Types of vNIC Connections
A Virtual Network Interface Card (vNIC) is a virtual version of a physical network card. It connects an MVE to the Megaport network, functioning like a physical NIC to enable the MVE to communicate with other services.
When an MVE has multiple vNICs, you must specify either an A-End or B-End vNIC when creating new connections. You can add multiple vNICs while deploying an MVE. You can also rename a vNIC later, after the MVE is deployed. To rename a vNIC, simply type the new name directly into the Virtual Interfaces (vNICs) field in the Portal.
You can configure a maximum of five vNICs on an MVE. After the MVE has been created, you cannot add or remove vNICs.
Other considerations include:
-
You can have one or more VXCs per vNIC, up to the maximum permitted for the MVE. The maximum number of VXCs allowed per MVE is determined by its size. For more information, see Megaport Limits and Quotas.
-
Each VXC can be configured as either tagged or untagged, based on your MACsec Media Access Control security (MACsec) is a security protocol that encrypts data traffic between Ethernet-connected devices. The MACsec protocol is defined by IEEE standard 802.1ae. When MACsec is enabled, a bi-directional secure link is established after an exchange and verification of security keys between the two connected devices. A combination of data integrity checks and encryption is used to safeguard the transmitted data.
requirements. For more information, see Using tagged or untagged VXCs. -
You can configure a single untagged VXC with one or more tagged VXCs per vNIC.
-
Each vNIC supports only one untagged VXC, allowing a maximum of five untagged VXCs per MVE across all five vNICs.
Each overlay vendor has specific rules for vNIC usage. Before creating your MVE, refer to the vendor’s documentation. These rules might include requirements for orchestrator vNICs and tagging, LAN and WAN vNIC selection, and High Availability (HA) configurations.
MVE to Megaport Internet
You can use a Megaport Internet connection to connect your MVE to the internet. This connection supports various use cases, such as connecting an MVE overlay device to an orchestrator, linking branch offices, or enabling VPN access.
When creating a Megaport Internet connection for an overlay orchestrator, most vendors typically require the interface to be configured as untagged on vNIC-0. However, some vendors have different requirements, so always refer to their documentation.
MVE to MVE
When connecting two MVEs, you must specify both the A-End and B-End vNICs. The VXCs for each vNIC can be either tagged or untagged. Note that a single tagged vNIC can have multiple VXCs configured on it.
MVE to Port
When connecting an MVE to a Port, you must specify an A-End vNIC, which can be either tagged or untagged. Tagged VXCs can be assigned a VLAN for the MVE side. Similarly, a tagged Port can be assigned a VLAN.
The following example shows that the A-End vNIC is untagged, and the B-End Port is tagged.
MVE to MCR
When connecting an MVE to an MCR, you must specify an A-End vNIC, which can be tagged or untagged. Tagged VXCs can be assigned a VLAN for the MVE side, while assigning a VLAN for the MCR side is not required.