Copyright © 2014-2021 VMware, Inc. All rights reserved. Copyright and trademark information.
NSX Autonomous Edge API Guide
NSX-T Data Center 3.2.0
Table of Contents
- Overview
- API Methods
- API Types
- API Type Schemas
- API Errors
- Deprecated Types and Methods
Overview
Introduction
NSX Autonomous Edge provides a programmatic API to automate management activities. The API follows a resource-oriented Representational State Transfer (REST) architecture, using JSON object encoding. Clients interact with the API using RESTful web service calls over the HTTPS protocol.
Each API method is identified by a request method and URI. Method parameters are specified as key-value pairs appended to the URI. Unless otherwise noted, request and response bodies are encoded using JSON, and must conform to the JSON schema associated with each method. The content type of each request and reply is "application/json" unless otherwise specified. Each request that can be made is documented in the API Methods section. The associated request and response body schemas are documented in the API Schemas section.
If you provide URL-encoded UTF-8 characters in the URL of your API request, you must include the header "Content-Type:charset=UTF-8" in your request.
API Policy: Changes, Deprecations and Removals
VMware NSX Data Center and associated firewall offerings may add new features in a NSX Data Center release. These new features may lead to additional APIs or backward compatible changes to existing APIs to support the new features.
Changes to the API that lead to incompatibility with previous releases will be announced at least one year prior to the change. These changes will be announced and documented in the NSX Data Center API Guide and in the NSX Data Center release notes. These changes can be implemented in either major or minor releases of NSX Data Center.
NSX Data Center APIs marked as "experimental" or that are not documented in the NSX Data Center API Guide are not subject to this policy. This indicates that the API may be changed or removed without notice in a future NSX Data Center release.
Definitions:
- Major Release: Designated by an increment of the "x" digit of the x.y.z product version.
- Minor Release: Designated by an increment of the "y" digit of the x.y.z product version.
API Data Types and Allowed Ranges
The NSX-T API uses JSON to represent API request and response payloads, and uses JSONSchema to describe the schema of these payloads. The data types are:
string: a sequence of UTF-8 characters. If a particular string property has a maximum length, it is represented in the documentation with a maxLength property.
integer: a signed 64-bit value. Unless a minimum or maximum value is shown in the documentation, integer values may take on values in the range -9,223,372,036,854,775,808 to 9,223,372,036,854,775,807.
unsigned_integer: an unsigned 64-bit value. Unless a minimum or maximum value is shown in the documentation, integer values may take on values in the range 0 to 9,223,372,036,854,775,807.
int: a signed 32-bit value. Unless a minimum or maximum value is shown in the documentation, int values may take on values in the range -2,147,483,648 to 2,147,483,647.
number: a 64-bit floating point number. Unless a minimum or maximum value is shown in the documentation, number values may take on values in the range 4.9406564584124654 x 10-324 to 1.7976931348623157 x 10308.
boolean: the values true or false. Do not use quotes when sending boolean values in payloads.
object: a nested JSON object.
array: an array of one of the above types.
Formats
Some API types have a required format, and payloads that do not conform to the required format will be rejected. If a property has a required format, it is listed in the "Notes" section in this API Guide. The following formats are used in NSX-T:
ipv4: Must be a valid Internet Protocol version 4 address, in dotted-quad notation. For example, "192.168.1.232".
ipv6: Must be a valid Internet Protocol version 6 address, as described in RFC 1924. For example, "2001:0db8:85a3:0000:0000:8a2e:0370:7334". Abbreviations are supported.
ip: Either an ipv4 or ipv6 address.
hostname: An internet hostname, as described in RFC 1123. For example, "example.com"
ipv4-cidr-block: An ipv4 Classless Inter-Domain Routing (CIDR) block, expressed as a base ipv4 address, a slash, and the number of bits in the subnet mask. For example, "10.1.0.1/24".
ipv6-cidr-block: An ipv6 Classless Inter-Domain Routing (CIDR) block, expressed as a base ipv6 address, a slash, and the number of bits in the subnet mask. For example, "2001:db8::/32".
ip-cidr-block: Either an ipv4-cidr-block or an ip-v6-cidr-block.
ipv4-address-range: A range of ipv4 addresses, expressed as a lower-bound ipv4 address, a dash, and an upper-bound ipv4 address. For example, "192.168.1.0-192.168.1.255"
ipv6-address-range: A range of ipv6 addresses, expressed as a lower-bound ipv6 address, a dash, and an upper-bound ipv6 address. For example, "fe80::0202:b3ff:fe1e:8329-fe80::0202:b3ff:fe1e:832a"
address-or-block-or-range: Either an ip address, an ip-cidr-block, an ipv4-address-range, or an ipv6-address-range.
port-or-range: A port number (an integer in the range 0 to 65535) or a range of port numbers, expressed as a lower and upper port number, separated by a dash. Examples: "80" or "997-1023".
hostname-or-ip: Either a hostname or an ip address.
hostname-or-ipv4: Either a hostname or an ipv4 address.
list-of-address-or-block-or-range: A comma-separated list address-or-block-or-range.
mac-address: A Media Access Control (MAC) address. MAC addresses are six hexadecimal numbers, separated by either colons ":" or dashes "-". Case is not significant. Examples: "20:f3:75:5e:47:f0" or "20-F3-75-5E-47-F0".
Request Failures
It is possible for any request to fail. Errors are reported using standard HTTP response codes. It should be assumed the following errors could be returned by any API method: 301 Moved Permanently, 307 Temporary Redirect, 400 Bad Request, 401 Unauthorized, 403 Forbidden, 412 Precondition Failed, 429 Too Many Requests, 500 Internal Server Error, 503 Service Unavailable. Where other errors may be returned, the type of error is indicated in the API method description. All errors are documented in the API Errors section. API requests may fail due to concurrent updates, where an API request collides with another API request, and NSX cannot reconcile the two operations. In that case, the client must re-fetch the resource, apply the changes, and re-submit the operation.
