Workload VPN intent modification

If you have not yet deployed a workload VPN intent, you can freely modify its design.

If you have already deployed a workload VPN intent, you must create a new candidate version of the workload VPN intent before you can modify it. When you have updated the new design, you can deploy it to replace the previously deployed version.

You can also delete a workload VPN intent.

Editing a workload VPN intent

  1. Click the main menu and select Workload VPN intents.
  2. Use the Region Selector at the top of the page to select the region containing a workload VPN intent.
  3. Double-click the saved workload VPN intent that you want to edit.
  4. From the view drop-down list, select the element that you want to edit.
    You can edit the following settings for a workload intent:
    • Basic parameters
    • Participating fabric intents
    • Subnets and their attributes
    • Sub-interfaces and their attributes
    • Routers and their attributes
    • Routing attributes for BGP, static and aggregate routes
  5. When you are finished editing parameters, click to save the new configuration.
  6. Click GENERATE WORKLOAD.
    The system generates updated configuration data for the nodes involved in the workload VPN intent and advances the workload State to Configuration Generated. The workload version increments.

Creating a new version of a workload VPN intent

Follow this procedure to create a new candidate version of an already-deployed workload VPN intent.
  1. Click the main menu and select Workload VPN intents.
  2. Use the Region Selector at the top of the page to select the region containing a workload VPN intent.
  3. Double-click a saved workload VPN intent to open it.
  4. Click the menu at the upper right of the page.
  5. Click Create Candidate Version from the drop-down list.
    The system creates a new, editable version of the current workload VPN intent, and the version number in the left panel is incremented to the next available number. You can now edit the workload VPN intent's parameters and save the result without affecting the original version.
  6. When you are satisfied with the new design, click Generate to generate a new workload VPN intent diagram and its associated configuration code.
  7. At any time before deploying the new version, you can discard it and revert to the previously deployed version by doing the following:
    1. Click the More actions icon ( ) in the Workload Design view.
    2. Select Discard Changes.
    3. Click OK.
    The system discards the changes and reverts the display to the previous version of the workload VPN intent. If you discarded changes for the initial version of a workload VPN intent that was never deployed, the workload VPN intent is deleted entirely.

Updating a group of sub-interfaces by label reference

If you want to update information for a group of sub-interfaces in a workload VPN intent, you can make bulk updates to items assigned the same label. For example, when a series of edge link ports are identified with the same "Edge-Link" key type label, you can update the description field for each of the participating ports in one action, instead of updating the description field for each port individually.
Note: Do not delete auto-generated interfaces manually. Instead, use label manager to remove the label from the sub-interface; for instructions, see Removing a label assigned to a specific sub-interface.

To update a group of sub-interfaces:

  1. Open the workload VPN intent in which the "Edge-Link" label is applied to the sub-interfaces.
  2. In the view drop-down list, click Sub-interfaces.
  3. Click EDIT BY LABEL.
  4. In the form, select to specify the label to edit. The Label Picker form opens.
  5. In the Label Picker, do the following:
    1. Locate the "Edge-Link" label you created to identify the set of edge link ports in question.
    2. Click the from the left end of the row beside the label.
    3. Click SELECT to close the Label Picker form. You return to the Edit Sub-Interfaces By Label form.
  6. Select the VLAN ID to match the ID associated with the labels you intend to edit.
  7. Click SELECT to close the Edit Sub-Interfaces By Label form.
  8. In the Basic Properties header, enter new information in one or both of the following fields:

    • Description

    • ACL Profile

  9. Click SAVE.
    The edits are saved as a bulk update to the participating sub-interfaces. The Edit Sub-Interfaces overlay closes, returning you to the Sub-Interfaces page.
  10. Optional: To confirm the updates, do the following from the Sub-Interfaces page:
    1. For a specific row item that was subject to the bulk edit, click the options menu at the right end of the row.
    2. Select Open.
      The Edit Sub-Interface overlay appears. The edits are visible in the Description and ACL Profile fields.
    3. Click CANCEL to exit without making any further edits.