Skip to content
Network as Code

Service LAN VPN Ethernet Interface Feature

Configure LAN VPN Ethernet interface feature.

Diagram

Section titled “Diagram”
Diagram

Classes

Section titled “Classes”

lan_vpns (sdwan.feature_profiles.service_profiles)

Section titled “lan_vpns (sdwan.feature_profiles.service_profiles)”
NameTypeConstraintMandatoryDefault Value
ethernet_interfacesList[ethernet_interfaces]No

ethernet_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)

Section titled “ethernet_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Yes
descriptionStringNo
arp_entriesList[arp_entries]No
arp_timeoutIntegermin: 0, max: 2147483No
arp_timeout_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
autonegotiateBooleantrue, falseNo
autonegotiate_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
dhcp_serverStringRegex: ^[^&<>! "]{1,128}$No
duplexChoicefull, half, autoNo
duplex_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
icmp_redirect_disableBooleantrue, falseNo
icmp_redirect_disable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_descriptionStringmax: 200No
interface_description_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_mtuIntegermin: 1500, max: 9216No
interface_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_nameStringRegex: (ATM|ATM-ACR|AppGigabitEthernet|AppNav-Compress|AppNav-UnCompress|Async|BD-VIF|BDI|CEM|CEM-ACR|Cellular|Dialer|Embedded-Service-Engine|Ethernet|Ethernet-Internal|FastEthernet|FiftyGigabitEthernet|FiveGigabitEthernet|FortyGigabitEthernet|FourHundredGigE|GMPLS|GigabitEthernet|Group-Async|HundredGigE|L2LISP|LISP|Loopback|MFR|Multilink|Port-channel|SM|Serial|Service-Engine|TenGigabitEthernet|Tunnel|TwentyFiveGigE|TwentyFiveGigabitEthernet|TwoGigabitEthernet|TwoHundredGigE|Vif|Virtual-PPP|Virtual-Template|VirtualPortGroup|Vlan|Wlan-GigabitEthernet|nat64|nat66|ntp|nve|ospfv3|overlay|pseudowire|ucse|vasileft|vasiright|vmi)([0-9]*(. ?[1-9][0-9]*)*|[0-9/]+|[0-9]+/[0-9]+/[0-9]+:[0-9]+|[0-9]+/[0-9]+/[0-9]+|[0-9]+/[0-9]+|[0-9]+)No
interface_name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ip_directed_broadcastBooleantrue, falseNo
ip_directed_broadcast_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ip_mtuIntegermin: 576, max: 9216No
ip_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_addressIPNo
ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_configuration_typeChoicedynamic, staticNostatic
ipv4_dhcp_distanceIntegermin: 1, max: 255No
ipv4_dhcp_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_dhcp_helpersListIPNo
ipv4_dhcp_helpers_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_egress_aclStringNo
ipv4_ingress_aclStringNo
ipv4_secondary_addressesList[ipv4_secondary_addresses]No
ipv4_subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
ipv4_subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_trackerStringRegex: ^[^&<>! "]{1,128}$No
ipv4_tracker_groupStringRegex: ^[^&<>! "]{1,128}$No
ipv4_vrrp_groupsList[ipv4_vrrp_groups]No
ipv6_configuration_typeChoicedynamic, static, noneNonone
ipv6_addressIPNo
ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_dhcp_helpersList[ipv6_dhcp_helpers]No
ipv6_dhcp_secondary_addressesList[ipv6_dhcp_secondary_addresses]No
ipv6_secondary_addressesList[ipv6_secondary_addresses]No
ipv6_vrrp_groupsList[ipv6_vrrp_groups]No
load_intervalIntegermin: 30, max: 600No
load_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
media_typeChoiceauto-select, rj45, sfpNo
media_type_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
speedChoice10, 100, 1000, 2500, 10000No
speed_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
shaping_rateIntegermin: 8, max: 100000000No
shaping_rate_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tcp_mssIntegermin: 500, max: 1460No
tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
trustsec_enable_enforced_propogationBooleantrue, falseNo
trustsec_enable_sgt_propogationBooleantrue, falseNo
trustsec_sgtIntegermin: 2, max: 65519No
trustsec_sgt_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
trustsec_propogateBooleantrue, falseNo
trustsec_enforced_sgtIntegermin: 2, max: 65519No
trustsec_enforced_sgt_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
xconnectStringNo
xconnect_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

