Service LAN VPN SVI Interface Feature

Configure LAN VPN SVI interface feature.

Diagram

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
feature_profiles	Class	feature_profiles	No

feature_profiles (sdwan)

Name	Type	Constraint	Mandatory	Default Value
service_profiles	List	service_profiles	No

service_profiles (sdwan.feature_profiles)

Name	Type	Constraint	Mandatory	Default Value
lan_vpns	List	lan_vpns	No

lan_vpns (sdwan.feature_profiles.service_profiles)

Name	Type	Constraint	Mandatory	Default Value
svi_interfaces	List	svi_interfaces	No

svi_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	Yes
description	String		No
arp_entries	List	arp_entries	No
arp_timeout	Integer	min: 0, max: 2678400	No
arp_timeout_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
dhcp_server	String	Regex: ^[^&<>! "]{1,128}$	No
icmp_redirect_disable	Boolean	true, false	No
icmp_redirect_disable_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
interface_description	String	max: 128	No
interface_description_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
interface_mtu	Integer	min: 1500, max: 9216	No
interface_mtu_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
interface_name	String	Regex: ^Vlan([1-9]|[1-9]\d{1,2}|[1-3]\d{3}|40[0-8]\d|409[0-4])$	No
interface_name_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ip_directed_broadcast	Boolean	true, false	No
ip_directed_broadcast_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ip_mtu	Integer	min: 576, max: 9216	No
ip_mtu_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_address	IP		No
ipv4_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_dhcp_helpers	List	IP	No
ipv4_dhcp_helpers_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_egress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv4_ingress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv4_secondary_addresses	List	ipv4_secondary_addresses	No
ipv4_subnet_mask	Choice	255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.248.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0	No
ipv4_subnet_mask_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_vrrp_groups	List	ipv4_vrrp_groups	No
ipv6_address	IP		No
ipv6_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv6_dhcp_helpers	List	ipv6_dhcp_helpers	No
ipv6_egress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv6_ingress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv6_secondary_addresses	List	ipv6_secondary_addresses	No
ipv6_vrrp_groups	List	ipv6_vrrp_groups	No
shutdown	Boolean	true, false	No
shutdown_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tcp_mss	Integer	min: 552, max: 1960	No
tcp_mss_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

svi_interfaces (sdwan.feature_profiles.service_profiles.lan_vpns)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	Yes
description	String		No
arp_entries	List	arp_entries	No
arp_timeout	Integer	min: 0, max: 2678400	No
arp_timeout_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
dhcp_server	String	Regex: ^[^&<>! "]{1,128}$	No
icmp_redirect_disable	Boolean	true, false	No
icmp_redirect_disable_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
interface_description	String	max: 128	No
interface_description_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
interface_mtu	Integer	min: 1500, max: 9216	No
interface_mtu_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
interface_name	String	Regex: ^Vlan([1-9]|[1-9]\d{1,2}|[1-3]\d{3}|40[0-8]\d|409[0-4])$	Yes
interface_name_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ip_directed_broadcast	Boolean	true, false	No
ip_directed_broadcast_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ip_mtu	Integer	min: 576, max: 9216	No
ip_mtu_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_address	IP		No
ipv4_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_dhcp_helpers	List	IP	No
ipv4_dhcp_helpers_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_egress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv4_ingress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv4_secondary_addresses	List	ipv4_secondary_addresses	No
ipv4_subnet_mask	Choice	255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0	No
ipv4_subnet_mask_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_vrrp_groups	List	ipv4_vrrp_groups	No
ipv6_address	IP		No
ipv6_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv6_dhcp_helpers	List	ipv6_dhcp_helpers	No
ipv6_egress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv6_ingress_acl	String	Regex: ^[^&<>! "]{1,128}$	No
ipv6_secondary_addresses	List	ipv6_secondary_addresses	No
ipv6_vrrp_groups	List	ipv6_vrrp_groups	No
shutdown	Boolean	true, false	No
shutdown_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tcp_mss	Integer	min: 552, max: 1960	No
tcp_mss_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

