Skip to main content
Cisco SD-WAN
Product Documentation
Viptela Documentation


vpn 0 interface tunnel-interface—Configure the interface to be a secure DTLS or TLS WAN transport connection (on vEdge routers, vManage NMSs, and vSmart controllers only). Configuring an interface to be a transport tunnel enables the flow of control and data traffic on the interface. On vEdge routers, it configures the interface's TLOC attributes, which are carried in the TLOC OMP routes that the vEdge router sends to the vSmart controllers in its domain. For the TLOC attributes on vEdge routers, you must configure, at a minimum, a color and an encapsulation type. These two attributes, along with the router's system IP address, are the 3-tuple that uniquely identify each TLOC.

Because tunnel interfaces connect to the WAN transport, they can be present only in VPN 0, so you can include the tunnel-interface command only when configuring VPN 0.

On vEdge routers, you can configure up to six tunnel interfaces (a combination of tunnel interfaces on both physical and loopback interfaces). On vSmart controllers, you can configure only one tunnel interface.

vManage Feature Template

For vEdge routers, vManage NMSs, and vSmart controllers only:

Configuration ► Templates ► VPN Interface Cellular (for vEdge cellular wireless routers only)
Configuration ► Templates ► VPN Interface Ethernet
Configuration ► Templates ► VPN Interface PPP

Command Hierarchy

vpn 0
  interface interface-name
      allow-service service-name
      bind interface-name (on vEdge routers only)
      carrier carrier-name
color color [restrict]
      encapsulation (gre | ipsec) (on vEdge routers only)
        preference number
        weight number
      exclude-controller-group-list number (on vEdge routers only)
      hello-interval milliseconds
      hello-tolerance seconds
      hold-time milliseconds (on vEdge routers only)
      last-resort-circuit (on vEdge routers only)
      low-bandwidth-link (on vEdge routers only)
      max-control-connections number (on vEdge routers only)
      nat-refresh-interval seconds
      vbond-as-stun-server (on vEdge routers only)
      vmanage-connection-preference number (on vEdge routers only)


The commands are explained separately.

Operational Commands

show control connections
show interface
show omp tlocs and show omp tlocs detail (to display configured preference and weight values)


Create a tunnel for LTE traffic:

vEdge(config)# vpn 0 interface ge0/0 tunnel-interface color lte
​vEdge(config-tunnel-interface)# preference 10
vEdge(config-tunnel-interface)# weight 10

Release Information

Command introduced in Viptela Software Release 14.1.​

Additional Information

See the Configuring Interfaces article for your software release.

  • Was this article helpful?