Feature

Feature configuration enables or disables NX-OS platform features (software services and protocols) that must be activated before they can be configured. Each feature maps to a CLI feature <name> command and controls whether the corresponding service is available on the device. Common features include BGP, OSPF, EVPN, PIM, vPC, HSRP, LACP, LLDP, SSH, DHCP, fabric forwarding, NV overlay, interface-VLAN, MACsec, Netflow, NGMVPN, MPLS L3VPN, and MPLS segment routing. Feature enablement is typically one of the first configuration steps when provisioning an NX-OS device and is a prerequisite for all protocol-specific configuration sections.

Feature configuration enables or disables NX-OS platform features (software services and protocols) that must be activated before they can be configured. Each feature maps to a CLI feature <name> command and controls whether the corresponding service is available on the device. Common features include BGP, OSPF, EVPN, PIM, vPC, HSRP, LACP, LLDP, SSH, DHCP, fabric forwarding, NV overlay, interface-VLAN, MACsec, Netflow, and NGMVPN. Feature enablement is typically one of the first configuration steps when provisioning an NX-OS device and is a prerequisite for all protocol-specific configuration sections.

Diagram

Diagram

Classes

nxos

Name	Type	Constraint	Mandatory	Default Value
devices	List	devices	No
device_groups	List	device_groups	No
global	Class	global	No
templates	List	templates	No

devices (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

device_groups (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

global (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

templates (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

configuration (nxos.devices)

Name	Type	Constraint	Mandatory	Default Value
feature	Class	feature	No

feature (nxos.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
analytics	Boolean	true, false	No
bash_shell	Boolean	true, false	No
bfd	Boolean	true, false	No
bgp	Boolean	true, false	No
dhcp	Boolean	true, false	No
dot1x	Boolean	true, false	No
eigrp	Boolean	true, false	No
epbr	Boolean	true, false	No
evpn	Boolean	true, false	No
fabric_forwarding	Boolean	true, false	No
grpc	Boolean	true, false	No
hsrp	Boolean	true, false	No
interface_vlan	Boolean	true, false	No
isis	Boolean	true, false	No
lacp	Boolean	true, false	No
lldp	Boolean	true, false	No
macsec	Boolean	true, false	No
mpls_l3vpn	Boolean	true, false	No
mpls_segment_routing	Boolean	true, false	No
mpls_segment_routing_traffic_engineering	Boolean	true, false	No
msdp	Boolean	true, false	No
nat	Boolean	true, false	No
netconf	Boolean	true, false	No
netflow	Boolean	true, false	No
ngmvpn	Boolean	true, false	No
ngoam	Boolean	true, false	No
nv_overlay	Boolean	true, false	No
nxapi	Boolean	true, false	No
openconfig	Boolean	true, false	No
ospf	Boolean	true, false	No
ospfv3	Boolean	true, false	No
pbr	Boolean	true, false	No
password_encryption_aes	Boolean	true, false	No
password_encryption_aes_tam	Boolean	true, false	No
pim	Boolean	true, false	No
poe	Boolean	true, false	No
port_security	Boolean	true, false	No
ptp	Boolean	true, false	No
private_vlan	Boolean	true, false	No
restconf	Boolean	true, false	No
scheduler	Boolean	true, false	No
scp_server	Boolean	true, false	No
sflow	Boolean	true, false	No
security_group	Boolean	true, false	No
service_acceleration	Boolean	true, false	No
sftp_server	Boolean	true, false	No
sla_responder	Boolean	true, false	No
sla_sender	Boolean	true, false	No
sla_twamp_server	Boolean	true, false	No
srv6	Boolean	true, false	No
ssh	Boolean	true, false	No
tacacs	Boolean	true, false	No
telemetry	Boolean	true, false	No
telnet	Boolean	true, false	No
tunnel	Boolean	true, false	No
udld	Boolean	true, false	No
vn_segment_vlan_based	Boolean	true, false	No
vpc	Boolean	true, false	No
vrrp	Boolean	true, false	No
vrrpv3	Boolean	true, false	No
vtp	Boolean	true, false	No

feature (nxos.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
analytics	Boolean	true, false	No
bash_shell	Boolean	true, false	No
bfd	Boolean	true, false	No
bgp	Boolean	true, false	No
dhcp	Boolean	true, false	No
evpn	Boolean	true, false	No
fabric_forwarding	Boolean	true, false	No
grpc	Boolean	true, false	No
hsrp	Boolean	true, false	No
interface_vlan	Boolean	true, false	No
isis	Boolean	true, false	No
lacp	Boolean	true, false	No
lldp	Boolean	true, false	No
macsec	Boolean	true, false	No
netflow	Boolean	true, false	No
ngmvpn	Boolean	true, false	No
ngoam	Boolean	true, false	No
nv_overlay	Boolean	true, false	No
nxapi	Boolean	true, false	No
ospf	Boolean	true, false	No
ospfv3	Boolean	true, false	No
pim	Boolean	true, false	No
ptp	Boolean	true, false	No
private_vlan	Boolean	true, false	No
scp_server	Boolean	true, false	No
sflow	Boolean	true, false	No
security_group	Boolean	true, false	No
service_acceleration	Boolean	true, false	No
sftp_server	Boolean	true, false	No
ssh	Boolean	true, false	No
tacacs	Boolean	true, false	No
telemetry	Boolean	true, false	No
telnet	Boolean	true, false	No
udld	Boolean	true, false	No
vn_segment_vlan_based	Boolean	true, false	No
vpc	Boolean	true, false	No

