Single NIC with VLAN-aware Switch¶
In this best practice guide on how to configure "VLAN-aware", we will introduce Harvester VLAN network and external switch configuration for common scenario.
- Three Harvester servers with only one single port network card.
- One or more VLAN-aware switch(es). We will use "Cisco like" configuration as example.
- Assume that the subnet of the Harvester hosts is in VLAN 100.
- Assume that the VMs are in the VLAN 101-200.
- The Harvester servers are connected to the switch in a port from
The following diagram illustrates the cabling used for this guide:
External Switch Configuration¶
For the external switch configuration, we'll use a "Cisco like" configuration as example. You can apply the following configurations to your switch:
switch# config terminal switch(config)# interface ethernet1/<Port Number> switch(config-if)# switchport switch(config-if)# switchport mode trunk switch(config-if)# switchport trunk allowed vlan 100-200 switch(config-if)# switchport trunk native vlan 100 switch(config-if)# no shutdown switch(config-if)# end switch# copy running-config startup-config
Create a VLAN Network in Harvester¶
You can create a new VLAN network in the Advanced > Networks page, and click the Create button.
Specify the name and VLAN ID that you want to create for the VLAN network (You can specify the same VLAN ID in different namespaces if you have Rancher multi-tenancy configured).
Connect a VM to the subnet of the Harvester hosts¶
Once you finished the configuration in the previous section, the external switch will send out untagged network traffic to the subnet of the Harvester hosts. In Harvester, the untagged traffic is received in VLAN 1.
Therefore, if you need VMs to connect to the VLAN ID 100, you need to create a VLAN ID 1 Network in Harvester.
The external switch will remove the VLAN 100 tag from the packet for egress and
harvester-br0 will add the VLAN 1 tag to the packet and treat it as VLAN 1 as shown in the following diagram:
Do not create a VLAN Network with VLAN 100 and associate any VM to it. The connectivity will not always be ensured and depends on the external switch behavior to add/remove VLAN tag from packets.
Connect a VM to specific VLAN network¶
You need to create a VLAN Network with specific VLAN ID and associate the VM to that VLAN network.
Please refer to this page for additional information on Harvester Networking.