VLAN

VLAN interfaces (SVIs) provide Layer 3 routing capabilities for VLAN segments on NX-OS, enabling inter-VLAN routing, management access, and gateway services with configurable IPv4/IPv6 addressing, VRF membership, and bandwidth/delay settings. They support advanced features including fabric forwarding mode (anycast gateway, proxy gateway) for VXLAN deployments, autostate control, medium type selection, MTU with inheritance, MAC address override, and load interval counters for traffic monitoring. VLAN interfaces include protocol sub-sections for OSPF, OSPFv3, PIM, IS-IS, HSRP, DHCP relay, and IPv6 ND, along with directed broadcast control, IP forwarding, uRPF, and access group filtering for comprehensive gateway functionality.

Diagram

Classes

interfaces (nxos.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
vlans	List	`[vlans]`	No

vlans (nxos.devices.configuration.interfaces)

Name	Type	Constraint	Mandatory	Default Value
id	Integer	min: `1`, max: `4094`	Yes
interface_groups	List	String	No
shutdown	Boolean	`true`, `false`	No	`false`
autostate	Boolean	`true`, `false`	No
bandwidth	Integer	min: `1`, max: `400000000`	No
carrier_delay	Integer	min: `0`, max: `60000`	No
delay	Integer	min: `1`, max: `16777215`	No
description	String		No
management	Boolean	`true`, `false`	No
load_interval_counter_1	Integer	min: `60`, max: `600`	No
load_interval_counter_2	Integer	min: `60`, max: `600`	No
load_interval_counter_3	Integer	min: `60`, max: `600`	No
mac_address	String		No
medium	Choice	`broadcast`, `p2p`	No
mtu	Integer	min: `64`, max: `9216`	No
mtu_inherit	Boolean	`true`, `false`	No
snmp_trap_link_status	Boolean	`true`, `false`	No
vrf	String		No
ip_address	IP		No
ip_secondary_addresses	List	IP	No
ip_forward	Boolean	`true`, `false`	No
ip_drop_glean	Boolean	`true`, `false`	No
fabric_forwarding_mode	Choice	`anycast-gw`, `proxy-gw`	No
fabric_forwarding_description	String		No
ip_directed_broadcast	Boolean	`true`, `false`	No
ip_directed_broadcast_acl	String		No
ip_redirects	Boolean	`true`, `false`	No
ip_unreachables	Boolean	`true`, `false`	No
ip_port_unreachable	Boolean	`true`, `false`	No
ospf	Class	`[ospf]`	No
ospfv3	Class	`[ospfv3]`	No
pim	Class	`[pim]`	No
isis	Class	`[isis]`	No
hsrp	Class	`[hsrp]`	No
ipv6_address_autoconfig	Boolean	`true`, `false`	No
ipv6_nd_default_route	Boolean	`true`, `false`	No
ipv6_forward	Boolean	`true`, `false`	No
ipv6_link_local_use_bia	Boolean	`true`, `false`	No
ipv6_address_use_link_local_only	Boolean	`true`, `false`	No
ipv6_verify_unicast_source_reachable_via	Choice	`disabled`, `strict`, `loose`, `loose-allow-default`, `strict-allow-vni-hosts`	No
ipv6_address_link_local	String		No
ipv6_addresses	List	`[ipv6_addresses]`	No
ip_dhcp_relay	Class	`[ip_dhcp_relay]`	No
ipv6_dhcp_smart_relay	Boolean	`true`, `false`	No
ipv6_dhcp_relay_addresses	List	`[ipv6_dhcp_relay_addresses]`	No
service_policy_type_qos_input	String		No
service_policy_type_qos_input_statistics	Boolean	`true`, `false`	No
nd	Class	`[nd]`	No
ip_access_group_in	String		No
ip_access_group_out	String		No

ospf (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory	Default Value
process	String		Yes
advertise_secondaries	Boolean	`true`, `false`	No	`true`
advertise_subnet	Boolean	`true`, `false`	No
area	String		No
bfd	Boolean	`true`, `false`	No
cost	Integer	min: `0`, max: `65535`	No
dead_interval	Integer	min: `0`, max: `65535`	No
hello_interval	Integer	min: `0`, max: `65535`	No
mtu_ignore	Boolean	`true`, `false`	No
network	Choice	`unspecified`, `p2p`, `bcast`	No
prefix_attribute_n_flag	Choice	`unspecified`, `clear`	No
passive_interface	Boolean	`true`, `false`	No
priority	Integer	min: `0`, max: `255`	No
retransmit_interval	Integer	min: `1`, max: `65535`	No
transmit_delay	Integer	min: `1`, max: `450`	No
authentication_key	String		No
message_digest_key_id	Integer	min: `0`, max: `255`	No
authentication_key_secure_mode	Boolean	`true`, `false`	No
authentication_key_chain	String		No
message_digest_key	String		No
message_digest_key_secure_mode	Boolean	`true`, `false`	No
authentication	Choice	`unspecified`, `simple`, `md5`, `none`	No

