Interoperability

Switch Features and Interoperability with OpenFlow — by Effect on Feature or Application
Effect	Feature
Feature can override OpenFlow1	802.1X
	MAC Auth
	MAC Lockout
	MAC Lockdown
	Port Security
	Web Auth
Feature can override OpenFlow 2	ACLs — Port, VLAN, Router, IDM variants
Feature can override OpenFlow 2	IDM
Feature can override OpenFlow3	Rate Limiting
If OpenFlow is used, the feature can be configured.	Management VLAN NOTE: Management VLAN feature can be configured but it cannot be part of an OpenFlow instance.
If OpenFlow is used, the feature cannot be configured.4	Meshing
	Q-in-Q
	Remote Mirror Endpoint
	Transparent Mode
OpenFlow can override this feature5 The OpenFlow cont roller could set up a f low to match a protocol header and an act ion to drop the matching packets. This act ion could lead to the protocol packets never making it to the protocol handling code in the software data path, causing the protocol to break on the OpenFlow instance.The OpenFlow cont roller could set up a f low to match a protocol header and a NORMAL act ion in software for the matching packets. In such a case, OpenFlow removes the protocol packets in the software data path. OpenFlow reintroduces the protocol packets after examining the software f low table. Though this act ion may not break the protocol, it introduces an additional latency before the protocol running on the switch gets the protocol packets.	DHCP Snooping
	DHCPv4 client
	DHCPv4 relay
	DHCPv6 client
	DNS
	Ping
	SNTP
	Telnet client and server
	TFTP
	TimeP
	Traceroute
	BGP
OpenFlow can override this feature	DHCPv6 relay
	Dynamic ARP Protection
	Dynamic IP Lockdown
	IGMP Proxy
	IGMPv2
	IGMPv3
	MLDv1
	MLDv2
	OSPFv2
	OSPFv3
	PIM-DM
	PIM-SM
	RIP
	Static Multicast Routes
	Static Routes
	Virus Throttling
	VRRP
OpenFlow does not affect this feature	Support existing L2, L3, security, HA, QoS functionalities
OpenFlow does not affect this feature6	Distributed Trunking
	GVRP
	LACP
	Loop Protect
	sFlow
	UDLD
OpenFlow does not affect this feature7	STP loop guard
	BPDU guard
	MSTP
	RSTP
	STP
	PVST

Following are the limitations when you enable OpenFlow and VxLAN together on the switch:

When OpenFlow and VxLAN are enabled together on the same VLAN, the VxLAN tunnels are not advertised as an OpenFlow port to the controller. The Controller cannot program rules with match or output as VxLAN tunnels.
When OpenFlow and VxLAN are enabled together on the switch but on different VLANs, all the packets tagged as unknown destination by the switch are not executed as per the OFPP_NORMAL action. Other OpenFlow actions such as output to a physical port or SI tap/intercept tunnels work as expected.