Cloud-based virtual extensable local area network (vxlan) tunnel switching across access points

A non-transitory computer-readable media storing source code in a VXLAN tunnel server that, when executed by a processor, performs a method for distributing security report generation over multiple levels of a security fabric, the method comprising the steps of:

• receiving a VXLAN profile from each of the plurality of access points;
• configuring a VXLAN tunnel between the access controller and each of the plurality of access points using the VXLAN profile, wherein each VXLAN tunnel has a unique VXLAN ID;
• forming tunnel groups between the plurality of access points, wherein each tunnel group defines interconnections between VXLAN tunnels;
• receiving a data packet in real-time from a first station on a first LAN through the first access point and destined for a second station on a second LAN through the second access point, within one of the tunnel groups;
• switching, on a second layer, a data packet between a first VXLAN tunnel coupled to the first access poit on the first LAN and a second VXLAN tunnel coupled to the second access point on the second LAN, based on a VLAN ID stored within of the data packet;
• and
• transmitting the data packet to the second station through the second access point on the second LAN over the second VXLAN.

A VXLAN tunnel server for distributing security report generation over multiple levels of a security fabric, the network gateway device comprising:

• a processor;
• a network interface, communicatively coupled to the processor and to a data communication network;
• and
• a memory, communicatively coupled to the processor and comprising:
• receiving a VXLAN profile from each of the plurality of access points;
• configuring a VXLAN tunnel between the access controller and each of the plurality of access points using the VXLAN profile, wherein each VXLAN tunnel has a unique VXLAN ID;
• a first module to form tunnel groups between the plurality of access points, wherein each tunnel group defines interconnections between VXLAN tunnels;
• a second module to receive a data packet in real-time from a first station on a first LAN through the first access point and destined for a second station on a second LAN through the second access point, within one of the tunnel groups;
• a third module to switch, on a second layer, a data packet between a first VXLAN tunnel coupled to the first access point on the first LAN and a second VXLAN tunnel coupled to the second access point on the second LAN, based on a VLAN ID stored within of the data packet;
• and
• a fourth module to transmit the data packet to the second station through the second access point on the second LAN over the second VXLAN.