diff --git a/apps/nse-remote-vlan/nse-remote-vlan.yaml b/apps/nse-remote-vlan/nse-remote-vlan.yaml
index d9070b785bd1..daf1abff5002 100644
--- a/apps/nse-remote-vlan/nse-remote-vlan.yaml
+++ b/apps/nse-remote-vlan/nse-remote-vlan.yaml
@@ -32,7 +32,7 @@ spec:
             - name: NSM_CONNECT_TO
               value: "registry:5002"
             - name: NSM_SERVICES
-              value: "finance-bridge { vlan: 100; via: gw1}"
+              value: "finance-bridge { vlan: 100; via: gw1}, private-bridge { vlan: 200; via: gw1 }"
             - name: NSM_CIDR_PREFIX
               value: "172.10.0.0/24"
             - name: NSM_IPV6_PREFIX
diff --git a/examples/remotevlan/README.md b/examples/remotevlan/README.md
index 0c24805af1e6..8f75ff2821be 100644
--- a/examples/remotevlan/README.md
+++ b/examples/remotevlan/README.md
@@ -1,6 +1,6 @@
 # NSM Remote Vlan Examples
 
-This setup can be used to check remote vlan mechanism. Contain basic setup for NSM that includes `nsmgr`, `registry-k8s`, `admission-webhook-k8s`, `nse-remote-vlan`. The `nse-remote-vlan` belongs to the nsm-system since does not have role in data-plane connection.
+This setup can be used to check remote vlan mechanism with both OVS and VPP forwarder. Contain basic setup for NSM that includes `nsmgr`, `registry-k8s`, `admission-webhook-k8s`, `nse-remote-vlan`. The `nse-remote-vlan` belongs to the nsm-system since does not have role in data-plane connection.
 
 ## Requires
 
@@ -8,6 +8,7 @@ This setup can be used to check remote vlan mechanism. Contain basic setup for N
 
 ## Includes
 
+- [Remote VLAN mechanism using forwarder-ovs](./rvlanovs)
 - [Remote VLAN mechanism using forwarder-vpp](./rvlanvpp)
 
 ## Run
diff --git a/examples/remotevlan/rvlanovs/README.md b/examples/remotevlan/rvlanovs/README.md
new file mode 100644
index 000000000000..f726887e3fd4
--- /dev/null
+++ b/examples/remotevlan/rvlanovs/README.md
@@ -0,0 +1,35 @@
+# NSM Remote Vlan OVS Forwarder
+
+Contains setup for `forwarder-ovs` and device configuration file for remote vlan mechanism.
+
+## Requires
+
+Make sure that you have completed steps from [remotevlan](../../remotevlan) setup.
+
+## Includes
+
+- [Kernel2RVlanInternal](../../use-cases/Kernel2RVlanInternal)
+- [Kernel2RVlanBreakout](../../use-cases/Kernel2RVlanBreakout)
+- [Kernel2RVlanMultiNS](../../use-cases/Kernel2RVlanMultiNS)
+
+## Run
+
+Deploy the forwarder:
+
+```bash
+kubectl apply -k .
+```
+
+Wait forwarder to start:
+
+```bash
+kubectl -n nsm-system wait --for=condition=ready --timeout=2m pod -l app=forwarder-ovs
+```
+
+## Cleanup
+
+Delete the forwarder:
+
+```bash
+kubectl delete -k .
+```
diff --git a/examples/remotevlan/rvlanovs/kustomization.yaml b/examples/remotevlan/rvlanovs/kustomization.yaml
new file mode 100644
index 000000000000..e267daca12a4
--- /dev/null
+++ b/examples/remotevlan/rvlanovs/kustomization.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: nsm-system
+
+bases:
+  - ../../../apps/forwarder-ovs
+
+configMapGenerator:
+  - name: device-selector
+    files:
+      - selector
+
+patchesStrategicMerge:
+  - patch-forwarder-ovs.yaml
diff --git a/examples/remotevlan/rvlanovs/patch-forwarder-ovs.yaml b/examples/remotevlan/rvlanovs/patch-forwarder-ovs.yaml
new file mode 100644
index 000000000000..c24b80bc0b74
--- /dev/null
+++ b/examples/remotevlan/rvlanovs/patch-forwarder-ovs.yaml
@@ -0,0 +1,24 @@
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: forwarder-ovs
+spec:
+  template:
+    spec:
+      containers:
+        - name: forwarder-ovs
+          env:
+            - name: NSM_L2_RESOURCE_SELECTOR_FILE
+              value: /var/lib/networkservicemesh/device-selector.yaml
+          volumeMounts:
+            - name: devsel-vol
+              mountPath: /var/lib/networkservicemesh/device-selector.yaml
+              subPath: device-selector.yaml
+      volumes:
+      - name: devsel-vol
+        configMap:
+          name: device-selector
+          items:
+          - key: selector
+            path: device-selector.yaml
diff --git a/examples/remotevlan/rvlanovs/selector b/examples/remotevlan/rvlanovs/selector
new file mode 100644
index 000000000000..87e416520882
--- /dev/null
+++ b/examples/remotevlan/rvlanovs/selector
@@ -0,0 +1,7 @@
+---
+interfaces:
+  - name: eth1
+    bridge: br0
+    matches:
+       - labelSelector:
+           - via: gw1
diff --git a/examples/remotevlan/rvlanvpp/README.md b/examples/remotevlan/rvlanvpp/README.md
index 54fae3d8f6df..098347186fea 100644
--- a/examples/remotevlan/rvlanvpp/README.md
+++ b/examples/remotevlan/rvlanvpp/README.md
@@ -8,7 +8,9 @@ Make sure that you have completed steps from [remotevlan](../../remotevlan) setu
 
 ## Includes
 
-- [Kernel2RVlan](../../use-cases/Kernel2RVlan)
+- [Kernel2RVlanInternal](../../use-cases/Kernel2RVlanInternal)
+- [Kernel2RVlanBreakout](../../use-cases/Kernel2RVlanBreakout)
+- [Kernel2RVlanMultiNS](../../use-cases/Kernel2RVlanMultiNS)
 
 ## Run
 
@@ -17,3 +19,17 @@ Deploy the forwarder:
 ```bash
 kubectl apply -k .
 ```
+
+Wait forwarder to start:
+
+```bash
+kubectl -n nsm-system wait --for=condition=ready --timeout=2m pod -l app=forwarder-vpp
+```
+
+## Cleanup
+
+Delete the forwarder:
+
+```bash
+kubectl delete -k .
+```
diff --git a/examples/remotevlan/rvlanvpp/device-selector.yaml b/examples/remotevlan/rvlanvpp/device-selector.yaml
deleted file mode 100644
index 3a31650c77f7..000000000000
--- a/examples/remotevlan/rvlanvpp/device-selector.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: device-selector
-  namespace: nsm-system
-data:
-  selector: "---\ninterfaces:\n  - name: eth1\n    matches:\n       - labelSelector:\n
-    \          - via: gw1\n     \n"
diff --git a/examples/remotevlan/rvlanvpp/kustomization.yaml b/examples/remotevlan/rvlanvpp/kustomization.yaml
index 3e161cc8d9e6..869d15cd2c0c 100644
--- a/examples/remotevlan/rvlanvpp/kustomization.yaml
+++ b/examples/remotevlan/rvlanvpp/kustomization.yaml
@@ -7,8 +7,9 @@ namespace: nsm-system
 bases:
 - ../../../apps/forwarder-vpp
 
-resources:
-  - device-selector.yaml
-
+configMapGenerator:
+  - name: device-selector
+    files:
+      - selector
 patchesStrategicMerge:
   - patch-forwarder-vpp.yaml
diff --git a/examples/remotevlan/rvlanvpp/selector b/examples/remotevlan/rvlanvpp/selector
new file mode 100644
index 000000000000..0d821322acaf
--- /dev/null
+++ b/examples/remotevlan/rvlanvpp/selector
@@ -0,0 +1,6 @@
+---
+interfaces:
+  - name: eth1
+    matches:
+       - labelSelector:
+           - via: gw1
diff --git a/examples/use-cases/Kernel2RVlan/.gitignore b/examples/use-cases/Kernel2RVlanBreakout/.gitignore
similarity index 100%
rename from examples/use-cases/Kernel2RVlan/.gitignore
rename to examples/use-cases/Kernel2RVlanBreakout/.gitignore
diff --git a/examples/use-cases/Kernel2RVlan/README.md b/examples/use-cases/Kernel2RVlanBreakout/README.md
similarity index 60%
rename from examples/use-cases/Kernel2RVlan/README.md
rename to examples/use-cases/Kernel2RVlanBreakout/README.md
index ab1ecfa12b38..a24b40ccc96e 100644
--- a/examples/use-cases/Kernel2RVlan/README.md
+++ b/examples/use-cases/Kernel2RVlanBreakout/README.md
@@ -17,7 +17,7 @@ NAMESPACE=($(kubectl create -f https://raw.githubusercontent.com/networkservicem
 NAMESPACE=${NAMESPACE:10}
 ```
 
-Create first iperf server deployment:
+Create iperf server deployment:
 
 ```bash
 cat > first-iperf-s.yaml <<EOF
@@ -58,26 +58,10 @@ spec:
 EOF
 ```
 
-Create kustomization file:
+Deploy the application:
 
 ```bash
-cat > kustomization.yaml <<EOF
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: ${NAMESPACE}
-
-resources:
-- first-iperf-s.yaml
-
-EOF
-```
-
-Deploy the iperf-NSCs:
-
-```bash
-kubectl apply -k .
+kubectl apply -n ${NAMESPACE} -f ./first-iperf-s.yaml
 ```
 
 Wait for applications ready:
@@ -92,19 +76,6 @@ Get the iperf-NSC pods:
 NSCS=($(kubectl get pods -l app=iperf1-s -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}'))
 ```
 
-Start an iperf server in NSC:
-
-```bash
-IS_FIRST=$(kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- ip a s nsm-1 | grep 172.10.0.1)
-if [ -n "$IS_FIRST" ]; then
-  kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B 172.10.0.1 -1
-  kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 t 5 -c 172.10.0.1 -B 172.10.0.2
-else
-  kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B 172.10.0.1 -1
-  kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 t 5 -c 172.10.0.1 -B 172.10.0.2
-fi
-```
-
 Create a docker image for test external connections:
 
 ```bash
@@ -131,30 +102,87 @@ docker exec rvm-tester ip addr add 172.10.0.254/24 dev eth0.100
 docker exec rvm-tester ethtool -K eth0 tx off
 ```
 
-Start the client from tester container:
-
-```bash
-docker exec rvm-tester ping -c 1 172.10.0.1
-```
-
 Start iperf client on tester:
 
-```bash
-IS_FIRST=$(kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- ip a s nsm-1 | grep 172.10.0.1)
-if [ -n "$IS_FIRST" ]; then
-  kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B 172.10.0.1 -1
-else
-  kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B 172.10.0.1 -1
-fi
-docker exec rvm-tester iperf3 -i0 t 5 -c 172.10.0.1
-```
+1. TCP
+
+    ```bash
+    status=0
+    for nsc in "${NSCS[@]}"
+    do
+      IP_ADDRESS=$(kubectl exec ${nsc} -c cmd-nsc -n ${NAMESPACE} -- ip -4 addr show nsm-1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+      kubectl exec ${nsc} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B ${IP_ADDRESS} -1
+      docker exec rvm-tester iperf3 -i0 -t 125 -c ${IP_ADDRESS}
+      if test $? -ne 0
+      then
+        status=1
+      fi
+    done
+    if test ${status} -eq 1
+    then
+      false
+    fi
+    ```
+
+2. UDP
+
+    ```bash
+    status=0
+    for nsc in "${NSCS[@]}"
+    do
+      IP_ADDRESS=$(kubectl exec ${nsc} -c cmd-nsc -n ${NAMESPACE} -- ip -4 addr show nsm-1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+      kubectl exec ${nsc} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B ${IP_ADDRESS} -1
+      docker exec rvm-tester iperf3 -i0 -t 5 -u -c ${IP_ADDRESS}
+      if test $? -ne 0
+      then
+        status=1
+      fi
+    done
+    if test ${status} -eq 1
+    then
+      false
+    fi
+    ```
 
 Start iperf server on tester:
 
-```bash
-docker exec rvm-tester iperf3 -sD -B 172.10.0.254 -1
-kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 t 5 -c 172.10.0.254
-```
+1. TCP
+
+    ```bash
+    status=0
+    for nsc in "${NSCS[@]}"
+    do
+      docker exec rvm-tester iperf3 -sD -B 172.10.0.254 -1
+      kubectl exec ${nsc} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 -t 5 -c 172.10.0.254
+      if test $? -ne 0
+      then
+        status=1
+      fi
+    done
+    if test ${status} -eq 1
+    then
+      false
+    fi
+    ```
+
+2. UDP
+
+    ```bash
+    status=0
+    for nsc in "${NSCS[@]}"
+    do
+      docker exec rvm-tester iperf3 -sD -B 172.10.0.254 -1
+      kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 -t 5 -u -c 172.10.0.254
+      if test $? -ne 0
+      then
+        status=1
+      fi
+    done
+    if test ${status} -eq 1
+    then
+      false
+    fi
+    ```
 
 ## Cleanup
 
diff --git a/examples/use-cases/Kernel2RVlanInternal/.gitignore b/examples/use-cases/Kernel2RVlanInternal/.gitignore
new file mode 100644
index 000000000000..0c85c9bf18f5
--- /dev/null
+++ b/examples/use-cases/Kernel2RVlanInternal/.gitignore
@@ -0,0 +1,2 @@
+first-iperf-s.yaml
+Dockerfile
diff --git a/examples/use-cases/Kernel2RVlanInternal/README.md b/examples/use-cases/Kernel2RVlanInternal/README.md
new file mode 100644
index 000000000000..4db89e3444e4
--- /dev/null
+++ b/examples/use-cases/Kernel2RVlanInternal/README.md
@@ -0,0 +1,135 @@
+# Test kernel to remote vlan connection
+
+This example shows that NSCs can connect to each other by VLAN interface.
+NSCs are using the `kernel` mechanism to connect to local forwarder.
+Forwarders are using the `vlan` remote mechanism to set up the VLAN interface.
+
+## Requires
+
+Make sure that you have completed steps from [remotevlan](../../remotevlan) setup.
+
+## Run
+
+Create test namespace:
+
+```bash
+NAMESPACE=($(kubectl create -f https://raw.githubusercontent.com/networkservicemesh/deployments-k8s/16dfd46bd01a32a68a84df7bcafe62d1dec2d24a/examples/use-cases/namespace.yaml)[0])
+NAMESPACE=${NAMESPACE:10}
+```
+
+Create iperf server deployment:
+
+```bash
+cat > first-iperf-s.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: iperf1-s
+  labels:
+    app: iperf1-s
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: iperf1-s
+  template:
+    metadata:
+      labels:
+        app: iperf1-s
+      annotations:
+        networkservicemesh.io: kernel://finance-bridge/nsm-1
+    spec:
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - iperf1-s
+            topologyKey: "kubernetes.io/hostname"
+      containers:
+      - name: iperf-server
+        image: networkstatic/iperf3:latest
+        imagePullPolicy: IfNotPresent
+        command: ["tail", "-f", "/dev/null"]
+EOF
+```
+
+Create kustomization file:
+
+```bash
+cat > kustomization.yaml <<EOF
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: ${NAMESPACE}
+
+resources:
+- first-iperf-s.yaml
+
+EOF
+```
+
+Deploy the application:
+
+```bash
+kubectl apply -k .
+```
+
+Wait for applications ready:
+
+```bash
+kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=iperf1-s
+```
+
+Get the iperf-NSC pods:
+
+```bash
+NSCS=($(kubectl get pods -l app=iperf1-s -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}'))
+```
+
+Start an iperf server in one NSC and client in another:
+
+1. TCP with IPv4
+
+    ```bash
+    IP_ADDR=$(kubectl exec ${NSCS[0]} -c cmd-nsc -n ${NAMESPACE} -- ip -4 addr show nsm-1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+    kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B ${IP_ADDR} -1
+    kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 -t 5 -c ${IP_ADDR}
+    ```
+
+2. UDP with IPv4:
+
+    ```bash
+    IP_ADDR=$(kubectl exec ${NSCS[1]} -c cmd-nsc -n ${NAMESPACE} -- ip -4 addr show nsm-1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+    kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B ${IP_ADDR} -1
+    kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 -t 5 -u -c ${IP_ADDR}
+    ```
+
+3. TCP with IPv6:
+
+    ```bash
+    IP_ADDR=$(kubectl exec ${NSCS[0]} -c cmd-nsc -n ${NAMESPACE} -- ip -6 a s nsm-1 scope global | grep -oP '(?<=inet6\s)([0-9a-f:]+:+)+[0-9a-f]+')
+    kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B ${IP_ADDR} -1
+    kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 -t 5 -6 -c ${IP_ADDR}
+    ```
+
+4. UDP with IPv6:
+
+    ```bash
+    IP_ADDR=$(kubectl exec ${NSCS[1]} -c cmd-nsc -n ${NAMESPACE} -- ip -6 a s nsm-1 scope global | grep -oP '(?<=inet6\s)([0-9a-f:]+:+)+[0-9a-f]+')
+    kubectl exec ${NSCS[1]} -c iperf-server -n ${NAMESPACE} -- iperf3 -sD -B ${IP_ADDR} -1
+    kubectl exec ${NSCS[0]} -c iperf-server -n ${NAMESPACE} -- iperf3 -i0 -t 5 -6 -u -c ${IP_ADDR}
+    ```
+
+## Cleanup
+
+Delete the test namespace:
+
+```bash
+kubectl delete ns ${NAMESPACE}
+```
diff --git a/examples/use-cases/Kernel2RVlanMultiNS/.gitignore b/examples/use-cases/Kernel2RVlanMultiNS/.gitignore
new file mode 100644
index 000000000000..0c724a971564
--- /dev/null
+++ b/examples/use-cases/Kernel2RVlanMultiNS/.gitignore
@@ -0,0 +1,3 @@
+first-iperf-s.yaml
+second-iperf-s.yaml
+Dockerfile
diff --git a/examples/use-cases/Kernel2RVlanMultiNS/README.md b/examples/use-cases/Kernel2RVlanMultiNS/README.md
new file mode 100644
index 000000000000..a8bd49f205bd
--- /dev/null
+++ b/examples/use-cases/Kernel2RVlanMultiNS/README.md
@@ -0,0 +1,207 @@
+# Test kernel to remote vlan connection
+
+This example shows that NSCs can connect to a cluster external entity by a VLAN interface. There is two vlan network configured.
+NSCs are using the `kernel` mechanism to connect to local forwarder.
+Forwarders are using the `vlan` remote mechanism to set up the VLAN interface.
+
+## Requires
+
+Make sure that you have completed steps from [remotevlan](../../remotevlan) setup.
+
+## Run
+
+Create test namespace:
+
+```bash
+NAMESPACE=($(kubectl create -f https://raw.githubusercontent.com/networkservicemesh/deployments-k8s/16dfd46bd01a32a68a84df7bcafe62d1dec2d24a/examples/use-cases/namespace.yaml)[0])
+FIRST_NAMESPACE=${NAMESPACE:10}
+NAMESPACE=($(kubectl create -f https://raw.githubusercontent.com/networkservicemesh/deployments-k8s/16dfd46bd01a32a68a84df7bcafe62d1dec2d24a/examples/use-cases/namespace.yaml)[0])
+SECOND_NAMESPACE=${NAMESPACE:10}
+```
+
+Create first iperf server deployment:
+
+```bash
+cat > first-iperf-s.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: iperf1-s
+  labels:
+    app: iperf1-s
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: iperf1-s
+  template:
+    metadata:
+      labels:
+        app: iperf1-s
+      annotations:
+        networkservicemesh.io: kernel://finance-bridge/nsm-1
+    spec:
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - iperf1-s
+            topologyKey: "kubernetes.io/hostname"
+      containers:
+      - name: iperf-server