Examples

Example 1: VXLAN leaf switch with full Spine-Leaf EVPN feature set

nxos:
  devices:
    - name: LEAF1
      configuration:
        feature:
          bgp: true
          ospf: true
          evpn: true
          pim: true
          vn_segment_vlan_based: true
          nv_overlay: true
          interface_vlan: true
          fabric_forwarding: true
          lacp: true
          vpc: true
          lldp: true
          ssh: true

Example 2: Spine switch with routing-only features

nxos:
  devices:
    - name: SPINE1
      configuration:
        feature:
          bgp: true
          ospf: true
          pim: true
          lldp: true
          ssh: true

Example 3: Access/border leaf switch with additional security and monitoring features

nxos:
  devices:
    - name: BORDER-LEAF1
      configuration:
        feature:
          bgp: true
          ospf: true
          evpn: true
          pim: true
          vn_segment_vlan_based: true
          nv_overlay: true
          interface_vlan: true
          fabric_forwarding: true
          lacp: true
          vpc: true
          hsrp: true
          tacacs: true
          dhcp: true
          macsec: true
          netflow: true
          service_acceleration: true
          ssh: true

Example 4: Device with telemetry, programmability, and security features

nxos:
  devices:
    - name: MONITORING-LEAF1
      configuration:
        feature:
          bgp: true
          ospf: true
          interface_vlan: true
          lldp: true
          ssh: true
          grpc: true
          netconf: true
          openconfig: true
          restconf: true
          telemetry: true
          analytics: true
          scp_server: true
          sftp_server: true

Example 5: AES (type-6) password encryption with the Trust Anchor Module (feature password encryption aes tam)

nxos:
  devices:
    - name: LEAF1
      configuration:
        feature:
          ssh: true
          tacacs: true
          password_encryption_aes: true
          password_encryption_aes_tam: true

Example 6: Campus access switch with port security, 802.1X, NAT, tunnel interfaces and the command scheduler

nxos:
  devices:
    - name: ACCESS1
      configuration:
        feature:
          dot1x: true
          port_security: true
          nat: true
          tunnel: true
          scheduler: true

Example 7: MPLS provider edge router with L3VPN, segment routing and SR-TE (requires the mpls feature-set)

nxos:
  devices:
    - name: PE1
      configuration:
        feature_set:
          mpls: true
        feature:
          bgp: true
          isis: true
          mpls_l3vpn: true
          mpls_segment_routing: true
          mpls_segment_routing_traffic_engineering: true

Example 8: SRv6 headend (feature srv6 cannot be enabled together with feature mpls segment-routing)

nxos:
  devices:
    - name: PE2
      configuration:
        feature:
          bgp: true
          isis: true
          srv6: true

Examples

Example 1: VXLAN leaf switch with full Spine-Leaf EVPN feature set

nxos:
  devices:
    - name: LEAF1
      configuration:
        feature:
          bgp: true
          ospf: true
          evpn: true
          pim: true
          vn_segment_vlan_based: true
          nv_overlay: true
          interface_vlan: true
          fabric_forwarding: true
          lacp: true
          vpc: true
          lldp: true
          ssh: true

Example 2: Spine switch with routing-only features

nxos:
  devices:
    - name: SPINE1
      configuration:
        feature:
          bgp: true
          ospf: true
          pim: true
          lldp: true
          ssh: true

Example 3: Access/border leaf switch with additional security and monitoring features

nxos:
  devices:
    - name: BORDER-LEAF1
      configuration:
        feature:
          bgp: true
          ospf: true
          evpn: true
          pim: true
          vn_segment_vlan_based: true
          nv_overlay: true
          interface_vlan: true
          fabric_forwarding: true
          lacp: true
          vpc: true
          hsrp: true
          tacacs: true
          dhcp: true
          macsec: true
          netflow: true
          service_acceleration: true
          ssh: true

Example 4: Device with telemetry, programmability, and security features

nxos:
  devices:
    - name: MONITORING-LEAF1
      configuration:
        feature:
          bgp: true
          ospf: true
          interface_vlan: true
          lldp: true
          ssh: true
          grpc: true
          telemetry: true
          analytics: true
          cts: true
          scp_server: true
          sftp_server: true