Media access control address learning limit on a virtual extensible local area multi-homed network Ethernet virtual private network access port
Systems and methods for enforcing media access control (MAC) learning limits (MLLs) on multi-homed access ports comprise configuring MLL violation actions to be performed by a virtual extensible local area network (VxLAN) tunnel endpoint (VTEP). The VTEP is multi-homed to VTEPs and comprises an Ethernet segment (ES) access port. A BGP EVPN or similar protocol may be used to communicate MLL information across VTEPs participating in the multi-homed ES to keep MACs and MLL violation actions consistent. The violation actions may comprise initiating a shutdown message to shut down an ES. Once an MLL violation associated with a MAC that has been received at the VTEP is detected, the VTEP may enforce the MLL by performing one or more of the configured MLL violation actions and propagate the same to other VTEPs.
1. A computer-implemented method for enforcing media access control (MAC) learning limits (MLLs), the method comprising:
preventing different sets of MAC addresses from being present in different virtual extensible local area network (VxLAN) tunnel endpoints (VTEPs) of a set of peer VTEPs that are part of an Ethernet segment (ES) by configuring a VTEP of the set of peer VTEPs to perform steps comprising:
in response to receiving a learn notification associated with a MAC address that was learned on a peer VTEP:
determining whether adding the MAC address causes the MLL for the VTEP to be exceeded; and
in response to determining that the MLL will be exceeded if the MAC address was added:
not adding the MAC address to the ES; and
sending a MAC delete notification to remove the MAC address from the ES, which causes the MAC address to be removed from the peer VTEP and, if present, to be removed from the other peer VTEPs.
2. The method of claim 1 , further comprising, in response to determining that adding the MAC address would not cause the MLL to be reached or exceeded, syncing the MAC address with one or more VTEPs in the ES.
3. The method of claim 1 , further comprising, in response to determining that adding the MAC address would cause the MLL to be reached but would not cause the MLL to be exceeded, adding the MAC address to the ES and disabling MAC learning for the ES.
4. The method of claim 1 , wherein the VTEP was elected as a master VTEP from the set of peer VTEPs to resolve conflicts on the ES across the set of peer VTEPs.
5. The method of claim 1 , further comprising:
in response to receiving an ES shutdown message, which was generated as a result of a peer VTEP determining that learning a MAC address would cause the MLL of the peer VTEP to be exceeded, shutting down the ES at least locally.
6. The method of claim 1 , further comprising, in response to receiving a MAC delete message from a master VTEP due to an MLL violation, withdrawing a MAC address identified in the MAC delete message from the VTEP.
7. The method of claim 6 , wherein the MAC delete message is comprised in a border gateway protocol Ethernet virtual private network (BGP)-EVPN protocol.
8. The method of claim 1 , further comprising:
responsive to receiving an add/sync message from a master VTEP from the set of peer VTEPs, adding the MAC address identified in the add/sync message regardless of whether adding the MAC address would exceed the MLL for the VTEP.
9. An information handling system (IHS) for being a virtual extensible local area network (VxLAN) tunnel endpoint (VTEP) of a set of peer VTEPs that are part of an Ethernet segment (ES), the IHS comprising:
one or more processors; and
a non-transitory computer-readable medium or media comprising one or more sets of instructions which, when executed by at least one of the one or more processors, causes steps to be performed comprising:
in response to receiving a learn notification associated with a media access control (MAC) address that was learned on a peer VTEP:
determining whether adding the MAC address causes a MAC learning limit (MLL) for the VTEP to be exceeded; and
in response to determining that the MLL will be exceeded if the MAC address was added:
not adding the MAC address to the ES; and
sending a MAC delete notification to remove the MAC address from the ES, which causes the MAC address to be removed from the peer VTEP and, if present, to be removed from the other peer VTEPs.
10. The IHS of claim 9 , further comprising, in response to determining that adding the MAC address would not cause the MLL to be reached or exceeded, adding the MAC address to the ES and syncing the MAC address with one or more VTEPs in the ES.
11. The IHS of claim 9 , further comprising:
in response to determining that the MAC address, if admitted, would cause the MLL to be reached but would not cause the MLL to be exceeded:
adding the MAC address to the ES; and
disabling MAC learning for the ES.
12. The IHS of claim 9 , further comprising:
in response to determining that a MAC address, if admitted, would cause the MLL of the VTEP to be exceeded performing steps comprising:
ignoring the MAC address; and
if a MLL violation action of the VTEP is a shutdown, sending a shutdown message to one or more peer VTEPs.
13. The IHS of claim 12 , wherein the shutdown message is part of a border gateway protocol Ethernet virtual private network (BGP-EVPN).
14. The IHS of claim 9 , further comprising:
in response to receiving a shutdown message from a peer VTEP, which was generated as a result of the peer VTEP determining that a MAC address, if admitted, would cause the MLL of the peer VTEP to be exceeded, initiating a shutdown of the ES, at least locally.
15. The IHS of claim 9 , further comprising:
responsive to receiving an add/sync message from a master VTEP from the set of peer VTEPs, adding the MAC address identified in the add/sync message regardless of whether adding the MAC address would exceed the MLL for the VTEP.
16. A non-transitory computer-readable medium or media comprising one or more sequences of instructions which, when executed by at least one processor, causes steps to be performed comprising:
in response to receiving a learn notification associated with a media access control (MAC) address that was learned on a peer virtual extensible local area network (VxLAN) tunnel endpoint (VTEP):
determining whether adding the MAC address causes a media access control (MAC) learning limit (MLL) for the VTEP to be exceeded; and
in response to determining that the MLL will be exceeded if the MAC address was added:
not adding the MAC address to an Ethernet segment (ES); and
sending a MAC delete notification to remove the MAC address from the ES, which causes the MAC address to be removed from the peer VTEP and, if present, to be removed from other peer VTEPs.
17. The non-transitory computer-readable medium or media of claim 16 , further comprising, in response to the MLL being reached but not exceeded if the MAC address was added, performing steps comprising:
adding the MAC address;
disabling further MAC learning for the ES; and
syncing the MAC address with one or more VTEPs of a set of VTEPS.
18. The non-transitory computer-readable medium or media of claim 16 , further comprising:
in response to receiving an ES shutdown message, which was generated as a result of the peer VTEP determining that learning a MAC address would cause the MLL of the peer VTEP to be exceeded, shutting down the ES, at least locally.
19. The non-transitory computer-readable medium or media of claim 16 , further comprising:
electing from a set of peer VTEPs a master VTEP; and
responsive to receiving a MAC address add/sync message from the master VTEP from the set of peer VTEPs, adding the MAC address identified in the MAC address add/sync message regardless of whether adding the MAC address would exceed the MLL for the VTEP.
20. The non-transitory computer-readable medium or media of claim 16 , further comprising:
in response to receiving MAC delete message from a master VTEP, withdrawing a MAC address identified in the MAC delete message from the VTEP.