Configure LAN Interfaces in Concerto

Configure a LAN Interface

1. In Tenant view, select Configure > Secure SD-WAN > Network Interfaces.
   
   
   
   The Interfaces screen displays with the WAN tab selected by default.
    
2. Select the LAN tab. The screen displays any configured LAN interfaces.
   
   
    
3. Click the  Add icon. The following screen displays the workflow to configure a LAN interface, beginning with step 1, LAN Settings.
   
   
    
4. In the Category field, select either LAN or Subtenant LAN.
5. From here, you can configure the following sub-categories of LAN interfaces:
   • Wired
   • Wireless
   • Aggregate Ethernet
   • Layer 2 (Switching) 
   • VLAN (SVI or IRB)

The following sections describe how to configure each of the sub-category LAN interfaces.

Configure IP Address and DHCP Server/Relay

To configure the IP address and DHCP server and relay for the LAN interface:

1. In workflow step 2, IP Address & DHCP Server/Relay, select the IPv4 Address tab, and then enter information for the following fields.
   
   
    

   Field	Description
   Primary IPv4 Address (Group of Fields)
   IPv4 Enabled	IPv4 is enabled by default. To disable it, click the slider bar as shown below.
   Address Assignment (Group of Fields)
   Static	Enabled by default. Enter an IP address for assignment in the IPv4 Address box (Required).
   DHCPv4	Select DHCPv4 to assign an IPv4 address will be automatically assigned.
   Static ARP Entries (Group of Fields)	Static ARP is a manually configured IP-to-MAC address mapping on a router that does not change or expire. You can add multiple Host IP Address/MAC address pairs.
   Host IP Address	Enter the host IP address for static ARP mapping. Click the  Add icon to add another host IP address.
   MAC Address	Enter the MAC address for static ARP mapping.  Click the  Add icon to add another MAC address.
   Virtual Router Redundancy Protocol (VRRP)	VRRP allows you to have one or more backup routers when you are using a statically configured router on a LAN. Disabled by default. Click the slider bar to enable VRRP, then enter the VRRP IP (VIP) address (Required).
   Advanced Settings	If you enable VRRP, additional fields display. Enter information for the following fields. Priority—Enter the priority to assign to the interface. The interface with the higher or highest priority becomes the VRRP active router. When you configure a VRRP priority value, be aware that value can be reduced by various objects that VRRP can track, such as interfaces, routes, monitor objects, and HA state. When you choose a priority value, you must make sure that you account for a worst-case scenario so that the priority never goes below 0. As an example, consider a VRRP group that is configured on the interface vni-0/0.0 with priority of 200 and that is tracking the interface vni-0/1.0, which has a priority cost of 20. When the vni-0/1.0 goes down, its priority cost is subtracted from the configured priority of 200. As a result, the current (dynamic) priority becomes (200 – 20), or 180. In this example, the vni-0/1.0 interface is the tracking object. Range: 1 through 255 Default: 100 Advertisements Threshold—Enter the number of VRRP advertisements that the backup router can miss before declaring the active router to be down. If you are configuring VRRP on Azure VMs, adjust the advertisement threshold to either 7 or 10, to provide time for Azure to update the next-hop IP address in the Azure user-defined routing (UDR) tables. Range: 1 through 15 Default: 3 Warmup Interval—Enter how long the interface waits before determining which VRRP router is the active and which is the backup. Range: 1 through 3600 seconds Default: 30 seconds Fast Interval—For VRRP version 3 only, enter how often the active and backup routers exchange VRRP advertisement messages. Range: 1 through 50000 milliseconds Default: 1000 milliseconds
   Unicast Mode Disabled	Click the slider bar to enable unicast mode, then enter the IP address of the VRRP peer node to have the VRRP group operate in unicast mode.
   Track Interfaces, Routes, and/or Monitors (Group of Fields)
   Priority Hold Time (sec)	Enter the virtual router priority hold time, in seconds. This timer controls how long a device that is an active router keeps the IP address when an event occurs that make it less prioritized. For example, suppose a route on the device is tracked and the route becomes unavailable. If the hold time value is 10, the device does not allow any changes to the priority for 10 seconds. After 10 seconds it will allow the change to priority if any other tracking object has changed its state. If the resulting priority becomes lower then any of its neighbor, it gives up the virtual IP address. If both the VRRP active and VRRP backup router lose the same route, they decrease their priority equally and no IP address switchover occurs. Range: 1 through 3600 seconds Default: None
   Track Interfaces (Group of Fields)
   WAN Connection/LAN Interface Name (Required)	Select the primary interface on the active router in the VRRP group.
   Priority Cost	Enter the value to subtract from the VRRP group priority if the interface goes down.The VRRP router with the highest priority in the VRRP group then becomes the active router. You can track more than one interface at a time, and if one of the interfaces goes down, each interface monitor individually subtracts its priority cost. For example, suppose you track two interfaces and set the priority cost for each of them to 100. If one of the interfaces goes down, the VRRP group priority decreases by 100. If both interfaces go down, the VRRP group priority decreases by 200. Range: 1 through 254 Default: 100
   Track Routes (Group of Fields)
   Prefix	Enter the IPv4 or IPv6 route prefix and length of the interface on which the VRRP group is configured.
   Routing Instance/WAN Connection Name (Required)	Select the routing instance or WAN connection to which the route applies.
   Track Monitors (Group of Fields)
   IP SLA Monitor (Required)	Select the monitor to use for tracking.
   Priority Cost	Enter the value to subtract from the VRRP group priority if the monitor is down. The VRRP router with the highest priority in the VRRP group then becomes the active router. You can add more than one monitor. Each monitor is tracked separately, and each subtracts its priority cost if it goes down. Range: 1 through 254 Default: 100
   + Add Additional IPv4 Address	Click to add one or more additional IPv4 addresses.
   Dynamic Host Configuration Protocol (DHCP) Server and Relay (Group of Fields)	DHCP is a client-server protocol in which the DHCP server dynamically assigns IP addresses and other networking parameters to clients. A DHCP relay agent is a device that forwards messages between DHCP clients and servers located in different subnets.
   No DHCPv4 Server/Relay Needed	Select to choose not to configure DHCP Server or DHCP Relay.
   DHCPv4 Server Profile	Click to add a DHCPv4 server profile, then choose the server name.
   DCHPv4 Relay	Click to add a DHCPv4 server profile, then the DHCPv4 relay IPv4 address.

