Skip to content
Network as Code

Transport WAN VPN Feature

Add WAN VPN configuration, including DNS servers, NAT, IPv4 or IPv6 static routes and service routes.

Diagram

Section titled “Diagram”
Diagram

Classes

Section titled “Classes”

transport_profiles (sdwan.feature_profiles)

Section titled “transport_profiles (sdwan.feature_profiles)”
NameTypeConstraintMandatoryDefault Value
wan_vpnClass[wan_vpn]No

wan_vpn (sdwan.feature_profiles.transport_profiles)

Section titled “wan_vpn (sdwan.feature_profiles.transport_profiles)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Nowan_vpn
descriptionStringNo
bgpStringRegex: ^[^&<>! "]{1,128}$No
enhance_ecmp_keyingBooleantrue, falseNo
enhance_ecmp_keying_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ethernet_interfacesList[ethernet_interfaces]No
host_mappingsList[host_mappings]No
ipv4_primary_dns_addressIPNo
ipv4_primary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_secondary_dns_addressIPNo
ipv4_secondary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_static_routesList[ipv4_static_routes]No
ipv6_primary_dns_addressIPNo
ipv6_primary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_secondary_dns_addressIPNo
ipv6_secondary_dns_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_static_routesList[ipv6_static_routes]No
nat_64_v4_poolsList[nat_64_v4_pools]No
ospfStringRegex: ^[^&<>! "]{1,128}$No
servicesListChoice[te]No

ethernet_interfaces (sdwan.feature_profiles.transport_profiles.wan_vpn)

