VXLAN visibility overview

The Virtual Extensible LAN (VXLAN) visibility feature is used in the transit network devices.

In general, a transit device routes the traffic based on the outer destination virtual tunnel endpoints (VTEP) IP address. However, the VXLAN visibility feature provides a mechanism for deep packet inspection and classifies the packets on the outer Layer 3 header and the VXLAN header and also on the native inner Layer 3 and Layer 4 header.

Extreme's VXLAN visibility has overlay access-control lists (ACLs) of type VXLAN. It is a collection of filters that defines what action to take on the packets thata match the configured parameter in the filter. VXLAN visibility overlay ACLs define filters with parameters that match the outer Layer 3 and Layer 4 VXLAN header and the native inner Layer 3 and Layer 4 fields of a packet.

In addition, a VXLAN overlay ACL accepts a breakout port as a mirror port or a redirect port. You can remove VXLAN visibility rules before changing the breakout port configuration for a port that is being used as a mirror port or a redirect port in the VXLAN rule.