Skip to content
Network as Code

Service Switchport Feature

This feature configures switchport functionality on SD-WAN devices, enabling Layer 2 switching capabilities with support for VLANs, 802.1X authentication, and MAC address management.

Diagram

Section titled “Diagram”
Diagram

Classes

Section titled “Classes”

service_profiles (sdwan.feature_profiles)

Section titled “service_profiles (sdwan.feature_profiles)”
NameTypeConstraintMandatoryDefault Value
switchport_featuresList[switchport_features]No

switchport_features (sdwan.feature_profiles.service_profiles)

Section titled “switchport_features (sdwan.feature_profiles.service_profiles)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^<>!&" ]{1,128}$Yes
descriptionStringNo
age_out_timeIntegermin: 0, max: 1000000No
age_out_time_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
interfacesList[interfaces]No
static_mac_addressesList[static_mac_addresses]No

interfaces (sdwan.feature_profiles.service_profiles.switchport_features)

Section titled “interfaces (sdwan.feature_profiles.service_profiles.switchport_features)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: (ATM|ATM-ACR|AppGigabitEthernet|AppNav-Compress|AppNav-UnCompress|Async|BD-VIF|BDI|CEM|CEM-ACR|Cellular|Dialer|Embedded-Service-Engine|Ethernet|Ethernet-Internal|FastEthernet|FiftyGigabitEthernet|FiveGigabitEthernet|FortyGigabitEthernet|FourHundredGigE|GMPLS|GigabitEthernet|Group-Async|HundredGigE|L2LISP|LISP|Loopback|MFR|Multilink|Port-channel|SM|Serial|Service-Engine|TenGigabitEthernet|Tunnel|TwentyFiveGigE|TwentyFiveGigabitEthernet|TwoGigabitEthernet|TwoHundredGigE|Vif|Virtual-PPP|Virtual-Template|VirtualPortGroup|Vlan|Wlan-GigabitEthernet|nat64|nat66|ntp|nve|ospfv3|overlay|pseudowire|ucse|vasileft|vasiright|vmi)([0-9]*(. ?[1-9][0-9]*)*|[0-9/]+|[0-9]+/[0-9]+/[0-9]+:[0-9]+|[0-9]+/[0-9]+/[0-9]+|[0-9]+/[0-9]+|[0-9]+)No
name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
access_vlanIntegermin: 1, max: 4094No
access_vlan_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
control_directionChoiceboth, inNo
control_direction_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
critical_vlanIntegermin: 1, max: 4094No
critical_vlan_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
duplexChoicefull, halfNo
duplex_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
enable_dot1xBooleantrue, falseNo
enable_periodic_reauthBooleantrue, falseNo
enable_periodic_reauth_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
enable_voiceBooleantrue, falseNo
enable_voice_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
guest_vlanIntegermin: 1, max: 4094No
guest_vlan_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
host_modeChoicesingle-host, multi-auth, multi-host, multi-domainNo
host_mode_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
inactivityIntegermin: 1, max: 65535No
inactivity_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
mac_authentication_bypassBooleantrue, falseNo
mac_authentication_bypass_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
modeChoiceaccess, trunkYes
pae_enableBooleantrue, falseNo
pae_enable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
port_controlChoiceauto, force-authorized, force-unauthorizedNo
port_control_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
reauthenticationIntegermin: 1, max: 1073741823No
reauthentication_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
restricted_vlanIntegermin: 1, max: 4094No
restricted_vlan_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
speedChoice10, 100, 1000, 2500, 10000, 25000No
speed_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
trunk_allowed_vlansListInteger[min: 1, max: 4094]No
trunk_allowed_vlans_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
trunk_native_vlanIntegermin: 1, max: 4094No
trunk_native_vlan_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
voice_vlanIntegermin: 1, max: 4094No
voice_vlan_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

static_mac_addresses (sdwan.feature_profiles.service_profiles.switchport_features)

Section titled “static_mac_addresses (sdwan.feature_profiles.service_profiles.switchport_features)”
NameTypeConstraintMandatoryDefault Value
interface_nameStringRegex: (ATM|ATM-ACR|AppGigabitEthernet|AppNav-Compress|AppNav-UnCompress|Async|BD-VIF|BDI|CEM|CEM-ACR|Cellular|Dialer|Embedded-Service-Engine|Ethernet|Ethernet-Internal|FastEthernet|FiftyGigabitEthernet|FiveGigabitEthernet|FortyGigabitEthernet|FourHundredGigE|GMPLS|GigabitEthernet|Group-Async|HundredGigE|L2LISP|LISP|Loopback|MFR|Multilink|Port-channel|SM|Serial|Service-Engine|TenGigabitEthernet|Tunnel|TwentyFiveGigE|TwentyFiveGigabitEthernet|TwoGigabitEthernet|TwoHundredGigE|Vif|Virtual-PPP|Virtual-Template|VirtualPortGroup|Vlan|Wlan-GigabitEthernet|nat64|nat66|ntp|nve|ospfv3|overlay|pseudowire|ucse|vasileft|vasiright|vmi)([0-9]*(. ?[1-9][0-9]*)*|[0-9/]+|[0-9]+/[0-9]+/[0-9]+:[0-9]+|[0-9]+/[0-9]+/[0-9]+|[0-9]+/[0-9]+|[0-9]+)No
interface_name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
mac_addressStringRegex: ^([0-9A-Fa-f]{4}\.){2}([0-9A-Fa-f]{4})$No
mac_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No
vlan_idIntegermin: 1, max: 4094No
vlan_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,128}$No

Examples

Section titled “Examples”

Example-1: The example below demonstrates how to configure a service switchport feature with access mode interface and basic settings.

sdwan:
  feature_profiles:
    service_profiles:
      - name: service1
        switchport_features:
          - name: service_switchport_1
            description: Basic access port configuration
            age_out_time: 300
            interfaces:
              - name: GigabitEthernet0/0/1
                mode: access
                access_vlan: 100
                speed: 1000
                duplex: full

Example-2: The example below demonstrates how to configure a trunk port with VLAN ranges and 802.1X authentication.

sdwan:
  feature_profiles:
    service_profiles:
      - name: service1
        switchport_features:
          - name: service_switchport_2
            description: Trunk port with authentication
            interfaces:
              - name: GigabitEthernet0/0/2
                mode: trunk
                trunk_native_vlan: 1
                trunk_allowed_vlans:
                  - 10
                  - 20
                  - 30
                  - 500-600
                host_mode: multi-auth
                control_direction: both
                mac_authentication_bypass: true
                guest_vlan: 999
                critical_vlan: 998
                enable_voice: true
                voice_vlan: 300

Example-3: The example below demonstrates how to configure static MAC address bindings.

sdwan:
  feature_profiles:
    service_profiles:
      - name: service1
        switchport_features:
          - name: service_switchport_3
            description: Switchport with static MAC addresses
            interfaces:
              - name: GigabitEthernet0/0/3
                mode: access
                access_vlan: 150
            static_mac_addresses:
              - interface_name: GigabitEthernet0/0/3
                mac_address: 0102.0303.0402
                vlan_id: 150