Section titled “ethernet_interfaces (sdwan.feature_profiles.transport_profiles.wan_vpn)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$Yes
descriptionStringNo
adaptive_qosBooleantrue, falseNo
adaptive_qos_periodIntegermin: 1, max: 720No
adaptive_qos_period_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
adaptive_qos_shaping_rate_downstreamClass[adaptive_qos_shaping_rate_downstream]No
adaptive_qos_shaping_rate_upstreamClass[adaptive_qos_shaping_rate_upstream]No
arp_entriesList[arp_entries]No
arp_timeoutIntegermin: 0, max: 2147483No
arp_timeout_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
auto_detect_bandwidthBooleantrue, falseNo
auto_detect_bandwidth_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
autonegotiateBooleantrue, falseNo
autonegotiate_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
bandwidth_downstreamIntegermin: 1, max: 2147483647No
bandwidth_downstream_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
bandwidth_upstreamIntegermin: 1, max: 2147483647No
bandwidth_upstream_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
block_non_source_ipBooleantrue, falseNo
block_non_source_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
duplexChoicefull, half, autoNo
duplex_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gre_tloc_extension_source_ipIPNo
gre_tloc_extension_source_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gre_tloc_extension_xconnectStringNo
gre_tloc_extension_xconnect_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
icmp_redirect_disableBooleantrue, falseNo
icmp_redirect_disable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_descriptionStringmax: 200No
interface_description_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_mtuIntegermin: 1500, max: 9216No
interface_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
interface_nameStringRegex: (ATM|ATM-ACR|AppGigabitEthernet|AppNav-Compress|AppNav-UnCompress|Async|BD-VIF|BDI|CEM|CEM-ACR|Cellular|Dialer|Embedded-Service-Engine|Ethernet|Ethernet-Internal|FastEthernet|FiftyGigabitEthernet|FiveGigabitEthernet|FortyGigabitEthernet|FourHundredGigE|GMPLS|GigabitEthernet|Group-Async|HundredGigE|L2LISP|LISP|Loopback|MFR|Multilink|Port-channel|SM|Serial|Service-Engine|TenGigabitEthernet|Tunnel|TwentyFiveGigE|TwentyFiveGigabitEthernet|TwoGigabitEthernet|TwoHundredGigE|Vif|Virtual-PPP|Virtual-Template|VirtualPortGroup|Vlan|Wlan-GigabitEthernet|nat64|nat66|ntp|nve|ospfv3|overlay|pseudowire|ucse|vasileft|vasiright|vmi)([0-9]*(. ?[1-9][0-9]*)*|[0-9/]+|[0-9]+/[0-9]+/[0-9]+:[0-9]+|[0-9]+/[0-9]+/[0-9]+|[0-9]+/[0-9]+|[0-9]+)No
interface_name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
iperf_serverStringNo
iperf_server_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ip_directed_broadcastBooleantrue, falseNo
ip_directed_broadcast_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ip_mtuIntegermin: 576, max: 9216No
ip_mtu_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_addressIPNo
ipv4_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_configuration_typeChoicedynamic, staticNostatic
ipv4_dhcp_distanceIntegermin: 1, max: 255No
ipv4_dhcp_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_dhcp_helpersListIPNo
ipv4_dhcp_helpers_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_egress_aclStringNo
ipv4_ingress_aclStringNo
ipv4_natBooleantrue, falseNo
ipv4_nat_typeChoiceinterface, pool, loopbackNo
ipv4_nat_type_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_loopback_interfaceStringNo
ipv4_nat_loopback_interface_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_pool_overloadBooleantrue, falseNo
ipv4_nat_pool_overload_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_pool_prefix_lengthIntegermin: 1, max: 32No
ipv4_nat_pool_prefix_length_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_pool_range_endIPNo
ipv4_nat_pool_range_end_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_pool_range_startIPNo
ipv4_nat_pool_range_start_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_static_entriesList[ipv4_nat_static_entries]No
ipv4_nat_tcp_timeoutIntegermin: 1, max: 8947No
ipv4_nat_tcp_timeout_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_nat_udp_timeoutIntegermin: 1, max: 8947No
ipv4_nat_udp_timeout_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_secondary_addressesList[ipv4_secondary_addresses]No
ipv4_subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
ipv4_subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_trackerStringRegex: ^[^&<>! "]{1,128}$No
ipv4_tracker_groupStringRegex: ^[^&<>! "]{1,128}$No
ipv6_configuration_typeChoicedynamic, static, noneNonone
ipv6_addressIPNo
ipv6_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv6_egress_aclStringNo
ipv6_ingress_aclStringNo
ipv6_natBooleantrue, falseNo
ipv6_nat_typeChoicenat64, nat66No
ipv6_nat66_static_entriesList[ipv6_nat66_static_entries]No
ipv6_secondary_addressesList[ipv6_secondary_addresses]No
ipv6_trackerStringRegex: ^[^&<>! "]{1,128}$No
ipv6_tracker_groupStringRegex: ^[^&<>! "]{1,128}$No
load_intervalIntegermin: 30, max: 600No
load_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
media_typeChoiceauto-select, rj45, sfpNo
media_type_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
service_providerStringNo
service_provider_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
speedChoice10, 100, 1000, 2500, 10000No
speed_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
shaping_rateIntegermin: 8, max: 100000000No
shaping_rate_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tcp_mssIntegermin: 500, max: 1460No
tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tloc_extensionStringNo
tloc_extension_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tunnel_interfaceClass[tunnel_interface]No

host_mappings (sdwan.feature_profiles.transport_profiles.wan_vpn)

Section titled “host_mappings (sdwan.feature_profiles.transport_profiles.wan_vpn)”
NameTypeConstraintMandatoryDefault Value
hostnameStringmin: 1, max: 32No
hostname_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipsListIPNo
ips_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv4_static_routes (sdwan.feature_profiles.transport_profiles.wan_vpn)

Section titled “ipv4_static_routes (sdwan.feature_profiles.transport_profiles.wan_vpn)”
NameTypeConstraintMandatoryDefault Value
administrative_distanceIntegermin: 1, max: 255No
administrative_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gatewayChoicenexthop, dhcp, null0Nonexthop
network_addressIPNo
network_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
next_hopsList[next_hops]No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_static_routes (sdwan.feature_profiles.transport_profiles.wan_vpn)

