Mailing List Archive: Help with VMANs...

All,

I'm struggling a bit to understand VMANs on Extreme, and how to achieve what
I'm trying to do.

Firstly, a quick network diagram...

+----------+ +----------+
| sw1 | | sw2 |
+-----+----+ +-----+----+
| Vlan 5,100 tagged | Vlan 5,200 tagged
| |
+--------------+ +-----------------+
| |
=======
Carrier
MPLS
Network
=======
|
+-----+-----+
| sw3 |
+-----------+

So, sw1 and sw2 (X460's) are in remote PoPs. On the uplink port from sw1,
vlans 5 and 100 are tagged. On the uplink port from sw2, vlans 5 and 200 are
tagged.

Our carrier hands over both uplinks on an NNI into sw3, but adds another vlan
tag - 500 for sw1, and 501 for sw2. (so vlan 100 from sw1 appears on sw2 as
SVID 500, CVID 100).

I want sw3 to see vlans 5, 100, 200. It seemed like I could create a VMAN with
tag 500, and add the NNI port with the vman tagged. However, sw3 doesn't seem
to see traffic on vlans 5 or 100. Vlan5 would be our 'management' vlan, so
has an ipaddress configured on each switch, all in the same subnet.

Can I do this with VMANs? Does a VMAN only work if you egress the traffic on
an untagged port out of sw3 - i.e. sw3 just strips the SVID, so another switch
downstream of sw3 could see vlan 5, 100, etc?

Many thanks,

Simon
_______________________________________________
extreme-nsp mailing list
extreme-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/extreme-nsp

On 2014-07-07 14:30, Simon Lockhart wrote:
> All,
>
> I'm struggling a bit to understand VMANs on Extreme, and how to achieve what
> I'm trying to do.
>
> Firstly, a quick network diagram...
>
>
> +----------+ +----------+
> | sw1 | | sw2 |
> +-----+----+ +-----+----+
> | Vlan 5,100 tagged | Vlan 5,200 tagged
> | |
> +--------------+ +-----------------+
> | |
> =======
> Carrier
> MPLS
> Network
> =======
> |
> +-----+-----+
> | sw3 |
> +-----------+
>
> So, sw1 and sw2 (X460's) are in remote PoPs. On the uplink port from sw1,
> vlans 5 and 100 are tagged. On the uplink port from sw2, vlans 5 and 200 are
> tagged.
>
> Our carrier hands over both uplinks on an NNI into sw3, but adds another vlan
> tag - 500 for sw1, and 501 for sw2. (so vlan 100 from sw1 appears on sw2 as
> SVID 500, CVID 100).
>
> I want sw3 to see vlans 5, 100, 200. It seemed like I could create a VMAN with
> tag 500, and add the NNI port with the vman tagged. However, sw3 doesn't seem
> to see traffic on vlans 5 or 100. Vlan5 would be our 'management' vlan, so
> has an ipaddress configured on each switch, all in the same subnet.
>
> Can I do this with VMANs? Does a VMAN only work if you egress the traffic on
> an untagged port out of sw3 - i.e. sw3 just strips the SVID, so another switch
> downstream of sw3 could see vlan 5, 100, etc?
>
>
In my experience, VMAN just strips/adds SVLAN ID on "untagged" port,
while accepting all vlans that enter
this untagged port.

However, there are commands like config vlan x add subvlan y
maybe you could try to search there ?

btw, VMAN is mostly used when you create VMAN, than, you can treat is as
regular vlan using vlan commands.

Marcin

_______________________________________________
extreme-nsp mailing list
extreme-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/extreme-nsp