config system overlay-tunnel
Use this command to configure an overlay tunnel.
FortiADC support two types of overlay protocols—VXLAN and NVGRE.
- Virtual Extensible LAN (VXLAN) is a network virtualization technology used in large cloud-computing deployments. It encapsulates OSI Layer-2 Ethernet frames within Layer-3 IP packets using the standard destination port 4789. VXLAN endpoints that terminate VXLAN tunnels are known as VXLAN tunnel endpoints (VTEPs), and can be virtual or physical switch ports. For more information, see RFC 7348.
- Network Virtualization using Generic Routing Encapsulation (NVGRE) is a network virtualization technology that attempts to alleviate the scalability problems associated with large cloud-computing deployments. It uses Generic Routing Encapsulation (GRE) to tunnel Layer-2 packets over Layer-3 networks.
Before you begin, make sure that you have read-write permission to configure system settings.
Syntax
config system vxlan
edit <name> <string>
set type {vxlan|nvgre}
set interface <datasource>
set vni <integer>
set vsid <integer
set ip-version {ipv4-unicast|ipv4-multicast}
set dstport <integer>
set multicast-ttl <integer>
set destination-ip-addresses <class_ip>
config remote-host
edit <No.>
set host-mac-address <xx:xx:xx:xx:xx:xx>
set vtep <class_ip>
next
end
next
end
type |
Select a virtual overlay networking protocol:
|
interface
|
The outing interface for VXLAN encapsulated traffic. |
dstport
|
The VXLAN destination port (number). The default is 4789. The valid range is 1–6553. |
vni
|
The VXLAN network ID. The valid range is 1–16777215. |
vsid
|
The NVGRE ID. The valid range is 1–16777215. |
ip-version
|
The IP version to use for the VXLAN interface and for communication over VXLAN.
|
destination-ip-address
|
Specify the destination IP address. Note: For IPv4 unicast, specify an IPv4 address of the VXLAN interface on the device at the remote end of the VXLAN. You can set multiple VTEP IP addresses, splitting with space char; for IPv4 multicast, specify one multicast IP address only. |
multicast-ttl
|
The option applies to IPv4 multicast IP type only. Specify the multicast TTL. Valid values are from 0 (default) to 255. |
| remote-host | Add static MAC_to_VTEP to VXLAN mapping table. |
| host-mac-address | Set the remote host MAC address. The format is xx:xx:xx:xx:xx:xx |
| vtep | Set the remote VTEP IP address. |
Example
The following commands create a VXLAN interface with two VTEP peers:
config system overlay-tunnel
edit "vxlan1"
set type vxlan
set interface port2
set ip-version ipv4-unicast
set destination-ip-addresses 10.75.0.202 10.75.0.88
set dstport 4789
set vni 1122
config remote-host
end
next
The following commands create a VXLAN interface with a multicast IP:
config system overlay-tunnel
edit "vxlan1"
set type vxlan
set interface vlan249
set ip-version ipv4-multicast
set destination-ip-addresses 239.1.1.1
set dstport 4789
set vni 1122
config remote-host
edit 1
set host-mac-address 22:22:22:22:22:22
set vtep 3.2.2.2
end
next
The following commands create an NVGRE interface with two remote gateway IPs:
config system overlay-tunnel
edit "nvgre1"
set type nvgre
set interface vlan249
set ip-version ipv4-unicast
set destination-ip-addresses 10.75.0.202 10.75.0.88
set dstport 4789
set vsid 1122
config remote-host
end
next
After creating a VXLAN/NVGRE tunnel, the system will create one interface automatically accordingly.
To diagnose your VXLAN configuration, use the following command:
diagnose sys vxlan fdb list vxlan1
(M) FortiADC-VM# diagnose system vxlan-fdb vxlan1
ff:ff:ff:ff:ff:ff dst 10.249.100.31 via vlan249 self permanent
ff:ff:ff:ff:ff:ff dst 10.249.100.38 via vlan249 self permanent
22:22:22:22:22:22 dst 3.2.2.2 via vlan249 self permanent