Feat(eos_designs): Add revised schema to support L3 Port-Channel inte…

…rfaces

ansible_collections/arista/avd/examples/cv-pathfinder/intended/structured_configs/site1-wan1.yml

@@ -334,9 +334,9 @@ ethernet_interfaces:
   switchport:
     enabled: false
   description: REGION1-INTERNET-CORP_inet-site1-wan1_inet-cloud_Ethernet5
-  access_group_in: ACL-INTERNET-IN_Ethernet4
   flow_tracker:
     hardware: FLOW-TRACKER
+  access_group_in: ACL-INTERNET-IN_Ethernet4
 loopback_interfaces:
 - name: Loopback0
   description: ROUTER_ID

ansible_collections/arista/avd/examples/cv-pathfinder/intended/structured_configs/site1-wan2.yml

@@ -334,9 +334,9 @@ ethernet_interfaces:
   switchport:
     enabled: false
   description: REGION1-INTERNET-CORP_inet-site1-wan2_inet-cloud_Ethernet6
-  access_group_in: ACL-INTERNET-IN_Ethernet4
   flow_tracker:
     hardware: FLOW-TRACKER
+  access_group_in: ACL-INTERNET-IN_Ethernet4
   dhcp_client_accept_default_route: true
 loopback_interfaces:
 - name: Loopback0

ansible_collections/arista/avd/examples/cv-pathfinder/intended/structured_configs/site2-wan2.yml

@@ -365,9 +365,9 @@ ethernet_interfaces:
   switchport:
     enabled: false
   description: REGION2-INTERNET-CORP_inet-site2-wan2_inet-cloud_Ethernet7
-  access_group_in: ACL-INTERNET-IN_Ethernet4
   flow_tracker:
     hardware: FLOW-TRACKER
+  access_group_in: ACL-INTERNET-IN_Ethernet4
 - name: Ethernet5
   switchport:
     enabled: false

ansible_collections/arista/avd/examples/cv-pathfinder/intended/structured_configs/site3-wan1.yml

@@ -223,9 +223,9 @@ ethernet_interfaces:
   switchport:
     enabled: false
   description: REGION2-INTERNET-CORP_inet-site3-wan1_inet-cloud_Ethernet8
-  access_group_in: ACL-INTERNET-IN_Ethernet4
   flow_tracker:
     hardware: FLOW-TRACKER
+  access_group_in: ACL-INTERNET-IN_Ethernet4
   dhcp_client_accept_default_route: true
 loopback_interfaces:
 - name: Loopback0

ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/ipv4-acl-in-missing-on-wan-interface.yml

@@ -24,4 +24,4 @@ wan_path_groups:
 
 expected_error_message: >-
   'ipv4_acl_in' must be set on WAN interfaces where 'wan_carrier' is set,
-  unless the carrier is configured as 'trusted' under 'wan_carriers'. 'ipv4_acl_in' is missing on interface 'Ethernet1'.
+  unless the carrier is configured as 'trusted' under 'wan_carriers'. 'ipv4_acl_in' is missing on L3 interface 'Ethernet1'.

ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/node-type-l3-port-channels.cfg

