Linux vlan tagging

[CortexIT]

Hello,

For a specific application (Suse OpenStack Cloud), I need a linux VM with only one physical interface (eth0), multiple virtual interfaces (eth0.100, eth0.200), and the following configuration:

- eth0 sends untagged frames

- eth0.100 sends tagged frames, vlan ID 100

- eth0.200 sends tagged frames, vlan ID 200

etc

https://www.suse.com/documentation/suse-openstack-cloud-7/singlehtml/book_cloud_deploy/images/cloud_networking_single_mo…

How can I implement that with dvPortgroups ?

If the "vlan type" of my dvPortgroup is "VLAN ID", only eth0 will work.

If the "vlan type" is "VLAN trunking", only eth0.100 and eth0.200 will work.

How can I mix both tagged and untagged trafic ?

This is running in an Cisco UCS environnement.

Thanks in advance for your help.

[Rahul Parmar]

I recommend to review KB VLAN configuration on virtual switches, physical switches, and virtual machines (1003806) as well as reviewing the VLAN Policy section of the vSphere Networking Guide. https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.networking.doc/GUID-CF00FE1E-4BA4-4949-949B-29CAD52F3A89.html

[Nick_Andreev]

I've never used VGT before, but my understanding is that native VLAN is not supported either on vSS or vDS. See here: Sample configuration of virtual switch VLAN tagging (VST Mode) (1004074)

Caution: Native VLAN ID on ESXi/ESX VST Mode is not supported. Do not assign a VLAN to a port group that is same as the native VLAN ID of the physical switch. Native VLAN packets are not tagged with the VLAN ID on the outgoing traffic toward the ESXi/ESX host. Therefore, if the ESXi/ESX host is set to VST mode, it drops the packets that are lacking a VLAN tag.

I guess your best bet is to assign a VLAN ID to the subnet you use the native VLAN for. Or alternatively you can create multiple VM NICs and assign each to it's own port group and configure VLAN IDs at port group level.

Just out of curiosity, what is the use case for tagging inside the VM?