Access Ethernet Port

The Access Ethernet port configuration allows to define the multiple attributes that an access port can have.

Diagram

Classes

vxlan

Name	Type	Constraint	Mandatory	Default Value
topology	Class	topology	No

topology (vxlan)

Name	Type	Constraint	Mandatory	Default Value
switches	List	switches	No

switches (vxlan.topology)

Name	Type	Constraint	Mandatory	Default Value
interfaces	List	Any[Class[topology_switch_access_interface] or Class[`[topology_switch_trunk_interface]`] or Class[`[topology_switch_access_po_interface]`] or Class[`[topology_switch_trunk_po_interface]`] or Class[`[topology_switch_routed_interface]`] or Class[`[topology_switch_routed_sub_interface]`] or Class[`[topology_switch_routed_po_interface]`] or Class[`[topology_switch_loopback_interface]`] or Class[`[topology_switch_dot1q_host_interface]`]]	No

topology_switch_access_interface (vxlan.topology.switches.interfaces)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^(?:e\|eth(?:ernet)?)\d(?:\/\d+){1,2}$`	Yes
mode	Choice	`access`	Yes
description	String	max: `256`	No	`NetAsCode Access Interface`
mtu	Any	Integer[min: `1500`, max: `9216`] or Choice[`default`, `jumbo`]	No	`jumbo`
speed	String	Regex: `(?i)^(auto\|100mb\|1gb\|10gb\|25gb\|40gb\|100gb\|200gb\|400gb\|800gb)$`	No	`auto`
enabled	Boolean	`true`, `false`	No	`true`
enable_cdp	Boolean	`true`, `false`	No	`true`
access_vlan	Integer	min: `1`, max: `4094`	No	`1`
spanning_tree_portfast	Boolean	`true`, `false`	No	`true`
enable_bpdu_guard	Boolean	`true`, `false`	No	`true`
duplex	Choice	`auto`, `full`, `half`	No	`auto`
orphan_port	Boolean	`true`, `false`	No	`false`
enable_qos	Boolean	`true`, `false`	No	`false`
qos_policy	String		No
queuing_policy	String		No
monitor	Boolean	`true`, `false`	No	`false`
freeform_config	String		No
fec	Choice	`auto`, `fc-fec`, `off`, `rs-cons16`, `rs-fec`, `rs-ieee`	No	`auto`
enable_storm_control	Boolean	`true`, `false`	No	`false`
storm_control_action	Choice	`shutdown`, `trap`, `default`	No	`default`
storm_control_broadcast_level_percent	Number	min: `0.0`, max: `100.0`	No
storm_control_broadcast_level_pps	Integer	min: `0`, max: `200000000`	No
storm_control_multicast_level_percent	Number	min: `0.0`, max: `100.0`	No
storm_control_multicast_level_pps	Integer	min: `0`, max: `200000000`	No
storm_control_unicast_level_percent	Number	min: `0.0`, max: `100.0`	No
storm_control_unicast_level_pps	Integer	min: `0`, max: `200000000`	No

topology_switch_access_interface (vxlan.topology.switches.interfaces)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^(?:e\|eth(?:ernet)?)\d(?:\/\d+){1,2}$`	Yes
mode	Choice	`access`	Yes
description	String	max: `256`	No	`NetAsCode Access Interface`
mtu	Any	Integer[min: `1500`, max: `9216`] or Choice[`default`, `jumbo`]	No	`jumbo`
speed	String	Regex: `(?i)^(auto\|100mb\|1gb\|10gb\|25gb\|40gb\|100gb\|200gb\|400gb\|800gb)$`	No	`auto`
enabled	Boolean	`true`, `false`	No	`true`
access_vlan	Integer	min: `1`, max: `4094`	No	`1`
spanning_tree_portfast	Boolean	`true`, `false`	No	`true`
enable_bpdu_guard	Boolean	`true`, `false`	No	`true`
duplex	Choice	`auto`, `full`, `half`	No	`auto`
orphan_port	Boolean	`true`, `false`	No	`false`
enable_qos	Boolean	`true`, `false`	No	`false`
qos_policy	String		No
queuing_policy	String		No
monitor	Boolean	`true`, `false`	No	`false`
freeform_config	String		No

Forward Error Correction (FEC)

If you previously configured FEC via freeform_config, you must migrate to the fec parameter using the same value and remove the FEC configuration from freeform_config to avoid conflicts.

Forward Error Correction (FEC) controls error correction on the physical interface. The following FEC modes are supported:

auto - Automatic FEC selection (default, not visible in show run)
fc-fec - FireCode FEC (also known as BASE-R or Clause 74)
off - FEC disabled
rs-cons16 - Reed-Solomon FEC Consortium 1.6
rs-fec - Reed-Solomon FEC (Clause 91 for 100G, Consortium 1.5 for 25G/50G)
rs-ieee - Reed-Solomon FEC IEEE standard

Storm Control

If you previously configured storm control via freeform_config, you must migrate to the storm control parameters using the same values and remove the storm control configuration from freeform_config to avoid conflicts.

