Outer VXLAN Header Support

Extreme 9920 software, release 21.1.1.0 supports outer VXLAN headers. The VXLAN filters can be enabled per port.

The VXLAN frames can be filtered based on VNID, IPv4 source address, and IPv4 destination address. The VXLAN frames that do not match the filter are dropped. The VXLAN headers in the matching frames are terminated, and a new SAP is assigned for further processing.

All VXLAN packets without outer VLAN tag are processed as transport tunnel packets and the VXLAN headers are terminated.

Limitations

The outer VXLAN header limitations are as follows:

Multiple ingress-groups can share the same outer VXLAN filter.
Ingress-groups with the same outer VXLAN filter belong to the same hardware table and share the counter and mirror actions.
Multiple ingress-groups configured without tunnel id, source IP address, or destination IP address can create conflicts among ingress-groups.
The order of priority for ingress frames that match filters from multiple ingress-groups is as follows:
1. Tunnel ID
2. Source IP address
3. Destination IP address