Layer 3 Virtual Network

Location in GUI: Provision » SD-Access » Virtual Networks » Layer 3 Virtual Networks

Diagram

Classes

fabric (catalyst_center)

Name	Type	Constraint	Mandatory	Default Value
l3_virtual_networks	List	`[l3_virtual_networks]`	No

l3_virtual_networks (catalyst_center.fabric)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
anchor_site	String		No

Layer 3 Virtual Networks provide isolated routing domains within the SD-Access fabric for network segmentation. They are created globally and assigned to Fabric Sites, where they host Anycast Gateways for endpoint connectivity. L3 VNs are handed off to external networks via Layer 3 Handoffs on Border Devices. This resource is SDA fabric only.

Examples

Example-1: Basic Layer 3 Virtual Network Creation and Assignment

This example demonstrates how to create Layer 3 virtual networks at the global level and assign them to specific fabric sites. Layer 3 virtual networks enable network segmentation and micro-segmentation within SD-Access fabric, providing isolated routing domains for different user groups, applications, or security zones.

The Layer 3 virtual network configuration includes:

Global L3 VN creation (SDA_VN_USERS, SDA_VN_PRINTERS, SDA_VN_CORPORATE) for reusable network segments
Virtual network names that reflect organizational structure and traffic types
Site-specific assignment enabling selective deployment across fabric sites
Flexible assignment allowing different combinations per site based on requirements

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SDA_VN_USERS
      - name: SDA_VN_PRINTERS
      - name: SDA_VN_CORPORATE

Next, you need to assign the L3 VN to a Fabric Site:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Canada
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_USERS
          - SDA_VN_PRINTERS
          - SDA_VN_CORPORATE

      - name: Global/United States
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_CORPORATE
          - SDA_VN_PRINTERS

Example-2: Department-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks organized by department or functional area for enterprise environments requiring departmental isolation and security policies.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: FINANCE_VN
      - name: HR_VN
      - name: ENGINEERING_VN
      - name: MARKETING_VN
      - name: GUEST_VN

Site assignment with department-specific virtual networks:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/North_America/Corporate HQ
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - FINANCE_VN
          - HR_VN
          - ENGINEERING_VN
          - MARKETING_VN
          - GUEST_VN

      - name: Global/Europe/Branch Office
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - ENGINEERING_VN
          - GUEST_VN

Example-3: Service-Based Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks based on network services and application types for service-oriented network architectures.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: WEB_SERVICES_VN
      - name: DATABASE_SERVICES_VN
      - name: APPLICATION_SERVICES_VN
      - name: MANAGEMENT_SERVICES_VN
      - name: BACKUP_SERVICES_VN

Service-oriented site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Data Center/Primary
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - WEB_SERVICES_VN
          - DATABASE_SERVICES_VN
          - APPLICATION_SERVICES_VN
          - MANAGEMENT_SERVICES_VN
          - BACKUP_SERVICES_VN

      - name: Global/Data Center/DR Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DATABASE_SERVICES_VN
          - BACKUP_SERVICES_VN

Example-4: Security Zone Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on security zones and trust levels for environments requiring strict security segmentation and compliance.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SECURE_ZONE_VN
      - name: DMZ_ZONE_VN
      - name: INTERNAL_ZONE_VN
      - name: PUBLIC_ZONE_VN
      - name: QUARANTINE_ZONE_VN

Security zone site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Security/High_Security_Facility
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - SECURE_ZONE_VN
          - INTERNAL_ZONE_VN
          - QUARANTINE_ZONE_VN

      - name: Global/Security/Public_Access_Area
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DMZ_ZONE_VN
          - PUBLIC_ZONE_VN
          - QUARANTINE_ZONE_VN

Example-5: Multi-Tenant Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks for multi-tenant environments with customer isolation and service provider deployments.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: TENANT_A_PROD_VN
      - name: TENANT_A_DEV_VN
      - name: TENANT_B_PROD_VN
      - name: TENANT_B_DEV_VN
      - name: SHARED_SERVICES_VN

Multi-tenant site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Service Provider/CustomerA_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_A_PROD_VN
          - TENANT_A_DEV_VN
          - SHARED_SERVICES_VN

      - name: Global/Service Provider/CustomerB_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_B_PROD_VN
          - TENANT_B_DEV_VN
          - SHARED_SERVICES_VN

Example-6: Environment-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on environment types for development life-cycle management and application deployment stages.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: PRODUCTION_VN
      - name: STAGING_VN
      - name: DEVELOPMENT_VN
      - name: TESTING_VN
      - name: SANDBOX_VN

Environment-based site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Development/Primary_Lab
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DEVELOPMENT_VN
          - TESTING_VN
          - SANDBOX_VN

      - name: Global/Production/Data_Center
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - PRODUCTION_VN
          - STAGING_VN

Example-7: VN Anchoring to a Fabric Site or Fabric Zone

VN Anchoring (introduced in module 0.4.3) lets you designate one fabric site or fabric zone as the routing anchor for an L3 Virtual Network. All traffic for that VN is forwarded to the anchor — only the anchor owns the L3 routing, and every other fabric site that consumes the VN forwards through it. This is typically used for centralized guest internet break-out, shared services, or DMZ deployments where you want a single egress and policy enforcement point.

The anchor_site attribute lives on the global L3 VN definition under fabric.l3_virtual_networks and takes the full site hierarchy path of the anchor. The path may resolve to either a fabric site or a fabric zone — both are supported.

Note: When site-level anchoring is enabled, the site must have at least one CP and one External Border; otherwise the workflow throws an error.

The L3 Virtual Network configuration with an anchored VN:

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: GUEST_VN
        anchor_site: Global/United States/NYC/Headquarters
      - name: SDA_VN_USERS
      - name: SDA_VN_CORPORATE

The site that becomes the anchor — and the consumer sites that reference the anchored VN — are defined in the standard fabric_sites block. Only the anchor site owns the L3 routing for GUEST_VN; consumer sites forward through it:

catalyst_center:
  fabric:
    fabric_sites:
      # Anchor site — owns the L3 routing for GUEST_VN
      - name: Global/United States/NYC/Headquarters
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - GUEST_VN
          - SDA_VN_USERS
          - SDA_VN_CORPORATE

      # Consumer site — forwards GUEST_VN traffic to the anchor above
      - name: Global/United States/Chicago/BranchOffice
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - GUEST_VN
          - SDA_VN_USERS

      # Another consumer site referencing the same anchored VN
      - name: Global/Canada/Toronto/BranchOffice
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - GUEST_VN
          - SDA_VN_CORPORATE

Location in GUI: Provision » SD-Access » Virtual Networks » Layer 3 Virtual Networks

Diagram

Classes

fabric (catalyst_center)

Name	Type	Constraint	Mandatory	Default Value
l3_virtual_networks	List	`[l3_virtual_networks]`	No

l3_virtual_networks (catalyst_center.fabric)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes

Examples

Example-1: Basic Layer 3 Virtual Network Creation and Assignment

The Layer 3 virtual network configuration includes:

Global L3 VN creation (SDA_VN_USERS, SDA_VN_PRINTERS, SDA_VN_CORPORATE) for reusable network segments
Virtual network names that reflect organizational structure and traffic types
Site-specific assignment enabling selective deployment across fabric sites
Flexible assignment allowing different combinations per site based on requirements

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SDA_VN_USERS
      - name: SDA_VN_PRINTERS
      - name: SDA_VN_CORPORATE

Next, you need to assign the L3 VN to a Fabric Site:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Canada
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_USERS
          - SDA_VN_PRINTERS
          - SDA_VN_CORPORATE

      - name: Global/United States
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_CORPORATE
          - SDA_VN_PRINTERS

Example-2: Department-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks organized by department or functional area for enterprise environments requiring departmental isolation and security policies.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: FINANCE_VN
      - name: HR_VN
      - name: ENGINEERING_VN
      - name: MARKETING_VN
      - name: GUEST_VN

