Describes how to configure VLAN tags on bridge interfaces to isolate Cisco NFVIS management traffic from VM traffic.
A VLAN is a logical network segmentation technology that
-
creates independent logical networks within a physical network
-
uses VLAN tagging to insert a VLAN ID into a packet header to identify which VLAN the packet belongs to, and
-
enables isolation of Cisco NFVIS management traffic from VM traffic when configured on bridge interfaces.
VLAN configuration details
You can configure a VLAN tag on these bridge interfaces:
-
WAN bridge (WAN-br) interface to isolate Cisco NFVIS management traffic from VM traffic
-
wan2-br for ENCS5400 or ENCS 5100
-
user-br for all systems
By default, WAN bridges and LAN bridges are in trunk mode and allows all VLANs. When you configure native VLAN, you must also configure all the allowed VLANs at the same time. The native VLAN becomes the only allowed VLAN if you do not configure all the VLANs. If you want a network that allows only one VLAN, then create another network on top of WAN-net and LAN-net and make it access network.
You cannot have the same VLAN configured for the NFVIS management and VM traffc.
For more details on the VLAN configuration, see the Understanding and Configuring VLANs module in the Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide.