To create an L3 network interface on a routing instance

Purpose

Perform this procedure to create L3 network interfaces on a routing instance. This procedure provides an example for configuring a network interface on a 7950 XRS with IPv6 enabled.

Note: The steps in this procedure depend on the device type, device version, and the parameter options that are selected during configuration. If a step in this procedure does not apply to the interface type that you are configuring on your device, proceed to the next applicable step.

An L3 interface on an OmniSwitch enables IP routing on a VLAN. Without an L3 interface, traffic is bridged within the VLAN or across connections to the same VLAN on other switches.

See To configure L3 network interfaces to re-configure a L3 network interface after it is created. See Workflow to configure NE routing and forwarding for information about how to configure other L3 network interfaces on routing instances.

You can create the following L3 interface types:

  • ICMP interface

  • system interface

  • unnumbered interface

  • management interface

  • control tunnel

  • IGMP interface

  • PIM interface

  • MLD interface

Steps
 

In the navigation tree routing view, expand Network→NE→Routing Instance.


Right-click on the routing instance icon and choose Create Interface. The Create Network Interface step form opens.


Configure the parameters on the Define General Properties form as required.

When you create an unnumbered MPLS-TP instance, you must configure a Static ARP in Step 11 before you can turn the Administrative State parameter to Up.


Click Next. Perform one of the following as required:

  1. If you chose the Numbered option for the Class parameter in Step 3 , the Configure IP Address form opens.

    On supporting NEs, you can create multiple IP addresses. For each address you need to create, perform the following:

    1. Click Create to associate an IP address for the interface. The IP Address, Routing Instance (Create) form opens,

    2. Configure the parameters as required.

      The Broadcast Address Format parameter only appears if the IP Address parameter is set to an IPv4 address.

      The parameters in the IPv6 panel only appear if the IP Address parameter is set to an IPv6 address.

    3. Select a Track SRRP Instance, if required.

    4. Save the changes and close the form.

  2. If you chose the Unnumbered option for the Class parameter in Step 3 , the Configure Unnumbered Interface form opens. Configure the parameters as required.


Click Next to associate the L3 interface with a physical port. The Select Port form open.

Perform the following steps:

  1. Select a port.

  2. Select a LAG link mapping profile, if required to assign a specific LAG egress port to a SAP or interface, and control how egress traffic is handled if the specified port fails. See To create a LAG link mapping profile for more information about creating a LAG link mapping profile.


Click Next to associate a network policy for the interface. The Select Network Policy form opens. Network policies are used to determine QoS settings based on the packet CoS bits on the ingress and egress of the network.

Note: The form name and policy selection options vary depending on the NE. See Chapter 50, QoS policies for information about network policies.

Perform the following steps:

  1. Select a network policy in the Network Policy panel. See To configure a QoS network policy for information about configuring a network policy.

    Note:

    If the network policy you selected has Port Redirect Groups on its Ingress or Egress Forwarding Classes, you must specify both an Ingress or egress queue group template policy and Instance ID.

    If you select a network policy with a forwarding class mapped to a queue group queue ID, you must ensure that the mapping queue group queue ID is in the selected queue group template policy.

  2. Select a queue group template policy in the Ingress Forwarding Plane Redirect and Egress Port Redirect panels. Queue group template policies allow SAP or IP interface forwarding classes to be redirected from the typical queue mapping to a shared queue. See To configure a queue group ingress template policy or To configure a queue group egress template policy for information about configuring an ingress/egress queue group template policies.

    Note:

    You must ensure that the port you selected has a network egress queue group with the same name as the queue group template policy created on it.

    Queue group template policies are not applicable to L3 interfaces associated with HSMDA ports.

  3. Configure the Queue Group Instance ID parameter or click Select to associate a queue group instance for the interface.

If you are configuring an L3 access interface for 7210 SAS or 7250 IXR nodes, go to Step 7 . Otherwise, go to Step 8.


Click Next to configure accounting statistics collection for the interface. The Select Accounting Policy form opens. Select an accounting policy and configure the required parameters.


Click Next to assign ACL filters to the interface. The Select ACL Filters form opens. ACL filters are used to filter out IP traffic that matches user-defined criteria defined in ACL IP filter or ACL IPv6 policies.

Perform the following steps:

  1. Select an ingress/egress ACL IP filter policy. See To configure an ACL IP filter policy for information about configuring an ACL IP filter policy.

  2. Select an ingress/egress ACL IPv6 filter policy. See To configure an ACL IPv6 filter policy for information about configuring an ACL IPv6 filter policy


Click Next. The Configure ICMP form opens. Configure the ICMP parameters.


10 

Click Next. If the IPv6 Allowed parameter is enabled on the Define General Properties form, the Configure ICMPv6 form opens. Configure the IPv6 parameters as required.


11 

Click Next. The Configure ARP form opens.

Perform the following steps:

  1. Configure the parameters as required.

  2. Click Create to statically associate an IP or MAC address to the interface. The Static ARP (Create) form opens.

  3. Configure the parameters as required.

  4. Save your changes and close the form.


12 

Click Next. The Configure Proxy ARP form opens. Configure the parameters as required.

Proxy ARP allows a device, such as a router, to answer ARP requests that are intended for another device. This allows a device to reach a remote subnet without configuring routes to the subnet or a default gateway device.


13 

Click Next. The Configure Proxy ARP Policies form opens. Configure the parameters as required.