Site assignment with department-specific virtual networks:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/North_America/Corporate HQ
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - FINANCE_VN
          - HR_VN
          - ENGINEERING_VN
          - MARKETING_VN
          - GUEST_VN

      - name: Global/Europe/Branch Office
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - ENGINEERING_VN
          - GUEST_VN

Example-3: Service-Based Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks based on network services and application types for service-oriented network architectures.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: WEB_SERVICES_VN
      - name: DATABASE_SERVICES_VN
      - name: APPLICATION_SERVICES_VN
      - name: MANAGEMENT_SERVICES_VN
      - name: BACKUP_SERVICES_VN

Service-oriented site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Data Center/Primary
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - WEB_SERVICES_VN
          - DATABASE_SERVICES_VN
          - APPLICATION_SERVICES_VN
          - MANAGEMENT_SERVICES_VN
          - BACKUP_SERVICES_VN

      - name: Global/Data Center/DR Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DATABASE_SERVICES_VN
          - BACKUP_SERVICES_VN

Example-4: Security Zone Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on security zones and trust levels for environments requiring strict security segmentation and compliance.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SECURE_ZONE_VN
      - name: DMZ_ZONE_VN
      - name: INTERNAL_ZONE_VN
      - name: PUBLIC_ZONE_VN
      - name: QUARANTINE_ZONE_VN

Security zone site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Security/High_Security_Facility
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - SECURE_ZONE_VN
          - INTERNAL_ZONE_VN
          - QUARANTINE_ZONE_VN

      - name: Global/Security/Public_Access_Area
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DMZ_ZONE_VN
          - PUBLIC_ZONE_VN
          - QUARANTINE_ZONE_VN

Example-5: Multi-Tenant Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks for multi-tenant environments with customer isolation and service provider deployments.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: TENANT_A_PROD_VN
      - name: TENANT_A_DEV_VN
      - name: TENANT_B_PROD_VN
      - name: TENANT_B_DEV_VN
      - name: SHARED_SERVICES_VN

Multi-tenant site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Service Provider/CustomerA_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_A_PROD_VN
          - TENANT_A_DEV_VN
          - SHARED_SERVICES_VN

      - name: Global/Service Provider/CustomerB_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_B_PROD_VN
          - TENANT_B_DEV_VN
          - SHARED_SERVICES_VN

Example-6: Environment-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on environment types for development life-cycle management and application deployment stages.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: PRODUCTION_VN
      - name: STAGING_VN
      - name: DEVELOPMENT_VN
      - name: TESTING_VN
      - name: SANDBOX_VN

Environment-based site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Development/Primary_Lab
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DEVELOPMENT_VN
          - TESTING_VN
          - SANDBOX_VN

      - name: Global/Production/Data_Center
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - PRODUCTION_VN
          - STAGING_VN

Location in GUI: Provision » SD-Access » Virtual Networks » Layer 3 Virtual Networks

Diagram

Classes

fabric (catalyst_center)

Name	Type	Constraint	Mandatory	Default Value
l3_virtual_networks	List	`[l3_virtual_networks]`	No

l3_virtual_networks (catalyst_center.fabric)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes

Layer 3 Virtual Networks provide isolated routing domains within the SD-Access fabric for network segmentation. They are created globally and assigned to Fabric Sites, where they host Anycast Gateways for endpoint connectivity. L3 VNs are handed off to external networks via Layer 3 Handoffs on Border Devices. This resource is SDA fabric only.