ospfv3 (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
process	String		Yes
advertise_secondaries	Boolean	`true`, `false`	No
area	String		No
bfd	Boolean	`true`, `false`	No
cost	Integer	min: `0`, max: `65535`	No
dead_interval	Integer	min: `0`, max: `65535`	No
hello_interval	Integer	min: `1`, max: `65535`	No
network	Choice	`none`, `p2p`, `bcast`	No
passive_interface	Boolean	`true`, `false`	No
priority	Integer	min: `0`, max: `255`	No
instance_id	Integer	min: `0`, max: `255`	No
mtu_ignore	Boolean	`true`, `false`	No
retransmit_interval	Integer	min: `1`, max: `65535`	No
transmit_delay	Integer	min: `1`, max: `450`	No

pim (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
bfd_instance	Boolean	`true`, `false`	No
dr_priority	Integer	min: `1`, max: `4294967295`	No
passive	Boolean	`true`, `false`	No
sparse_mode	Boolean	`true`, `false`	No
border	Boolean	`true`, `false`	No
dr_delay	Integer	min: `1`, max: `65535`	No
jp_policy	String		No
neighbor_policy_route_map	String		No
neighbor_policy_prefix_list	String		No
strict_rfc_compliant	Boolean	`true`, `false`	No

isis (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
instance_name	String		Yes
circuit_type	Choice	`l1`, `l2`, `l12`	No
ipv4	Boolean	`true`, `false`	No
ipv6	Boolean	`true`, `false`	No
network_point_to_point	Choice	`off`, `on`, `use-all-is-mac`	No
passive_interface	Choice	`l1`, `l2`, `l12`, `no-l1`, `no-l2`, `no-l12`, `inherit-def`	No
metric_level_1	Integer	min: `0`, max: `16777216`	No
metric_level_2	Integer	min: `0`, max: `16777216`	No
ipv6_metric_level_1	Integer	min: `0`, max: `16777216`	No
ipv6_metric_level_2	Integer	min: `0`, max: `16777216`	No
priority_level_1	Integer	min: `0`, max: `127`	No
priority_level_2	Integer	min: `0`, max: `127`	No
hello_interval	Integer	min: `1`, max: `65535`	No
hello_interval_level_1	Integer	min: `1`, max: `65535`	No
hello_interval_level_2	Integer	min: `1`, max: `65535`	No
hello_multiplier	Integer	min: `3`, max: `1000`	No
hello_multiplier_level_1	Integer	min: `3`, max: `1000`	No
hello_multiplier_level_2	Integer	min: `3`, max: `1000`	No
hello_padding	Choice	`always`, `transient`, `never`	No
authentication_check	Boolean	`true`, `false`	No
authentication_check_level_1	Boolean	`true`, `false`	No
authentication_check_level_2	Boolean	`true`, `false`	No
authentication_key_chain	String		No
authentication_key_chain_level_1	String		No
authentication_key_chain_level_2	String		No
authentication_type	Choice	`clear`, `md5`, `unknown`	No
authentication_type_level_1	Choice	`clear`, `md5`, `unknown`	No
authentication_type_level_2	Choice	`clear`, `md5`, `unknown`	No
mtu_check	Boolean	`true`, `false`	No
mtu_check_level_1	Boolean	`true`, `false`	No
mtu_check_level_2	Boolean	`true`, `false`	No
bfd	Boolean	`true`, `false`	No
ipv6_bfd	Boolean	`true`, `false`	No
csnp_interval_level_1	Integer	min: `1`, max: `65535`	No
csnp_interval_level_2	Integer	min: `1`, max: `65535`	No
lsp_interval	Integer	min: `10`, max: `65535`	No
retransmit_interval	Integer	min: `1`, max: `65535`	No
retransmit_throttle_interval	Integer	min: `20`, max: `65535`	No
mesh_group	Integer	min: `0`, max: `4294967295`	No
mesh_group_blocked	Boolean	`true`, `false`	No
n_flag_clear	Boolean	`true`, `false`	No
suppress_prefix	Boolean	`true`, `false`	No

hsrp (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
version	Integer	min: `1`, max: `2`	No
bfd	Boolean	`true`, `false`	No
use_bia	Boolean	`true`, `false`	No
use_bia_scope	Choice	`global`, `local`	No
delay_minimum	Integer	min: `0`, max: `10000`	No
delay_reload	Integer	min: `0`, max: `10000`	No
mac_refresh	Integer	min: `0`, max: `10000`	No
groups	List	`[groups]`	No

ipv6_addresses (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
address	String		Yes
type	Choice	`primary`, `secondary`	No
tag	Integer	min: `0`, max: `4294967295`	No
eui64	Boolean	`true`, `false`	No
route_preference	Integer	min: `0`, max: `255`	No

ip_dhcp_relay (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
information_trusted	Boolean	`true`, `false`	No
smart_relay	Boolean	`true`, `false`	No
subnet_broadcast	Boolean	`true`, `false`	No
information_option	Boolean	`true`, `false`	No
source_subnet	String		No
addresses	List	`[addresses]`	No

ipv6_dhcp_relay_addresses (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory	Default Value
address	String		Yes
vrf	String		No

nd (nxos.devices.configuration.interfaces.vlans)