Request Authentication
Most API calls require authentication. This API supports several different authentication schemes, which are documented in this section. Multiple authentication schemes may not be used concurrently.
HTTP Basic Authentication
To authenticate a request using HTTP Basic authentication, the caller's credentials are passed using the 'Authorization' header. The header content should consist of a base64-encoded string containing the username and password separated by a single colon (":") character, as specified in RFC 1945 section 11.1.
For example, to authenticate a request using the credentials of user admin with password admin, include the following header with the request:
The following cURL command will authenticate to the manager using basic authentication and will issue a GET request for logical ports:
where:
USERNAME is the user to authenticate as,
PASSWORD is the password to provide, and
MANAGER is the IP address or host name of the NSX manager
For example:
Note: the -k argument instructs cURL to skip verifying the manager's self-signed X.509 certificate. It is more secure to verify that the server's certificate is signed by a Certificate Authority (CA) that you trust. To do that, omit the -k argument and use the --cacert <ca-file> option, where <ca-file> is a PEM-formatted file containing the CA certificate to trust.
For example:
Additional cURL examples below use the -k flag, but you can always substitute the --rootca <ca-file> argument for additional security.
In the above examples, USERNAME may be:
- A local user name. For example, "admin".
- A remote user name, of the form "user@domain", for example, "[email protected]". The domain must match a domain for a configured VIDM identity source or a configured LDAP identity source.
Session-Based Authentication
Session-based authentication is used by calling the /api/session/create authentication API to manage a session cookie. The session cookie returned in the result of a successful login must be provided in subsequent requests in order to associate those requests with the session.
Session state is local to the server responding to the API request. Idle sessions will automatically time-out, or can be terminated immediately using the POST /api/session/destroy API.
To obtain a session cookie, POST form data to the server using the application/x-ww-form-urlencoded media type, with fields "j_username" and "j_password" containing the username and password separated by an ampersand. Since an ampersand is a UNIX shell metacharacter, you may need to surround the argument with single quotes.
If the user is a remote user, append "@domain" to the username, for example, "[email protected]". The domain must match a domain for a configured VIDM identity source or a configured LDAP identity source.
The following cURL command will authenticate to the server, will deposit the session cookie in the file "cookies.txt", and will write all HTTP response headers to the file headers.txt. One of these headers is the X-XSRF-TOKEN header that you will need to provide in subsequent requests.
For example:
The manager will respond with the roles and permissions granted to the user, and cURL will deposit the session cookie into the file "cookies.txt".
In subsequent cURL requests, use the -b argument to specify the cookie file. You also need to pass the X-XSRF-TOKEN header that was saved to the headers.txt file, using cURL's -H option:
When the session expires, the manager will respond with a 403 Forbidden HTTP response, at which point you must obtain a new session cookie and X-XSRF-TOKEN.
Session cookies can be destroyed by using the /api/session/destroy API:
Authentication using an X.509 certificate and a Principal Identity
NSX supports using an X.509 client certificate for authentication. The certificate is associated with a principal identity (a short name, similar to a username), and that principal identity can be bound to an NSX role. This is useful for automated processes or scripts that perform NSX API calls, and has the advantage that a user password does not need to be stored with the script.
For information on how to import a certificate and set up a principal identity, see the section "Add a Role Assignment or Principal Identity" in the NSX-T Administration Guide.
To use the client certificate to authenticate, your client must have access to the certificate and its associated private key. How to specify client authentication depends on the client you are using. For example, with curl, you use the --key argument to give the filename containing the private key and the --cert argument to give the filename containg the public certificate.
Authentication in VMware Cloud on AWS (VMC)
To make API calls to an NSX-T Manager in the VMware Cloud on AWS service (VMC), you need to gather a few pieces of information:
- Your VMC Organization ID
- Your Software Defined Data Center (SDDC) ID
- Your API token
All of this information is available in the VMC web console, https://console.cloud.vmware.com
In VMC, you always exchange your API token for a limited-duration authentication token, which you then pass in a header with your API calls. This authentication token is valid for 30 minutes. After that time, you must obtain a new authentication token using your API token. If you use an expired authentication token, the API call will be rejected.
To obtain an authentication token, you issue a POST request to the URL https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize, passing your API token in a form. To do this with cURL:
For example, if your refresh token is aB1jtC5yk2rDL6A1KPxzM0W4D7OeHFUNuXFHZidufYS3fIwn60ZRag0Y9dvX15Qv, the command will be:
You will receive a JSON response with several properties. The "access_token" property contains the token you will need to provide with your API requests. An easy way to parse this token out of the response is to use the "jq" utility. For example:
produces just the access token. You can set an environment variable with the correct authentication header with:
The AUTH_HDR environment variable now contains the authentication header. The token itself will be a long string of characters and digits.
Once you have your authentication token, you need to determine the URL for accessing the NSX-T manager in your SDDC. To do that, you issue a GET request to the endpoint https://vmc.vmware.com/vmc/api/orgs/<org-id>/sddcs/<sddc-id>, where <org-id> is your organization's ID and <sddc-id> is your SDDC's ID. The URL of the NSX-T manager will be in the resource_config.nsx_api_public_endpoint_url property. For example, if your organizations's ID is a003c3a5-3f68-4a8c-a74f-f79a0625da17 and your SDDC is 449369c7-7936-4f7f-b46e-624cdb2a0a99:
The output will look like:
This is the URL you should use to access your NSX-T manager from the internet. Append the particular API's URL to this base URL. For example, to list all domains, the API is "/policy/api/v1/infra/domains", so the full request will look like the following:
Example Requests and Responses
Example requests and responses are provided for most of the API calls below. Your actual response might differ from the example in the number of fields returned because optional empty fields are not returned when you make an API call.
Restrictions on Certain Fields in a Request
When configuring layer 2 switching, the following fields can contain any character except semicolon (;), vertical bar (|), equal sign (=), comma (,), tilde (~), and the "at" sign (@). They also have a length limitation as specified below:
- Logical switch display name. Maximum length: 80 bytes.
- Host switch name in TransportZone. Maximum length: 80 bytes.
- Uplink name in UplinkHostSwitchProfile. Maximum length: 47 bytes.
Optimistic Concurrency Control and the _revision property
Overview
In order to prevent one client from overwriting another client's updates, NSX-T employs a technique called optimistic concurrency control.
All REST payloads contain a property named "_revision". This is an integer that is incremented each time an existing resource is updated. Clients must provide this property in PUT requests and it must match the current _revision or the update will be rejected. This guards against the following situation:
Client 1 reads resource A.
Client 2 reads resource A.
Client 1 replaces the display_name property of resource A and does a PUT to replace the resource.
Client 2 replaces is different property of resource A and attempts to perform a PUT operation.
Without optimistic concurrency control, Client 2's update would overwrite Client 1's update to the display_name property. Instead, Client 2 receives a 409 Conflict error. To recover, Client 2 must fetch the resource again, apply the change, and perform a PUT.
Exceptions for /policy APIs
APIs whose URI begins with /policy have slightly different behavior. For those APIs, the _revision property must not be set when PUT is used to create a new resource. Once the resource is created, however, the _revision property must be provided with PUT operations.
PATCH and _revision for /policy APIs
APIs whose URI begins with /policy support the PATCH operation. Those APIs do not require that the _revision property be provided. A client can, however, request that the _revision property be checked when it is performing a PATCH in the /infra path. To do this, the client should pass the query parameter enforce_revision_check, e.g. PATCH /infra?enforce_revision_check=true.
PUT Operations
NSX-T conforms to REST and HTTP standards regarding the operation of PUT operations. A PUT is always a full replace of a resource, and if any properties are omitted from the payload, those properties will be reset to default values. It is suggested that API clients retrieve the existing resource, apply any desired changes to the copy of the resource, and PUT the entire modified resource.
Partial patching of objects is a feature supported by NSX that allows patching a subset of properties of any object. This behavior needs to be explicitly enabled. When partial patching is disabled (default behavior), the entire payload of object is expected to be provided in both PUT and PATCH operations for the /policy APIs.
In order to perform partial patching of existing objects using PATCH operation, partial patching should be enabled using either one of the following approach:
- System-wide partial patch configuration
Partial patch can be enabled/disabled in the system by using the Partial Patch Config api (i.e. PATCH /policy/api/v1/system-config/nsx-partial-patch-config) with sample request payload.
{ "enable_partial_patch": "true" }Default is 'false'.
Note: If the API request header has 'nsx-enable-partial-patch' parameter, then the header takes precedence over this system-wide configuration. - Header parameter (request level configuration)
Partial patch can also be enabled/disabled using API request header parameter. This will override the system-wide configuration for a particular request.
To enable partial patch, use 'nsx-enable-partial-patch=true'
To disable partial patch, use 'nsx-enable-partial-patch=false'
If this parameter is not passed in header, the system level configuration will be considered for Partial Patch operation. This header parameter will be considered only for PATCH requests. For other requests (e.g. PUT, POST etc.), this header parameter will be ignored.
Some important considerations/notes on Partial Patch:
- Array properties will be replaced entirely in partial patch.
- If PATCH api is executed on a non-existing object, a new object will be created after performing all applicable validations.
- There are cases where properties of an object are inter-dependent on each other e.g. username and password, IP address and thumbprint etc. In such cases, the partial patch request expects all such inter-dependent fields to be provided (either all or none).
- Partial patch is not supported for 'Infra' object.
- Certain types like Labels, Security Policies (for the 'rules' attribute) and Services have special
handling for certain attributes in PATCH request. This behavior will not be overridden by Partial Patch.
For instance, specifying rules on Security policies as a part of the PATCH invocation merges the specified rules with the existing rules. For full replacement of rules, PUT operation needs to be performed on the Security Policy. - Partial patch will not work for properties accepting polymorphic types if the specified value has a type that is different from that of the existing value.
API Rate Limiting
The NSX-T API service has three settings that control the rate of incoming API requests:
1) A per-client rate limit, in requests per second. If a client makes more requests than this limit in one second, the API server will refuse to service the API request and will return an HTTP 429 Too Many Requests Error. By default, this limit is 100 requests per second.
2) A per-client concurrency limit. This is the maximum number of outstanding requests that a client can have. For example, a client can open multiple connections to NSX-T and submit operations on each connection. When this limit is exceeded, the server returns a 429 Too Many Requests error to the client. By default, this limit is 40 concurrent requests.
3) An overall maximum number of concurrent requests. This is the maximum number of API requests that can be in process on the server. If the server is at this limit, additional requests will be refused and the HTTP error 503 Service Unavailable will be returned to the client. By default, this limit is 199 concurrent requests.
The first two limits exist to provide some level of fairness across multiple clients of NSX-T, and are intended to prevent one greedy client from preventing other clients from making API requests.
The last limit is the server's way of protecting itself against an unintentional (or intentional) denial of service attack.
While it is possible to configure these rate limits using the /api/v1/node/services/http API, it is not recommended. Instead, you should design your API client to gracefully deal with situations where limits are exceeded.
Designing API client code to work gracefully with rate limits
One approach is to build in throttling into the client code so that it never sends more than 100 requests in a given second and that it never has more than 40 concurrent requests in flight.
However, there isn't any way to ensure that the overall concurrency limits are never hit. That is because there may be other clients calling APIs, driving up the load on the server. API clients need to check for the HTTP error 503 Service Unavailable. In the event a 503 error is received, the simplest strategy is to insert a delay, possibly with an exponential backoff in the event that server load is high.
There are open-source libraries than can help you implement this retry/backoff behavior, such as Google's Retry helper in its Python google-api-core library. For an example of using this library with the NSX-T APIs, see https://github.com/vmware-samples/nsx-t/blob/master/python/basics/rate-limits.py
OpenAPI Specification of NSX-T APIs
You can download OpenAPI specifications for the various NSX-T APIs at the following URLs:
NSX-T Data Center Manager API:
APIs for NSX-T administration; node and cluster management APIs and
fabric management APIs for on-premise customers.
