Abstract: Presented herein are embodiments of mechanisms to add security in the communication of messages between devices, particularly in the context of VXLAN (Virtual eXtensible Local Area Network (LAN)) environments. When a VXLAN device sends a multicast message to discover other devices in the network, there is possibilities for rogue devices to respond and then receive data that is not intended for them. In one or more embodiments, information handling systems operating as a VTEP (VXLAN tunnel endpoint) may use enhanced encryption that is shared with other authorized VTEP—but not shared with rough VTEP devices—to verify other authorized VTEPs. In one or more embodiments, information used to verify a VTEP device is included in the message, such as included in the header, which a properly configured receiving VTEP will recognize and use to verify that that sending VTEP is not a rogue device.

Abstract: An address discovery system includes supplier switch devices that are each coupled to host device(s), and a distributor switch device that is coupled to each of the supplier switch devices via a network. The distributor switch device receives, via the network from each of the supplier switch devices, host address information for each host device that is coupled to that supplier switch device, and stores that host address information in a database. Subsequently, when a supplier switch device transmits a first address discovery request to the distributor switch device for second host address information for a second host device coupled to a second supplier switch device, the distributor switch device determines that the second host address information is included in the host address information stored in the database, retrieves the second host address information, and transmits the second host address information via the network to the first supplier switch device.

Abstract: Presented herein are embodiments of mechanisms to add security in the communication of messages between devices, particularly in the context of VXLAN (Virtual eXtensible Local Area Network (LAN)) environments. When a VXLAN device sends a multicast message to discover other devices in the network, there is possibilities for rogue devices to respond and then receive data that is not intended for them. In one or more embodiments, information handling systems operating as a VTEP (VXLAN tunnel endpoint) may use enhanced encryption that is shared with other authorized VTEP—but not shared with rough VTEP devices—to verify other authorized VTEPs. In one or more embodiments, information used to verify a VTEP device is included in the message, such as included in the header, which a properly configured receiving VTEP will recognize and use to verify that that sending VTEP is not a rogue device.