Skip to main content
dtonkin
New Member
November 11, 2020
Solved

VXLAN

  • November 11, 2020
  • 4 replies
  • 5416 views

Hi, just after some help from anyone who has had some experience with VXLAN.

I setup a VXLAN a while ago which worked fine but now has stopped passing traffic?  the ipsec tunnel is up but can only see traffic either side, ie not traversing the L2 VXLAN, it's a fairly simple setup, diag attached

Any help/suggestions appreciated.

Dave

    Best answer by dtonkin

    Hi resolved this VXLAN issue by using set intra-switch-policy implicit in the vxlan softswitch config.

    4 replies

    emnoc
    New Member
    November 11, 2020

    The cli cmd diag debug flow is your friend. I would run that and also diag sniffer packet  the interface to see if packest are being sent or recv Also review closely your diag vpn tunnel list details to see if encryt/decrypt is happening and you have a valid SPI in/out.

     

     

    Ken Felix

     

    boneyard
    Valued Contributor
    November 15, 2020

    which version FortiOS? 6.0 had an annoying issue where VXLAN traffic failed after a restart.

    dtonkin
    dtonkinAuthor
    New Member
    November 17, 2020

    Hi, we're on v 6.2

    dtonkin
    dtonkinAuthorAnswer
    New Member
    November 18, 2020

    Hi resolved this VXLAN issue by using set intra-switch-policy implicit in the vxlan softswitch config.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!