View source for VXLAN Configuration Example

''VXLAN support has been introduced starting with firmware version 00.07.09 and later. It is advised to update to the latest firmware available.
''
 <p style="color:red">The information in this page is updated in accordance with [https://firmware.teltonika-networks.com/7.9.1/RUTX/RUTX_R_00.07.09.1_WEBUI.bin'''00.07.09.1'''] firmware version.</p> 
==Introduction==

VXLAN (Virtual Extensible LAN) encapsulates Layer 2 Ethernet frames within Layer 3 packets, creating a Layer 2 network over a Layer 3 infrastructure. It acts as a virtual switch, interconnecting routers and all devices connected to them into an extended Layer 2 network, enhancing scalability and flexibility. In this article several methods to configure a '''VXLAN tunnel''' between '''two Teltonika devices''' will be demonstrated.

==Prerequisites==
*'''Two routers''' with installed VXLAN packages, will refer to these as '''RUT1''' and '''RUT2'''
*End device like Laptop or Mobile Phone
*Two Public IP addresses for configuring VXLAN over the Mobile network
*One Public IP address for configuring VXLAN over the VPN tunnel


==VXLAN package Installation==
First, install the VXLAN package on both RUT1 and RUT2 devices. This package is available on firmware version 07.09 and later, therefore, updating the router's firmware is a mandatory step if it is outdated. After the update, the package can be found in the Package Manager in the WebUI.

Navigate to '''System > Package Manager'''
#In the search bar look for vxlan packet
#Click '''Install'''
[[File:Vxlan package manager installation.png|border|class=tlt-border]]

==VXLAN over Wired WAN==
In this section, the setup of VXLAN over Wired WAN using RUT1 and RUT2 devices will be described. The process will show how to create a VXLAN tunnel to connect the devices and allow them to communicate over the wired network.
===Configuration on RUT1 device===
----
Navigate to the '''Network > WAN''' section in the WebUI, then click the [[File:Edit button.png]] button for the wired WAN interface.
[[File:Vxlan_over_wan_config_rut1_wan_p1.png|border|class=tlt-border]]

:Configuration window will open. Adjust following:
#Ensure interface is '''Enabled'''
#Change Protocol to '''Static'''
#Enter Ipv4 address for communication in this Wired WAN network
#Select your preferable '''IPv4 netmask'''
# Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan_over_wired_wan_settings_rut1.png|border|class=tlt-border]]

Navigate to the '''Network > Devices'''
#In '''Add new device''' section select Type '''VXLAN'''
#Press [[File:Add Button.png|50px]]
[[File:Vxlan over wired vxlan settings add.png|border|class=tlt-border]]
#<li value="3">Enter name of the new VXLAN interface
# Enter the Remote address corresponding to RUT2 wired WAN interface  IP address
# Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over wired vxlan settings rut1.png|border|class=tlt-border]]

Navigate to '''Network > LAN''' and click [[File:Edit button.png]] to modify existing LAN interface

[[File:Vxlan over wired lan config.png|border|class=tlt-border]]

#Asure that '''Bridge interfaces''' option is enabled
#Click on the droplist and add vxlan1 interface
#Click [[File:Save & Apply.png|90px]] twice

[[File:Vxlan over wired lan physical settings.png|border|class=tlt-border]]

===Configuration on RUT2 device===
----

The configuration steps for RUT2 are similar to those performed on RUT1, with some additional adjustments. Navigate to the '''Network > WAN''' section in the WebUI, then click the [[File:Edit button.png]] button for the wired WAN interface.
[[File:Vxlan_over_wan_config_rut1_wan_p1.png|border|class=tlt-border]]

Configuration window will open. Adjust following:
#Ensure interface is '''Enabled'''
#Change Protocol to '''Static'''
#Enter Ipv4 address for communication in this Wired WAN network
#Select your preferable '''IPv4 netmask'''
# Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over wired wan settings rut2.png|border|class=tlt-border]]

