Skip to content
Network as Code

Service LAN VPN GRE Interface Feature

Configure LAN VPN GRE interface feature.

Diagram

Section titled “Diagram”
Diagram

Classes

Section titled “Classes”

lan_vpns (sdwan.feature_profiles.service_profiles)

Section titled “lan_vpns (sdwan.feature_profiles.service_profiles)”
NameTypeConstraintMandatoryDefault Value
gre_interfacesList[gre_interfaces]No

gre_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)

Section titled “gre_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Yes
descriptionStringNo
application_tunnel_typeChoicenone, sigNo
application_tunnel_type_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
clear_dont_fragmentBooleantrue, falseNo
clear_dont_fragment_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
dpd_intervalIntegermin: 10, max: 3600No
dpd_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
dpd_retriesIntegermin: 2, max: 60No
dpd_retries_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_cipher_suiteChoiceaes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2No
ike_cipher_suite_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_diffie_hellman_groupChoice2, 14, 15, 16, 19, 20, 21, 24No
ike_diffie_hellman_group_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_id_for_local_endpointIntegermin: 1, max: 63No
ike_id_for_local_endpoint_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_id_for_remote_endpointIntegermin: 1, max: 63No
ike_id_for_remote_endpoint_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_integrity_protocolChoicemain, aggressiveNo
ike_integrity_protocol_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_rekey_intervalIntegermin: 60, max: 86400No
ike_rekey_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ike_versionIntegermin: 1, max: 2No
interface_descriptionStringmax: 128No
interface_description_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
interface_nameStringRegex: ^gre([1-9]|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])$No
interface_name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_addressIPNo
ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_mtuIntegermin: 576, max: 9976No
ipv4_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
ipv4_subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_tcp_mssIntegermin: 500, max: 1460No
ipv4_tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv6_addressIPNo
ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv6_mtuIntegermin: 1280, max: 9976No
ipv6_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv6_tcp_mssIntegermin: 40, max: 1454No
ipv6_tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipsec_cipher_suiteChoiceaes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512No
ipsec_cipher_suite_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipsec_rekey_intervalIntegermin: 120, max: 2592000No
ipsec_rekey_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipsec_replay_windowIntegermin: 64, max: 4096No
ipsec_replay_window_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
perfect_forward_secrecyChoicegroup-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, noneNo
perfect_forward_secrecy_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
preshared_key_for_ikeStringmin: 1, max: 127No
preshared_key_for_ike_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_destination_ipv4_addressIPNo
tunnel_destination_ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_destination_ipv6_addressIPNo
tunnel_destination_ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_modeChoiceipv4, ipv6No
tunnel_route_via_loopbackStringmin: 1, max: 32No
tunnel_route_via_loopback_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_source_interfaceStringmin: 1, max: 32No
tunnel_source_interface_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_source_interface_loopbackStringmin: 1, max: 32No
tunnel_source_interface_loopback_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_source_ipv4_addressIPNo
tunnel_source_ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_source_ipv6_addressIPNo
tunnel_source_ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tunnel_protectionBooleantrue, falseNo

Examples

Section titled “Examples”

Example-1: This example demonstrates how to configure a service GRE interface feature within a LAN VPN in a service profile. It defines GRE tunnels in the LAN VPN context for SD-WAN, enabling traffic routing between different endpoints through an encapsulated GRE tunnel.

sdwan:
  feature_profiles:
    service_profiles:
      - name: service1
        lan_vpns:
          - name: service_lan_vpn1
            description: lan_vpn1_test
            vpn_id: 1
            vpn_name: VPN1
            gre_interfaces:
              - name: lan_interface_gre
                description: LAN GRE Interface
                application_tunnel_type: none
                clear_dont_fragment: false
                interface_name: gre1
                interface_description: gre1 interface
                ipv4_address: 70.1.1.1
                ipv4_subnet_mask: 255.255.255.0
                ipv4_mtu: 1500
                ipv4_tcp_mss: 1460
                shutdown: false
                tunnel_source_ipv4_address: 10.0.0.1
                tunnel_destination_ipv4_address: 10.0.0.10