Enable or Disable ICMP Redirect on Tenant EPG Networks

You can configure ICMP Redirect on tenant EPG network.

About this task

Follow this procedure to enable or disable ICMP Redirect on tenant EPG networks.

You can enable or disable ICMP Redirect when you create or update an EPG using the port-group-add, ctag-range-add, vrf-add, and network-property-add or update operations.

Note

Note

  • XGS-based platforms (Extreme 8720, 8520, SLX 9150 and 9250) and J2-based SLX 9740 platform do not support ASIC for the ICMP Redirect.
  • SLX-OS 20.5.1 does not support IP ICMP Redirect.
  • Only DNX-based platforms (SLX 9540 and 9640) support ASIC for the IP ICMP Redirect.
  • If you configure IP ICMP Redirect on supported platforms and later upgrade SLX to non-supporting platforms, then ensure to clean up the stale ICMP configuration on the existing VEs of XCO.

Procedure

  1. To configure ICMP Redirect when you create an EPG, run the following command:
    efa tenant epg create –-name <epg-name> --tenant <tenant-name> 
          --ip-icmp-redirect <ctag:ip-icmp-redirect> 
          --ipv6-icmp-redirect <ctag:ipv6-icmp-redirect>
  2. To configure ICMP Redirect when you update an EPG, run the following command:
    efa tenant epg update –-name <epg-name> --tenant <tenant-name> 
          --ip-icmp-redirect <ctag:ip-icmp-redirect> 
          --ipv6-icmp-redirect <ctag:ipv6-icmp-redirect>
  3. Verify the following configuration on SLX device.
    Rack1-Device1# show running-config interface Ve 19
    interface Ve 19
    vrf forwarding vrf1
    ip anycast-address 3.33.3.3/24
    ip mtu 1600
    ip icmp redirect
    ipv6 anycast-address 500::10/31
    ipv6 address 700::10/31
    ipv6 icmpv6 redirect
    no shutdown
    !
    Rack1-Device2#show running-config interface Ve 19
    interface Ve 19
    vrf forwarding vrf1
    ip anycast-address 3.33.3.3/24
    ip mtu 1600
    ip icmp redirect
    ipv6 anycast-address 500::10/31
    ipv6 address 700::10/31
    ipv6 icmpv6 redirect
    no shutdown
    !

    For syntax and command examples, see the ExtremeCloud Orchestrator Command Reference, 3.2.0

Example

The following example configures an ICMP Redirect on a tenant EPG network:
efa tenant create --name t1  --vrf-count 10 --vlan-range 10-40 --port 10.20.246.1[0/16-30],10.20.246.2[0/16-30] --l2-vni-range 1-40 --l3-vni-range 5000-50100
efa tenant po create --name po1 --tenant t1 --port 10.20.246.1[0/25],10.20.246.2[0/25] --speed 1Gbps --negotiation active
efa tenant vrf create --name vrf1 --tenant t1
efa tenant epg create --tenant "t1" --name "epg1" --type extension --switchport-mode trunk --single-homed-bfd-session-type auto --po po1 --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24 --bridge-domain 19:Auto-BD-2 --ctag-description "19:Tenant L3 Extended BD" --l2-vni 19:2 --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true


efa tenant epg update --tenant "t1" --name "epg1" --operation vrf-delete --vrf vrf1
efa tenant epg update --tenant "t1" --name "epg1" --operation vrf-add --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24  --ctag-description "19:Tenant L3 Extended BD" --l2-vni 19:2 --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true --anycast-ipv6 19:500::10/31 --local-ipv6 19,10.20.246.1:700::10/31 --local-ipv6 19,10.20.246.2:700::10/31
efa tenant epg update --tenant "t1" --name "epg1" --operation ctag-range-add --ctag-range 20 --anycast-ip 20:4.33.3.3/24  --ctag-description "20:Tenant L3 Extended BD" --l2-vni 20:3  --ip-icmp-redirect 20:true
efa tenant epg update --tenant "t1" --name "epg1" --operation network-property-add --ipv6-icmp-redirect 20:true --anycast-ipv6 20:600::10/31 --local-ipv6 20,10.20.246.1:800::10/31 --local-ipv6 20,10.20.246.2:800::10/31

========================== EPG CREATE==================================

efa tenant create --name t1  --vrf-count 10 --vlan-range 10-40 --port 10.20.246.1[0/16-30],10.20.246.2[0/16-30] --l2-vni-range 1-40 --l3-vni-range 5000-50100

Tenant created successfully.

