Hi, All How to isolate two VxLAN unicast tunnels when L3 routing available? For example, I have two tenants, with different vxlan tunnels connected to the VPP box. Each vxlan tunnel is under a different bridge domain with different loop interface. I need the loop interface to connect to external network. Now how to isolate the internal 10.10.10.x and 20.20.20.x network segment?
... create bridge-domain 1000 learn 1 forward 1 uu-flood 1 flood 1 arp-term 0 create vxlan tunnel src 172.168.1.1 dst 172.168.1.2 vni 100 set interface l2 bridge vxlan_tunnel0 1000 loopback create set interface l2 bridge loop0 1000 bvi set interface ip address loop0 10.10.10.1/24 ... create bridge-domain 2000 learn 1 forward 1 uu-flood 1 flood 1 arp-term 0 create vxlan tunnel src 172.168.1.1 dst 172.168.1.3 vni 100 set interface l2 bridge vxlan_tunnel1 1000 loopback create set interface l2 bridge loop1 2000 bvi set interface ip address loop0 20.20.20.1/24 .... (sorry, today I'm a little messy) Many thanks. Thx, Xuekun
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11117): https://lists.fd.io/g/vpp-dev/message/11117 Mute This Topic: https://lists.fd.io/mt/27868329/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-