You cannot configure both percentage-based (*_percent) and PPS-based (*_pps) thresholds on the same interface. Choose one method per interface.

Storm control prevents traffic storms on Layer 2 interfaces by limiting broadcast, multicast, and unicast traffic. The following parameters are supported:

Control Parameters:

enable_storm_control - Enable or disable storm control (boolean)
storm_control_action - Action when threshold is exceeded: shutdown, trap, or default

Percentage-based Thresholds (0.00-100.00%):

storm_control_broadcast_level_percent - Broadcast traffic threshold as percentage of bandwidth
storm_control_multicast_level_percent - Multicast traffic threshold as percentage of bandwidth
storm_control_unicast_level_percent - Unicast traffic threshold as percentage of bandwidth

PPS-based Thresholds (0-200000000 packets/sec):

storm_control_broadcast_level_pps - Broadcast traffic threshold in packets per second
storm_control_multicast_level_pps - Multicast traffic threshold in packets per second
storm_control_unicast_level_pps - Unicast traffic threshold in packets per second

Example 1 - Basic Access Interface Configuration

This configuration creates one interface on switch dc1-leaf1 and two interfaces on dc1-leaf2:

Interface Ethernet1/11 on dc1-leaf1 is configured with VLAN 11, MTU set as default (1500), speed auto and spanning-tree portfast and BPDU guard enabled.
Interface Ethernet1/12 on dc1-leaf2 is configured with the default settings.
Interface Ethernet1/13 on dc1-leaf2 is configured with VLAN 13.

vxlan:
  topology:
    switches:
      - name: dc1-leaf1
        interfaces:
          - name: e1/11
            mode: access
            description: 'Access Interface 1'
            enabled: true
            mtu: default
            speed: auto
            access_vlan: 11
            spanning_tree_portfast: true
            enable_bpdu_guard: true
      - name: dc1-leaf2
        interfaces:
          - name: ethernet1/12
            mode: access
          - name: eth1/13
            mode: access
            access_vlan: 13

Example 2 - FEC Configuration on 25G Interfaces

This configuration demonstrates FEC on 25G interfaces:

Interface Ethernet1/1 with Reed-Solomon FEC
Interface Ethernet1/2 with FireCode FEC
Interface Ethernet1/3 with FEC disabled

vxlan:
  topology:
    switches:
      - name: dc1-leaf1
        interfaces:
          - name: Ethernet1/1
            mode: access
            description: '25G Interface with RS-FEC'
            speed: 25gb
            fec: rs-fec
            access_vlan: 100
          - name: Ethernet1/2
            mode: access
            description: '25G Interface with FC-FEC'
            speed: 25gb
            fec: fc-fec
            access_vlan: 100
          - name: Ethernet1/3
            mode: access
            description: '25G Interface FEC off'
            speed: 25gb
            fec: "off"
            access_vlan: 100

Example 3 - Storm Control Configuration

This configuration demonstrates storm control with both percentage-based and PPS-based thresholds:

vxlan:
  topology:
    switches:
      - name: dc1-leaf1
        interfaces:
          - name: Ethernet1/10
            mode: access
            description: 'Access with percentage-based storm control'
            access_vlan: 100
            enable_storm_control: true
            storm_control_action: trap
            storm_control_broadcast_level_percent: 10.00
            storm_control_multicast_level_percent: 10.00
            storm_control_unicast_level_percent: 10.00
          - name: Ethernet1/11
            mode: access
            description: 'Access with PPS-based storm control'
            access_vlan: 100
            enable_storm_control: true
            storm_control_action: shutdown
            storm_control_broadcast_level_pps: 1000000
            storm_control_multicast_level_pps: 1000000
            storm_control_unicast_level_pps: 1000000

Example

This configuration creates one interface on switch dc1-leaf1 and two interfaces on dc1-leaf2:

Interface Ethernet1/11 on dc1-leaf1 is configured with VLAN 11, MTU set as default (1500), speed auto and spanning-tree portfast and BPDU guard enabled.
Interface Ethernet1/12 on dc1-leaf2 is configured with the default settings.
Interface Ethernet1/13 on dc1-leaf2 is configured with VLAN 13.

vxlan:
  topology:
    switches:
      - name: dc1-leaf1
        interfaces:
          - name: e1/11
            mode: access
            description: 'Access Interface 1'
            enabled: true
            mtu: default
            speed: auto
            access_vlan: 11
            spanning_tree_portfast: true
            enable_bpdu_guard: true
      - name: dc1-leaf2
        interfaces:
          - name: ethernet1/12
            mode: access
          - name: eth1/13
            mode: access
            access_vlan: 13