Fabric Attach Management VLAN Enhancements

The Fabric Attach feature includes conditional logic for automatic fallback management VLAN creation and server synchronization. This feature prevents disruption in environments where a different management VLAN is already in use while preserving zero-touch provisioning automation.

Issue: The automatic fallback management VLAN feature creates a VLAN in the FA proxy when the FA server does not provide one. In deployments where explicit FA management-VLAN configurations are already present or where zero-touch provisioning is not active, the automatic VLAN creation consumes unnecessary resources and can disrupt operations.

Resolution: The Fabric Attach feature applies conditional logic to fallback management VLAN creation and assignment. The fallback VLAN is created only when zero-touch provisioning is running and the FA server is not sending a management VLAN. Client port assignment and VLAN advertisement are conditional upon FA server approval of the Network Service Identifier (NSI) that the proxy requests. When the server rejects the NSI, the proxy retries while zero-touch provisioning is active but does not apply configuration changes until the server approves the request.

Key Capabilities:

• Fallback management VLAN creation is exclusive to zero-touch provisioning scenarios: the switch creates the VLAN only when zero-touch provisioning is running and the FA server is not sending a management VLAN
• The switch assigns client ports to the management VLAN only when the FA server approves the Network Service Identifier (NSI) that the proxy requests
• When the FA server rejects the NSI, the proxy implements automatic retry attempts while zero-touch provisioning is active, but does not apply configuration changes during the retry period
• The switch does not advertise management VLAN information to FA clients when the server rejects the NSI, preventing unauthorized VLAN assignments
• Upon server approval of the NSI, the switch adds client ports to the management VLAN, advertises VLAN information to FA clients via LLDP, and persists the configuration until the next reboot or until the FA server provides an updated management VLAN assignment
• The configure fabric attach management-vlan forward off command allows operators to prevent VLAN plumbing on ports where FA clients are detected
• The feature is backward compatible with existing Fabric Attach configurations; no configuration changes are required for deployments that do not use zero-touch provisioning