Virtual Mac-Addresses

Objective

After attending this session, you should be able to:

Describe the use of virtual MAC addresses

Describe for which vlan modes vMAC is supported

Describe how and where the users MAC SA is translated into a

virtual MAC address.

Associate a RB or XC VLAN to a bridge port

o enable virtual MAC addresses
 Virtual MAC no duplicate MAC-addresses anymore!

Virtual MAC address = private, unique MAC-address replacing user-side

MAC-address
no duplicate MAC-addresses anymore!

vMAC address based on (DSLAM Id, slot Id, port Id, Seq Nr.)
o also rack Id for REM.
ARP & DHCP also require vMAC translation

vMAC translation can be enabled per VLAN

Downstream vMAC filtering can be enabled/disabled per VLAN

o Blocking user-to-user communication across shared VLANs
Static MAC-addresses support

ETH MAC SA translated into vMAC

VLAN
bridged MacA
ISAM Id = 165
3
vMAC - Packet flow within a VLAN

vMAC is enabled on VLAN A

User on VLAN A

MAC vMAC vMAC translation: MAC MAC

X B X A
MAC A vMAC B
EMAN
MAC vMAC vMAC translation: MAC MAC
X A
X B vMAC B MAC A

vMAC MAC Source vMAC B

B C
discarded

option: disable user-to-user traffic

4
vMAC - Supported L2 models and services

Supported L2 forwarding models:

intelligent bridging
cross-connect (only C-VLAN CC and Stacked S/C-VLAN CC)
vMAC address translation supported for the following services:
Ethernet
PPPoE & IPoE
DHCP (including chaddr in payload)
Gratuitous ARP & ARP (including payload MAC)
vMAC payload of DHCP and PPPoE packets is modified!
DHCP chaddr field = vMAC
PPPoE MAC SA in Ethernet header = vMAC
this will effect the SessionId assigned by the PPP server
If you enable vMAC for a VLAN using an existing DHCP or PPPoE session
the session will not be valid anymore!

5
 vMAC-address example (up to R3.6)

Assumptions:

DslamId = 524287 = 7FFFF(hex) = all 1s

SlotId = 000100 (slot 4)

PortId = 011000000

not used LU DSLAM Id Slot Id Port Id seq. Nbr.

0 000 00 1 0 1 1 11 1 11 1 1 1 11 1 11 1 1 1 1 0 0 0 10 0 0 1 10 000 0 0 0 0 00 0 0
local
unicast

First vMAC address on this port is 02:ff:ff:e2:30:00

Subsequent MAC addresses learnt on the same port:

02:ff:ff:e2:30:01, 02:ff:ff:e2:30:02 , 02:ff:ff:e2:30:3F

6
 vMAC-address example (R3.7+) also for REMs

Assumptions:

DslamId = 524287 = 7FFFF(hex) = all 1s

SlotId = 000100 (slot 4)

PortId = 011000000
2 bits for shelf id & 4 bits for slot id

Rack 00 L U DSLAM Id Slot Id Port Id seq. Nbr.

0 010 00 1 0 1 1 11 1 11 1 1 1 11 1 11 1 1 1 1 0 0 0 10 0 0 1 10 000 0 0 0 0 00 0 0
local
unicast

First vMAC address on this port is 22:ff:ff:e2:30:00

Subsequent MAC addresses learnt on the same port:

22:ff:ff:e2:30:01, 22:ff:ff:e2:30:02 , 22:ff:ff:e2:30:40

7
Creation of VLAN on NE

Unique DSLAM Id

Virtual MAC translation

8
vMAC Configuration

Configuration of the vMAC DSLAM ID

leg:isadmin># configure vlan vmac-address-format host-id ?
<Vlan::HostId> ! A unique host Id within an EMAN connected to the same IP edges
range: [1...524287]

Per VLAN, enable vMAC translation

leg:isadmin># configure vlan id <id> vmac-translation

Per VLAN, enable vMAC downstream filtering (optional)

leg:isadmin># configure vlan id <id> vmac-dnstr-filter

Display the vMAC translation table

leg:isadmin># show vlan vmac-bridge-port-fdb ?
<Eqpt::RackId>/<...> : the rack number
range: [1...7]

vlan-id : vlan id
mac : mac address

<CR> : execute command

9
vMAC - Configuration Example -

configure vlan vmac-address-format host-id 78456

# iBridge
configure vlan id [101...106] mode residential-bridge
configure vlan id [101...106] vmac-translation

# cc-vlan
configure vlan id [107...112] mode cross-connect
configure vlan id [107...112] vmac-translation

# stacked vlans
configure vlan id stacked:113:0 mode layer2-terminated
configure vlan id stacked:113:0 vmac-translation
configure vlan id stacked:113:[7...22] mode cross-connect

(Note: contained C-VLANs within stacked VLAN inherit vmac-translation)

10
 vMAC-bridge-port-fdb

leg:isadmin># show vlan vmac-bridge-port-fdb

=============================================================

vmac-bridge-port-fdb table

=============================================================

port |vlan-id |mac |vmac |sub-vlan

-------------------+----------------+-----------------+-----------------+------------

1/1/1/1:8:36 150 00:0c:29:32:69:eb 02:00:17:21:80:00 150

--------------------------------------------------------------------------------------

vmac-bridge-port-fdb count : 1

=============================================================

11
 www.alcatel-lucent.com
www.alcatel-lucent.com

12