Examples

Example-1: Basic Layer 3 Virtual Network Creation and Assignment

The Layer 3 virtual network configuration includes:

Global L3 VN creation (SDA_VN_USERS, SDA_VN_PRINTERS, SDA_VN_CORPORATE) for reusable network segments
Virtual network names that reflect organizational structure and traffic types
Site-specific assignment enabling selective deployment across fabric sites
Flexible assignment allowing different combinations per site based on requirements

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SDA_VN_USERS
      - name: SDA_VN_PRINTERS
      - name: SDA_VN_CORPORATE

Next, you need to assign the L3 VN to a Fabric Site:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Canada
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_USERS
          - SDA_VN_PRINTERS
          - SDA_VN_CORPORATE

      - name: Global/United States
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_CORPORATE
          - SDA_VN_PRINTERS

Example-2: Department-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks organized by department or functional area for enterprise environments requiring departmental isolation and security policies.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: FINANCE_VN
      - name: HR_VN
      - name: ENGINEERING_VN
      - name: MARKETING_VN
      - name: GUEST_VN

Site assignment with department-specific virtual networks:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/North_America/Corporate HQ
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - FINANCE_VN
          - HR_VN
          - ENGINEERING_VN
          - MARKETING_VN
          - GUEST_VN

      - name: Global/Europe/Branch Office
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - ENGINEERING_VN
          - GUEST_VN

Example-3: Service-Based Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks based on network services and application types for service-oriented network architectures.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: WEB_SERVICES_VN
      - name: DATABASE_SERVICES_VN
      - name: APPLICATION_SERVICES_VN
      - name: MANAGEMENT_SERVICES_VN
      - name: BACKUP_SERVICES_VN

Service-oriented site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Data Center/Primary
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - WEB_SERVICES_VN
          - DATABASE_SERVICES_VN
          - APPLICATION_SERVICES_VN
          - MANAGEMENT_SERVICES_VN
          - BACKUP_SERVICES_VN

      - name: Global/Data Center/DR Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DATABASE_SERVICES_VN
          - BACKUP_SERVICES_VN

Example-4: Security Zone Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on security zones and trust levels for environments requiring strict security segmentation and compliance.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SECURE_ZONE_VN
      - name: DMZ_ZONE_VN
      - name: INTERNAL_ZONE_VN
      - name: PUBLIC_ZONE_VN
      - name: QUARANTINE_ZONE_VN

Security zone site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Security/High_Security_Facility
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - SECURE_ZONE_VN
          - INTERNAL_ZONE_VN
          - QUARANTINE_ZONE_VN

      - name: Global/Security/Public_Access_Area
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DMZ_ZONE_VN
          - PUBLIC_ZONE_VN
          - QUARANTINE_ZONE_VN

Example-5: Multi-Tenant Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks for multi-tenant environments with customer isolation and service provider deployments.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: TENANT_A_PROD_VN
      - name: TENANT_A_DEV_VN
      - name: TENANT_B_PROD_VN
      - name: TENANT_B_DEV_VN
      - name: SHARED_SERVICES_VN

Multi-tenant site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Service Provider/CustomerA_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_A_PROD_VN
          - TENANT_A_DEV_VN
          - SHARED_SERVICES_VN

      - name: Global/Service Provider/CustomerB_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_B_PROD_VN
          - TENANT_B_DEV_VN
          - SHARED_SERVICES_VN

Example-6: Environment-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on environment types for development life-cycle management and application deployment stages.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: PRODUCTION_VN
      - name: STAGING_VN
      - name: DEVELOPMENT_VN
      - name: TESTING_VN
      - name: SANDBOX_VN

Environment-based site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Development/Primary_Lab
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DEVELOPMENT_VN
          - TESTING_VN
          - SANDBOX_VN

      - name: Global/Production/Data_Center
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - PRODUCTION_VN
          - STAGING_VN

Location in GUI: Provision » SD-Access » Virtual Networks » Layer 3 Virtual Networks

Diagram

Classes

fabric (catalyst_center)

Name	Type	Constraint	Mandatory	Default Value
l3_virtual_networks	List	`[l3_virtual_networks]`	No

l3_virtual_networks (catalyst_center.fabric)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes

Examples

Example-1: Basic Layer 3 Virtual Network Creation and Assignment

The Layer 3 virtual network configuration includes:

Global L3 VN creation (SDA_VN_USERS, SDA_VN_PRINTERS, SDA_VN_CORPORATE) for reusable network segments
Virtual network names that reflect organizational structure and traffic types
Site-specific assignment enabling selective deployment across fabric sites
Flexible assignment allowing different combinations per site based on requirements

