Configuration Overview And Guidelines - Alcatel-Lucent OmniSwitch 9900 Series Network Configuration Manual

Configuring Access Guardian

Configuration Overview and Guidelines

The following components comprise the Guest Tunneling solution:
•
An L2 GRE tunnel. Guest Tunneling endpoints are defined on edge switches that connect to guest
devices and on the designated Guest Tunnel Termination Switch. These endpoints define an L2 GRE
tunnel through which guest traffic is isolated and tunneled through the network.
•
Edge (access) switches. Traffic originates from guest devices that are connected to an edge switch.
The switch then classifies the guest traffic into a pre-configured UNP guest profile. This profile is
mapped to an L2 GRE tunnel. The guest traffic is then encapsulated and tunneled through the network
to a single GTTS.
•
Guest Tunnel Termination Switch (GTTS). All the GRE guest tunnels originating from all the edge
switches in the network terminate at the GTTS. Guest traffic tunneled from the edge switches
terminates on a GTTS network port. The traffic is then stripped of the GRE encapsulation and passed
from the guest tunnel domain through a physical loopback connection into a VLAN domain.
A Guest Tunneling endpoint configuration on the edge switch is defined only through a UNP profile
configuration. The profile mapping specifies L2 GRE service parameters that are used to dynamically
create an L2 GRE service, Service Access Point (SAP), and Service Distribution Point (SDP) for the
tunnel.
A Guest Tunneling endpoint configuration on the GTTS is defined through manual configuration of the
necessary L2 GRE service, SAP, and SDP for the tunnel. In addition, configuration of a physical loopback
port connection is required; the loopback is comprised of the L2 GRE SAP port and a switch port assigned
to a guest VLAN ID.
Additional information and guidelines for using the Guest Tunneling mechanism are provided in the
following sections:
•
"Edge Switch Configuration Guidelines" on page
•
"Guest Tunnel Termination Switch Configuration Guidelines" on page
•
"Loopback0 Interface for Tunnel Endpoints" on page
OmniSwitch AOS Release 8 Network Configuration Guide
28-85.
28-86.
28-87.
December 2017
Using Guest Tunneling
page 28-84