missing attributes in resource iosxe_interface_tunnel

[thomasnoppe]

Hi,

The following attributes are missing in the resource iosxe_interface_tunnel.
In the context of ipsec protected tunnels these are important.

ip mtu 1400
tunnel vrf X

kind regards

[swarudka]

Can you please provide complete CLI commands?
As MTU support is already added in config.

[rybakovanton-metta]

cisco(config-if)#tunnel vrf ?
  WORD          vrf table name
  multiplexing  multiple VRFs multiplexing

cisco(config-if)#tunnel vrf GLOBAL

last line just example with VRF name "GLOBAL"
full interface config:

interface Tunnel0
 vrf forwarding client
 ip address 169.254.16.0 255.255.255.254
 tunnel source 172.16.0.0
 tunnel destination 10.128.0.5
 tunnel vrf GLOBAL
end

without this command it's not allow to use source address in vrf. router looking for tunnel source in global table.

[bardahlm]

I needed to configure tunnel vrf. I ended up with the following code:

locals {
  tunnel_number = 10
  tunnel_vrf = "GLOBAL"
}

resource "iosxe_restconf" "tunnel" {
  path     = format("Cisco-IOS-XE-native:native/interface/Tunnel=%s/Cisco-IOS-XE-tunnel:tunnel/vrf-config/vrf-common", local.tunnel_number)
  attributes = {
    vrf = local.tunnel_vrf
  }

}

[rybakovanton-metta]

this is mine.

locals {
  set_tunnels_vrf = join("\r", [
    for idx, value in local.tunels_list :
    <<-EOT
    interface Tunnel${idx}
    tunnel vrf GLOBAL
    EOT
  ])
}
resource "iosxe_cli" "tunnel_vrf" {
  count      = length(local.set_tunnels_vrf) > 0 ? 1 : 0
  cli        = local.set_tunnels_vrf
  depends_on = [iosxe_interface_tunnel.to_transit]
}