Route based L3Vpn Session
A Route Based L3Vpn is more flexible, more powerful and recommended over policy based.
IP Tunnel subnet is created and all traffic routed through tunnel subnet is sent over
tunnel. Routes can be learned through BGP. A route based L3Vpn is required when using
redundant L3Vpn.
Name | Description | Type | Notes |
---|---|---|---|
default_rule_logging | Enable logging for whitelisted rule for the VTI interface Indicates if logging should be enabled for the default whitelisting rule for the VTI interface. |
boolean | Default: "False" |
force_whitelisting | Flag to add default whitelisting FW rule for the VTI interface. The default firewall rule Action is set to DROP if true otherwise set to ALLOW. |
boolean | Default: "False" |
resource_type | Must be set to the value RouteBasedL3VpnSession | L3VpnSessionResourceType | Required |
routing_config_path | Routing configuration policy path This is a deprecated field. Any specified value is not saved and will be ignored. |
string | Deprecated |
tunnel_subnets | Virtual Tunnel Interface (VTI) IP subnets Virtual tunnel interface (VTI) port IP subnets to be used to configure route-based L3Vpn session. A max of one tunnel subnet is allowed. |
array of TunnelSubnet | Required Minimum items: 1 Maximum items: 1 |