Policy to Virtual Extensible LAN (VXLAN) Mapping

ExtremeXOS 22.5 allows you to create Virtual Extensible LAN (VXLAN)-to-policy mappings by applying the VXLAN identifier (VNI) to a profile (where NSI = VNI). Network Service Identifier (NSI) provides a mechanism to apply the VXLAN/NSI mappings in policy using a profile-based attribute. NSI is a 24-bit value ranging from 1 to 16,777,215, where none (default) indicating no NSI for the VXLAN.

The maptable response can be configured to apply policy in the following ways:

Policy: VLAN/NSI mappings from policy profile are used if present. Mappings in RADIUS response are ignored.
Tunnel: VLAN/NSI mappings from RADIUS are used if present. Mappings in policy profile are ignored.
Both: VLAN/NSI mappings from either RADIUS or policy profile may be used. However, mappings in RADIUS response have a higher precedence over policy profile when both contain mappings.

Supported Platforms

Summit X770, X670-G2, and ExtremeSwitching X870, X690 series switches, and stacks with X770, X670-G2, X870, and X690 slots only.

Changed CLI Commands

Changes are underlined.

configure policy profile profile_index {name name} {pvid pvid} {pvid-status pvid_status} {cos cos} {cos-status cos_status} {egress-vlans egress_vlan_list}{forbidden-vlans forbidden_vlans} {untagged-vlans untagged_vlans} {append | clear} {tci-overwrite tci_overwrite} {auth-override auth_override} {nsi [nsi | none]} {web-redirect web_redir_index}

Published June 2019prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback