Skip to main content

Transport Management VPN Feature

Configure out of band management VPN (VPN 512) and its' settings.

Diagram​

Classes​

transport_profiles (sdwan.feature_profiles)​

NameTypeConstraintMandatoryDefault Value
management_vpnClass[management_vpn]No

management_vpn (sdwan.feature_profiles.transport_profiles)​

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Nomanagement_vpn
descriptionStringNo
ethernet_interfacesList[ethernet_interfaces]No
host_mappingsList[host_mappings]No
ipv4_primary_dns_addressIPNo
ipv4_primary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_secondary_dns_addressIPNo
ipv4_secondary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_static_routesList[ipv4_static_routes]No
ipv6_primary_dns_addressIPNo
ipv6_primary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_secondary_dns_addressIPNo
ipv6_secondary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_static_routesList[ipv6_static_routes]No
vpn_descriptionStringmin: 0, max: 244No
vpn_description_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ethernet_interfaces (sdwan.feature_profiles.transport_profiles.management_vpn)​

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Yes
descriptionStringNo
arp_entriesList[arp_entries]No
arp_timeoutIntegermin: 0, max: 2147483No
arp_timeout_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
auto_detect_bandwidthBooleantrue, falseNo
auto_detect_bandwidth_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
autonegotiateBooleantrue, falseNo
autonegotiate_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
duplexChoicefull, half, autoNo
duplex_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
icmp_redirect_disableBooleantrue, falseNo
icmp_redirect_disable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_descriptionStringmax: 200No
interface_description_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_mtuIntegermin: 1500, max: 9216No
interface_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_nameStringRegex: (ATM|ATM-ACR|AppGigabitEthernet|AppNav-Compress|AppNav-UnCompress|Async|BD-VIF|BDI|CEM|CEM-ACR|Cellular|Dialer|Embedded-Service-Engine|Ethernet|Ethernet-Internal|FastEthernet|FiftyGigabitEthernet|FiveGigabitEthernet|FortyGigabitEthernet|FourHundredGigE|GMPLS|GigabitEthernet|Group-Async|HundredGigE|L2LISP|LISP|Loopback|MFR|Multilink|Port-channel|SM|Serial|Service-Engine|TenGigabitEthernet|Tunnel|TwentyFiveGigE|TwentyFiveGigabitEthernet|TwoGigabitEthernet|TwoHundredGigE|Vif|Virtual-PPP|Virtual-Template|VirtualPortGroup|Vlan|Wlan-GigabitEthernet|nat64|nat66|ntp|nve|ospfv3|overlay|pseudowire|ucse|vasileft|vasiright|vmi)([0-9]*(. ?[1-9][0-9]*)*|[0-9/]+|[0-9]+/[0-9]+/[0-9]+:[0-9]+|[0-9]+/[0-9]+/[0-9]+|[0-9]+/[0-9]+|[0-9]+)No
interface_name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ip_directed_broadcastBooleantrue, falseNo
ip_directed_broadcast_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ip_mtuIntegermin: 576, max: 9216No
ip_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
iperf_serverStringNo
iperf_server_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_addressIPNo
ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_configuration_typeChoicedynamic, staticNostatic
ipv4_dhcp_distanceIntegermin: 1, max: 255No
ipv4_dhcp_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_dhcp_helpersListIPNo
ipv4_dhcp_helpers_variableStringRegex: ^[^"~$&+,]255$`No
ipv4_secondary_addressesList[ipv4_secondary_addresses]No
ipv4_subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
ipv4_subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_configuration_typeChoicedynamic, static, noneNonone
ipv6_addressIPNo
ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
load_intervalIntegermin: 30, max: 600No
load_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[^"~$&+,]255$`No
media_typeChoiceauto-select, rj45, sfpNo
media_type_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
speedChoice10, 100, 1000, 2500, 10000No
speed_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tcp_mssIntegermin: 500, max: 1460No
tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

host_mappings (sdwan.feature_profiles.transport_profiles.management_vpn)​

NameTypeConstraintMandatoryDefault Value
hostnameStringmin: 1, max: 32No
hostname_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipsListIPNo
ips_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv4_static_routes (sdwan.feature_profiles.transport_profiles.management_vpn)​

NameTypeConstraintMandatoryDefault Value
administrative_distanceIntegermin: 1, max: 255No
administrative_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gatewayChoicenextHop, dhcp, null0NonextHop
network_addressIPNo
network_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
next_hopsList[next_hops]No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_static_routes (sdwan.feature_profiles.transport_profiles.management_vpn)​

NameTypeConstraintMandatoryDefault Value
gatewayChoicenextHop, nat, null0NonextHop
natChoiceNAT64, NAT66No
next_hopsList[next_hops]No
prefixStringRegex: ((^\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*(\/)(\b([0-9]{1,2}|1[01][0-9]|12[0-8])\b)$))No
prefix_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

arp_entries (sdwan.feature_profiles.transport_profiles.management_vpn.ethernet_interfaces)​

NameTypeConstraintMandatoryDefault Value
ip_addressIPNo
ip_address_variableStringRegex: ^[^"~$&+,]255$`No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[^"~$&+,]255$`No

ipv4_secondary_addresses (sdwan.feature_profiles.transport_profiles.management_vpn.ethernet_interfaces)​

NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

next_hops (sdwan.feature_profiles.transport_profiles.management_vpn.ipv4_static_routes)​

NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
administrative_distanceIntegermin: 1, max: 255No
administrative_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

next_hops (sdwan.feature_profiles.transport_profiles.management_vpn.ipv6_static_routes)​

NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
administrative_distanceIntegermin: 1, max: 255No
administrative_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

Examples​

Example-1: The example below demonstrates how to configure the management_vpn feature within a transport profile. It sets DNS addresses as global values, meaning they will be the same for all devices attached to a configuration group that contains this profile. Additionally, it includes one IPv4 static default route, where the next hop is defined as a variable. The value for this variable will be provided when a device is attached to a configuration group that contains this profile.

sdwan:
  feature_profiles:
    transport_profiles:
      - name: transport1
        management_vpn:
          name: management_vpn
          ipv4_primary_dns_address: 1.1.1.1
          ipv4_secondary_dns_address: 1.0.0.1
          ipv4_static_routes:
            - network_address: 0.0.0.0
              subnet_mask: 0.0.0.0
              next_hops:
                - address_variable: vpn512_default_gateway