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SDA_VN_USERS
      - name: SDA_VN_PRINTERS
      - name: SDA_VN_CORPORATE

Next, you need to assign the L3 VN to a Fabric Site:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Canada
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_USERS
          - SDA_VN_PRINTERS
          - SDA_VN_CORPORATE

      - name: Global/United States
        authentication_template:
          name: No Authentication
        l3_virtual_networks:
          - SDA_VN_CORPORATE
          - SDA_VN_PRINTERS

Example-2: Department-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks organized by department or functional area for enterprise environments requiring departmental isolation and security policies.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: FINANCE_VN
      - name: HR_VN
      - name: ENGINEERING_VN
      - name: MARKETING_VN
      - name: GUEST_VN

Site assignment with department-specific virtual networks:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/North_America/Corporate HQ
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - FINANCE_VN
          - HR_VN
          - ENGINEERING_VN
          - MARKETING_VN
          - GUEST_VN

      - name: Global/Europe/Branch Office
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - ENGINEERING_VN
          - GUEST_VN

Example-3: Service-Based Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks based on network services and application types for service-oriented network architectures.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: WEB_SERVICES_VN
      - name: DATABASE_SERVICES_VN
      - name: APPLICATION_SERVICES_VN
      - name: MANAGEMENT_SERVICES_VN
      - name: BACKUP_SERVICES_VN

Service-oriented site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Data Center/Primary
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - WEB_SERVICES_VN
          - DATABASE_SERVICES_VN
          - APPLICATION_SERVICES_VN
          - MANAGEMENT_SERVICES_VN
          - BACKUP_SERVICES_VN

      - name: Global/Data Center/DR Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DATABASE_SERVICES_VN
          - BACKUP_SERVICES_VN

Example-4: Security Zone Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on security zones and trust levels for environments requiring strict security segmentation and compliance.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: SECURE_ZONE_VN
      - name: DMZ_ZONE_VN
      - name: INTERNAL_ZONE_VN
      - name: PUBLIC_ZONE_VN
      - name: QUARANTINE_ZONE_VN

Security zone site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Security/High_Security_Facility
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - SECURE_ZONE_VN
          - INTERNAL_ZONE_VN
          - QUARANTINE_ZONE_VN

      - name: Global/Security/Public_Access_Area
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DMZ_ZONE_VN
          - PUBLIC_ZONE_VN
          - QUARANTINE_ZONE_VN

Example-5: Multi-Tenant Layer 3 Virtual Networks

This example demonstrates how to create Layer 3 virtual networks for multi-tenant environments with customer isolation and service provider deployments.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: TENANT_A_PROD_VN
      - name: TENANT_A_DEV_VN
      - name: TENANT_B_PROD_VN
      - name: TENANT_B_DEV_VN
      - name: SHARED_SERVICES_VN

Multi-tenant site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Service Provider/CustomerA_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_A_PROD_VN
          - TENANT_A_DEV_VN
          - SHARED_SERVICES_VN

      - name: Global/Service Provider/CustomerB_Site
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - TENANT_B_PROD_VN
          - TENANT_B_DEV_VN
          - SHARED_SERVICES_VN

Example-6: Environment-Based Layer 3 Virtual Networks

This example shows how to create Layer 3 virtual networks based on environment types for development life-cycle management and application deployment stages.

catalyst_center:
  fabric:
    l3_virtual_networks:
      - name: PRODUCTION_VN
      - name: STAGING_VN
      - name: DEVELOPMENT_VN
      - name: TESTING_VN
      - name: SANDBOX_VN

Environment-based site assignment:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/Development/Primary_Lab
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - DEVELOPMENT_VN
          - TESTING_VN
          - SANDBOX_VN

      - name: Global/Production/Data_Center
        authentication_template:
          name: Closed Authentication
        l3_virtual_networks:
          - PRODUCTION_VN
          - STAGING_VN