Development (IJERD)
International Journal of Engineering Research and Development (IJERD)
 
Switching
SwitchingSwitching
Switching
 
Www ccnav5 net_ccna_3_v5_final_exam_answers_2014
Www ccnav5 net_ccna_3_v5_final_exam_answers_2014Www ccnav5 net_ccna_3_v5_final_exam_answers_2014
Www ccnav5 net_ccna_3_v5_final_exam_answers_2014
 
PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes?
PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes? PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes?
PLNOG 6: Konrad Plich, Robert Woźny - TPIX - How to connect two IXes?
 
ODA000017 MPLS VPN(L3).ppt
ODA000017 MPLS VPN(L3).pptODA000017 MPLS VPN(L3).ppt
ODA000017 MPLS VPN(L3).ppt
 
Remote peering
Remote peeringRemote peering
Remote peering
 
10.) vxlan
10.) vxlan10.) vxlan
10.) vxlan
 
MPLS VPN
MPLS VPNMPLS VPN
MPLS VPN
 

Recently uploaded

An Approach to Detecting Writing Styles Based on Clustering Techniques
An Approach to Detecting Writing Styles Based on Clustering TechniquesAn Approach to Detecting Writing Styles Based on Clustering Techniques
An Approach to Detecting Writing Styles Based on Clustering Techniques
ambekarshweta25
 
Understanding Inductive Bias in Machine Learning
Understanding Inductive Bias in Machine LearningUnderstanding Inductive Bias in Machine Learning
Understanding Inductive Bias in Machine Learning
SUTEJAS
 
一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理
一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理
一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理
zwunae
 
Student information management system project report ii.pdf
Student information management system project report ii.pdfStudent information management system project report ii.pdf
Student information management system project report ii.pdf
Kamal Acharya
 
Nuclear Power Economics and Structuring 2024
Nuclear Power Economics and Structuring 2024Nuclear Power Economics and Structuring 2024
Nuclear Power Economics and Structuring 2024
Massimo Talia
 
basic-wireline-operations-course-mahmoud-f-radwan.pdf
basic-wireline-operations-course-mahmoud-f-radwan.pdfbasic-wireline-operations-course-mahmoud-f-radwan.pdf
basic-wireline-operations-course-mahmoud-f-radwan.pdf
NidhalKahouli2
 
AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf
AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdfAKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf
AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf
SamSarthak3
 
Water billing management system project report.pdf
Water billing management system project report.pdfWater billing management system project report.pdf
Water billing management system project report.pdf
Kamal Acharya
 
Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS
Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTSHeap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS
Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS
Soumen Santra
 
Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdf
Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdfTop 10 Oil and Gas Projects in Saudi Arabia 2024.pdf
Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdf
Teleport Manpower Consultant
 
RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...
RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...
RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...
thanhdowork
 
一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理
一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理
一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理
ydteq
 
Fundamentals of Electric Drives and its applications.pptx
Fundamentals of Electric Drives and its applications.pptxFundamentals of Electric Drives and its applications.pptx
Fundamentals of Electric Drives and its applications.pptx
manasideore6
 
Modelagem de um CSTR com reação endotermica.pdf
Modelagem de um CSTR com reação endotermica.pdfModelagem de um CSTR com reação endotermica.pdf
Modelagem de um CSTR com reação endotermica.pdf
camseq
 
KuberTENes Birthday Bash Guadalajara - K8sGPT first impressions
KuberTENes Birthday Bash Guadalajara - K8sGPT first impressionsKuberTENes Birthday Bash Guadalajara - K8sGPT first impressions
KuberTENes Birthday Bash Guadalajara - K8sGPT first impressions
Victor Morales
 
DESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABS
DESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABSDESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABS
DESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABS
itech2017
 
Hierarchical Digital Twin of a Naval Power System
Hierarchical Digital Twin of a Naval Power SystemHierarchical Digital Twin of a Naval Power System
Hierarchical Digital Twin of a Naval Power System
Kerry Sado
 
Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...
Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...
Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...
Dr.Costas Sachpazis
 
Building Electrical System Design & Installation
Building Electrical System Design & InstallationBuilding Electrical System Design & Installation
Building Electrical System Design & Installation
symbo111
 
14 Template Contractual Notice - EOT Application
14 Template Contractual Notice - EOT Application14 Template Contractual Notice - EOT Application
14 Template Contractual Notice - EOT Application
SyedAbiiAzazi1
 

Recently uploaded (20)

An Approach to Detecting Writing Styles Based on Clustering Techniques
An Approach to Detecting Writing Styles Based on Clustering TechniquesAn Approach to Detecting Writing Styles Based on Clustering Techniques
An Approach to Detecting Writing Styles Based on Clustering Techniques
 
