VPN-Interface-Ethernet

Configure an IPv4 address for the interface. For an interface in VPN 0, you can select Dynamic to set the interface as a DHCP client, to allow the interface to receive its IP address from a DHCP server. If you select Dynamic, you can set the DHCP distance to specify the administrative distance of routes learned from a DHCP server. The default administrative distance is 1.

Enter the IPv4 address of the interface if the interface is not receiving its IP address from a DHCP server.

Enter up to four IP addresses for DHCP servers in the network, separated by commas, to have the interface be a DHCP helper. A DHCP helper interface forwards BOOTP (Broadcast) DHCP requests that it receives from the specified DHCP servers.

Specify the maximum number of vSmart controllers that the WAN tunnel interface can connect to. To have the tunnel establish no control connections, set the number to 0.

Range: 0 through 8
Default: 2

Select the encapsulation type to use on the tunnel interface, either IPsec or GRE. The default is IPsec.

If you select both IPsec and GRE encapsulations, two TLOCs are created for the tunnel interface that have the same IP addresses and colors, but that differ by their encapsulation.

Specify a preference value for directing traffic to the tunnel. A higher value is preferred over a lower value.

Range: 0 through 4294967295
Default: 0

Enter a weight to use to balance traffic across multiple TLOCs. A higher value sends more traffic to the tunnel.

Range: 1 through 255
Default: 1

Select the carrier name or private network identifier to associate with the tunnel.

Values: carrier1, carrier2, carrier3, carrier4, carrier5, carrier6, carrier7, carrier8, default
Default: default

Enter the interval between Hello packets sent on a DTLS or TLS WAN transport connection.
Range: 100 through 10000 milliseconds
Default: 1000 milliseconds (1 second)

Enter the time to wait for a Hello packet on a DTLS or TLS WAN transport connection before declaring that transport tunnel to be down.

Range: 12 through 60 seconds
Default: 12 seconds

Enter a port number to define the port or first port in the range of interest.
Range: 0 through 65535

Select how NAT mappings are refreshed, either outbound or bidirectional (outbound and inbound).
Default: Outbound

Specify when NAT translations over UDP sessions time out.
Range: 1 through 65536 minutes
Default: 1 minutes

Specify when NAT translations over TCP sessions time out.
Range: 1 through 65536 minutes
Default: 60 minutes (1 hour)

Select On to block inbound ICMP error messages. By default, a vEdge router acting as a NAT device receives these error messages.
Default: Off

Enter the virtual router ID, which is a numeric identifier of the virtual router.
Range: 1 through 255

Enter the priority level of the router. There router with the highest priority is elected as master. If two vEdge routers have the same priority, the one with the higher IP address is elected as master.
Range: 1 through 254
Default: 100

Specify how often the VRRP master sends VRRP advertisement messages. If slave routers miss three consecutive VRRP advertisements, they elect a new master.
Range: 1 through 3600 seconds
Default: 1 second

By default, VRRP uses of the state of the service (LAN) interface on which it is running to determine which vEdge router is the master virtual router. if a vEdge router loses all its WAN control connections, the LAN interface still indicates that it is up even though the router is functionally unable to participate in VRRP. To take WAN side connectivity into account for VRRP, configure one of the following:

Track OMP—Click On for VRRP to track the Overlay Management Protocol (OMP) session running on the WAN connection. If the master VRRP router loses all its OMP sessions, VRRP elects a new default gateway from those that have at least one active OMP session.

Track Prefix List—Track both the OMP session and a list of remote prefixes, which is defined in a prefix list configured on the local router. If the master VRRP router loses all its OMP sessions, VRRP failover occurs as described for the Track OMP option. In addition, if reachability to one of the prefixes in the list is lost, VRRP failover occurs immediately, without waiting for the OMP hold timer to expire, thus minimizing the amount of overlay traffic is dropped while the vEdge routers determine the VRRP master.

Click On, and specify the name of the access list to apply to IPv4 packets being received on the interface.

Click On, and specify the name of the access list to apply to IPv6 packets being received on the interface.

Select how an 802.1x interface that is using wake on LAN handles packets from unauthorized clients:

• In and Out—Send and receive packets with unauthorized clients. This is the default
• In Only—Send but do not receive packets with unauthorized clients.

Select whether an 802.1x interface grants access to a single client or to multiple clients:

• Multi Auth—Grant access to one client on a voice VLAN and multiple clients on data VLANs.
• Multi Host—Grant access to multiple clients
• Single Host—Grant access only to the first authenticated client. This is the default.

Click Authentication, then click the plus sign (+) to configure RADIUS authentication attribute–value (AV) pairs to send to the RADIUS server during an 802.1x session.

To configure additional authentication AV pairs plus sign (+) again. To delete an AV pair, click the trash icon to the right side of the entry.

Click Accounting, then click the plus sign (+) to configure RADIUS accounting attribute–value (AV) pairs to send to the RADIUS server during an 802.1x session.

To configure additional authentication AV pairs click the plus sign (+) again. To delete an AV pair, click the trash icon to the right side of the entry.

Choose full or half to specify whether the interface runs in full-duplex or half-duplex mode.
Default: full

Select a setting for bidirectional flow control, which is a mechanism for temporarily stopping the transmission of data on the interface.
Values: autonet, both, egress, ingress, none
Default: autoneg

Specify the speed of the interface, for use when the remote end of the connection does not support autonegotiation.
Values: 10, 100, or 1000 Mbps
Default: Autonegotiate (10/100/1000 Mbps)

Click On to clear the Don't Fragment (DF) bit in the IPv4 packet header for packets being transmitted out the interface. When the DF bit is cleared, packets larger than that interface's MTU are fragmented before being sent.

Specify a queue number to use for incoming traffic.
Range: 0 through 7

Specify how long it takes for a dynamically learned ARP entry to time out.
Range: 0 through 2678400 seconds (744 hours)
Default: 1200 (20 minutes)