GigaSMART VxLAN Tunnel Decapsulation

Required License for VxLAN Decapsulation: Base (GigaVUE-HD4, GigaVUE-HD8, GigaVUE-HC2, and GigaVUE-HC3), Tunneling (GigaVUE-HC1 and GigaVUE-HB1)

Starting in software version 5.3, support for VxLAN tunnel termination is added to GigaSMART. VxLAN encapsulated packets originating from any device, such as the Gigamon cloud or a customer-specific device, will be received on a network port, then will be terminated at GigaSMART. The VxLAN payload (the inner packet) will be sent to tools. The reassembly of fragmented IP packets is also supported.

This section only includes VxLAN tunnel termination. It does not include VxLAN origination. To terminate a custom tunnel header that is not known to GigaSMART, use custom tunnel termination. Refer to GigaSMART Custom Tunnel Decapsulation

You can configure a GigaSMART-enabled node to act as the receiving end of a VxLAN tunnel by configuring a GigaSMART tunnel-decap operation with type set to vxlan. The high-level steps are as follows:

1.   Configure an IP interface associated with network port and assign an IP address, subnet mask, and default gateway to the IP interface. The gateway forwards the encapsulated packet to the network port.
2. Create a GigaSMART operation with a vxlan decapsulation component.
3. Bind the GigaSMART operation to the IP interface associated with network port as part of a map.

At GigaSMART, VxLAN encap packets are received on the network port. After validation of the source port, destination port, and VxLAN Network Identifier (VNI) of the packet, the VxLAN tunnel header will be removed and the inner payload will be sent to a subsequent GSOP or to the tools.

The VNI in the VxLAN header is validated against the user VNI provided. If it does not match, the packet will be dropped and counted as an error.

A VxLAN packet is identified using the portdst parameter. The destination port can be 4789, or any user-configured port number from 1 to 65535.

For an example configuration, refer to VxLAN Tunnel Termination Example

Note:  GigaSMART operations with a tunnel component can only be assigned to GigaSMART groups consisting of a single GigaSMART engine port.

VxLAN Tunnel Termination Example

To access GigaSMART within GigaVUE-FM, access a device that has been added to GigaVUE-FM from the GigaVUE-FM interface. GigaSMART appears in the navigation pane of the device view on supported devices. Refer to Access GigaSMART from GigaVUE-FM for details.

 

To configure a VxLAN tunnel termination:

Step 1: Configure a Tool Port
1.   Select Ports > Ports > All Ports.
2. Click Quick Port Editor.
3. Configure an available port as follows:
Select Tool in the Type field.
Enter an alias in the Alias field. For example, 1/4/x2.
Check the Enable check box.
4. Click OK to save the port.
5. Close the Quick Port Editor.
Step 2: Configure a GigaSMART group and associate it with a GigaSMART engine port.
1.   From the device view, select GigaSMART > GigaSMART Groups > GigaSMART Groups.
2. Click New.
3. Type an alias in the Alias field. For example, gsg.
4. Select an engine port in the Port List field. For example, 1/3/e2. (All engine ports have an ‘e’.)
5. Click OK to save the GigaSMART group.
Step 3: Configure the IP Interface
1.   Select Ports > IP Interfaces.
2. Click New.
3. In the Alias and Comment fields, enter the name and description for the IP interface.
4. From the Port field, select any available network port. In this example, port 1/2/x1.
5. Complete the fields to configure the IP Interface:
Enter an IP Address. For example, 10.115.9.5.
Enter a Mask. For example, 255.255.255.0.
Enter a Gateway. For example, 10.115.9.1.
Enter the maximum transmission unit (MTU) for this port in the MTU field. For example, 1500.
Select the GigaSMART Group you created in step 2 of this process (gsg).
6. Click OK to save the IP interface configuration.
Step 4: Configure GigaSMART operation and assign to the GigaSMART Group
1.   From the device view, select GigaSMART > GigaSMART Operations (GSOP) > GigaSMART Operation.
2. Click New.
3. Type an alias in the Alias field to identify this operation. For example, vxlan2.
4. For GigaSMART Groups, select the group created in step 2 of this process (gsg).
5. For GigaSMART Operations (GSOP), select Tunnel Decapsulation.

A Tunnel Decapsulation form appears. Complete the fields as follows:

Select “VxLAN” as the Type.
Enter a Source Port.
Enter a Destination Port.
Enter a VNI.
6. Click OK to save the GSOP.
Step 5: Create a Map
1.   Select Maps > Maps > Maps.
2. Click New.
3. Configure the map.
Type an alias the Alias field.
For Type, leave the default (Regular).
For Subtype, leave the default (By Rule).
For Source, select the IP interface you configured in step 3 (1/2/x1).
For Destination, select the tool port you configured in step 1 (1/4/x2).
4. Under Map Rules, click Add a Rule.
Select IP Version from the drop list and set IP Version to v4 when prompted.
Select Pass radio button for rule type.
Click OK.
Displaying VxLAN Tunnel GSOP

To display the VxLAN Tunnel GigaSMART operation:

1.   From the device view, select GigaSMART > GigaSMART Operations (GSOP).
2. Select the VxLAN tunnel GSOP that you created in step 4 (vxlan2). The GSOP quick view appears.
Displaying VxLAN Tunnel Statistics

To display VxLAN tunnel statistics:

1.   From the device view, select GigaSMART > GigaSMART Operations (GSOP) > Statistics.

The Statistics page displays all GSOP statistics in a table format.

2. In the table view, click the VxLAN tunnel GSOP alias that you created in step 4 (vxlan2) to display the Statistics quick view.

Figure 904: GSOP VxLAN Statistics Quick View