Understanding Inductive Bias in Machine Learning
Understanding Inductive Bias in Machine LearningUnderstanding Inductive Bias in Machine Learning
Understanding Inductive Bias in Machine Learning
 
一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理
一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理
一比一原版(IIT毕业证)伊利诺伊理工大学毕业证成绩单专业办理
 
Student information management system project report ii.pdf
Student information management system project report ii.pdfStudent information management system project report ii.pdf
Student information management system project report ii.pdf
 
Nuclear Power Economics and Structuring 2024
Nuclear Power Economics and Structuring 2024Nuclear Power Economics and Structuring 2024
Nuclear Power Economics and Structuring 2024
 
basic-wireline-operations-course-mahmoud-f-radwan.pdf
basic-wireline-operations-course-mahmoud-f-radwan.pdfbasic-wireline-operations-course-mahmoud-f-radwan.pdf
basic-wireline-operations-course-mahmoud-f-radwan.pdf
 
AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf
AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdfAKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf
AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf
 
Water billing management system project report.pdf
Water billing management system project report.pdfWater billing management system project report.pdf
Water billing management system project report.pdf
 
Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS
Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTSHeap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS
Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS
 
Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdf
Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdfTop 10 Oil and Gas Projects in Saudi Arabia 2024.pdf
Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdf
 
RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...
RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...
RAT: Retrieval Augmented Thoughts Elicit Context-Aware Reasoning in Long-Hori...
 
一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理
一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理
一比一原版(UofT毕业证)多伦多大学毕业证成绩单如何办理
 
Fundamentals of Electric Drives and its applications.pptx
Fundamentals of Electric Drives and its applications.pptxFundamentals of Electric Drives and its applications.pptx
Fundamentals of Electric Drives and its applications.pptx
 
Modelagem de um CSTR com reação endotermica.pdf
Modelagem de um CSTR com reação endotermica.pdfModelagem de um CSTR com reação endotermica.pdf
Modelagem de um CSTR com reação endotermica.pdf
 
KuberTENes Birthday Bash Guadalajara - K8sGPT first impressions
KuberTENes Birthday Bash Guadalajara - K8sGPT first impressionsKuberTENes Birthday Bash Guadalajara - K8sGPT first impressions
KuberTENes Birthday Bash Guadalajara - K8sGPT first impressions
 
DESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABS
DESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABSDESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABS
DESIGN AND ANALYSIS OF A CAR SHOWROOM USING E TABS
 
Hierarchical Digital Twin of a Naval Power System
Hierarchical Digital Twin of a Naval Power SystemHierarchical Digital Twin of a Naval Power System
Hierarchical Digital Twin of a Naval Power System
 
Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...
Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...
Sachpazis:Terzaghi Bearing Capacity Estimation in simple terms with Calculati...
 
Building Electrical System Design & Installation
Building Electrical System Design & InstallationBuilding Electrical System Design & Installation
Building Electrical System Design & Installation
 
14 Template Contractual Notice - EOT Application
14 Template Contractual Notice - EOT Application14 Template Contractual Notice - EOT Application
14 Template Contractual Notice - EOT Application
 