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_api.yaml
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_api.json
APIs for managing logical networking in NSX-T for on-premise customers.
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_policy_api.yaml
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_policy_api.json
APIs for managing logical networking in NSX-T for VMware Cloud customers.
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_vmc_policy_api.yaml
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_vmc_policy_api.json
APIs for managing AWS underlay networking for VMware Cloud customers.
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_vmc_aws_integration_api.yaml
- GET https://<nsx-mgr>/api/v1/spec/openapi/nsx_vmc_aws_integration_api.json
Logical Routing And Services Configuration
Logical Routing And Services Configuration: High Availability
Read all peers in the cluster
Read all peers in the clusterRequest:
Example Request: GET https://<ip>/api/v1/high-availability Successful Response:
Example Response: { "nodes": [ { "interface": [ { "address": "10.52.6.156/19", "name": "eth0", "interface_type": "MANAGEMENT" }, { "address": "169.254.100.1/24", "name": "nsx-edge-vtep", "interface_type": "TUNNEL" } ], "member_index": 0, "node_id": "9d2869bb-7fda-46d9-8510-7a8bd93849f7", "thumbprint": "0f8bb5b34ad7245765853a578386d75366415be8637a3558f0a672ab4f77a033" } ] } Required Permissions: Feature: high_availability Additional Errors:
Delete a specific HighAvailabilityPeer
Delete a specific HighAvailabilityPeerRequest:
Example Request: DELETE https://<ip>/api/v1/high-availability/nodes/640912b0-4820-46f0-b7c2-7a9e2cb57500 Successful Response:
Required Permissions: Feature: high_availability Additional Errors:
Read node status
Returns information about the appliance's statusRequest:
Example Request: GET https://<ip>/api/v1/high-availability/nodes/640912b0-4820-46f0-b7c2-7a9e2cb57500/status Successful Response:
Example Response: { "admin_state": "UP", "high_availability_status": "ACTIVE", "node_status": "UP", "vtep_state": "UP" } Required Permissions: Feature: high_availability Additional Errors:
API to call when the primary API node edge is lost, crashed or dead
Dissolve the high-availability cluster and make this node the primary nodefor API server. This node will no longer synchronize config with older peer.
Please deploy and add a new secondary node to the high-availability cluster.
Until this is done, the node is running without a standBy peer for
high-availability.
Request:
Example Request: POST https://<ip>/api/v1/high-availability?action=dissolve_and_make_primary Successful Response:
Required Permissions: Feature: high_availability Additional Errors:
Logical Routing And Services Configuration: Logical Ports
Create a Logical Port
Creates a logical port. The required parameters includeresource_type.
Request:
Example Request: POST https://<ip>/api/v1/ports { "display_name": "lrPort_2", "vlan_id": 20, "exit_interface": "eth2", "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "resource_type": "LogicalRouterPort" } Successful Response:
Content-type: application/json
Example Response: { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Required Permissions: Feature: routing_routers Additional Errors:
List Ports
Returns information about all logical ports.Request:
Example Request: GET https://<ip>/api/v1/ports Successful Response:
Example Response: { "_self": { "href": "/api/v1/ports", "rel": "self" }, "result_count": 1, "results": [ { "subnets": [ { "ip_addresses": [ "192.168.1.1" ], "prefix_length": 24 } ], "display_name": "lrport_1", "urpf_mode": "STRICT", "vlan_id": 10, "exit_interface": "eth2", "mac_address": "00:50:56:bc:af:45", "id": "48e5f449-153f-4d31-9e98-64a3f1ecc3fc", "resource_type": "LogicalRouterPort" } ], "_schema": "LogicalPortListResult" } Required Permissions: Feature: routing_routers Additional Errors:
Get the statistics of a specified LogicalRouterPort
Returns the statistics for the Logical Router Port. Request:Example Request: GET https://<ip>/api/v1/ports/f37f587f-171c-41f4-8b6e-6690c0a24649/statistics Successful Response:
Example Response: { "admin_state": "UP", "operational_state": "UP", "last_update_timestamp": 1535499424061, "logical_router_port_id": "f37f587f-171c-41f4-8b6e-6690c0a24649", "rx": { "dropped_packets": 12954, "total_bytes": 10965364, "total_packets": 108647 }, "tx": { "dropped_packets": 0, "total_bytes": 8915908, "total_packets": 94886 } } Required Permissions: Feature: routing_routers Additional Errors:
Delete a Logical Port
Deletes the specified logical port.Request:
Example Request: DELETE https://<ip>/api/v1/ports/258c50b4-c960-4005-9023-f7946e302162 Successful Response:
Example Response: None Required Permissions: Feature: routing_routers Additional Errors:
Read Logical Port
Returns information about the specified logical port. Request:Example Request: GET https://<ip>/api/v1/ports/c84f70b4-7500-4087-bb2d-3f68f5a32060 Successful Response:
Example Response: { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Required Permissions: Feature: routing_routers Additional Errors:
Update a Logical Port
Modifies the specified logical port. Required parameters include theresource_type.
Request:
Example Request: PUT https://<ip>/api/v1/ports/258c50b4-c960-4005-9023-f7946e302162 { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Successful Response:
Example Response: { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Required Permissions: Feature: routing_routers Additional Errors:
Logical Routing And Services Configuration: Routing
Get forwarding table on the logical router
Get forwarding table on the service router (currently only 1 service routeris supported).
Request:
Example Request: GET https://<ip>/api/v1/routing/forwarding-table Successful Response:
Example Response: { "last_update_timestamp": 1536891039759, "result_count": 2, "results": [ { "admin_distance": 0, "logical_router_port_id": "5d4500b0-1355-4b17-a944-97412b49bfda", "network": "100.64.144.0/31", "next_hop": "169.254.0.1", "route_type": "route" }, { "admin_distance": 0, "logical_router_port_id": "f2342125-da97-42c2-ac22-1951360268e2", "network": "127.0.0.1/32", "next_hop": "", "route_type": "route" } ] } Required Permissions: Feature: routing_routers Additional Errors:
Paginated List of Static Routes
Returns information about configured static routes, including thenetwork address and next hops for each static route.
