Configuring Access Guardian Access Guardian Overview
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-21
VXLAN System Default Profile
UNP derives the System Default profile attributes as follows to dynamically create a SAP for VXLAN
traffic:
• VNID —The system default VNID number (10,000,000) plus the customer domain ID number (zero
by default) multiplied by 10,000. For example, if the UNP access port on which traffic is received
belongs to customer domain 200, then the calculation to determine the VNID is as follows:
10,000,000 + (200 * 10,000) = 12,000,000
• Multicast Group Address—The system default multicast group IP address is 239.0.0.0. This is used
to dynamically create the Service Distribution Point (SDP) tunnel for the VXLAN traffic.
• VXLAN Service ID number—A reserved service ID (32768) that represents the default system
VNID. This value increments by 1 for each additional dynamic service (SPB or VXLAN) that is
created and only has local significance.
WLAN Access Role Profile
The defaultWLANProfile is a built-in profile that is designated for classifying OmniAccess Stellar Access
Point (AP) devices. This profile is automatically assigned to a built-in LLDP MED Endpoint classification
rule that will recognize active AP devices connected to the switch and will assign them to the
defaultWLANProfile. The VLAN that is mapped to this profile will serve as the management VLAN for
the AP devices.
Using the defaultWLANProfile to classify AP devices ensures that all of the AP devices connected to each
switch in the wired network will use the same management VLAN. This profile is similar to the standard
UNP VLAN profile but with the following considerations and guidelines:
• The profile cannot be deleted; it is a built-in profile that is always available in the switch configuration.
• Only the following profile attributes are configurable:
– VLAN mapping.
– QoS policy list assignment.
– Authentication flag status.
– Mobile tag status.
• The defaultWLANProfile does not appear in the configuration snapshot for the switch. However, when
the default value of any of the above configurable attributes is modified, then the profile will appear in
the configuration snapshot.
See “OmniAccess Stellar AP Integration” on page 28-69 for more information.
UNP Ports
Access Guardian functionality is supported only on UNP-enabled ports or link aggregates. Traffic from a
device connected to a UNP port triggers an authentication and classification process that is used to
determine the UNP profile assignment for the device.
By default, all switch ports are non-UNP (fixed) ports that are statically assigned to a specific VLAN.
Once UNP is enabled on a port, traffic from each device connected to that port is classified using the UNP
port and profile configuration to determine the VLAN or service assignment for the device.
There are two types of UNP ports: bridge and access. The port type is specified when UNP functionality is
enabled on the port.
To Next Page
Loading...
Need help?
General
