The system auto-provisions any required objects, which means that subscriber interfaces, group interfaces, and SAPs do not need to be provisioned. These objects are hidden from configuration and are not modifiable. Aside from the capture SAP, the only required configuration is the VPRN or IES where IP forwarding occurs.
You can manage SAP creation by configuring a SAP template under the configure subscriber-mgmt sap-template command. The SAP template supports the configuration of the following:
The hold-time command delays the deletion of the SAP after the last PFCP session is removed. The infinite option can be configured for the hold-time but it is not recommended. Idle SAPs can be cleared using the idle-saps option under clear subscriber-mgmt sap-template.
The cpu-protection and dist-cpu-protection commands configure CPU protection; see the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide, section "Centralized CPU protection and distributed CPU protection" for more information about CPU protection.
Similarly, group-interface creation can be manipulated by configuring a group interface template under the configure subscriber-mgmt group-interface-template command. When setting up a PFCP session, a template name is passed using PFCP. If the template name is absent, the system falls back to the name "default".
A group interface template allows the configuration of the following:
ip-mtu; is applied to outgoing packets
urpf-check; see 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide, section "Unicast reverse path forwarding check"
icmp
remote-proxy-arp; see 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide, section "Proxy ARP"
Changing the configuration of a template does not automatically change all created SAPs or group interfaces.