6Access mode of VSIsThe VTEP supports VLAN access mode for VSIs. In VLAN access mode, Ethernet frames receivedfrom or sent to the local site must contain 802.1Q VLAN tags.• For an Ethernet frame received from the local site, the VTEP removes all its 802.1Q VLAN tagsbefore forwarding the frame.• For an Ethernet frame destined for the local site, the VTEP adds 802.1Q VLAN tags to theframe before forwarding the frame.In VLAN access mode, VXLAN packets sent between sites do not contain 802.1Q VLAN tags. Youcan use different 802.1Q VLANs to provide the same service in different sites.ARP flood suppressionARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARPrequests on behalf of user terminals.As shown in Figure 6, this feature snoops ARP packets to populate the ARP flood suppression tablewith local and remote MAC addresses. If an ARP request has a matching entry, the VTEP replies tothe request on behalf of the user terminal. If no match is found, the VTEP floods the request to bothlocal and remote sites.Figure 6 ARP flood suppressionARP flood suppression uses the following workflow:1. Terminal 1 sends an ARP request to obtain the MAC address of Terminal 7.2. VTEP 1 creates a suppression entry for Terminal 1, and floods the ARP request in the VXLAN.3. VTEP 2 and VTEP 3 de-encapsulate the ARP request. The VTEPs create a suppression entryfor Terminal 1, and broadcast the request in the local site.4. Terminal 7 sends an ARP reply.5. VTEP 2 creates a suppression entry for Terminal 7 and forwards the ARP reply to VTEP 1.(1)VTEP 1 VTEP 2TransportnetworkPTerminal 1Terminal 2Terminal 3Terminal 7Terminal 8Terminal 9Terminal 4Terminal 5Terminal 6VXLAN tunnelVXLAN tunnelVTEP 3VXLAN tunnelTerminal 10Terminal 11Terminal 12(2)(2)(3)(3)(4)(5)(6)(7)(8)(9) (10)(2)