Virtual Extensible LAN (VXLAN) VXLAN Virtual Network Identifier (VNI) Access Control List (ACL) Match Criteria

Starting with ExtremeXOS 22.1, user ACLs can additionally match the Virtual Extensible LAN (VXLAN) Virtual Network Identifier (VNI) on an egress-terminated VXLAN packet (egress VTEP scenario), or on a transit switch. The VNI match criteria is available for both static and dynamic ingress Access Control Lists (ACLs).

The following match criteria syntax can be added to the “if” clause of a policy rule:

vxlan-vni vni number

entry countvni100 {
 if {
      vxlan-vni 100;
 } then {
      count vni100;
}}