@@ -0,0 +1,122 @@
+!
+no enable password
+no aaa root
+!
+vlan internal order ascending range 1006 1199
+!
+flow tracking sampled
+   sample 10000
+   tracker FLOW-TRACKER
+      record export on inactive timeout 70000
+      record export on interval 300000
+      exporter CV-TELEMETRY
+         collector 127.0.0.1
+         local interface Loopback0
+         template interval 3600000
+   no shutdown
+!
+transceiver qsfp default-mode 4x10G
+!
+service routing protocols model multi-agent
+!
+hostname node-type-l3-port-channels
+!
+spanning-tree mode none
+!
+vrf instance MGMT
+!
+management api http-commands
+   protocol https
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
+interface Port-Channel2
+   description Cybercast_101_peer1_Port-Channel10
+   no shutdown
+   no switchport
+   flow tracker sampled FLOW-TRACKER
+   ip address 192.168.1.102/31
+   service-profile TEST-QOS-PROFILE1
+!
+interface Port-Channel5
+   description StreamFast_102_peer2_Port-Channel15
+   no shutdown
+   no switchport
+   ip address 192.168.1.105/31
+   service-policy type qos input TEST_POLICY
+   service-profile TEST-QOS-PROFILE1
+   ! TEST RAW_EOS_CLI
+
+!
+interface Port-Channel5.100
+   description ExtremeCable_105_peer2_Port-Channel15
+   no shutdown
+   encapsulation dot1q vlan 108
+   flow tracker sampled FLOW-TRACKER
+   ip address 192.168.100.115/31
+   service-profile TEST-QOS-PROFILE2
+!
+interface Ethernet1
+   description Cybercast_101_peerDevice1_Ethernet11
+   no shutdown
+   speed forced 10000full
+   no switchport
+   channel-group 2 mode active
+!
+interface Ethernet1/4
+   description StreamFast_102_peerDevice2_Ethernet1/12
+   no shutdown
+   speed forced 10000full
+   no switchport
+   channel-group 5 mode passive
+!
+interface Ethernet1/5
+   description StreamFast_102_peer2_Port-Channel15
+   no shutdown
+   speed forced 10000full
+   no switchport
+   channel-group 5 mode passive
+!
+interface Ethernet2
+   description Cybercast_101_peer1_Port-Channel10
+   no shutdown
+   speed forced 10000full
+   no switchport
+   channel-group 2 mode active
+!
+interface Ethernet3
+   description Custom eth3 description
+   no shutdown
+   no switchport
+   channel-group 2 mode active
+!
+interface Loopback0
+   description ROUTER_ID
+   no shutdown
+   ip address 2.3.4.1/32
+!
+ip routing
+no ip routing vrf MGMT
+!
+ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY
+   seq 10 permit 2.3.4.5/24 eq 32
+!
+route-map RM-CONN-2-BGP permit 10
+   match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY
+!
+router bgp 65005
+   router-id 2.3.4.1
+   update wait-install
+   no bgp default ipv4-unicast
+   maximum-paths 4 ecmp 4
+   neighbor IPv4-UNDERLAY-PEERS peer group
+   neighbor IPv4-UNDERLAY-PEERS send-community
+   neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000
+   redistribute connected route-map RM-CONN-2-BGP
+   !
+   address-family ipv4
+      neighbor IPv4-UNDERLAY-PEERS activate
+!
+end

ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/node-type-l3-port-channels.yml