Navigate to the '''Network > Devices'''
#In '''Add new device''' section select Type '''VXLAN'''
#Press [[File:Add Button.png|50px]]
[[File:Vxlan over wired vxlan settings add.png|border|class=tlt-border]]
#<li value="3">Enter name of the new VXLAN interface
#Enter the Remote address corresponding to RUT1 wired WAN interface IP address
#Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over wired vxlan settings rut2.jpg|border|class=tlt-border]]

Navigate to '''Network > LAN''' and click [[File:Edit button.png]] to modify existing LAN interface.
[[File:Vxlan over wired lan config rut2.png|border|class=tlt-border]]
#For testing purposes, both routers should be part of the same LAN segment, so assign unique IP addresses to prevent conflicts. 
#Additionally, only one DHCP server, so disable DHCP on RUT2.
[[File:Vxlan over wired lan settings RUT2.png|border|class=tlt-border]]
#<li value="3">Asure that Bridge interfaces option is enabled
#Click on the droplist and add vxlan1 interface
#Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over wired lan physical settings RUT2.png|border|class=tlt-border]]

==VXLAN over Mobile network==
In this section, VXLAN will be set up between two Teltonika devices using Mobile WAN, requiring two public IPs—one for each RUT device. The configuration steps will be similar to those described in the [[#VXLAN over Wired WAN|VXLAN over Wired WAN]] section of this page, except for the '''APN''' settings and the '''Network > Devices''' section settings, where the remote address of the created VXLAN interface will be updated to reflect the other router's public IP.

===Configuration on RUT1 device===
----
Navigate to the '''Network > WAN''' section in the WebUI, then click the [[File:Edit button.png]] button for the mobile WAN interface.
[[File:Vxlan over mobile wan config rut1 rev2.png|border|class=tlt-border]]

:Configuration window will open. Adjust the following:
#Disable '''Auto APN'''
#Select an APN that will provide your router with a public IP
# Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over mobile wan config rut1 2.png|border|class=tlt-border]]

Navigate to '''Network > Devices'''. To create a new instance, click the [[File:Add Button.png|50px]] button. If editing an existing interface from the [[#VXLAN over Wired WAN|'''previous configuration''']], click [[File:Edit button.png]]

#In '''Remote address''' section enter '''RUT2 Public IP''' address
# Click [[File:Save & Apply.png|90px]] twice

[[File:Vxlan over mobile vxlan settings.png|border|class=tlt-border]]

===Configuration on RUT2 device===
----
Navigate to the '''Network > WAN''' section in the WebUI, then click the [[File:Edit button.png]] button for the mobile WAN interface.
[[File:Vxlan over mobile wan config rut1 rev2.png|border|class=tlt-border]]

:Configuration window will open. Adjust following:
#Disable '''Auto APN'''
#Select an APN that will provide your router with a public IP
# Click [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over mobile wan config rut1 2.png|border|class=tlt-border]]

Navigate to '''Network > Devices'''. To create a new instance, click the [[File:Add Button.png|50px]] button. If editing an existing interface from the [[#VXLAN over Wired WAN|'''previous configuration''']], click [[File:Edit button.png]]

#In '''Remote address''' section enter '''RUT1 Public IP''' address
# Click [[File:Save & Apply.png|90px]] twice

[[File:Vxlan over mobile vxlan settings.png|border|class=tlt-border]]

==VXLAN over VPN tunnel==
''
''
If only one public IP address is available, VXLAN can be configured through a VPN tunnel. In this case, an IPsec VPN will be used, where RUT1 acts as the VPN server and RUT2 as the client. The VPN creates remote tunnel endpoints, which can then be integrated into the VXLAN configuration to enable Layer 2 communication between the routers.