Request:
Example Request: GET https://<ip>/api/v1/routing/static-routes Successful Response:
Example Response: TBD Required Permissions: Feature: routing_routers Additional Errors:
Add Static Routes on a Logical Router
Adds a new static route on a Logical RouterRequest:
Example Request: POST https://<ip>/api/v1/routing/static-routes { "resource_type": "StaticRoute", "description": "", "display_name": "to customer A", "next_hops": [ { "administrative_distance": "2", "ip_address": "192.168.200.254" } ], "network": "192.168.200.0/24" } Successful Response:
Example Response: TBD Required Permissions: Feature: routing_routers Additional Errors:
Delete a specific Static Route on a Logical Router
Deletes a specific static route on the specified logical router.Request:
Example Request: DELETE https://<ip>/api/v1/routing/static-routes/7a62a0c5-1ea1-4b25-9d43-dce1c0fa4444 Successful Response:
Required Permissions: Feature: routing_routers Additional Errors:
Get a specific Static Route on a Logical Router
Read a specific static routes on the specified logical router.Request:
Example Request: GET https://<ip>/api/v1/routing/static-routes/65fb67d8-0485-4c23-8e59-b9ccd8799a4c Successful Response:
Example Response: TBD Required Permissions: Feature: routing_routers Additional Errors:
Update a specific Static Route Rule on a Logical Router
Update a specific static route on the specified logical router.Request:
Example Request: PUT https://<ip>/api/v1/routing/static-routes/65fb67d8-0485-4c23-8e59-b9ccd8799a4c { "resource_type": "StaticRoute", "description": "Static route to customer A", "display_name": "to customer A", "next_hops": [ { "administrative_distance": 2, "ip_address": "192.168.200.254" } ], "network": "192.168.200.0/24", "_revision": 0 } Successful Response:
Example Response: TBD Required Permissions: Feature: routing_routers Additional Errors:
Logical Routing And Services Configuration: VPN
Logical Routing And Services Configuration: VPN: L2VPN
- GET /api/v1/vpn/l2vpn/sessions
- POST /api/v1/vpn/l2vpn/sessions?action=create_with_peer_code
- DELETE /api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>
- GET /api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>
- PUT /api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>?action=update_with_peer_code
- GET /api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>/statistics
Get all L2VPN sessions
Get list of all L2VPN sessions Request:Example Request: GET https://<ip>/api/v1/vpn/l2vpn/sessions Successful Response:
Example Response: { "result_count": 1, "results": [ { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } ] } Required Permissions: Feature: vpn Additional Errors:
Delete a L2VPN session
Delete a specific L2VPN session. Request:Example Request: DELETE https://<ip>/api/v1/vpn/l2vpn/sessions/f962173f-ac03-4d08-8366-56a41779f611 Successful Response:
Required Permissions: Feature: vpn Additional Errors:
Get a L2VPN session
Get a specific L2VPN session Request:Example Request: GET https://<ip>/api/v1/vpn/l2vpn/sessions/a4181e5c-5532-4498-af88-1c09a452a0b6 Successful Response:
Example Response: { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } Required Permissions: Feature: vpn Additional Errors:
Get L2VPN session statistics
Get statistics of a specific L2VPN session Request:Example Request: GET https://<ip>/api/v1/vpn/l2vpn/sessions/a4181e5c-5532-4498-af88-1c09a452a0b6/statistics Successful Response:
Example Response: { "display_name": "L2Vpn session", "transport_tunnels": [ { "ipsec_session_id": "75c2ab96-7bd1-4084-bfcf-faca45756376" } ] "l2vpn_session_id": "6851e7d9-a0be-4445-a3b8-b43cfeed7a84", "reference_count": 1, "session_status": "UP", "traffic_counter": { "bytes_in": 7422140, "bytes_out": 9036376, "dropped_packets_in": 0, "dropped_packets_out": 0, "packets_in": 20200, "packets_out": 24492 } } Required Permissions: Feature: vpn Additional Errors:
Update an L2VPN session with a new peer code
Updating an L2VPN Session can be performed only through this APIby specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the system-owned resources associated with it
is not allowed.
API supported only when L2VPN Service is in Client Mode.
Request:
Example Request: PUT https://<ip>/api/v1/vpn/l2vpn/sessions/
Example Response: { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } Required Permissions: Feature: vpn Additional Errors:
Create an L2VPN session from Peer Code
Create an L2VPN session from Peer Code.In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. Local Endpoint are created only when required, i.e.,
an IPSec VPN Local Endpoint with same local address does not
already exist.
API supported only when L2VPN Service is in Client Mode.
Request:
Example Request: POST https://<ip>/api/v1/vpn/l2vpn/sessions?action=create_with_peer_code { "description": "L2Vpn session", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_code": "MCwwYTMyNWE4LHsic2l0ZU5hbWUiOiJJUFNlY1ZQTl9Sb3V0ZUJhc2VzZFNlc3Npb25fMDAxIiwic3JjVGFwSXAiOiIx NjkuMjU0LjY0LjIiLCJkc3RUYXBJcCI6IjE2OS4yNTQuNjQuMSIsImlrZU9wdGlvbiI6ImlrZXYyIiwiZW5jYXBQcm90 byI6ImdyZS9pcHNlYyIsImRoR3JvdXAiOiJkaDE0IiwiZW5jcnlwdEFuZERpZ2VzdCI6ImFlcy1nY20vc2hhLTI1NiIs InBzayI6InBhbmthaiIsInR1bm5lbHMiOlt7ImxvY2FsSWQiOiIxLjEuNS4xMDAiLCJwZWVySWQiOiIxOTIuMTY4LjEy OC4xIiwibG9jYWxWdGlJcCI6IjE5Mi4xNjguMS4yLzI0In1dfQ==", "peer_address": "10.10.10.10", "local_address": "20.20.20.20" } ] } Successful Response:
Example Response: { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } Required Permissions: Feature: vpn Additional Errors:
System Administration: Configuration: Fabric: Nodes
System Administration: Configuration: Fabric: Nodes: DNS
Update the Node's Name Servers
Modifies the list of servers that the node uses to look up IPaddresses associated with given domain names. If DHCP is configured, this
method returns a 409 CONFLICT error, because DHCP manages the list of name
servers.