Note: You must not leave an empty policy parameter between two configured policy parameters. For example, do not configure the Policy 1 and Policy 3 parameters and leave the Policy 2 parameter unconfigured. The NFM-P reorders the policies and moves the policy entered for the Policy 3 parameter to the Policy 2 parameter.


14 

Click Next. If the IPv6 Allowed parameter is enabled on the Define General Properties form, the Configure Neighbor Discovery form opens.

Perform the following steps:

  1. Click Create to configure a neighbor. The Neighbor Discovery (Create) form opens.

  2. Configure the parameters as required.

  3. Save your changes and close the form.


15 

Click Next. The Configure Proxy Neighbor Discovery form opens.

Perform the following steps:

  1. Configure the parameters as required.

  2. Click Select to associate a routing policy statement to the interface. You can associate up to five routing policy statements for each interface. See To configure a routing policy statement to create a routing policy statement.


16 

Click Next. The Configure Secure Neighbor Discovery form opens. Configure the parameters as required.


17 

Click Next. If NTP or SNTP is enabled on the NE, the Configure NTP form opens. Configure the Broadcast parameter.

Note: When the Broadcast parameter is enabled, a time protocol such as NTP or SNTP must be enabled and configured on the device, or the device ignores broadcast time packets received on the interface. See Chapter 8, Device commissioning and management for information about configuring NTP or SNTP on a device.


18 

Click Next. The Configure DHCP - General form opens. To configure IPv4 DHCP for the interface:

Perform the following steps:

  1. Configure the required parameters.

    The Remote ID String parameter is configurable when the Remote ID parameter is set to Remote IDString.

  2. Select a Python policy, if required.

  3. Click Next. The Configure DHCP - Server form opens.

  4. Configure the Server 1 through Server 8 parameters.


19 

Click Next. The Configure VRRP form opens. Click Create to add a VPPR instance. See To create and configure a VRRP instance to create a VRRP instance.

VRRP instances are members of a virtual router that provide backup if a router fails in a statically configured LAN. VRRP instances are created from network interfaces on a router, either as a master owner through which IP packets are routed before a failover, or as a backup non-owner that assumes the packet-forwarding (master) role after a failover. Before you create or add a VRRP instance to a virtual router, ensure that the master and backup interfaces have the same VRID and occupy the same subnet. See To create and configure a VRRP instance to create a VRRP instance.


20 

Click Next. If the IPv6 Allowed parameter is enabled on the Define General Properties form, the Configure IPv6 VRRP form opens. Click Create to add a VPPR IPv6 instance. See To create and configure a VRRP instance to create a VRRP instance.


21 

Click Next. The Configure Router Advertisement form opens.

Perform the following steps:

  1. Click Create to add a router advertisement entry. The Router Advertisement (Create) form opens.

  2. Configure the parameters on the General tab as required.

    If you are configuring the L3 interface for an IPv6 VRRP instance, then the Send Advertisement and Use Virtual MAC Address parameters must both be enabled.

  3. Click on the DNS Options tab and click Create. The DNS Options form opens.

  4. Configure the parameters as required.

  5. Click on the Prefix tab and click Create. The Router Advertisement Prefix (Create) form opens.

  6. Configure the parameters as required.

    Note:

    Each Lifetime (seconds) parameter is configurable when the associated No Expiry parameter is disabled.

  7. Save the changes and close the forms.


22 

Click Next. The Unicast RPF form opens. Configure the parameters as required.

The URPF Check State IPv6 and URPF Check Mode IPv6 parameters are only configurable when the IPv6 Allowed parameter is enabled is enabled on the Define General Properties form.


23 

Click Next. The Configure DHCP - General form opens. Configure the parameters as required to configure IPv4 DHCP for the interface.

Note: The Remote ID String parameter is configurable when the Remote ID parameter is set to Remote IDString.


24 

Click Next. The Configure DHCP - Server form opens. Configure the Server 1 through Server 8 parameters.


25 

Click Next. The Configure Network Domain form opens. Click Add Network Domain to add a network domain to a network interface. See To create a network domain to create a network domain.


26 

Click Next. The Configure BFD form opens. To configure Bidirectional Forwarding Detection for the interface:

Perform the following steps:

  1. Set the Administration Status parameter to Up.

  2. Configure the parameters as required.

  3. Click OK.

    Note:

    You cannot enable BFD on an interface, if BFD is not configured on the interface. You cannot set the administrative status of an interface to disabled, when protocols using the interface have BFD enabled. See Chapter 28, Routing protocol configuration for information about enabling and disabling BFD for routing protocols.


27 

Click Next. If the IPv6 Allowed parameter is enabled on the Define General Properties form, the Configure IPv6 BFD form opens. Configure the parameters as required.


28 

Click Next. The Select Security form opens. Click Select to assign a DoS protection policy or DDoS protection policy to a network interface. See DoS protection on L3 network interfaces or DDoS protection on network and access interfaces in this chapter for more information.


29 

Click Next. The Configure Cflowd Sampling form opens.

Note: You must enable cflowd globally on an NE before you can configure cflowd collectors; see To enable and configure global Cflowd sampling on an NE .

You can configure cflowd sampling for unicast and multicast traffic on a routing network interface; up to two cflowd sampling objects can be configured under the parent interface, one for unicast and one for multicast.

Perform the following steps:

  1. Click Create. The Cflowd Sampling (Create) form opens.

  2. Configure the required parameters and click OK.


30 

Click Finish. The Summary form opens.


31 

Enable the View the newly created Network Interface parameter to view the interface configuration after closing the form.


32 

Save your changes and close the form.

End of steps