--- Time Elapsed: 76.613817ms ---
efa tenant po create --name po1 --tenant t1 --port 10.20.246.1[0/25],10.20.246.2[0/25] --speed 1Gbps --negotiation active

Port Channel created successfully.

--- Time Elapsed: 9.631186916s ---
efa tenant vrf create --name vrf1 --tenant t1

Vrf created successfully.

--- Time Elapsed: 105.271133ms ---
abc@abc-virtual-machine:~/GoDCApp/GoCommon/bin$ 
efa tenant show
+------+---------+------------+-------------+-------------+-----------+-----------+-----------------------+--------------------------+
| Name |  Type   | VLAN Range | L2VNI Range | L3VNI Range | VRF Count | Enable BD |         Ports         | Mirror Destination Ports |
+------+---------+------------+-------------+-------------+-----------+-----------+-----------------------+--------------------------+
|  t1  | private |   10-40    |    1-40     | 5000-50100  |    10     |   false   | 10.20.246.1[0/16-30] |                          |
|      |         |            |             |             |           |           | 10.20.246.2[0/16-30] |                          |
+------+---------+------------+-------------+-------------+-----------+-----------+-----------------------+--------------------------+
Tenant Details

--- Time Elapsed: 32.431956ms ---
efa tenant po show
+------+--------+----+-------+-----+-------------+----------+---------+--------------------+------------+-------------+-------------+
| Name | Tenant | ID | Speed | MTU | Negotiation | Min Link |  Lacp   |       Ports        |   State    |  Dev State  |  App State  |
|      |        |    |       |     |             |  Count   | Timeout |                    |            |             |             |
+------+--------+----+-------+-----+-------------+----------+---------+--------------------+------------+-------------+-------------+
| po1  |   t1   | 1  | 1Gbps |     |   active    |    1     |  long   | 10.20.246.1[0/25] | po-created | provisioned | cfg-in-sync |
|      |        |    |       |     |             |          |         | 10.20.246.2[0/25] |            |             |             |
+------+--------+----+-------+-----+-------------+----------+---------+--------------------+------------+-------------+-------------+
Port Channel Details

--- Time Elapsed: 58.50989ms ---
efa tenant vrf show
+------+--------+--------------+---------------------+--------------+--------------+----------+-----------+-----------+-------------+-----------------+-----------+
| Name | Tenant | Routing Type | Centralized Routers |  Enable L3   | Redistribute | Max Path | Local Asn | Enable GR |    State    |    Dev State    | App State |
|      |        |              |                     |  Extension   |              |          |           |           |             |                 |           |
+------+--------+--------------+---------------------+--------------+--------------+----------+-----------+-----------+-------------+-----------------+-----------+
| vrf1 |   t1   | distributed  |                     |     true     |  connected   |    8     |           |   false   | vrf-created | not-provisioned | cfg-ready |
+------+--------+--------------+---------------------+--------------+--------------+----------+-----------+-----------+-------------+-----------------+-----------+
Vrf Details

--- Time Elapsed: 93.298864ms ---
abc@abc-virtual-machine:~/GoDCApp/GoCommon/bin$ 


efa tenant epg create --tenant "t1" --name "epg1" --type extension --switchport-mode trunk --single-homed-bfd-session-type auto --po po1 --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24 --bridge-domain 19:Auto-BD-2 --ctag-description "19:Tenant L3 Extended BD" --l2-vni 19:2 --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true
Error :	 Input anycast ipv6 address configuration is needed for the ctag 19 when the ipv6 icmp redirect configuration is input for the same ctag


efa tenant epg create --tenant "t1" --name "epg1" --type extension --switchport-mode trunk --single-homed-bfd-session-type auto --po po1 --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24  --ctag-description "19:Tenant L3 Extended BD" --l2-vni 19:2 --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true --anycast-ipv6 19:500::10/31
Error :	 ICMP redirect feature is not supported on the device 10.20.246.1 with the platform SLX9740-40C. It is supported on the SLX-9540 and SLX-9640 platforms only.


