Notice
VLAN tagging is supported from VAST Cluster 2.2.0.
VLAN tagging enables you to control which VIPs are exposed to which VLANs on your network. VLAN tagging is per VIP pool.
To implement VLAN tagging on the cluster, do all of the following:
For each VLAN, create a VIP pool for the VIPs that you want to expose to that VLAN and tag it with the VLAN.
Make sure the uplink interfaces on the client data network's switches are configured in hybrid mode (or trunk mode if you only need to allow tagged traffic through).
This configuration must be done on each switch in every switch pair in the cluster.
The configuration can be done during cluster installation if the VLANs are already known. Otherwise, it can be done any time after installation.
When you run the switch_conf.py script on each data switch, include the --external-vlans EXTERNAL_VLANS parameter and specify the VLANs as a comma separated list. This must be done on every data switch. It will activate the VLANs on the switches and configure the uplink interfaces on the switches to allow the VLAN tagged traffic through.
The VLANs need to be activated on all data switches in the cluster.
In addition to activating the VLANs, on the data switches that connect directly to the client data network, which is all data switches in a single switch pair deployment and only the 'spine' switches in a spine-leaf topology with more than one switch pair, the uplink interfaces need to be configured to allow the VLAN-tagged traffic through. The uplink interfaces are MLAG interfaces. There is usually one MLAG per pair of data switches, although sometimes there may be two MLAGs.
As with all configuration of Mellanox switch pairs, both switches in each switch pair must be configured identically and this is the responsibility of the user.
On every data switch:
Connect to the switch CLI: Open an SSH connection to
admin@SWITCH_IP(whereSWITCH_IPis the IP of the switch) and then enter the password for the admin user when prompted. The default password isadmin.Run
enableto enter Enable mode and then runconfigure terminalto move into Config mode.Run
vlan VLANonce for each VLAN to create the VLANs.For spine switches only: Run
interface mlag-port-channel 1 switchport mode hybridto configure the MLAG interface in hybrid mode. If there is another MLAG on the switch pair, run this also for the second MLAG interface:interface mlag-port-channel 2 switchport mode hybrid.For spine switches only: Run
interface mlag-port-channel 1 switchport hybrid allowed-vlan VLANper VLAN to allow each VLAN on the MLAG interface. Also run this command for the other MLAG interface if there is a second one on the switch pair.Run
configuration writetwice to save the configuration.
For example, to create and allow VLAN 99 if you have one MLAG per switch pair, run these commands on the spine switches...
switch > enable switch # configure terminal switch (config) # vlan 99 switch (config) # interface mlag-port-channel 1 switchport mode hybrid switch (config) # interface mlag-port-channel 1 switchport hybrid allowed-vlan 99 switch (config) # conf write switch (config) # conf write
...and these commands on any leaf switches if applicable:
switch > enable switch # configure terminal switch (config) # vlan 99 switch (config) # conf write switch (config) # conf write
To create and allow VLAN 99 if you have two MLAGs on the switch pair, run these commands on the spine switches...
switch > enable switch # configure terminal switch (config) # vlan 99 switch (config) # interface mlag-port-channel 1 switchport mode hybrid switch (config) # interface mlag-port-channel 1 switchport hybrid allowed-vlan 99 switch (config) # interface mlag-port-channel 2 switchport mode hybrid switch (config) # interface mlag-port-channel 2 switchport hybrid allowed-vlan 99 switch (config) # conf write switch (config) # conf write
...and these commands on any leaf switches if applicable:
switch > enable switch # configure terminal switch (config) # vlan 99 switch (config) # conf write switch (config) # conf write
To create two VLANs (99 and 100) if you have one MLAG on the switch pair, run these commands on the spine switches...
switch > enable switch # configure terminal switch (config) # vlan 99 switch (config) # vlan 100 switch (config) # interface mlag-port-channel 1 switchport mode hybrid switch (config) # interface mlag-port-channel 1 switchport hybrid allowed-vlan 99 switch (config) # interface mlag-port-channel 1 switchport hybrid allowed-vlan 100 switch (config) # conf write switch (config) # conf write
...and these commands on any leaf switches if applicable:
switch > enable switch # configure terminal switch (config) # vlan 99 switch (config) # vlan 100 switch (config) # conf write switch (config) # conf write
Comments
0 comments
Article is closed for comments.