VPN-Interface-PPP

Navigate to the Template Screen

1. In vManage NMS, select the Configuration ► Templates screen.
2. From the Templates title bar, select Feature.
3. Click Add Template.
4. In the left pane, select one or more devices. The right pane displays the available templates for the selected devices.
5. Select the VPN-Interface-PPP template.

The right pane displays the VPN-Interface-PPP template form:

• The top of the form contains fields for naming the template.
• The bottom contains fields for defining parameters applicable to that template.
• A drop-down menu to the left of each parameter field defines the scope of the parameter. When you first open a feature template form, for each parameter that has a default value, the scope is set to Default. To edit a parameter field, change the scope to Global or Device Specific. Note that if a parameter's scope is Device Specific, you cannot enter a value for it in the feature template. Instead, you enter a value when you attach the template to a device.
• A plus sign (+) is displayed to the right when you can add multiple entries for the same parameter.

Minimum PPP Virtual Interface Configuration

The following parameters are required (unless otherwise indicated) to create a PPP virtual interface on a vEdge router:

CLI equivalent:

vpn 0
  interface pppnumber
    banddwidth-downstream kbps
    bandwidth-upstream kbps
    ppp
      authentication 
        chap hostname name password password
        pap password password sent-username name
      [no] shutdown

​Configure the Access Concentrator Name

To configure the access concentrator name, select the PPP tab:

CLI equivalent:

vpn 0
  interface pppnumber
    ppp
      ac-name name

Create a Tunnel Interface

On vEdge routers, you can configure up to four tunnel interfaces. This means that each vEdge router can have up to four TLOCs.

For the control plane to establish itself so that the overlay network can function, you must configure WAN transport interfaces in VPN 0.

To configure a tunnel interface, select the Tunnel Interface tab:

To configure additional tunnel interface parameters, click Advanced Options:

CLI equivalent:

vpn 0
  interface interface-name
    tunnel-interface
      allow-service service-name
      bind interface-name
      carrier carrier-name
   ​   color color
      encapsulation (gre | ipsec)
        preference number
        weight number
      hello-interval milliseconds
      hello-tolerance seconds
      last-resort-circuit
      max-control-connections number
      nat-refresh-interval seconds
      vbond-as-stun-server

Configure the Interface as a NAT Device

To configure an interface to act as a NAT device, select the NAT tab, click On, and click the plus sign (+) to add a port forwarding rule:

To configure other NAT parameters, click Advanced Options:

CLI equivalent:

vpn vpn-id
  interface interface-name
    nat
      block-icmp-error
      port-forward port-start port-number1 port-end port-number2 proto (tcp | udp) 
        private-ip-address ip-address private-vpn vpn-id
      refresh (bi-directional | outbound)
      respond-to-ping
      tcp-timeout minutes
      udp-timeout minutes

Apply Access Lists

To apply a rewrite rule, access lists, and policers to a router interface, select the ACL tab:

CLI equivalent:

vpn 0
  interface pppnumber
    access-list acl-name (in | out)
    ipv6 access-list acl-name (in | out)
    policer policer-name (in |out)
    rewrite-rule name

Configure Other Interface Properties​

To configure other interface properties, select the Advanced tab:

CLI equivalent:

vpn vpn-id 
  interface interface-name
    clear-dont-fragment
    mac-address mac-address    
    mtu bytes 
    tcp-mss-adjust bytes
    tloc-extension interface-name

Release Information

Introduced in vManage NMS in Release 15.3.
In Release 16.3, add support for IPv6.