+        image: networkstatic/iperf3:latest
+        imagePullPolicy: IfNotPresent
+        command: ["tail", "-f", "/dev/null"]
+EOF
+```
+
+Create second iperf server deployment:
+
+```bash
+cat > second-iperf-s.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: iperf2-s
+  labels:
+    app: iperf2-s
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: iperf2-s
+  template:
+    metadata:
+      labels:
+        app: iperf2-s
+      annotations:
+        networkservicemesh.io: kernel://private-bridge/nsm-1
+    spec:
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - iperf2-s
+            topologyKey: "kubernetes.io/hostname"
+      containers:
+      - name: iperf-server
+        image: networkstatic/iperf3:latest
+        imagePullPolicy: IfNotPresent
+        command: ["tail", "-f", "/dev/null"]
+EOF
+```
+
+Deploy the iperf-NSCs:
+
+```bash
+kubectl apply -n ${FIRST_NAMESPACE} -f ./first-iperf-s.yaml
+kubectl apply -n ${SECOND_NAMESPACE} -f ./second-iperf-s.yaml
+```
+
+Wait for applications ready:
+
+```bash
+kubectl -n ${FIRST_NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=iperf1-s
+kubectl -n ${SECOND_NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=iperf2-s
+```
+
+Get the iperf-NSC pods:
+
+```bash
+IPERF1_NSCS=($(kubectl get pods -l app=iperf1-s -n ${FIRST_NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}'))
+IPERF2_NSCS=($(kubectl get pods -l app=iperf2-s -n ${SECOND_NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}'))
+```
+
+Create a docker image for test external connections:
+
+```bash
+cat > Dockerfile <<EOF
+FROM networkstatic/iperf3
+
+RUN apt-get update \
+    && apt-get install -y ethtool tcpdump \
+    && rm -rf /var/lib/apt/lists/*
+
+ENTRYPOINT [ "tail", "-f", "/dev/null" ]
+EOF
+docker build . -t rvm-tester
+```
+
+Setup a docker container for traffic test:
+
+```bash
+docker run --cap-add=NET_ADMIN --rm -d --network bridge-2 --name rvm-tester rvm-tester tail -f /dev/null
+docker exec rvm-tester ip link set eth0 down
+docker exec rvm-tester ip link add link eth0 name eth0.100 type vlan id 100
+docker exec rvm-tester ip link add link eth0 name eth0.200 type vlan id 200
+docker exec rvm-tester ip link set eth0 up
+docker exec rvm-tester ip addr add 172.10.0.254/24 dev eth0.100
+docker exec rvm-tester ip addr add 172.10.0.253/24 dev eth0.200
+docker exec rvm-tester ethtool -K eth0 tx off
+```
+
+Check first vlan from tester container:
+
+```bash
+status=0
+for nsc in "${IPERF1_NSCS[@]}"
+do
+  IP_ADDR=$(kubectl exec ${nsc} -c cmd-nsc -n ${FIRST_NAMESPACE} -- ip -4 addr show nsm-1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+  docker exec rvm-tester ping -c 1 ${IP_ADDR} -I eth0.100
+  if test $? -ne 0
+    then
+      status=1
+  fi
+done
+if test ${status} -eq 1
+  then
+    false
+fi
+```
+
+Check second vlan from tester container:
+
+```bash
+status=0
+for nsc in "${IPERF2_NSCS[@]}"
+do
+  IP_ADDR=$(kubectl exec ${nsc} -c cmd-nsc -n ${SECOND_NAMESPACE} -- ip -4 addr show nsm-1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+  docker exec rvm-tester ping -c 1 ${IP_ADDR} -I eth0.200
+  if test $? -ne 0
+    then
+      status=1
+  fi
+done
+if test ${status} -eq 1
+  then
+    false
+fi
+```
+
+## Cleanup
+
+Delete the tester container and image:
+
+```bash
+docker stop rvm-tester
+docker image rm rvm-tester:latest
+true
+```
+
+Delete the test namespace:
+
+```bash
+kubectl delete ns ${FIRST_NAMESPACE}
+kubectl delete ns ${SECOND_NAMESPACE}
+
+```