arp_entries (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
ip_address	IP		No
ip_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
mac_address	String	Regex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$	No
mac_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv4_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
address	IP		No
address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
subnet_mask	Choice	255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.248.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0	No
subnet_mask_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv4_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
address	IP		No
address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
subnet_mask	Choice	255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0	No
subnet_mask_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv4_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
address	IP		No
address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
follow_dual_router_high_availability	Boolean	true, false	No
id	Integer	min: 1, max: 255	No
id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
prefix_list	String	Regex: ^[a-zA-Z0-9-_]{1,32}$	No
prefix_list_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
priority	Integer	min: 1, max: 254	No
priority_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
secondary_addresses	List	secondary_addresses	No
timer	Integer	min: 100, max: 40950	No
timer_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tloc_preference_change	Boolean	true, false	No
tloc_preference_change_value	Integer	min: 1, max: 4294967295	No
tloc_preference_change_value_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
track_omp	Boolean	true, false	No
track_omp_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tracking_objects	List	tracking_objects	No

ipv6_dhcp_helpers (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
address	IP		No
address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
vpn_id	Integer	min: 1, max: 65536	No
vpn_id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv6_secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
address	IP		No
address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv6_vrrp_groups (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces)

Name	Type	Constraint	Mandatory	Default Value
addresses	List	addresses	No
follow_dual_router_high_availability	Boolean	true, false	No
id	Integer	min: 1, max: 255	No
id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
priority	Integer	min: 1, max: 254	No
priority_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
timer	Integer	min: 100, max: 40950	No
timer_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
track_omp	Boolean	true, false	No
track_omp_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
track_prefix_list	String	Regex: ^[a-zA-Z0-9-_]{1,32}$	No
track_prefix_list_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

secondary_addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv4_vrrp_groups)

Name	Type	Constraint	Mandatory	Default Value
address	IP		No
address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

tracking_objects (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv4_vrrp_groups)

Name	Type	Constraint	Mandatory	Default Value
action	Choice	decrement, shutdown	No
action_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
decrement_value	Integer	min: 1, max: 255	No
decrement_value_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tracker_object	String	Regex: ^[^&<>! "]{1,128}$	No

addresses (sdwan.feature_profiles.service_profiles.lan_vpns.svi_interfaces.ipv6_vrrp_groups)

Name	Type	Constraint	Mandatory	Default Value
global_prefix	IP		No
global_prefix_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
link_local_address	IP		No
link_local_address_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

Examples

Example-1: The example below demonstrates how to configure a service SVI interface feature under LAN VPN feature within a service profile with static IPv4 and IPv6 address settings. The interface is configured with VRRP high availability for both IPv4 and IPv6 address families, including tracking objects for failover scenarios.

sdwan:
  feature_profiles:
    service_profiles:
      - name: service2
        lan_vpns:
          - name: service_lan_vpn1
            description: Branch LAN VPN
            vpn_id: 1
            vpn_name: VPN1
            svi_interfaces:
            - name: lan_interface_svi1
              description: Service LAN VPN Interface SVI
              interface_description: Full SVI Interface
              interface_name: Vlan1
              ipv4_address: 10.0.2.1
              ipv4_subnet_mask: 255.255.255.0
              ipv4_vrrp_groups:
                - address: 10.0.2.31
                  id: 10
                  priority: 120
                  timer: 1000
                  tracking_objects:
                    - action: decrement
                      tracker_object: object_route_tracker
                      decrement_value: 20
              ipv6_address: 2001:db9::1/64
              ipv6_vrrp_groups:
                - addresses:
                    - link_local_address: fe80::1
                      global_prefix: 2001:db9::ffff/64
                  id: 20
                  priority: 120
                  timer: 1000
              shutdown: false