Skip to content

Access Ethernet Port

The Access Ethernet port configuration allows to define the multiple attributes that an access port can have.

Diagram

topology_switch_access_interface (vxlan.topology.switches.interfaces)

Section titled “topology_switch_access_interface (vxlan.topology.switches.interfaces)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^(?:e|eth(?:ernet)?)\d(?:\/\d+){1,2}$Yes
modeChoiceaccessYes
descriptionStringmax: 256NoNetAsCode Access Interface
mtuAnyInteger[min: 1500, max: 9216] or Choice[default, jumbo]Nojumbo
speedStringRegex: (?i)^(auto|100mb|1gb|10gb|25gb|40gb|100gb|200gb|400gb|800gb)$Noauto
enabledBooleantrue, falseNotrue
enable_cdpBooleantrue, falseNotrue
access_vlanIntegermin: 1, max: 4094No1
spanning_tree_portfastBooleantrue, falseNotrue
enable_bpdu_guardBooleantrue, falseNotrue
duplexChoiceauto, full, halfNoauto
orphan_portBooleantrue, falseNofalse
enable_qosBooleantrue, falseNofalse
qos_policyStringNo
queuing_policyStringNo
monitorBooleantrue, falseNofalse
freeform_configStringNo
fecChoiceauto, fc-fec, off, rs-cons16, rs-fec, rs-ieeeNoauto
enable_storm_controlBooleantrue, falseNofalse
storm_control_actionChoiceshutdown, trap, defaultNodefault
storm_control_broadcast_level_percentNumbermin: 0.0, max: 100.0No
storm_control_broadcast_level_ppsIntegermin: 0, max: 200000000No
storm_control_multicast_level_percentNumbermin: 0.0, max: 100.0No
storm_control_multicast_level_ppsIntegermin: 0, max: 200000000No
storm_control_unicast_level_percentNumbermin: 0.0, max: 100.0No
storm_control_unicast_level_ppsIntegermin: 0, max: 200000000No

If you previously configured FEC via freeform_config, you must migrate to the fec parameter using the same value and remove the FEC configuration from freeform_config to avoid conflicts.

Forward Error Correction (FEC) controls error correction on the physical interface. The following FEC modes are supported:

  • auto - Automatic FEC selection (default, not visible in show run)
  • fc-fec - FireCode FEC (also known as BASE-R or Clause 74)
  • off - FEC disabled
  • rs-cons16 - Reed-Solomon FEC Consortium 1.6
  • rs-fec - Reed-Solomon FEC (Clause 91 for 100G, Consortium 1.5 for 25G/50G)
  • rs-ieee - Reed-Solomon FEC IEEE standard

If you previously configured storm control via freeform_config, you must migrate to the storm control parameters using the same values and remove the storm control configuration from freeform_config to avoid conflicts.

You cannot configure both percentage-based (*_percent) and PPS-based (*_pps) thresholds on the same interface. Choose one method per interface.

Storm control prevents traffic storms on Layer 2 interfaces by limiting broadcast, multicast, and unicast traffic. The following parameters are supported:

Control Parameters:

  • enable_storm_control - Enable or disable storm control (boolean)
  • storm_control_action - Action when threshold is exceeded: shutdown, trap, or default

Percentage-based Thresholds (0.00-100.00%):

  • storm_control_broadcast_level_percent - Broadcast traffic threshold as percentage of bandwidth
  • storm_control_multicast_level_percent - Multicast traffic threshold as percentage of bandwidth
  • storm_control_unicast_level_percent - Unicast traffic threshold as percentage of bandwidth

PPS-based Thresholds (0-200000000 packets/sec):

  • storm_control_broadcast_level_pps - Broadcast traffic threshold in packets per second
  • storm_control_multicast_level_pps - Multicast traffic threshold in packets per second
  • storm_control_unicast_level_pps - Unicast traffic threshold in packets per second

Example 1 - Basic Access Interface Configuration

Section titled “Example 1 - Basic Access Interface Configuration”

This configuration creates one interface on switch dc1-leaf1 and two interfaces on dc1-leaf2:

