Skip to content
Network as Code

Service LAN VPN SVI Interface Feature

Configure LAN VPN SVI interface feature.

Diagram

Section titled “Diagram”
Diagram

Classes

Section titled “Classes”

lan_vpns (sdwan.feature_profiles.service_profiles)

Section titled “lan_vpns (sdwan.feature_profiles.service_profiles)”
NameTypeConstraintMandatoryDefault Value
svi_interfacesList[svi_interfaces]No

svi_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)

Section titled “svi_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Yes
descriptionStringNo
arp_entriesList[arp_entries]No
arp_timeoutIntegermin: 0, max: 2678400No
arp_timeout_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
dhcp_serverStringRegex: ^[^&<>! "]{1,128}$No
icmp_redirect_disableBooleantrue, falseNo
icmp_redirect_disable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
interface_descriptionStringmax: 128No
interface_description_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
interface_mtuIntegermin: 1500, max: 9216No
interface_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
interface_nameStringRegex: ^Vlan([1-9]|[1-9]\d{1,2}|[1-3]\d{3}|40[0-8]\d|409[0-4])$Yes
interface_name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ip_directed_broadcastBooleantrue, falseNo
ip_directed_broadcast_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ip_mtuIntegermin: 576, max: 9216No
ip_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_addressIPNo
ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_dhcp_helpersListIPNo
ipv4_dhcp_helpers_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_egress_aclStringRegex: ^[^&<>! "]{1,128}$No
ipv4_ingress_aclStringRegex: ^[^&<>! "]{1,128}$No
ipv4_secondary_addressesList[ipv4_secondary_addresses]No
ipv4_subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
ipv4_subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv4_vrrp_groupsList[ipv4_vrrp_groups]No
ipv6_addressIPNo
ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
ipv6_dhcp_helpersList[ipv6_dhcp_helpers]No
ipv6_egress_aclStringRegex: ^[^&<>! "]{1,128}$No
ipv6_ingress_aclStringRegex: ^[^&<>! "]{1,128}$No
ipv6_secondary_addressesList[ipv6_secondary_addresses]No
ipv6_vrrp_groupsList[ipv6_vrrp_groups]No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tcp_mssIntegermin: 552, max: 1960No
tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

arp_entries (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Section titled “arp_entries (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)”
NameTypeConstraintMandatoryDefault Value
ip_addressIPNo
ip_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

ipv4_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Section titled “ipv4_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

ipv4_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Section titled “ipv4_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
follow_dual_router_high_availabilityBooleantrue, falseNo
idIntegermin: 1, max: 255No
id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
prefix_listStringRegex: ^[a-zA-Z0-9-_]{1,32}$No
prefix_list_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
priorityIntegermin: 1, max: 254No
priority_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
secondary_addressesList[secondary_addresses]No
timerIntegermin: 100, max: 40950No
timer_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tloc_preference_changeBooleantrue, falseNo
tloc_preference_change_valueIntegermin: 1, max: 4294967295No
tloc_preference_change_value_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
track_ompBooleantrue, falseNo
track_omp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tracking_objectsList[tracking_objects]No

ipv6_dhcp_helpers (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Section titled “ipv6_dhcp_helpers (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
vpn_idIntegermin: 1, max: 65536No
vpn_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

ipv6_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Section titled “ipv6_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

ipv6_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Section titled “ipv6_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressesList[addresses]No
follow_dual_router_high_availabilityBooleantrue, falseNo
idIntegermin: 1, max: 255No
id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
priorityIntegermin: 1, max: 254No
priority_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
timerIntegermin: 100, max: 40950No
timer_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
track_ompBooleantrue, falseNo
track_omp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
track_prefix_listStringRegex: ^[a-zA-Z0-9-_]{1,32}$No
track_prefix_list_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv4_vrrp_groups)

Section titled “secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv4_vrrp_groups)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

tracking_objects (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv4_vrrp_groups)

Section titled “tracking_objects (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv4_vrrp_groups)”
NameTypeConstraintMandatoryDefault Value
actionChoicedecrement, shutdownNo
action_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
decrement_valueIntegermin: 1, max: 255No
decrement_value_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
tracker_objectStringRegex: ^[^&<>! "]{1,128}$No

addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv6_vrrp_groups)

Section titled “addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv6_vrrp_groups)”
NameTypeConstraintMandatoryDefault Value
global_prefixIPNo
global_prefix_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
link_local_addressIPNo
link_local_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

Examples

Section titled “Examples”

Example-1: The example below demonstrates how to configure a service SVI interface feature under LAN VPN feature within a service profile with static IPv4 and IPv6 address settings. The interface is configured with VRRP high availability for both IPv4 and IPv6 address families, including tracking objects for failover scenarios.

sdwan:
  feature_profiles:
    service_profiles:
      - name: service2
        lan_vpns:
          - name: service_lan_vpn1
            description: Branch LAN VPN
            vpn_id: 1
            vpn_name: VPN1
            svi_interfaces:
            - name: lan_interface_svi1
              description: Service LAN VPN Interface SVI
              interface_description: Full SVI Interface
              interface_name: Vlan1
              ipv4_address: 10.0.2.1
              ipv4_subnet_mask: 255.255.255.0
              ipv4_vrrp_groups:
                - address: 10.0.2.31
                  id: 10
                  priority: 120
                  timer: 1000
                  tracking_objects:
                    - action: decrement
                      tracker_object: object_route_tracker
                      decrement_value: 20
              ipv6_address: 2001:db9::1/64
              ipv6_vrrp_groups:
                - addresses:
                    - link_local_address: fe80::1
                      global_prefix: 2001:db9::ffff/64
                  id: 20
                  priority: 120
                  timer: 1000
              shutdown: false