Why the NVE MAC address shouldn't be the same with dual-active access scenario?

Latest reply: Dec 31, 2018 14:29:15 277 6 7 1
Boardleaf   and ServiceLeaf in distributed VXLAN cannot communicate with each other if   their MAC addresses are the same. The reasons are as follows:
    For the ServiceLeaf, the traffic from the remote end is as follows:
    1. The traffic from the remote end is decapsulated first, DMAC(local NVE   MAC)+ VNI(VNI of NVE)→loopback port
   
(The MAC address is statically delivered.)
    2. After traffic send to loopback port, checking routing table or ARP table   then forward.
   
    For the traffic from ServiceLeaf to local and need to be sent out:
    1. The DMAC is the virtual MAC of VBDIF, DMAC+VNI(VNI of VBDIF)→loopback   port
    2. If traffic come from loopback port(VBDIF port), checking routing table   and send out, the DMAC will be replaced with mac address of remote NVE and   send out through loopback port.
    3. If traffic come from loopback port at the second time and hit, DMAC(mac   address of remote NVE)+VNI(VNI if NVE)→remote VTEP, In this time, the   encapsulation process is used.
   
    The process marking red will cover each other and cause Boardleaf and   ServiceLeaf cannot communicate with each other.
   

  • x
  • convention:

Created Dec 29, 2018 03:18:20 Helpful(0) Helpful(0)

If traffic come from loopback port at the second time and hit, DMAC(mac address of remote NVE)+VNI(VNI if NVE)→remote VTEP, In this time, the encapsulation process is used.
  • x
  • convention:

Created Dec 29, 2018 03:39:16 Helpful(0) Helpful(0)

If traffic come from loopback port at the second time and hit, DMAC(mac address of remote NVE)+VNI(VNI if NVE)→remote VTEP, In this time, the encapsulation process is used.
The process marking red will cover each other and cause Boardleaf and ServiceLeaf cannot communicate with each other.
  • x
  • convention:

Created Dec 29, 2018 05:40:42 Helpful(0) Helpful(0)

ServiceLeaf in distributed VXLAN cannot communicate with each other if their MAC addresses are the same. The reasons are as follows:
For the ServiceLeaf, the traffic from the remote end is as follows:
1. The traffic from the remote end is decapsulated first, DMAC(local NVE MAC)+ VNI(VNI of NVE)→loopback port (The MAC address is statically delivered.)
2. After traffic send to loopback port, checking routing table or ARP table then forward.
  • x
  • convention:

Admin Created Dec 29, 2018 06:42:34 Helpful(0) Helpful(0)

It is helpful, but could you explain me more about how it works based on the protocols of VxLAN of huawei Cloud engine switches, I believe that should help me to better understand how it works and why it doesnt work in these ways.
  • x
  • convention:

Created Dec 29, 2018 11:04:06 Helpful(0) Helpful(0)

Network Visible Entities Chinese full name: Network Visible Entities Network Visible Entities (NVE) is also known as NVE slot, is a resource through the network can set addresses. Typically,
  • x
  • convention:

Created Dec 31, 2018 14:29:15 Helpful(0) Helpful(0)

This post is related to VXLAN, it si very detailed to show us the reason of Boardleaf and ServiceLeaf in distributed VXLAN cannot communicate with each other if their MAC addresses are the same, thanks for your sharing
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

Login and enjoy all the member benefits

Login
Fast reply Scroll to top