VLAN over VXLAN

Products

• VMware NSX

Issue/Introduction

By default, a Logical Switch does not allow multiple guest VLANs.

 

Environment

VMware NSX Data Center for vSphere 6.x

Cause

Updating an existing Logical Switch configuration to enable the "guestVlanAllowed" option is not currently implemented in NSX-V.

Resolution

In order to use guest VLANs, the below configuration is necessary.

• Create the Logical Switch via REST API call to enable guestVlanAllowed:

  <virtualWireCreateSpec>
<name>Test LS VLANs</name>
<description>Logical Switch to test tagged traffic</description>
<controlPlaneMode>UNICAST_MODE</controlPlaneMode>
<guestVlanAllowed>true</guestVlanAllowed>
<tenantId>virtual wire tenant</tenantId>
</virtualWireCreateSpec>

• VXLAN transport should use a tagged VLAN to activate the code allowing guest VLANs on the Logical Switch (not VLAN ID 0).
• The VTEP portgroup as well as the VXLAN portgroup should both be left as the default configuration, with the VLAN ID of the VXLAN transport (neither VLAN Trunking, nor VLAN None).