29
In VLAN access mode, VXLAN packets sent between VXLAN sites do not contain 802.1Q
VLAN tags. VXLAN can provide Layer 2 connectivity for different 802.1Q VLANs between sites.
You can use different 802.1Q VLANs to provide the same service in different sites.
•
Ethernet access mode
—The VTEP does not process the 802.1Q VLAN tags of Ethernet
frames received from or sent to the local site.
{
For an Ethernet frame received from the local site, the VTEP forwards the frame with the
802.1Q VLAN tags intact.
{
For an Ethernet frame destined for the local site, the VTEP forwards the frame without
adding 802.1Q VLAN tags.
In Ethernet access mode, VXLAN packets sent between VXLAN sites contain 802.1Q VLAN
tags. VXLAN cannot provide Layer 2 connectivity for different 802.1Q VLANs between sites.
You must use the same 802.1Q VLAN to provide the same service between sites.
If the Ethernet service instance uses the
default
,
tagged
, or
untagged
frame match criterion, the
access mode set by this command does not take effect. The mapped VSI uses Ethernet access
mode to process traffic.
Examples
# On FortyGigE 1/0/1, configure Ethernet service instance 200 to match frames with an outer 802.1Q
VLAN tag of 200, and map the instance to the VSI
vpn1
.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] quit
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] service-instance 200
[Sysname-FortyGigE1/0/1-srv200] encapsulation s-vid 200
[Sysname-FortyGigE1/0/1-srv200] xconnect vsi vpn1
Related commands
•
display l2vpn interface
•
display l2vpn service-instance
•
encapsulation
•
vsi
OVSDB commands
ovsdb server ca-certificate
Use
ovsdb server ca-certificate
to specify a CA certificate file for SSL.
Use
undo ovsdb server ca-certificate
to remove the CA certificate file setting for SSL.
Syntax
ovsdb server ca-certificate
ca-filename
[
bootstrap
]
undo ovsdb server ca-certificate
Default
No CA certificate file is specified.
Views
System view