Name	Type	Constraint	Mandatory
ra_boot_file_url	String		No
suppress_ra	Boolean	`true`, `false`	No
suppress_ra_mtu	Boolean	`true`, `false`	No
managed_config_flag	Boolean	`true`, `false`	No
other_config_flag	Boolean	`true`, `false`	No
redirects	Boolean	`true`, `false`	No
dad_attempts	Integer	min: `0`, max: `15`	No
dad_ns_interval	Integer	min: `1000`, max: `6000`	No
delete_adjacency_on_mac_delete	Boolean	`true`, `false`	No
dns_search_list_suppress	Boolean	`true`, `false`	No
dns_suppress	Boolean	`true`, `false`	No
hop_limit	Integer	min: `0`, max: `255`	No
mac_extract	Choice	`none`, `nud-phase`, `exclude-nud-phase`	No
mtu	Integer	min: `1280`, max: `65535`	No
ns_interval	Integer	min: `1000`, max: `3600000`	No
ra_interval	Integer	min: `4`, max: `1800`	No
ra_interval_minimum	Integer	min: `3`, max: `1350`	No
ra_lifetime	Integer	min: `0`, max: `9000`	No
reachable_time	Integer	min: `0`, max: `3600000`	No
retrans_timer	Integer	min: `0`, max: `4294967295`	No
suppress_ra_route	Boolean	`true`, `false`	No
router_preference	Choice	`unspecified`, `low`, `medium`, `high`	No

groups (nxos.devices.configuration.interfaces.vlans.hsrp)

Name	Type	Constraint	Mandatory
id	Integer	min: `0`, max: `4095`	Yes
address_family	Choice	`ipv4`, `ipv6`	Yes
authentication_md5_compatibility	Boolean	`true`, `false`	No
authentication_md5_key_chain	String		No
authentication_md5_key_string	String		No
authentication_md5_key_string_type	Choice	`unencrypted`, `hidden`	No
authentication_md5_timeout	Integer	min: `0`, max: `32767`	No
authentication_md5_type	Choice	`key-chain`, `key-string`	No
authentication_text	String		No
authentication_type	Choice	`simple`, `md5`	No
follow	String		No
forwarding_threshold_lower	Integer	min: `0`, max: `255`	No
timers_hello_interval	Integer	min: `250`, max: `254000`	No
timers_hold_interval	Integer	min: `750`, max: `255000`	No
ip	String		No
mac_address	String		No
name	String		No
preempt	Boolean	`true`, `false`	No
preempt_delay_minimum	Integer	min: `0`, max: `3600`	No
preempt_delay_reload	Integer	min: `0`, max: `3600`	No
preempt_delay_sync	Integer	min: `0`, max: `3600`	No
priority	Integer	min: `0`, max: `255`	No

addresses (nxos.devices.configuration.interfaces.vlans.ip_dhcp_relay)

Name	Type	Constraint	Mandatory	Default Value
address	String		Yes
vrf	String		No

Examples

Example 1: L3 SVI for tenant gateway with anycast gateway in a VXLAN fabric

nxos:
  devices:
    - name: LEAF1
      configuration:
        interfaces:
          vlans:
            - id: 1020
              description: VRF-BLUE-Gateway
              vrf: BLUE
              ip_address: 192.168.1.1/24
              fabric_forwarding_mode: anycast-gw

Example 2: L3 VNI transit SVI and tenant SVI for symmetric IRB routing

nxos:
  devices:
    - name: LEAF1
      configuration:
        interfaces:
          vlans:
            - id: 1010
              description: L3VNI-BLUE
              vrf: BLUE
              ip_forward: true
            - id: 1020
              description: BLUE-Tenant-Gateway
              vrf: BLUE
              ip_address: 192.168.1.1/24
              fabric_forwarding_mode: anycast-gw
            - id: 1030
              description: L3VNI-GREEN
              vrf: GREEN
              ip_forward: true
            - id: 1040
              description: GREEN-Tenant-Gateway
              vrf: GREEN
              ip_address: 192.168.2.1/24
              fabric_forwarding_mode: anycast-gw

Example 3: SVI with dual-stack addressing, OSPF, DHCP relay, and MTU configuration

nxos:
  devices:
    - name: BORDER-LEAF1
      configuration:
        interfaces:
          vlans:
            - id: 101
              description: Infrastructure-VLAN
              ip_address: 10.1.10.1/24
              ipv6_addresses:
                - address: 2001:db8:10::1/64
                  type: primary
              mtu: 9216
              ospf:
                process: "1"
                area: 0.0.0.0
              ip_dhcp_relay:
                information_option: true
                addresses:
                  - address: 10.50.100.1