Access Port-Channel

The Access Port-Channel configuration allows to define the multiple attributes that an access port-channel or vPC can have.

Diagram

Classes

topology_switch_access_po_interface (vxlan.topology.switches.interfaces)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `(?i)^(po\|port-channel)([1-9]\|[1-9][0-9]{1,2}\|[1-3][0-9]{3}\|40[0-8][0-9]\|409[0-6])$`	Yes
mode	Choice	`access`	Yes
description	String	max: `256`	No	`NetAsCode Access PO Interface`
copy_description	Boolean	`true`, `false`	No	`false`
vpc_id	Integer	min: `1`, max: `4906`	No
mtu	Any	Integer[min: `1500`, max: `9216`] or Choice[`default`, `jumbo`]	No	`jumbo`
speed	String	Regex: `(?i)^(auto\|100mb\|1gb\|10gb\|25gb\|40gb\|100gb\|200gb\|400gb\|800gb)$`	No	`auto`
enabled	Boolean	`true`, `false`	No	`true`
enable_cdp	Boolean	`true`, `false`	No	`true`
spanning_tree_portfast	Boolean	`true`, `false`	No	`true`
enable_bpdu_guard	Boolean	`true`, `false`	No	`true`
pc_mode	Choice	`active`, `on`, `passive`	No	`active`
members	List	String[Regex: `(?i)^(?:e\|eth(?:ernet)?)\d(?:\/\d+){1,2}$`]	Yes
access_vlan	Integer	min: `1`, max: `4094`	No	`1`
duplex	Choice	`auto`, `full`, `half`	No	`auto`
orphan_port	Boolean	`true`, `false`	No	`false`
disable_lacp_suspend_individual	Boolean	`true`, `false`	No	`false`
enable_lacp_vpc_convergence	Boolean	`true`, `false`	No	`false`
lacp_port_priority	Integer	min: `1`, max: `65535`	No	`32768`
lacp_rate	Choice	`normal`, `fast`	No	`normal`
enable_qos	Boolean	`true`, `false`	No	`false`
qos_policy	String		No
queuing_policy	String		No
monitor	Boolean	`true`, `false`	No	`false`
freeform_config	String		No
enable_storm_control	Boolean	`true`, `false`	No	`false`
storm_control_action	Choice	`shutdown`, `trap`, `default`	No	`default`
storm_control_broadcast_level_percent	Number	min: `0.0`, max: `100.0`	No
storm_control_broadcast_level_pps	Integer	min: `0`, max: `200000000`	No
storm_control_multicast_level_percent	Number	min: `0.0`, max: `100.0`	No
storm_control_multicast_level_pps	Integer	min: `0`, max: `200000000`	No
storm_control_unicast_level_percent	Number	min: `0.0`, max: `100.0`	No
storm_control_unicast_level_pps	Integer	min: `0`, max: `200000000`	No

Storm Control

If you previously configured storm control via freeform_config, you must migrate to the storm control parameters using the same values and remove the storm control configuration from freeform_config to avoid conflicts.

You cannot configure both percentage-based (*_percent) and PPS-based (*_pps) thresholds on the same interface. Choose one method per interface.

Storm control prevents traffic storms on Layer 2 port-channels by limiting broadcast, multicast, and unicast traffic. The following parameters are supported:

Control Parameters:

enable_storm_control - Enable or disable storm control (boolean)
storm_control_action - Action when threshold is exceeded: shutdown, trap, or default

Percentage-based Thresholds (0.00-100.00%):

storm_control_broadcast_level_percent - Broadcast traffic threshold as percentage of bandwidth
storm_control_multicast_level_percent - Multicast traffic threshold as percentage of bandwidth
storm_control_unicast_level_percent - Unicast traffic threshold as percentage of bandwidth

PPS-based Thresholds (0-200000000 packets/sec):

storm_control_broadcast_level_pps - Broadcast traffic threshold in packets per second
storm_control_multicast_level_pps - Multicast traffic threshold in packets per second
storm_control_unicast_level_pps - Unicast traffic threshold in packets per second

Example 1 - Basic Access Port-Channel Configuration

This configuration creates a port-channel10 (vPC id: 10) and port-channel20 on dc1-leaf1 and dc1-leaf2:

Note that port-channel20 is not a VPC.

Interface port-channel10 is configured with VLAN 10, using interfaces Ethernet1/11 and Ethernet1/12 as member of the port-channel using LACP active mode. MTU set as Jumbo (9216), speed as auto, and spanning-tree portfast and BPDU guard enabled. This configuration is applied for both switches.
Interface port-channel20 on dc1-leaf1 is configured with VLAN 20, using interfaces Ethernet1/21 and Ethernet1/22 as member of the port-channel using LACP active mode. MTU set as default (1500), speed as auto, and spanning-tree portfast and BPDU guard enabled.
Interface port-channel20 on dc1-leaf2 is configured with VLAN 20, using interfaces Ethernet1/21 and Ethernet1/22 as member of the port-channel using LACP active mode. MTU set as default (1500), speed as auto, and spanning-tree portfast and BPDU guard enabled (BPDU Guard is using the default value).

vxlan:
  topology:
    switches:
      - name: dc1-leaf1
        interfaces:
          - name: port-channel10
            mode: access
            description: 'VPC Access Interface 1 Leaf 1'
            enabled: true
            pc_mode: active
            vpc_id: 10 # (VPC Port-channel)
            mtu: jumbo
            speed: auto
            access_vlan: 10
            spanning_tree_portfast: true
            enable_bpdu_guard: true
            members:
              - eth1/11
              - eth1/12
          - name: po20
            mode: access
            description: 'Port-channel Access Interface 1'
            enabled: true
            pc_mode: active
            mtu: default
            speed: auto
            access_vlan: 20
            spanning_tree_portfast: true
            enable_bpdu_guard: true
            members:
              - eth1/21
              - eth1/22
      - name: dc1-leaf2
        interfaces:
          - name: port-channel10
            mode: access
            description: 'VPC Access Interface 1 Leaf 2'
            enabled: true
            pc_mode: active
            vpc_id: 10 # (VPC Port-channel)
            mtu: jumbo
            speed: auto
            access_vlan: 10
            spanning_tree_portfast: true
            enable_bpdu_guard: true
            members:
              - eth1/11
              - eth1/12
          - name: po20
            mode: access
            description: 'Port-channel Access Interface 2'
            enabled: true
            pc_mode: active
            mtu: default
            speed: auto
            access_vlan: 20
            spanning_tree_portfast: true
            members:
              - eth1/21
              - eth1/22

Example 2 - Access Port-Channel with Storm Control

This configuration demonstrates storm control on an access vPC port-channel:

vxlan:
  topology:
    switches:
      - name: dc1-leaf1
        interfaces:
          - name: port-channel30
            mode: access
            description: 'VPC Access with Storm Control'
            pc_mode: active
            vpc_id: 30
            access_vlan: 100
            enable_storm_control: true
            storm_control_action: trap
            storm_control_broadcast_level_percent: 10.00
            storm_control_multicast_level_percent: 10.00
            members:
              - Ethernet1/30
              - Ethernet1/31