Dear Dmitriy, Thanks a lot for informative instruction! Still need to spend some time to take in... In the mean time, would it be possible that you take a look at below link which is the rough idea of networking? (https://github.com/holywi/git-tutorial/blob/master/mmexport1759995429620.png) 1. As Infra1:enp11s0f1 is the only available port to Internet we will take the single port as the exit of the system no matter the setting is conventionally for production or for testing. 2. The network setting of Infra1, somewhere around Networking L2/L3 Agents, is the most confusing part for me. Can't we just use something like plain NAT? Anyway I totally have no idea on the setting. It would be favorite just to make it simple and straightforward. 3. Not sure if it is reasonble to attach br-vxlan to enp11s0f0, or is it a must to attach it to enp11s0f1 as in referenced link that you provide? Thanks again! Best Regards