06-15-2025 04:54 AM
Hi all. I am trying to do some labbing in CML with the SD-WAN images, but I have hit a roadblock already before I got started.
I have tried to configure VPN0 for my vBond/Validator, but I am not able to commit when I configure gi0/0 interface.
I tried to follow the examples shown here: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/system-overview.html
What am I missing?
64 bytes from 8.8.8.8: icmp_seq=22 ttl=112 time=22.7 ms 64 bytes from 8.8.8.8: icmp_seq=23 ttl=112 time=27.6 ms ^C --- 8.8.8.8 ping statistics --- 23 packets transmitted, 23 received, 0% packet loss, time 22036ms rtt min/avg/max/mdev = 18.476/23.677/27.678/2.877 ms vBond01(config-vpn-0)# vBond01(config-vpn-0)# show full-configuration vpn 0 interface ge0/0 ip address 192.168.100.11/24 ipv6 dhcp-client tunnel-interface encapsulation ipsec no allow-service bgp allow-service dhcp allow-service dns allow-service icmp no allow-service sshd no allow-service netconf no allow-service ntp no allow-service ospf no allow-service stun allow-service https ! no shutdown ! ip route 0.0.0.0/0 192.168.100.1 ! vBond01(config-vpn-0)# inter gi0/0 vBond01(config-interface-gi0/0)# tunnel-interface vBond01(config-tunnel-interface)# allow-service sshd vBond01(config-tunnel-interface)# allow-service netconf vBond01(config-tunnel-interface)# allow-service ntp vBond01(config-tunnel-interface)# commit Aborted: too few 'vpn 0 interface gi0/0 tunnel-interface encapsulation', 0 configured, at least 1 must be configured vBond01(config-tunnel-interface)# encapsulation ipsec vBond01(config-tunnel-interface)# commit Aborted: values are not unique: default 'vpn 0 interface ge0/0 tunnel-interface color' 'vpn 0 interface gi0/0 tunnel-interface color' vBond01(config-tunnel-interface)# color public-internet vBond01(config-tunnel-interface)# commit Aborted: 'vpn 0 interface gi0/0 if-name': Invalid interface gi0/0 specified vBond01(config-tunnel-interface)# show full-configuration vpn 0 interface gi0/0 tunnel-interface encapsulation ipsec color public-internet no allow-service bgp allow-service dhcp allow-service dns allow-service icmp allow-service sshd allow-service netconf allow-service ntp no allow-service ospf no allow-service stun allow-service https ! ! !
Solved! Go to Solution.
06-15-2025 07:14 AM
The interface name of vBond should be ge0/0, not gi0/0.
Delete gi0/0 and commit again
Please remark this as a solution If this is helpful.
06-15-2025 06:49 AM
Did you config system-ip organization name?
MHM
06-15-2025 07:14 AM
The interface name of vBond should be ge0/0, not gi0/0.
Delete gi0/0 and commit again
Please remark this as a solution If this is helpful.
06-15-2025 02:26 PM
I am such a dummy. When I changed the interface to ge0/0 it worked. Thank you.
06-16-2025 07:40 AM
You are not. Its natural to make mistake at the first. I also did it.
Lets dive into SD-WAN more deeply !
Keep up the good work !
Jeongjun Park
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide