Arista Networks, Inc.
System and method for centralized policy enforcement for network segmentation

Abstract:

In general, embodiments of the invention relate to providing a scalable network configuration to enable hosts for different tenants to communicate with each other. More specifically, embodiments of the invention relate to using a combination of per-tenant virtual routing and forwarding (VRF) tables, encapsulation, and stateless access control lists (ACLs) to enable intra-tenant and inter-tenant communication and segmentation.