Section titled “ipv6_static_routes (sdwan.feature_profiles.transport_profiles.wan_vpn)”
NameTypeConstraintMandatoryDefault Value
gatewayChoicenexthop, nat, null0Nonexthop
natChoicenat64, nat66No
next_hopsList[next_hops]No
prefixStringRegex: ((^\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*(\/)(\b([0-9]{1,2}|1[01][0-9]|12[0-8])\b)$))No
prefix_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

nat_64_v4_pools (sdwan.feature_profiles.transport_profiles.wan_vpn)

Section titled “nat_64_v4_pools (sdwan.feature_profiles.transport_profiles.wan_vpn)”
NameTypeConstraintMandatoryDefault Value
nameStringmin: 1, max: 32No
name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
overloadBooleantrue, falseNo
overload_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
range_endIPNo
range_end_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
range_startIPNo
range_start_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

adaptive_qos_shaping_rate_downstream (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “adaptive_qos_shaping_rate_downstream (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
defaultIntegermin: 8, max: 100000000No
default_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
maximumIntegermin: 8, max: 100000000No
maximum_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
minimumIntegermin: 8, max: 100000000No
minimum_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

adaptive_qos_shaping_rate_upstream (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “adaptive_qos_shaping_rate_upstream (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
defaultIntegermin: 8, max: 100000000No
default_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
maximumIntegermin: 8, max: 100000000No
maximum_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
minimumIntegermin: 8, max: 100000000No
minimum_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

arp_entries (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “arp_entries (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
ip_addressIPNo
ip_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
mac_addressStringRegex: ^(([a-fA-F\d]{2}:){5}[a-fA-F\d]{2})$No
mac_address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv4_nat_static_entries (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “ipv4_nat_static_entries (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
directionChoiceinside, outsideNo
source_ipIPNo
source_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
source_vpn_idIntegermin: 0, max: 65530No
source_vpn_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
translate_ipIPNo
translate_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv4_secondary_addresses (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “ipv4_secondary_addresses (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
subnet_maskChoice255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0No
subnet_mask_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_nat66_static_entries (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “ipv6_nat66_static_entries (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
source_prefixStringRegex: ((^\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*(\/)(\b([0-9]{1,2}|1[01][0-9]|12[0-8])\b)$))No
source_prefix_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
source_vpn_idIntegermin: 0, max: 65530No
source_vpn_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
translate_prefixStringRegex: ((^\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*(\/)(\b([0-9]{1,2}|1[01][0-9]|12[0-8])\b)$))No
translate_prefix_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_secondary_addresses (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “ipv6_secondary_addresses (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

tunnel_interface (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)