2. Select the IPv6 Address tab, then enter information for the following fields. The fields in the IPv6 Address tab are the same as those in the IPv4 Address tab, except that you will enter IPv6 addresses instead of IPv4 addresses and you have the option of setting the Address Assignment to SLAAC (Stateless Address Autoconfiguration). See the field descriptions in the previous step.
   
   
3. Click Next or select workflow step 3, Quality of Service Scheduler. See Configure a Quality of Service Scheduler, below. 

Configure a Quality of Service Scheduler

You can configure a quality of service (QoS) scheduler to manage the allocation of resources among different applications, services, or users based on their priority levels.

To configure a QoS scheduler:

1. In the Add LAN Interface screen, select workflow step 3, Quality of Service Scheduler.
2. Enter information for the following fields.
   
   
   
   
    

   Field	Description
   Egress Traffic Shaping Rate (Group of Fields)	Limit the rate of egress traffic passing through the interface to ensure that the network is not overloaded.
   Interface Scheduler	Select an interface scheduler. To create a new interface scheduler, select + Create New. For more information, see Configure Reusable Objects.
   Shaping Rate (Kbps)	Enter a minimum rate, in kilobits per second (kbps). Range: 8 through 100000000 Default: None
   Burst Size (Bytes)	Enter a burst size, in bytes. Range: 1000 through 4294967295 Default: None
   Rewrite Rule	Select a rewrite rule. To create a new rewrite rule, select + Create New. For more information, see Configure Reusable Objects.

3. Click Next or select workflow 4 step, Permissions. See Configure Permissions, Review and Submit the Configuration, below.

Configure Permissions, Review and Submit the Configuration

1. In workflow step 4, Permissions, the screen displays permissions for all of the configured roles.
   
   
    
2. Select or unselect permissions for each role, if needed.
3. Click Next or select workflow step 5, Review & Submit.
   
   
4. In the General section, enter a name for the interface in the Name field. You can also enter a description and tags.
5. For the Interface field, select one of the following:
   • Disabled—Disable the interface.
   • Enabled—Enable the interface.
   • Variable—Select this option to parameterize whether the interface is enabled or disabled. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disabled on a device-by-device basis in the Deploy lifecycle.
6. Review the configuration. Click the  Edit icon in any section to update the settings.
7. Click Submit to create the interface.

Manage LAN Interface Configurations 

You can perform the following actions on LAN interface configurations:

• Edit
• Clone
• Delete
• View references
• Propagate
• Compare versions
• View the audit log
• Enable and disable auto delete

For information about these actions, see Manage SD-WAN Policies and Profiles.

Software Support Information

Releases 13.1.1 and later support all content described in this article. 

Additional Information

Configure Cross-Connect Interfaces in Concerto
Configure Loopback Interfaces in Concerto
Configure Reusable Objects
Configure Site-to-Site Tunnel Interfaces in Concerto
Configure WAN Interfaces in Concerto
Manage SD-WAN Policies and Profiles
Overview of Network Interfaces in Concerto