arp_entries (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “arp_entries (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
ip_addressIPNo
ip_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv4_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “ipv4_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv4_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “ipv4_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
idIntegermin: 1, max: 255No
id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
priorityIntegermin: 1, max: 254No
priority_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
secondary_addressesList[secondary_addresses]No
timerIntegermin: 100, max: 40950No
timer_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tloc_preference_changeBooleantrue, falseNo
tloc_preference_change_valueIntegermin: 100, max: 4294967295No
track_ompBooleantrue, falseNo
tracking_objectsList[tracking_objects]No

ipv6_dhcp_helpers (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “ipv6_dhcp_helpers (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
vpn_idIntegermin: 1, max: 65536No
vpn_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_dhcp_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “ipv6_dhcp_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “ipv6_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)

Section titled “ipv6_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
idIntegermin: 1, max: 255No
id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
global_prefixIPNo
global_prefix_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
link_local_addressIPNo
link_local_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
priorityIntegermin: 1, max: 254No
priority_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
timerIntegermin: 100, max: 40950No
timer_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
track_ompBooleantrue, falseNo

secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces.ipv4_vrrp_groups)

Section titled “secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces.ipv4_vrrp_groups)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

tracking_objects (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces.ipv4_vrrp_groups)

Section titled “tracking_objects (sdwan.feature_profiles.service_profiles.lan_vpns.ethernet_interfaces.ipv4_vrrp_groups)”
NameTypeConstraintMandatoryDefault Value
actionChoicedecrement, shutdownNo
action_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
decrement_valueIntegermin: 1, max: 255No
decrement_value_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tracker_objectStringRegex: ^[^&<>! "]{1,128}$No
tracker_object_groupStringRegex: ^[^&<>! "]{1,128}$No

Examples

Section titled “Examples”

Example-1: The example below demonstrates how to configure a service ethernet interface feature under LAN VPN feature within a service profile with static IPv4 and IPv6 address settings. The interface is configured with VRRP high availability for both IPv4 and IPv6 address families, including tracking object for failover scenarios.

sdwan:
  feature_profiles:
    service_profiles:
      - name: branch-lan-vpn20
        description: Branch LAN VPN 20 with High Availability
        lan_vpns:
          - name: branch-lan-vpn20
            description: Branch LAN VPN for internal users with VRRP redundancy
            vpn_id: 20
            vpn_name: vpn20-lan
            ethernet_interfaces:
              - name: lan_int_static
                interface_name: GigabitEthernet0/0/1
                interface_description: "Branch LAN Interface with VRRP HA"
                shutdown: false
                ipv4_configuration_type: static
                ipv4_address: 192.168.20.2
                ipv4_subnet_mask: 255.255.255.0
                ipv4_vrrp_groups:
                  - id: 1
                    address: 192.168.20.1
                    priority: 110
                    timer: 1000
                    tracking_objects:
                      - tracker_object: tracker_obj1
                        action: decrement
                        decrement_value: 50
                ipv6_configuration_type: static
                ipv6_address: 2001:db8:20::2/64
                ipv6_vrrp_groups:
                  - id: 1
                    link_local_address: fe80::1
                    global_prefix: 2001:db8:20::1/64
                    priority: 110
                    timer: 1000

Example-2: The example below demonstrates how to configure a LAN VPN ethernet interface feature within a service profile with dynamic IPv4 and IPv6 address settings.

sdwan:
  feature_profiles:
    service_profiles:
      - name: branch-lan-vpn30
        description: Branch LAN VPN 30
        lan_vpns:
          - name: branch-lan-vpn30
            vpn_id: 30
            vpn_name: vpn30-lan
            ethernet_interfaces:
              - name: lan_int_dynamic
                interface_name: GigabitEthernet0/0/2
                interface_description: "DHCP Client Interface"
                ipv4_configuration_type: dynamic
                ipv4_dhcp_distance: 1
                ipv6_configuration_type: dynamic