Section titled “tunnel_interface (sdwan.feature_profiles.transport_profiles.wan_vpn.ethernet_interfaces)”
NameTypeConstraintMandatoryDefault Value
allow_service_allBooleantrue, falseNo
allow_service_all_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_bfdBooleantrue, falseNo
allow_service_bfd_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_bgpBooleantrue, falseNo
allow_service_bgp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_dhcpBooleantrue, falseNo
allow_service_dhcp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_dnsBooleantrue, falseNo
allow_service_dns_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_httpsBooleantrue, falseNo
allow_service_https_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_icmpBooleantrue, falseNo
allow_service_icmp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_netconfBooleantrue, falseNo
allow_service_netconf_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_ntpBooleantrue, falseNo
allow_service_ntp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_ospfBooleantrue, falseNo
allow_service_ospf_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_snmpBooleantrue, falseNo
allow_service_snmp_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_sshBooleantrue, falseNo
allow_service_ssh_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
allow_service_stunBooleantrue, falseNo
allow_service_stun_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
bind_loopback_tunnelStringmin: 1, max: 32No
bind_loopback_tunnel_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
borderBooleantrue, falseNo
border_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
carrierChoicedefault, carrier1, carrier2, carrier3, carrier4, carrier5, carrier6, carrier7, carrier8No
carrier_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
clear_dont_fragmentBooleantrue, falseNo
clear_dont_fragment_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
colorChoice3g, biz-internet, blue, bronze, custom1, custom2, custom3, default, gold, green, lte, metro-ethernet, mpls, public-internet, private1, private2, private3, private4, private5, private6, red, silverNo
color_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
cts_sgt_propagationBooleantrue, falseNo
cts_sgt_propagation_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
exclude_controller_groupsListInteger[min: 0, max: 100]No
exclude_controller_groups_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gre_encapsulationBooleantrue, falseNo
gre_preferenceIntegermin: 0, max: 4294967295No
gre_preference_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gre_tunnel_destination_ipIPNo
gre_tunnel_destination_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
gre_weightIntegermin: 1, max: 255No
gre_weight_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
groupIntegermin: 1, max: 4294967295No
group_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
hello_intervalIntegermin: 100, max: 600000No
hello_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
hello_toleranceIntegermin: 12, max: 6000No
hello_tolerance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipsec_encapsulationBooleantrue, falseNotrue
ipsec_preferenceIntegermin: 0, max: 4294967295No
ipsec_preference_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipsec_weightIntegermin: 1, max: 255No
ipsec_weight_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
last_resort_circuitBooleantrue, falseNo
last_resort_circuit_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
low_bandwidth_linkBooleantrue, falseNo
low_bandwidth_link_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
max_control_connectionsIntegermin: 0, max: 100No
max_control_connections_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
nat_refresh_intervalIntegermin: 1, max: 60No
nat_refresh_interval_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
network_broadcastBooleantrue, falseNo
network_broadcast_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
per_tunnel_qosBooleantrue, falseNo
per_tunnel_qos_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
per_tunnel_qos_bandwidth_percentIntegermin: 1, max: 100No
per_tunnel_qos_bandwidth_percent_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
per_tunnel_qos_modeChoicehub, spokeNo
per_tunnel_qos_mode_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
port_hopBooleantrue, falseNo
port_hop_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
restrictBooleantrue, falseNo
restrict_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tcp_mssIntegermin: 500, max: 1460No
tcp_mss_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
vbond_as_stun_serverBooleantrue, falseNo
vbond_as_stun_server_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
vmanage_connection_preferenceIntegermin: 0, max: 8No
vmanage_connection_preference_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

next_hops (sdwan.feature_profiles.transport_profiles.wan_vpn.ipv4_static_routes)

Section titled “next_hops (sdwan.feature_profiles.transport_profiles.wan_vpn.ipv4_static_routes)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
administrative_distanceIntegermin: 1, max: 255No
administrative_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

next_hops (sdwan.feature_profiles.transport_profiles.wan_vpn.ipv6_static_routes)

Section titled “next_hops (sdwan.feature_profiles.transport_profiles.wan_vpn.ipv6_static_routes)”
NameTypeConstraintMandatoryDefault Value
addressIPNo
address_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
administrative_distanceIntegermin: 1, max: 255No
administrative_distance_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

Examples

Section titled “Examples”

Example-1: This example demonstrates how to configure a WAN VPN feature under a transport profile. It configures the static host mapping for the “vbond.local” FQDN and maps it to two IP addresses. It also specifies the IPv4 primary and secondary addresses as variables (these will need to be filled when deploying the configuration to a device that uses the configuration group with this profile). It defines a static default route with two next hops configured as variables. Additionally, it enables enhanced ECMP keying and the Traffic Engineering (TE) service.

sdwan:
  feature_profiles:
    transport_profiles:
      - name: transport
        description: this is a test transport profile
        wan_vpn:
          name: wan_vpn
          description: VPN 0 configuration
          host_mappings:
            - hostname: vbond.local
              ips:
                - 10.0.0.1
                - 10.0.0.2
          ipv4_primary_dns_address_variable: vpn0_dns_primary
          ipv4_secondary_dns_address_variable: vpn0_dns_secondary
          enhance_ecmp_keying: true
          ipv4_static_routes:
            - network_address: 0.0.0.0
              subnet_mask: 0.0.0.0
              next_hops:
                - address_variable: vpn0_ipv4_default_route_nexthop1_ip
                - address_variable: vpn0_ipv4_default_route_nexthop2_ip
          services:
            - te