Logical Isolation Design

VXLAN technology is used to build virtual networks on the same physical network and uses VRF technology to isolate access on the physical network. The entire network is divided into three logical planes through VRFs: service, storage, and management planes. By default, the three planes do not interwork. If the three planes need to interwork, static routes can be configured or VRF routes can be imported by configuring RTs.

• Storage VRF: transmits storage traffic such as NAS mirroring traffic and traffic of file sharing.
• Service VRF: transmits service traffic of service servers.
• Management VRF: transmits management traffic of VMs and hosts, for example, traffic of SSH login, backup, and VM creation and migration.

Besides the three logical planes, a management network needs to be configured. The management network can use out-of-band or in-band management.

• In-band management: Service interfaces of devices are used for device management. However, device login may be affected when faults occur on the service network.
• (Recommended) Out-of-band management: The specified management interface of a device is used for device management. In this mode, the management and control are separate.

  Out-of-band management is used as an example. The management VLAN ID is VLAN 20, and network devices in out-of-band management mode include switches, firewalls, and LBs. The management interfaces of network devices are connected to management switches, and management interfaces of switches are configured based on the planned management addresses, facilitating remote login. For details on how to configure management interfaces and perform login configurations of NEs, see corresponding product documentation.