efa tenant epg create --tenant "t1" --name "epg1" --type extension --switchport-mode trunk --single-homed-bfd-session-type auto --po po1 --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24  --ctag-description "19:Tenant L3 Extended BD" --l2-vni 19:2 --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true --anycast-ipv6 19:500::10/31
	Device: 10.20.246.1
		Network Policy Error: VE configuration failed due to netconf rpc [error] '%Error:IP address is not configured. ', 
Error :	 EndpointGroup Creation failed


efa tenant epg create --tenant "t1" --name "epg1" --type extension --switchport-mode trunk --single-homed-bfd-session-type auto --po po1 --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24  --ctag-description "19:Tenant L3 Extended BD" --l2-vni 19:2 --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true --anycast-ipv6 19:500::10/31 --local-ipv6 19,10.20.246.1:700::10/31 --local-ipv6 19,10.20.246.2:700::10/31

EndpointGroup created successfully.

--- Time Elapsed: 26.66300489s ---


efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19
	       : VRF                           : vrf1
	       : L3Vni                         : 5001

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-----------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |         Ctag          | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |         Local IP         | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |      Description      |       |         |              |              |  ARP/ND  |  [Device-IP->Local-IP]   |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-----------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L3 Extended BD |   2   |         | 3.33.3.3/24  |  500::10/31  |   T/T    | 10.20.246.1->700::10/31 |      T/T      |  1600  |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                       |       |         |              |              |          | 10.20.246.2->700::10/31 |               |        |         |                |              |             |             |
+------+-----------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           |      AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR       |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |       Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]        | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                              |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 146.093823ms ---
abc@abc-virtual-machine:~/GoDCApp/GoCommon/bin$ 
On SLX1:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
On SLX2:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
========================== EPG UPDATE - VRF DELETE==================================
efa tenant epg update --tenant "t1" --name "epg1" --operation vrf-delete --vrf vrf1

EndpointGroup updated successfully.

--- Time Elapsed: 11.522121773s ---
efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L2 Extended VLAN |   2   |         |              |              |   F/F    |                       |      T/T      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           |      AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR       |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |       Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]        | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                              |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 125.742303ms ---

On SLX1:
how runn int ve
% No entries found.
On SLX2:
show runn int ve
% No entries found.
========================== EPG UPDATE - VRF ADD==================================

efa tenant epg update --tenant "t1" --name "epg1" --operation vrf-add --vrf vrf1 --ctag-range 19 --l3-vni 5001 --anycast-ip 19:3.33.3.3/24  --ip-mtu 19:1600 --ip-icmp-redirect 19:true --ipv6-icmp-redirect 19:true --anycast-ipv6 19:500::10/31 --local-ipv6 19,10.20.246.1:700::10/31 --local-ipv6 19,10.20.246.2:700::10/31

EndpointGroup updated successfully.

--- Time Elapsed: 26.989502751s ---
efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19
	      : VRF                           : vrf1
	      : L3Vni                         : 5001

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |         Local IP         | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  |  [Device-IP->Local-IP]   |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L3 Extended VLAN |   2   |         | 3.33.3.3/24  |  500::10/31  |   T/T    | 10.20.246.1->700::10/31 |      T/T      |  1600  |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          | 10.20.246.2->700::10/31 |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           |      AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR       |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |       Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]        | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                              |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 113.554904ms ---

On SLX1:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
On SLX2:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
========================== EPG UPDATE - CTAG ADD==================================
efa tenant epg update --tenant "t1" --name "epg1" --operation ctag-range-add --ctag-range 20 --anycast-ip 20:4.33.3.3/24  --ctag-description "20:Tenant L3 Extended BD" --l2-vni 20:3  --ip-icmp-redirect 20:true

EndpointGroup updated successfully.

--- Time Elapsed: 19.783074534s ---
efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19-20
	      : VRF                           : vrf1
	      : L3Vni                         : 5001

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |         Local IP         | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  |  [Device-IP->Local-IP]   |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L3 Extended VLAN |   2   |         | 3.33.3.3/24  |  500::10/31  |   T/T    | 10.20.246.1->700::10/31 |      T/T      |  1600  |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          | 10.20.246.2->700::10/31 |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  20  |  Tenant L3 Extended BD  |   3   |         | 4.33.3.3/24  |              |   T/F    |                          |      T/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           |      AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR       |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |       Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]        | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                              |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 133.454201ms ---

On SLX1:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 ip icmp redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
On SLX2:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 ip icmp redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
========================== EPG UPDATE - NETWORK PROPERTY UPDATE==================================
efa tenant epg update --tenant "t1" --name "epg1" --operation network-property-update --ip-icmp-redirect 20:false

EndpointGroup updated successfully.