===Configuration on RUT1 device===
----
Navigate to '''Services > VPN > IPsec''':
#Enter Instance name
#Click on the [[File:Add Button.png|50px]]
[[File:Vxlan over vpn add server.png|border|class=tlt-border]]
#<li value="3"> Enable instance
#Since RUT1 will serve as the server device, the Remote endpoint field should be left blank
#Select '''Pre-Shared Key''' as the authentication method
#Enter the key. This key must match the one that will be entered later in the RUT2 IPSec settings
#Enter the RUT1 LAN IP address as the '''Local identifier'''
#Enter the RUT2 LAN IP address as the '''Remote identifier'''
[[File:Vxlan over vpn server settings p1.png|border|class=tlt-border]]
:Scroll down to '''Connection settings''':

#<li value="9">Select "'''Start'''" in '''Mode''' section
#Select "'''Tunnel'''" as connection type
#Enable "'''Route based IPSec'''"
#Enter the '''IP address''' of the RUT1 tunnel endpoint
#Enter lower MTU to reduce packet size (optional)
#<li value="14">Leave all other settings at their default values and click the [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over vpn server settings p2.png|border|class=tlt-border]]


Navigate to '''Network > Devices'''. To create a new instance, click the [[File:Add Button.png|50px]] button. If editing an existing interface from the [[#VXLAN over Wired WAN|'''previous configuration''']], click [[File:Edit button.png]]

#Enter '''IP address''' of RUT2 VPN '''tunnel endpoint'''
#Click the [[File:Save & Apply.png|90px]] twice

[[File:Vxlan over vpn vxlan settings rut1.png|border|class=tlt-border]]

===Configuration on RUT2 device===
----
Navigate to '''Services > VPN > IPsec''':
#Enter Instance name
#Click on the [[File:Add Button.png|50px]]
[[File:Vxlan over vpn add client.png|border|class=tlt-border]]

#<li value="3"> Enable instance
#Enter RUT1 Public IP
#Select '''Pre-Shared Key''' as the authentication method
#Enter the key. This key must match the one that was entered the RUT1 IPSec settings
#Enter the RUT2 LAN IP address as the '''Local identifier'''
#Enter the RUT1 LAN IP address as the '''Remote identifier'''
[[File:Vxlan over vpn client settings p1 rev1.png|border|class=tlt-border]]
:Scroll down to '''Connection settings''':

#<li value="9">Select "'''Start'''" in '''Mode''' section
#Select "'''Tunnel'''" as connection type
#Enable "'''Route based IPSec'''"
#Enter the '''IP address''' of the RUT2 tunnel endpoint
#Enter lower MTU to reduce packet size (optional)
#Leave all other settings at their default values and click the [[File:Save & Apply.png|90px]] twice
[[File:Vxlan over vpn client settings p2.png|border|class=tlt-border]]


Navigate to '''Network > Devices'''. To create a new instance, click the [[File:Add Button.png|50px]] button. If editing an existing interface from the [[#VXLAN over Wired WAN|'''previous configuration''']], click [[File:Edit button.png]]

#Enter '''IP address''' of RUT1 VPN '''tunnel endpoint'''
#Click the [[File:Save & Apply.png|90px]] twice

[[File:Vxlan over vpn vxlan settings rut2.png|border|class=tlt-border]]

==Configuration testing==
The best way to test the configuration after setting up VXLAN between the routers is to ping between devices on either side of the routers using their LAN IPs and check the ARP tables. This ensures that devices on the same LAN segment can communicate over the Layer 2 (L2) network through the routers.

Configuration testing from RUT1 side:

[[File:Vxlan ping rut1 to rut2.png|border|class=tlt-border]]

If the MAC address for the specified IP address in the ARP table matches the RUT2's MAC address, it confirms that the configuration is functioning correctly.
[[File:Vxlan arp rut1.png|border|class=tlt-border]]

Configuration testing from RUT2 side:
[[File:Vxlan ping rut2 to rut1.png|border|class=tlt-border]]
[[File:Vxlan arp rut2.png|border|class=tlt-border]]