VxLAN.pdf

  • 1. VXLAN Implementation. Simplified. Mohammed Mohsin CCIE#35485 INTRA-VXLAN COMMUNICATION – HOW COMMUNICATION HAPPENS BETWEEN TWO HOSTS IN SAME VXLAN ACROSS A LAYER 3 NETWORK MOHAMMED MOHSIN CCIE#35485 1
  • 2. VXLAN demystified! MOHAMMED MOHSIN CCIE#35485 2 ➡️ VXLAN is in simple terms switching over routing. VXLAN allows you to create an L2 network on top of an L3 network. Using underlay and overlay networks. ➡️ Similar to what MPLS VPNs do. PE routers know the endpoint destinations. But the core P routers along the path have no knowledge about the overlay networks. They only route based on external MPLS label. ➡️ The difference is MPLS VPNs provide logical layer 3 networks, whereas VXLAN provides layer 2 overlay networks over existing layer 3 IP networks.
  • 4. How VXLAN works? MOHAMMED MOHSIN CCIE#35485 4 So, to understand how VXLAN is implemented, we need to know how underlay network is built. VXLAN utilizes this underlay network to build its overlay network.
  • 5. The essential questions to ask are: MOHAMMED MOHSIN CCIE#35485 5 📌 How is the underlay network built? 📌 Once reachability is established between VTEPs using any IGP or BGP, how they establish overlay VXLAN tunnels? 📌 How does a VTEP forward layer 2 frames from a locally connected source to a remote destination mac address behind another VTEP? 📌 How unicast mac addresses are learnt over the VTEP cloud?
  • 6. The essential questions to ask are: MOHAMMED MOHSIN CCIE#35485 6 📌 How broadcast, unknown unicast and multicast (BUM) traffic is sent across the VTEP cloud? 📌 How to make sure there are no loops? 📌 How to best utilize the bandwidth of the underlay network using ECMP? 📌 How to adapt to dynamic changes to endpoint mac addresses? Think of VM mobility.
  • 7. Below is a primer for implementation steps MOHAMMED MOHSIN CCIE#35485 7 ➡️ VXLAN adds 50+ bytes of overhead to the layer 2 frame. So be prepared to increase the default MTU along the path. ➡️ A loopback interface to be used as Network Virtualization Endpoint (NVE) interface on all VTEPs. This will be the source of VTEP through which other VTEPs will be reachable.
  • 8. Below is a primer for implementation steps MOHAMMED MOHSIN CCIE#35485 8
  • 9. Below is a primer for implementation steps MOHAMMED MOHSIN CCIE#35485 9 ➡️ An interior gateway protocol (IGP) such as OSPF or BGP can be used as the underlay routing protocol for VTEP reachability through NVE. ➡️ Multicast group to VNI mapping on the VTEP external interfaces. ➡️ VNI to VLAN mapping on the VTEP internal interfaces.
  • 11. Intra-VXLAN communication MOHAMMED MOHSIN CCIE#35485 11 ➡️ Intra-VXLAN communication also referred to as L2 VNI communication is packet transfer between two hosts in same VXLAN across the Layer 3 network between two VTEPs. In this demonstration implementation EVPN is used to carry MAC addresses between VTEPs. ➡️ EVPN is an extension to BGP that allows the network to carry endpoint reachability information such as Layer 2 MAC addresses (L2 VNI) and Layer 3 IP addresses (L3 VNI). This control plane technology uses MP-BGP for MAC and IP address endpoint distribution, where MAC addresses are treated as routes. Without EVPN, VXLAN overlay networks operate in the flood-and- learn mode.
  • 12. Underlay Network – Building the foundation. It is also called transport network. MOHAMMED MOHSIN CCIE#35485 12 ➡️ IP reachability between VTEPs can be achieved using any IGP like OSPF or even BGP which will enable loopback interface on each VTEP to be reachable from other VTEPs. ➡️ Multicast routing is required to process BUM (broadcast, unknown unicast and multicast) traffic over the VTEP cloud. VTEPs join a particular multicast group for each VNI. Each VNI is mapped to a multicast address so that only VTEPs that host a particular VNI will receive BUM traffic and not flooded to all VTEPs. Think of ethernet broadcast domains! Without multicast, there is unnecessary flooding.
  • 14. Overlay network – That is VXLAN. Tunneling the frames! MOHAMMED MOHSIN CCIE#35485 14 ➡️ Configure VLAN to VNI mappings to identify packets at the source VTEPs. ➡️ Configure NVE interface on each VTEP and assign the local loopback interface as the source. Also configured under NVE interface is the mapping between multicast group and VNI.
  • 15. Overlay network – VXLAN. Tunneling the frames! MOHAMMED MOHSIN CCIE#35485 15 ➡️ Configure MP-BGP EVPN neighborships between VTEPs to advertise mac- addresses reachable between VTEPs. It is like each VTEP telling other VTEPs what all mac-addresses are reachable through it or residing behind it. Do remember we are configuring this for known unicast mac-addresses. ➡️ MP-BGP uses route targets to import and export L2 VNI routes containing mac- addresses similar to how MPLS VPNs work.
  • 16. Overlay network – VXLAN. Tunneling the frames! MOHAMMED MOHSIN CCIE#35485 16
  • 17. Host A to Host B Communication MOHAMMED MOHSIN CCIE#35485 17
  • 18. Host A to Host B Communication MOHAMMED MOHSIN CCIE#35485 18 For two hosts in same VXLAN to communicate across the VXLAN overlay network, below steps happen. 1️⃣ Host A sends ARP request for Host B mac-address which is behind remote VTEP. 2️⃣ Local VTEP will identify the correct VNI and send the ARP broadcast request to the multicast group address for that VNI. It will learn Host A mac-address and VNI mapping.
  • 19. Host A to Host B Communication MOHAMMED MOHSIN CCIE#35485 19 3️⃣ Remote VTEP will receive the ARP broadcast request and forward it on its local L2 interface towards the destination host. It will record the source VTEP, VNI and Host A mac-address. 4️⃣ Once reply is received from the destination host, remote VTEP will learn the mac-address of Host B and reply to source VTEP with IP to MAC binding in ARP response. 5️⃣ Host A can communicate with Host B over the VXLAN overlay network as if they are connected to same switch!
  • 20. Let's understand the technologies in a simple way! linkedin.com/in/mohsinccie MOHAMMED MOHSIN CCIE#35485 20