VLAN over VXLAN

Products

• VMware NSX

Issue/Introduction

By default, a Logical Switch does not allow multiple guest VLANs. In order to use guest VLANs, the below configuration is necessary.

 

Environment

VMware NSX Data Center for vSphere 6.x

Resolution

To resolve this issue:

• Create the Logical Switch via REST API call to enable guestVlanAllowed:

  <virtualWireCreateSpec>
<name>Test LS VLANs</name>
<description>Logical Switch to test tagged traffic</description>
<controlPlaneMode>UNICAST_MODE</controlPlaneMode>
<guestVlanAllowed>true</guestVlanAllowed>
<tenantId>virtual wire tenant</tenantId>
</virtualWireCreateSpec>

• VXLAN transport should use a tagged VLAN to activate the code allowing guest VLANs on the Logical Switch (not VLAN ID 0).
• The VTEP portgroup as well as the VXLAN portgroup should both be left as the default configuration, with the VLAN ID of the VXLAN transport (neither VLAN Trunking, nor VLAN None).