Fortinet black logo

Administration Guide

VXLAN

VXLAN

Virtual Extensible LAN (VXLAN) is a network virtualization technology used in large cloud computing deployments. It encapsulates layer 2 Ethernet frames within layer 3 IP packets using the standard destination port 4789. VXLAN endpoints that terminate VXLAN tunnels can be virtual or physical switch ports, and are known as VXLAN tunnel endpoints (VTEPs). For more information about VXLAN, see RFC 7348.

To configure VXLAN:
config system vxlan
    edit <name>
        set interface <interface>
        set vni <vxlan_network_id>
        set ip-version {ipv4_unicast | ipv6_unicast}
        set remote-ip <ipv4_address>
        set remote-ip6 <ipv6_address>
        set dstport <port>
    next
end

interface <interface>

Outgoing interface for VXLAN encapsulated traffic.

vni <vxlan_network_id>

VXLAN network ID (default = 0).

ip-version {ipv4_unicast | ipv6_unicast}

The IP address version to use for the VXLAN interface, and for communication over the VXLAN (default = ipv4_unicast).

remote-ip <ip_address>

remote-ip6 <ipv6_address>

The IPv4 or IPv6 address of the VXLAN interface on the device at the remote end of the VXLAN.

dstport <port>

The VXLAN destination port (1 - 65535, default = 4789).

To view the VXLAN forwarding database list for an interface:
diagnose sys vxlan fdb list <interface>

VXLAN

Virtual Extensible LAN (VXLAN) is a network virtualization technology used in large cloud computing deployments. It encapsulates layer 2 Ethernet frames within layer 3 IP packets using the standard destination port 4789. VXLAN endpoints that terminate VXLAN tunnels can be virtual or physical switch ports, and are known as VXLAN tunnel endpoints (VTEPs). For more information about VXLAN, see RFC 7348.

To configure VXLAN:
config system vxlan
    edit <name>
        set interface <interface>
        set vni <vxlan_network_id>
        set ip-version {ipv4_unicast | ipv6_unicast}
        set remote-ip <ipv4_address>
        set remote-ip6 <ipv6_address>
        set dstport <port>
    next
end

interface <interface>

Outgoing interface for VXLAN encapsulated traffic.

vni <vxlan_network_id>

VXLAN network ID (default = 0).

ip-version {ipv4_unicast | ipv6_unicast}

The IP address version to use for the VXLAN interface, and for communication over the VXLAN (default = ipv4_unicast).

remote-ip <ip_address>

remote-ip6 <ipv6_address>

The IPv4 or IPv6 address of the VXLAN interface on the device at the remote end of the VXLAN.

dstport <port>

The VXLAN destination port (1 - 65535, default = 4789).

To view the VXLAN forwarding database list for an interface:
diagnose sys vxlan fdb list <interface>