Routing Configuration Guide, Cisco Catalyst SD-WAN Releases 17.x

Configure RAR

Updated: February 6, 2026

On this page

Overview

Configure RAR in bypass mode
Configure RAR in aggregate mode

Overview

Explains about setting up RAR with CLI add-on feature templates in SD-WAN Manager, and configure RAR in bypass and aggregate modes.

To configure RAR using SD-WAN Manager, Create a CLI add-on feature template and attach it to the device template.

This section provides examples of RAR configurations that you can add to the CLI add-on template.

Configure a service for RAR:

policy-map type service rar-lab 
 pppoe service manet_radio //note: Enter the pppoe service policy name as manet_radio
!

Configure OSPF routing:

router ospfv3 1
 router-id 10.0.0.1
!
 address-family ipv4 unicast
  redistribute connected metric 1 metric-type 1
  log-adjacency-changes
 exit-address-family
 !
 address-family ipv6 unicast
  redistribute connected metric-type 1
  log-adjacency-changes
 exit-address-family
!
ip local pool PPPoEpool2 192.0.2.0 192.0.2.1

Configuration of RAR:

interface GigabitEthernet0/0/0
no shutdown
no mop enabled
no mop sysid
negotiation auto
pppoe enable group PPPOE_RAR

interface vmi1
ip address 10.0.0.0 255.255.255.0
ipv6 enable
physical-interface GigabitEthernet0/0/0
mode bypass
exit
interface Virtual-Template1
no shutdown
ip unnumbered vmi1
ipv6 enable
ospfv3 1 network manet
ospfv3 1 ipv4 area 0
ospfv3 1 ipv6 area 0
exit

interface Tunnel100
 no shutdown
 ip unnumbered Loopback100
 tunnel source Loopback100
 tunnel mode sdwan
exit

interface Loopback100
  tunnel-interface
   encapsulation ipsec
   color mpls
   no allow-service bgp
   allow-service dhcp
exit

router ospfv3 1
router-id 10.0.0.1
address-family ipv4 unicast
log-adjacency-changes
redistribute connected
redistribute connected metric 1 metric-type 1
exit-address-family
!
address-family ipv6 unicast
log-adjacency-changes
redistribute connected
redistribute connected metric-type 1
exit-address-family

The following example describes QoS provisioning on PPPoE extension session:

policy-map rar_policer
 class class-default
  police 10000 2000 1000 conform-action transmit  exceed-action drop  violate-action drop
policy-map rar_shaper
 class class-default
  shape average percent 1

interface Virtual-Template2
 ip address 192.0.2.255 255.255.255.0
 no peer default ip address
 no keepalive
 service-policy input rar_policer
end

Configure RAR in bypass mode

Before you begin the RAR configuration, you must first configure the subscriber authorization enable command to bring up the RAR session. Without enbaling authorization, the Point-to-Point protocol does not recognize this as a RAR session and may not tag manet_radio in PPPoE protocol. By default, bypass mode does not appears in the configuration. It appears only if the mode is configured as bypass.

Configure a service for RAR:

policy-map type service rar-lab 
 pppoe service manet_radio //note: Enter the pppoe service policy name as manet_radio
!

Configure Broadband:

interface pppoe VMI2
 virtual-template 2
service profile rar-lab 
!
interface GigabitEthernet0/0/0
 description Connected to Client1
  negotiation auto
  pppoe enable group VMI2
!

policy-map type service rar-lab 
 pppoe service manet_radio //note: Enter the pppoe service policy name as manet_radio
!

Configuration in bypass mode:

This exmple shows IP Address configured under virtual template explicitly:

interface Virtual-Template2
ip address 192.0.2.255 255.255.255.0
no ip redirects
peer default ip address pool PPPoEpool2
ipv6 enable
ospfv3 1 network manet
ospfv3 1 ipv4 area 0
ospfv3 1 ipv6 area 0
no keepalive
service-policy input rar_policer Or/And
service-policy output rar_shaper

This example shows VMI unnumbered configured under virtual template:

interface Virtual-Template2
ip unnumbered vmi2
no ip redirects
peer default ip address pool PPPoEpool2 
ipv6 enable
ospfv3 1 network manet
ospfv3 1 ipv4 area 0
ospfv3 1 ipv6 area 0
no keepalive
service-policy input rar_policer Or/And
service-policy output rar_shaper

Configure the virtual multipoint interface in bypass mode:

interface vmi2 //configure the virtual multi interface
ip address 192.0.2.255 255.255.255.0
physical-interface GigabitEthernet0/0/0
mode bypass     
interface vmi3//configure the virtual multi interface
 ip address 192.0.2.255 255.255.255.0
 physical-interface GigabitEthernet0/0/1
mode bypass

Configure RAR in aggregate mode

Before you configure RAR, you must first configure the subscriber authorization enable command to bring up the RAR session. Without enabling authorization, the Point-to-Point protocol does not recognize this as a RAR session and may not tag manet_radio in PPPoE.

The following example is an end-to-end configuration of RAR in the aggregate mode:

Configure a Service for RAR:

policy-map type service rar-lab 
 pppoe service manet_radio //note: Enter the pppoe service policy name as manet_radio
!

Configure Broadband:

bba-group pppoe VMI2
 virtual-template 2
service profile rar-lab 

!
interface GigabitEthernet0/0/0
 description Connected to Client1
  negotiation auto
  pppoe enable group VMI2
 
!

policy-map type service rar-lab 
 pppoe service manet_radio //note: Enter the pppoe service policy name as manet_radio
!

Configuration in Aggregate Mode:

interface Virtual-Template2
ip unnumbered vmi2
no ip redirects
no peer default ip address 
ipv6 enable
no keepalive
service-policy input rar_policer Or/And
service-policy output rar_shaper

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.