--- Time Elapsed: 10.939994832s ---
efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19-20
	      : VRF                           : vrf1
	      : L3Vni                         : 5001

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |         Local IP         | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  |  [Device-IP->Local-IP]   |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L3 Extended VLAN |   2   |         | 3.33.3.3/24  |  500::10/31  |   T/T    | 10.20.246.1->700::10/31 |      T/T      |  1600  |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          | 10.20.246.2->700::10/31 |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  20  |  Tenant L3 Extended BD  |   3   |         | 4.33.3.3/24  |              |   T/F    |                          |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           |      AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR       |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |       Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]        | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                              |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+--------------------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 194.609986ms ---
On SLX1:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
On SLX2:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 20
vrf forwarding vrf1
ip anycast-address 4.33.3.3/24
no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
========================== EPG UPDATE - NETWORK PROPERTY ADD==================================
efa tenant epg update --tenant "t1" --name "epg1" --operation network-property-add --ip-icmp-redirect 20:true

EndpointGroup updated successfully.

--- Time Elapsed: 8.91347074s ---
efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19-20
	       : VRF                           : vrf1
	       : L3Vni                         : 5001

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |         Local IP         | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  |  [Device-IP->Local-IP]   |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L3 Extended VLAN |   2   |         | 3.33.3.3/24  |  500::10/31  |   T/T    |  10.20.246.1->700::10/31 |      T/T      |  1600  |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          |  10.20.246.2->700::10/31 |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  20  |  Tenant L3 Extended BD  |   3   |         | 4.33.3.3/24  |              |   T/F    |                          |      T/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 129.081769ms ---
abc@abc-virtual-machine:~/GoDCApp/GoCommon/bin$ 
On SLX1:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 ip icmp redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
On SLX2:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 ipv6 icmpv6 redirect
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 ip icmp redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
========================== EPG UPDATE - NETWORK PROPERTY DELETE==================================

efa tenant epg update --tenant "t1" --name "epg1" --operation network-property-delete --ipv6-icmp-redirect 19:true

EndpointGroup updated successfully.

--- Time Elapsed: 8.086847111s ---
efa tenant epg show --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   : 

Ports         : 
POs           : po1
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 19-20
	      : VRF                           : vrf1
	      : L3Vni                         : 5001

+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs

+------+-------------+-------------+
| Port |  Dev State  |  App State  |
+------+-------------+-------------+
| po1  | provisioned | cfg-in-sync |
+------+-------------+-------------+
Port Property States

+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |         Local IP         | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  |  [Device-IP->Local-IP]   |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  19  | Tenant L3 Extended VLAN |   2   |         | 3.33.3.3/24  |  500::10/31  |   T/T    | 10.20.246.1->700::10/31  |      T/F      |  1600  |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          | 10.20.246.2->700::10/31  |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
|  20  |  Tenant L3 Extended BD  |   3   |         | 4.33.3.3/24  |              |   T/F    |                          |      T/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+--------------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags	: * - Native Vlan]

+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags

+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs

+------+-------------------------------+--------------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           |    AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR   |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |     Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]    | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                        |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+--------------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips


For 'unstable' entities, run 'efa tenant po/vrf show' for details

===============================================================================================================================================================

--- Time Elapsed: 147.804073ms ---
On SLX1:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 ip icmp redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!
On SLX2:
show runn int ve
interface Ve 19
 vrf forwarding vrf1
 ip anycast-address 3.33.3.3/24
 ip mtu 1600
 ip icmp redirect
 ipv6 anycast-address 500::10/31
 ipv6 address 700::10/31
 no shutdown
!
interface Ve 20
 vrf forwarding vrf1
 ip anycast-address 4.33.3.3/24
 ip icmp redirect
 no shutdown
!
interface Ve 8192
 vrf forwarding vrf1
 ipv6 address use-link-local-only
 no shutdown
!