云计算和网络虚拟化技术交流_02.pptVIP

L2 L3 OTV OTV Spanning Tree and OTV独立生成树进程, 无干预自动抑制 OTV does not affect the STP topology of the site and in these terms OTV is totally site transparent. Each site will have its own STP domain, which is separate and independent from the STP domains in other sites, even though all sites will be part of common Layer 2 domain. This functionality is built-in into OTV and as such no configuration is required to have it working. An Edge Device will send and receive BPDUs ONLY on the OTV Internal Interfaces. L2 L3 OTV OTV Unknown Unicast and OTV未知单播泛洪规避, 无干预自动抑制 OTV does not leverage flooding to propagate the learning of the MAC addresses across the overlay. No more requirements to forward unknown unicast over the overlay, therefore its forwarding is suppressed. Any unknown unicasts that reach the OTV edge device will not be forwarded to the overlay. This is achieved without any additional configuration. The assumption here is that the end-points connected to the network are not silent or uni-directional. MAC TABLE VLAN MAC IF 100 MAC 1 Eth1 100 MAC 2 IP B - - - MAC 1 ? MAC 3 Controlling ARP traffic ARP邻居发现缓存机制, 无干预自动抑制 An ARP cache is maintained by every OTV edge device and is populated by snooping ARP replies. Initial ARP requests are broadcasted to all sites, but subsequent ARP requests are suppressed at the Edge Device and answered locally. OTV Edge Devices can thus reply to ARPs on behalf of remote hosts. ARP traffic spanning multiple sites can thus be significantly reduced. Transport Infrastructure OTV OTV ARP Cache MAC 1 IP A MAC 2 IP B ARP reply 2 First ARP request (IP A) 1 Snoop cache ARP reply 3 Subsequent ARP requests (IP A) 4 ARP reply on behalf of remote server (IP A) 5 新全球通节点 华景节点 N1KV控制引擎冗余 Private VLAN测试 IP/MAC ACL功能 Nexus1kv对于Vmware内虚拟机之间带宽分配管理 DHCP Snooping 动态ARP检测 IP Source Guard MAC security Local Span功能 虚拟化架构安全优化为虚拟化设备提供稳健接入交换平台 Test PC VMW ESX Server 1 VMware vSwitch VMW ESX Server 2 VMware vSwitch VM #1 VSM1 VM #2 VM #5 VSM2 V