  • Interface Ethernet1/11 on dc1-leaf1 is configured with VLAN 11, MTU set as default (1500), speed auto and spanning-tree portfast and BPDU guard enabled.
  • Interface Ethernet1/12 on dc1-leaf2 is configured with the default settings.
  • Interface Ethernet1/13 on dc1-leaf2 is configured with VLAN 13.
topology_interfaces.nac.yaml
vxlan:
topology:
switches:
- name: dc1-leaf1
interfaces:
- name: e1/11
mode: access
description: 'Access Interface 1'
enabled: true
mtu: default
speed: auto
access_vlan: 11
spanning_tree_portfast: true
enable_bpdu_guard: true
- name: dc1-leaf2
interfaces:
- name: ethernet1/12
mode: access
- name: eth1/13
mode: access
access_vlan: 13

Example 2 - FEC Configuration on 25G Interfaces

Section titled “Example 2 - FEC Configuration on 25G Interfaces”

This configuration demonstrates FEC on 25G interfaces:

  • Interface Ethernet1/1 with Reed-Solomon FEC
  • Interface Ethernet1/2 with FireCode FEC
  • Interface Ethernet1/3 with FEC disabled
topology_interfaces_fec.nac.yaml
vxlan:
topology:
switches:
- name: dc1-leaf1
interfaces:
- name: Ethernet1/1
mode: access
description: '25G Interface with RS-FEC'
speed: 25gb
fec: rs-fec
access_vlan: 100
- name: Ethernet1/2
mode: access
description: '25G Interface with FC-FEC'
speed: 25gb
fec: fc-fec
access_vlan: 100
- name: Ethernet1/3
mode: access
description: '25G Interface FEC off'
speed: 25gb
fec: "off"
access_vlan: 100

This configuration demonstrates storm control with both percentage-based and PPS-based thresholds:

topology_interfaces_storm.nac.yaml
vxlan:
topology:
switches:
- name: dc1-leaf1
interfaces:
- name: Ethernet1/10
mode: access
description: 'Access with percentage-based storm control'
access_vlan: 100
enable_storm_control: true
storm_control_action: trap
storm_control_broadcast_level_percent: 10.00
storm_control_multicast_level_percent: 10.00
storm_control_unicast_level_percent: 10.00
- name: Ethernet1/11
mode: access
description: 'Access with PPS-based storm control'
access_vlan: 100
enable_storm_control: true
storm_control_action: shutdown
storm_control_broadcast_level_pps: 1000000
storm_control_multicast_level_pps: 1000000
storm_control_unicast_level_pps: 1000000

The Access Ethernet port configuration allows to define the multiple attributes that an access port can have.

Diagram

topology_switch_access_interface (vxlan.topology.switches.interfaces)

Section titled “topology_switch_access_interface (vxlan.topology.switches.interfaces)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^(?:e|eth(?:ernet)?)\d(?:\/\d+){1,2}$Yes
modeChoiceaccessYes
descriptionStringmax: 256NoNetAsCode Access Interface
mtuAnyInteger[min: 1500, max: 9216] or Choice[default, jumbo]Nojumbo
speedStringRegex: (?i)^(auto|100mb|1gb|10gb|25gb|40gb|100gb|200gb|400gb|800gb)$Noauto
enabledBooleantrue, falseNotrue
access_vlanIntegermin: 1, max: 4094No1
spanning_tree_portfastBooleantrue, falseNotrue
enable_bpdu_guardBooleantrue, falseNotrue
duplexChoiceauto, full, halfNoauto
orphan_portBooleantrue, falseNofalse
enable_qosBooleantrue, falseNofalse
qos_policyStringNo
queuing_policyStringNo
monitorBooleantrue, falseNofalse
freeform_configStringNo

This configuration creates one interface on switch dc1-leaf1 and two interfaces on dc1-leaf2:

  • Interface Ethernet1/11 on dc1-leaf1 is configured with VLAN 11, MTU set as default (1500), speed auto and spanning-tree portfast and BPDU guard enabled.
  • Interface Ethernet1/12 on dc1-leaf2 is configured with the default settings.
  • Interface Ethernet1/13 on dc1-leaf2 is configured with VLAN 13.
topology_interfaces.nac.yaml
vxlan:
topology:
switches:
- name: dc1-leaf1
interfaces:
- name: e1/11
mode: access
description: 'Access Interface 1'
enabled: true
mtu: default
speed: auto
access_vlan: 11
spanning_tree_portfast: true
enable_bpdu_guard: true
- name: dc1-leaf2
interfaces:
- name: ethernet1/12
mode: access
- name: eth1/13
mode: access
access_vlan: 13