Managing service interfaces

Service interfaces are mapped to OpenFlow ports and are used to connect a CPE device to transport services. A service interface cannot be mapped to an OpenFlow port that is already mapped to an SD-WAN interface of the WAN type.

If you want to filter traffic packets on a service interface, you can create an Access Control List (ACL) interface that is mapped to this service interface. The ACL interface applies the specified traffic filter to the service interface. A single service interface can be mapped to at most four ACL interfaces.

To display the table of service interfaces, go to the Infrastructure menu section, click Management → Configuration menu next to the controller, and go to the Service interfaces section. Information about service interfaces is displayed in the following columns of the table:

• Port is the number of the OpenFlow port to which the service interface is mapped to.
• Type is the traffic classification type on the service interface.
  • Access
  • VLAN
  • Q-in-Q
  • ACL
• Description is a brief description of the service interface.
• VLAN is the outer VLAN tag of the service interface. The value in this column is only displayed for service interfaces with traffic classification types VLAN and Q-in-Q.
• Inner VLAN is the inner VLAN tag of the service interface. The value in this column is only displayed for service interfaces with traffic classification type Q-in-Q.
• Filter is the traffic filter for the ACL interface. The value in this column is only displayed for service interfaces with traffic classification type ACL.
• Name is the name of the service interface.

The actions you can perform with the table are described in the Managing solution component tables instructions.

Creating a service interface

To create a service interface:

1. In the menu, go to the Infrastructure section.

   This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

2. Click Management → Configuration menu next to the controller.

   This opens the controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of controller nodes.

3. Go to the Service interfaces section.

   A table of service interfaces and ACL interfaces is displayed.

4. In the Switch and Port drop-down lists, select the CPE device and the OpenFlow port to which the service interface is mapped.
5. Click Create service interface.
6. This opens a window; in that window, in the Type drop-down list, select the type of traffic classification on the service interface:
   • Access Default value.
   • VLAN If you select this option, in the VLAN ID field, enter the outer VLAN tag of the service interface. Range of values: 1 to 4094.
   • Q-in-Q If you select this option, do the following:
     1. In the VLAN ID field, enter the outer VLAN tag of the service interface. Range of values: 1 to 4094.
     2. In the Inner VLAN ID field, enter the inner VLAN tag of the service interface. Range of values: 1 to 4094.
   • ACL is used when creating an ACL interface.
7. If necessary, enter a brief description of the service interface in the Description field.
8. Click Create.

The service interface is created and displayed in the table.

Creating an ACL interface

To create an ACL interface:

1. In the menu, go to the Infrastructure section.

   This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

2. Click Management → Configuration menu next to the controller.

   This opens the controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of controller nodes.

3. Go to the Service interfaces section.

   A table of service interfaces and ACL interfaces is displayed.

4. In the Switch and Port drop-down lists, select the CPE device and the OpenFlow port to which the created service interface is mapped.
5. Click + Create service interface.
6. This opens a window; in that window, in the Type drop-down list, select ACL.
7. In the Service interface drop-down list, select the service interface to which the ACL interface is mapped.
8. In the Traffic fliter drop-down list, select the created traffic filter for the ACL interface. You can use the same traffic filter for multiple ACL interfaces.
9. In the Sequence drop-down list, select the sequential number of the ACL interface. Traffic is directed first to the ACL interface with the lowest number. If the filter used on an ACL interface does not take in the traffic, the traffic is sent to the second ACL interface, and so on.

   Range of values: 1 to 4. Two ACL interfaces with the same serial number cannot be mapped to the same service interface.

10. If necessary, enter a brief description of the ACL interface in the Description field.
11. Click Create.

The ACL interface is created and displayed in the table.

Viewing the usage of a service interface and an ACL interface

You can view which transport services are using a service interface or an ACL interface. A service interface or ACL interface that is in use cannot be deleted.

To view the usage of a service interface or ACL interface:

1. In the menu, go to the Infrastructure section.

   This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

2. Click Management → Configuration menu next to the controller.
3. Go to the Service interfaces section.

   A table of service interfaces and ACL interfaces is displayed.

4. Click Management → Show usage next to the service interface or ACL interface for which you want to view usage information.

This opens a window with a table of transport services that are using the service interface or ACL interface.

Deleting a service interface and an ACL interface

You cannot delete a service interface or an ACL interface if it is being used by at least one transport service. You must view the usage of a service interface or ACL interface and make sure that it is not being used.

Deleted service interfaces and ACL interfaces cannot be restored.

To delete a service interface or an ACL interface:

1. In the menu, go to the Infrastructure section.

   This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

2. Click Management → Configuration menu next to the controller.
3. Go to the Service interfaces section.

   A table of service interfaces and ACL interfaces is displayed.

4. Click Management → Delete next to the service interface or ACL interface that you want to delete.
5. In the confirmation window, click Delete.

The service interface or ACL interface is deleted and is no longer displayed in the table.