Ethernet Network Control Policy

An Ethernet Network Control Policy configures link-layer discovery and MAC address handling on vNIC interfaces for FI-attached servers, controlling CDP, LLDP, MAC forging, MAC registration mode, and uplink failure behavior.

Location in Intersight GUI: Policies » Ethernet Network Control

Diagram

Classes

policies (compute.intersight.organizations)

Name	Type	Constraint	Mandatory	Default Value
ethernet_network_control	List	`[ethernet_network_control]`	No

ethernet_network_control (compute.intersight.organizations.policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
description	String		No
managed	Boolean	`true`, `false`	No	`true`
tags	List	`[tags]`	No
cdp	Boolean	`true`, `false`	No	`false`
forge_mac	Choice	`allow`, `deny`	No	`allow`
mac_registration_mode	Choice	`nativeVlanOnly`, `allVlans`	No	`nativeVlanOnly`
uplink_fail_action	Choice	`linkDown`, `warning`	No	`linkDown`
lldp_receive	Boolean	`true`, `false`	No	`false`
lldp_transmit	Boolean	`true`, `false`	No	`false`

tags (compute.intersight.organizations.policies.ethernet_network_control)

Name	Type	Constraint	Mandatory	Default Value
key	String		Yes
value	String		Yes

Examples

Example-1: Configure an Ethernet Network Control policy with CDP and LLDP enabled on a standard FI-attached vNIC, with environment tags.

compute:
  intersight:
    organizations:
      - name: MyOrg
        policies:
          ethernet_network_control:
            - name: MyEthCtrlPolicy
              cdp: true
              lldp_transmit: true
              lldp_receive: true
              forge_mac: allow
              mac_registration_mode: nativeVlanOnly
              uplink_fail_action: linkDown
              tags:
                - key: env
                  value: prod

Example-2: Configure a policy for an active/active uplink topology that keeps vEthernet up when no uplink is pinned.

compute:
  intersight:
    organizations:
      - name: MyOrg
        policies:
          ethernet_network_control:
            - name: MyEthCtrlActiveActive
              uplink_fail_action: warning
              mac_registration_mode: allVlans

Example-3: Deny MAC forging for strict environments where spoofed MAC addresses must be blocked.

compute:
  intersight:
    organizations:
      - name: MyOrg
        policies:
          ethernet_network_control:
            - name: MyEthCtrlSecure
              forge_mac: deny
              cdp: false
              lldp_transmit: false
              lldp_receive: false