Alcatel-Lucent OmniSwitch 9900 Series Network Configuration Manual page 804

Configuring Access Guardian
L2 GRE Tunnel SAP Guidelines
•
The L2 GRE Service Access Point (SAP) is comprised of an L2 GRE service ID associated with the
loopback access port and a VLAN tag encapsulation value. The SAP is used to identify the traffic that
will be mapped to the guest tunnel.
•
Specify the VLAN ID of the guest VLAN as the encapsulation value for the L2 GRE SAP.
•
The service ID associated with the L2 GRE SAP
•
By default, the trust mode for all SAPs is enabled (802.1p values of the incoming packets are
accepted). Do not change this setting for L2 GRE SAPs.
L2 GRE Tunnel SDP and SDP Binding Guidelines
A Service Distribution Point (SDP) is configured to tunnel L2 GRE traffic to a Guest Tunneling edge
switch. An SDP binding is then configured to bind an L2 GRE service to a unicast SDP.
•
Only unicast SDPs are supported; this type of SDP is defined by specifying the far-end Loopback0
interface address of the targeted edge switch. This is similar to how SDPs are configured for VXLAN
services.
•
Configure one SDP for each edge switch to which L2 GRE traffic is tunneled. For example, if there are
two edge switches, then two SDPs are configured on the GTTS; one SDP for each edge switch.
•
Configure the binding of the L2 GRE service to each SDP to direct one-way GRE encapsulated traffic
to the targeted far-end edge switch.
Loopback0 Interface for Tunnel Endpoints
Configuring a Loopback0 interface is required on each Guest Tunneling endpoint switch.
•
The Loopback0 IP address is used as the source IP address for the L2 GRE tunnel.
•
On the edge switch, specify the IP address of the GTTS Loopback0 interface as the far-end IP address
for the profile mapping. The switch will use this IP address to dynamically create a unicast SDP from
the edge switch to the GTTS.
•
On the GTTS, specify the IP address of the edge switch Loopback0 interface when manually
configuring a unicast SDP from the GTTS to the edge switch.
OmniSwitch AOS Release 8 Network Configuration Guide December 2017
Using Guest Tunneling
page 28-87