add vxlan docs

Signed-off-by: Marek Küthe <m.k@mk16.de>
This commit is contained in:
Marek Küthe 2023-01-03 01:11:13 +01:00
parent 54746d3618
commit 584e6e021e
No known key found for this signature in database
GPG Key ID: 7E869146699108C7
1 changed files with 10 additions and 1 deletions

View File

@ -1,7 +1,7 @@
# IP tunnel
*Note:* IP tunnels (includes GRE, GRETAP and SIT) are unencrypted.
*Note:* IP tunnels (includes GRE, GRETAP, SIT and VXLAN) are unencrypted.
## Generic Routing Encapsulation (GRE)
@ -60,3 +60,12 @@ GRETAP tunnels operate on layer 2 of the ISO/OSI model. To use a GRETAP tunnel,
## Simple Internet Transition (SIT)
SIT tunnels can be created in the same way as GRE tunnels. The difference is that you write `type sit` instead of `type gre`. SIT tunnels are designed to encapsulate IPv6 packets, so a SIT tunnel must be established over IPv4.
## VXLAN
For VXLAN the type is changed to `vxlan`. Furthermore there are two additional parameters:
```
ip link add <interface> type vxlan id <vni> remote <remote> local <local> dstport <dstport>
```
`<vni>` (**V**irtual Extensible LA**N** **ID** ) is the ID of the VLAN. This can range from 1 to 16777216 (2^24). It must be the same for both peers and must not already be used.
`<dstport>` is the port which is used for the VXLAN connection. It must be open on UDP. The port must be the same for both peers. Officially VXLAN has port 4789, but for historical reasons Linux uses port default 8472. If you specify a 0 as port, the default port default 8472 is used. If you don't specify a port, you get a warning.