Configuring Access Guardian Using Guest Tunneling
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-84
Configuration Overview and Guidelines
The following components comprise the Guest Tunneling solution:
• An L2 GRE tunnel. Guest Tunneling endpoints are defined on edge switches that connect to guest
devices and on the designated Guest Tunnel Termination Switch. These endpoints define an L2 GRE
tunnel through which guest traffic is isolated and tunneled through the network.
• Edge (access) switches. Traffic originates from guest devices that are connected to an edge switch.
The switch then classifies the guest traffic into a pre-configured UNP guest profile. This profile is
mapped to an L2 GRE tunnel. The guest traffic is then encapsulated and tunneled through the network
to a single GTTS.
• Guest Tunnel Termination Switch (GTTS). All the GRE guest tunnels originating from all the edge
switches in the network terminate at the GTTS. Guest traffic tunneled from the edge switches
terminates on a GTTS network port. The traffic is then stripped of the GRE encapsulation and passed
from the guest tunnel domain through a physical loopback connection into a VLAN domain.
A Guest Tunneling endpoint configuration on the edge switch is defined only through a UNP profile
configuration. The profile mapping specifies L2 GRE service parameters that are used to dynamically
create an L2 GRE service, Service Access Point (SAP), and Service Distribution Point (SDP) for the
tunnel.
A Guest Tunneling endpoint configuration on the GTTS is defined through manual configuration of the
necessary L2 GRE service, SAP, and SDP for the tunnel. In addition, configuration of a physical loopback
port connection is required; the loopback is comprised of the L2 GRE SAP port and a switch port assigned
to a guest VLAN ID.
Additional information and guidelines for using the Guest Tunneling mechanism are provided in the
following sections:
• “Edge Switch Configuration Guidelines” on page 28-85.
• “Guest Tunnel Termination Switch Configuration Guidelines” on page 28-86.
• “Loopback0 Interface for Tunnel Endpoints” on page 28-87.
To Next Page
Loading...
Need help?
General