@@ -0,0 +1,181 @@
+hostname: node-type-l3-port-channels
+is_deployed: true
+router_bgp:
+  as: '65005'
+  router_id: 2.3.4.1
+  bgp:
+    default:
+      ipv4_unicast: false
+  maximum_paths:
+    paths: 4
+    ecmp: 4
+  redistribute:
+    connected:
+      enabled: true
+      route_map: RM-CONN-2-BGP
+  updates:
+    wait_install: true
+  peer_groups:
+  - name: IPv4-UNDERLAY-PEERS
+    type: ipv4
+    maximum_routes: 12000
+    send_community: all
+  address_family_ipv4:
+    peer_groups:
+    - name: IPv4-UNDERLAY-PEERS
+      activate: true
+service_routing_protocols_model: multi-agent
+ip_routing: true
+vlan_internal_order:
+  allocation: ascending
+  range:
+    beginning: 1006
+    ending: 1199
+aaa_root:
+  disabled: true
+config_end: true
+enable_password:
+  disabled: true
+transceiver_qsfp_default_mode_4x10: true
+spanning_tree:
+  mode: none
+vrfs:
+- name: MGMT
+  ip_routing: false
+management_api_http:
+  enable_vrfs:
+  - name: MGMT
+  enable_https: true
+ethernet_interfaces:
+- name: Ethernet1
+  description: Cybercast_101_peerDevice1_Ethernet11
+  peer_type: l3_port_channel
+  peer: peerDevice1
+  peer_interface: Ethernet11
+  shutdown: false
+  switchport:
+    enabled: false
+  speed: forced 10000full
+  channel_group:
+    id: 2
+    mode: active
+- name: Ethernet2
+  description: Cybercast_101_peer1_Port-Channel10
+  peer_type: l3_port_channel
+  peer: peer1
+  peer_interface: Port-Channel10
+  shutdown: false
+  switchport:
+    enabled: false
+  speed: forced 10000full
+  channel_group:
+    id: 2
+    mode: active
+- name: Ethernet3
+  description: Custom eth3 description
+  peer_type: l3_port_channel
+  peer: peer1
+  peer_interface: Port-Channel10
+  shutdown: false
+  switchport:
+    enabled: false
+  channel_group:
+    id: 2
+    mode: active
+- name: Ethernet1/4
+  description: StreamFast_102_peerDevice2_Ethernet1/12
+  peer_type: l3_port_channel
+  peer: peerDevice2
+  peer_interface: Ethernet1/12
+  shutdown: false
+  switchport:
+    enabled: false
+  speed: forced 10000full
+  channel_group:
+    id: 5
+    mode: passive
+- name: Ethernet1/5
+  description: StreamFast_102_peer2_Port-Channel15
+  peer_type: l3_port_channel
+  peer: peer2
+  peer_interface: Port-Channel15
+  shutdown: false
+  switchport:
+    enabled: false
+  speed: forced 10000full
+  channel_group:
+    id: 5
+    mode: passive
+port_channel_interfaces:
+- name: Port-Channel2
+  peer_type: l3_port_channel
+  peer: peer1
+  peer_interface: Port-Channel10
+  ip_address: 192.168.1.102/31
+  shutdown: false
+  switchport:
+    enabled: false
+  description: Cybercast_101_peer1_Port-Channel10
+  service_profile: TEST-QOS-PROFILE1
+  flow_tracker:
+    sampled: FLOW-TRACKER
+- name: Port-Channel5
+  peer_type: l3_port_channel
+  peer: peer2
+  peer_interface: Port-Channel15
+  ip_address: 192.168.1.105/31
+  shutdown: false
+  switchport:
+    enabled: false
+  description: StreamFast_102_peer2_Port-Channel15
+  service_profile: TEST-QOS-PROFILE1
+  eos_cli: '! TEST RAW_EOS_CLI
+
+    '
+  service_policy:
+    qos:
+      input: TEST_POLICY
+- name: Port-Channel5.100
+  peer_type: l3_port_channel
+  peer: peer2
+  peer_interface: Port-Channel15
+  ip_address: 192.168.100.115/31
+  shutdown: false
+  description: ExtremeCable_105_peer2_Port-Channel15
+  service_profile: TEST-QOS-PROFILE2
+  flow_tracker:
+    sampled: FLOW-TRACKER
+  encapsulation_dot1q:
+    vlan: 108
+loopback_interfaces:
+- name: Loopback0
+  description: ROUTER_ID
+  shutdown: false
+  ip_address: 2.3.4.1/32
+prefix_lists:
+- name: PL-LOOPBACKS-EVPN-OVERLAY
+  sequence_numbers:
+  - sequence: 10
+    action: permit 2.3.4.5/24 eq 32
+route_maps:
+- name: RM-CONN-2-BGP
+  sequence_numbers:
+  - sequence: 10
+    type: permit
+    match:
+    - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY
+flow_tracking:
+  sampled:
+    sample: 10000
+    trackers:
+    - name: FLOW-TRACKER
+      record_export:
+        on_inactive_timeout: 70000
+        on_interval: 300000
+      exporters:
+      - name: CV-TELEMETRY
+        collector:
+          host: 127.0.0.1
+        local_interface: Loopback0
+        template_interval: 3600000
+    shutdown: false