In Layer 2 (L2) mode, a
NetScaler instance acts as a learning bridge and forwards all packets for which
it is not the destination. Some features, such as Cloud Bridge, require that L2
mode be enabled on the NetScaler instance. With L2 mode enabled, the instance
can receive and forward packets for MAC addresses other than its own MAC
address. However, if a user wants to enable L2 mode on a NetScaler instance
running on an SDX appliance, the administrator must first allow L2 mode on that
instance. If you allow L2 mode, you must take precautions to avoid bridging
- On a given 1/x interface,
untagged packets must be allowed on only one instance. For all other instances
enabled on the same interface, you must select
recommends that you select
Tagged for all interfaces assigned to instances in
L2 mode. Note that if you select tagged, you cannot receive untagged packets on
Tagged for an interface assigned to an instance, log
on to that instance and configure a 802.1q VLAN to receive packets on that
- For 1/x and 10/x
interfaces that are shared by NetScaler instances on which L2 mode is allowed,
make sure that the following conditions are met:
- VLAN filtering is enabled
on all the interfaces.
- Each interface is on a
different 802.1q VLAN.
- Only one instance can
receive untagged packets on the interface. If that interface is assigned to
other instances, you must select
Tagged on that interface for those instances.
- If you allow untagged
packets for an instance on a 1/x interface, and L2 mode is allowed for that
instance, no other instance (with L2 mode allowed or disallowed) can receive
untagged packets on that interface.
- If you allow untagged
packets for an instance on a 1/x interface, and L2 mode is not allowed for that
instance, no instance with L2 mode allowed can receive untagged packets on that
- If you have provisioned an
instance (for example VPX1) in L2 mode on a 0/x interface, and the same
interface is also assigned to another instance (for example VPX2), select
Tagged for all other interfaces (1/x and 10/x) that
are assigned to the second instance (VPX2).
Note: If L2 mode is
enabled on a NetScaler instance, and both of the management interfaces (0/1 and
0/2) are associated with that instance, only one of the management interfaces
can be associated with another NetScaler instance on which L2 mode is enabled.
You cannot associate both management interfaces with more than one NetScaler
instance on which L2 mode is enabled.