Cisco Catalyst SD-WAN Network Configuration Guide, Releases 26.x and Later

PDF

Configure a Layer 2 VPN on a Cisco IOS XE Catalyst SD-WAN device using CLI template

Updated: April 24, 2026

Want to summarize with AI?

Log in

Provides step-by-step instructions to configure Layer 2 VPNs on Cisco devices using CLI templates for efficient service provisioning.

Before you begin

For information about using CLI templates, see CLI Add-On Feature Templates and CLI Templates.

Follow these steps to configure an L2VPN on a Cisco IOS XE Catalyst SD-WAN Device Using CLI Template

Procedure

1.

Configure an L2VPN instance for P2P and P2MP connections. 


l2vpn sdwan instance instance-id point-to-point
l2vpn sdwan instance instance-id multipoint

The instance ID is a unique identifier for each L2VPN connection, and must not overlap or be shared with any Layer 3 VRFs in the SD-WAN fabric. For example, you cannot use L2VPN instance 10 and vrf definition 10.
2.

Configure a bridge-domain.

bridge-domain bridge-id
3.

Configure a Layer 2 interface on a Cisco IOS XE Catalyst SD-WAN device. 

interface vlan-id
 service instance instance-id ethernet
  encapsulation dot1q vlan-id
  no shutdown
Note

A rewrite is used to modify the default VLAN tag. If you have not configured rewrite under service instance, dot1q must be the same at all sites participating in the Layer 2 network. The rewrite option in a Layer 2 configuration modifies the VLAN tags of packets as they ingress or egress an interface. To use the rewrite option, you need to configure Ethernet Virtual Connections (EVCs) on edge routers (Cisco ASR 1000 Series). For more information about configuring an EVC, see Configuring Ethernet Virtual Connections on a Cisco Router.