Request:
Example Request: PUT https://<nsx-mgr>/api/v1/node/network/name-servers { "name_servers": [ "10.33.38.1", "10.33.38.2", "10.33.38.3" ] } Successful Response:
Example Response: { "name_servers": [ "10.33.38.1", "10.33.38.2", "10.33.38.3" ] } Required Permissions: Feature: system_administration Additional Errors:
Read the Node's Name Servers
Returns the list of servers that the node uses to look up IPaddresses associated with given domain names.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/name-servers Successful Response:
Example Response: { "name_servers": [ "10.33.38.1", "10.33.38.2" ] } Required Permissions: Feature: system_administration Additional Errors:
Read the Node's Search Domains
Returns the domain list that the node uses to completeunqualified host names. When a host name does not include a fully
qualified domain name (FQDN), the NSX Management node appends the
first-listed domain name to the host name before the host name is looked
up. The NSX Management node continues this for each entry in the domain
list until it finds a match.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/search-domains Successful Response:
Example Response: { "search_domains": [ "eng.company.com", "company.com" ] } Required Permissions: Feature: system_administration Additional Errors:
Update the Node's Search Domains
Modifies the list of domain names that the node uses to completeunqualified host names. If DHCP is configured, this method returns
a 409 CONFLICT error, because DHCP manages the list of name servers.
Request:
Example Request: PUT https://<nsx-mgr>/api/v1/node/network/search-domains { "search_domains": [ "eng.company.com", "company.com", "eng-backup.company.com" ] } Successful Response:
Example Response: { "search_domains": [ "eng.company.com", "company.com" "eng-backup.company.com" ] } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: File Store
- GET /api/v1/node/file-store
- POST /api/v1/node/file-store?action=create_remote_directory
- DELETE /api/v1/node/file-store/<file-name>
- GET /api/v1/node/file-store/<file-name>
- POST /api/v1/node/file-store/<file-name>?action=copy_to_remote_file
- POST /api/v1/node/file-store/<file-name>?action=copy_from_remote_file
- POST /api/v1/node/file-store/<file-name>
- GET /api/v1/node/file-store/<file-name>/data
- PUT /api/v1/node/file-store/<file-name>/data
- GET /api/v1/node/file-store/<file-name>/thumbprint
List node files
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/file-store Successful Response:
Example Response: { "_schema": "FilePropertiesListResult", "_self": "/node/file-store", "result_count": 2, "results": [ { "_schema": "FileProperties", "_self": "/node/file-store/test1.txt", "created_epoch_ms": 1457048893748, "modified_epoch_ms": 1457048860639, "name": "test1.txt", "size": 71 }, { "_schema": "FileProperties", "_self": "/node/file-store/test.txt", "created_epoch_ms": 1457048848624, "modified_epoch_ms": 1457048560936, "name": "test.txt", "size": 50 } ] } Required Permissions: Feature: system_administration Additional Errors:
Read file properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/file-store/test1.txt Successful Response:
Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/test1.txt", "created_epoch_ms": 1457049714901, "modified_epoch_ms": 1457048860639, "name": "test1.txt", "size": 71 } Required Permissions: Feature: system_administration Additional Errors:
Delete file
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Upload a file to the file store
When you issue this API, the client must specify:- HTTP header Content-Type:application/octet-stream.
- Request body with the contents of the file in the filestore.
In the CLI, you can view the filestore with the get files command.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/file-store/test.txt This is a sentence that is added to the file test.txt. Successful Response:
Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/test.txt", "created_epoch_ms": 1457048560936, "modified_epoch_ms": 1457048560936, "name": "test.txt", "size": 54 } Required Permissions: Feature: system_administration Additional Errors:
Replace file contents
Request:Example Request: PUT https://<nsx-mgr>/api/v1/node/file-store/test1.txt/data This is updated content that overwrites the former content. Successful Response:
Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/test2.txt", "created_epoch_ms": 1457116797106, "modified_epoch_ms": 1457116797106, "name": "test2.txt", "size": 59 } Required Permissions: Feature: system_administration Additional Errors:
Read file contents
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/file-store/test1.txt/data Successful Response:
Example Response: This content can include anything that would be in a text file. Required Permissions: Feature: system_administration Additional Errors:
Read file thumbprint
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/file-store/test1.txt/thumbprint Successful Response:
Example Response: { "_schema": "FileThumbprint", "_self": "/node/file-store/test1.txt/thumbprint", "name": "test1.txt", "sha1": "ec23cb4208447ce1f81f7cfd4acc9000e20d4949", "sha256": "bda2390dc831e66c4977bc6d16968ed630793031c51e9072297f1e9746b3aca5" } Required Permissions: Feature: system_administration Additional Errors:
Copy a remote file to the file store
Copy a remote file to the file store. If you use scp or sftp,you must provide the remote server's SSH fingerprint. See the
NSX-T Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/file-store/file.txt?action=copy_from_remote_file { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/file.txt", "protocol" : { "name" : "scp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1", "authentication_scheme" : { "scheme_name" : "password", "username" : "root", "password" : "s4druMuJEw" } } } Successful Response:
Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/file.txt", "created_epoch_ms": 1459401409964, "modified_epoch_ms": 1459401409748, "name": "file.txt", "size": 19 } Required Permissions: Feature: system_administration Additional Errors:
Copy file in the file store to a remote file store
Copy a file in the file store to a remote server. If you use scp orsftp, you must provide the remote server's SSH fingerprint. See the
NSX-T Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/file-store/supportbundle.tgz?action=copy_to_remote_file { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/supportbundle.tgz", "protocol" : { "name" : "scp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1" , "authentication_scheme" : { "scheme_name" : "password", "username" : "root" , "password" : "s4druMuJEw" } } } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Create directory in remote file server
Create a directory on the remote remote server. Supports only SFTP.You must provide the remote server's SSH fingerprint. See the
NSX Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/file-store?action=create_remote_directory { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/folder", "protocol" : { "name" : "sftp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1" , "authentication_scheme" : { "scheme_name" : "password", "username" : "root" , "password" : "s4druMuJEw" } } } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Hardening
System Administration: Configuration: Fabric: Nodes: Hardening: Mandatory Access Control
Enable or disable Mandatory Access Control
Request:Example Request: PUT https://<nsx-mgr>/api/v1/node/hardening-policy/mandatory-access-control -d '{"enabled": true}' Successful Response:
Example Response: { "enabled": true, "status": "ENABLED_PENDING_REBOOT" } Required Permissions: Feature: system_administration Additional Errors:
Gets the enable status for Mandatory Access Control
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/hardening-policy/mandatory-access-control Successful Response:
Example Response: { "status": "ENABLED" } Required Permissions: Feature: system_administration Additional Errors:
Get the report for Mandatory Access Control
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/hardening-policy/mandatory-access-control/report > mac.tar.gz Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Logs
List available node logs
Returns the number of log files and lists the log files that reside on theNSX virtual appliance. The list includes the filename, file size,
and last-modified time in milliseconds since epoch (1 January 1970) for each
log file. Knowing the last-modified time with millisecond accuracy since
epoch is helpful when you are comparing two times, such as the time of a
POST request and the end time on a server.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/logs Successful Response:
Example Response: { "result_count": 70, "results": [ ... { "last_modified_time": 1442255851363, "log_name": "kern.log", "log_size": 175171 }, ... { "last_modified_time": 1442257962797, "log_name": "syslog", "log_size": 221701 }, ... ] } Required Permissions: Feature: system_log Additional Errors:
Read node log properties
For a single specified log file, lists the filename, file size, andlast-modified time.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/logs/syslog Successful Response:
Content-type: application/octet-stream
Example Response: { "last_modified_time": 1442258255032, "log_name": "syslog", "log_size": 224075 } Required Permissions: Feature: system_log Additional Errors:
Read node log contents
For a single specified log file, returns the content of the log file.This method supports byte-range requests. To request just a portion of a
log file, supply an HTTP Range header, e.g. "Range: bytes=<start>-<end>".
<end> is optional, and, if omitted, the file contents from start to the
end of the file are returned.'
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/logs/syslog/data Successful Response:
Content-type: application/octet-stream
Example Response: 2015-09-14T19:35:23.688Z 10.160.30.117 NSX - - - UserName:'[email protected]', ModuleName:'ACCESS_CONTROL', Operation:'LOGIN', Operation status:'success' 2015-09-14T19:35:23.817Z nsx-manager NSX - - - "GET /api/v1/node/status HTTP/1.1" 200 2550 "" "" 0.123531 Required Permissions: Feature: system_log Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge
System Administration: Configuration: Fabric: Nodes: NSX Edge: Certificates
Read api certificate properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update api certificate properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Dataplane
- GET /api/v1/node/services/dataplane
- POST /api/v1/node/services/dataplane?action=restart|start|stop
- PUT /api/v1/node/services/dataplane
- GET /api/v1/node/services/dataplane/cpu-stats
- PUT /api/v1/node/services/dataplane/ctrl-prio
- GET /api/v1/node/services/dataplane/dynamic-core
- PUT /api/v1/node/services/dataplane/dynamic-core
- GET /api/v1/node/services/dataplane/flow-cache
- PUT /api/v1/node/services/dataplane/flow-cache
- GET /api/v1/node/services/dataplane/flow-mon
- PUT /api/v1/node/services/dataplane/flow-mon
- PUT /api/v1/node/services/dataplane/intr-mode
- GET /api/v1/node/services/dataplane/l2vpn-pmtu
- PUT /api/v1/node/services/dataplane/l2vpn-pmtu
- GET /api/v1/node/services/dataplane/l3vpn-pmtu (Deprecated)
- PUT /api/v1/node/services/dataplane/l3vpn-pmtu (Deprecated)
- GET /api/v1/node/services/dataplane/pmtu-learning
- PUT /api/v1/node/services/dataplane/pmtu-learning
- PUT /api/v1/node/services/dataplane/qat-enable
- GET /api/v1/node/services/dataplane/qat-status
- GET /api/v1/node/services/dataplane/queue-num-per-port-per-core
- PUT /api/v1/node/services/dataplane/queue-num-per-port-per-core
- GET /api/v1/node/services/dataplane/ring-size
- PUT /api/v1/node/services/dataplane/rx-ring-size
- GET /api/v1/node/services/dataplane/status
- PUT /api/v1/node/services/dataplane/tx-ring-size
Read NSX EdgeDatapath service properties
Request:Example Request: GET https://<ip>/api/v1/node/services/dataplane Successful Response:
Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/dataplane", "rel": "self" }, "service_name": "dataplane", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge Datapath service properties
Request:Example Request: PUT https://<ip>/api/v1/node/services/dataplane { "service_name": "dataplane", "service_properties": { "logging_level": "DEBUG" } } Successful Response:
Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/dataplane", "rel": "self" }, "service_name": "dataplane", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: Feature: system_administration Additional Errors:
Get NSX Edge dataplane cpu stats
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane control packets prioritization setting
Enable or disable NSX Edge dataplane control packets prioritization.Dataplane service must be restarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane dynamic core feature enabled status
Enable or disable NSX Edge dataplane dynamic core feature. Dataplane service must berestarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Check dynamic core feature enabled status of NSX Edge dataplane
Check current status of NSX Edge dataplane dynamic core feature.Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane flow cache setting
Enable or disable NSX Edge dataplane flow cache. Dataplane service must berestarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Get NSX Edge dataplane flow cache setting
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Start NSX Edge dataplane flow monitor
Starts NSX Edge dataplane flow monitor on all or certain CPU core(s) with a timeout.Stops flow monitor after timeout and dumps the flow file on local file store
on edge. If top_10 argument is set to true top 10 flows are collected,
else all flows are collected.
Request:
Example Request: PUT https://<ip>/api/v1/node/services/dataplane/flow-mon { "core_id": "1", "timeout": "30" } (or) PUT https://<ip>/api/v1/node/services/dataplane/flow-mon?top_10=true { "core_id": "1", "timeout": "30" } Successful Response:
Example Response: { "message": "flow_mon.tgz will be available in edge filestore in 30 seconds. Go to edge CLI, use the following command to transfer the file: copy file flow_mon.tgz url
Return top 10 flows information
Run flow monitor for timeout seconds for all or certain CPU core(s)and return top 10 flows.
Request:
Example Request: GET https://<ip>/api/v1/node/services/dataplane/flow-mon?core_id=3&timeout=60 (or) GET https://<ip>/api/v1/node/services/dataplane/flow-mon?core_id=3 (or) GET https://<ip>/api/v1/node/services/dataplane/flow-mon?timeout=60 (or) GET https://<ip>/api/v1/node/services/dataplane/flow-mon Successful Response:
Example Response: { "flow_count": 10, "flows": [ { "dst_ip": "192.168.1.11", "dst_port": 6081, "proto": 17, "src_ip": "192.168.1.8", "src_port": 59205, "tunnel_dst_ip": "0.0.0.0", "tunnel_src_ip": "0.0.0.0" }, { "dst_ip": "192.168.1.11", "dst_port": 3784, "proto": 17, "src_ip": "192.168.1.8", "src_port": 49155, "tunnel_dst_ip": "192.168.1.11", "tunnel_src_ip": "192.168.1.8" }, ... ... { "dst_ip": "192.168.1.10", "dst_port": 6081, "proto": 17, "src_ip": "192.168.1.6", "src_port": 52030, "tunnel_dst_ip": "0.0.0.0", "tunnel_src_ip": "0.0.0.0" } ] } Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane interrupt mode setting
Enable or disable NSX Edge dataplane interrupt mode.Dataplane service must be restarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Get NSX Edge dataplane l2vpn pmtu message generation setting
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane l2vpn pmtu message generation setting
Enable or disable NSX Edge dataplane pmtu cache in l2vpn.Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Depreciated. Please use /node/services/dataplane/pmtu-learning (Deprecated)
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Depreciated. Please use /node/services/dataplane/pmtu-learning (Deprecated)
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane pmtu learning setting
Enable or disable NSX Edge dataplane pmtu learningRequest:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Get NSX Edge dataplane pmtu learning setting
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane QAT feature enabled status
Enable or disable NSX Edge dataplane QAT feature. Dataplane service must berestarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Get NSX Edge dataplane QAT setting
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Get NSX Edge rx and tx queue number per port per core
Get NSX Edge rx and tx queue number per port per core.Request:
Example Request: GET https://<ip>/api/v1/node/services/dataplane/queue-num-per-port-per-core Successful Response:
Example Response: { "queue_num_per_port_per_core": 1 } Required Permissions: Feature: system_administration Additional Errors:
Set NSX Edge rx and tx queue number per port per core
Set NSX Edge rx and tx queue number per port per core.Dataplane service must be restarted for the change to take effect.
Request:
Example Request: PUT https://<ip>/api/v1/node/services/dataplane/queue-num-per-port-per-core { "queue_num_per_port_per_core": 1 } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Return rx/tx ring size information
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Set NSX Edge rx ring size for physical ports
Set NSX Edge rx ring size for physical ports.Dataplane service must be restarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX EdgeDatapath service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Set NSX Edge tx ring size for physical ports
Set NSX Edge tx ring size for physical ports.Dataplane service must be restarted for the change to take effect.
Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NSX EdgeDatapath service
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Diagnosis
Read edge config diagnosis
Request:Example Request: GET https://<edge>/api/v1/node/diagnosis Successful Response:
Example Response: { "config": { "failed": { "nestdb": "not running" }, "passed": [ "nsxa-state", "nsxa-edge-cluster", "nsxa-lrouter", "nsxa-service-router", "manager", "controller", "edge-agent", "dataplane", "nsd", "core" ], "warning": { "nsxa-edge-cluster": "no peers" } }, "ha-state": "active" } Required Permissions: Feature: system_administration Additional Errors:
Read edge diagnosis inconsistency
Request:Example Request: GET https://<edge>/api/v1/node/diagnosis/inconsistency Successful Response:
Example Response: { "results": [ { "title": "Checking routing is up on T0 SR/RTEP", "detail": [ "Tier0 SR c154f2bf-4c61-40ea-9c4b-7e03967a1325 routing is down" ] }, { "title": "Checking no xtep-group is empty", "detail": [ "Remote RTEP group 4441344 is empty for lswitch 736d49c1-67d8-42dd-aa7e-c2964931d127", "Remote RTEP group 2930182 is empty for lswitch 8d513022-23e5-98ca-ac60-d1256882c656" ] } ] "page_cursor": "10" } Required Permissions: Feature: system_administration Additional Errors:
Logical-router diagnosis
Returns information of specified logical-router configured on edge.Request:
Example Request: GET https://<ip>/api/v1/node/logical-routers/fd5b1cf9-8e31-47d8-87c3-0e5c0f613a02/diagnosis Successful Response:
Example Response: { "result_count": 1, "results": [ { "logical_router_uuid": "fd5b1cf9-8e31-47d8-87c3-0e5c0f613a02", "router_type": "SERVICE_ROUTER_TIER0", "mp_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "name": "SR-tier0", "ha_info": { "failover_mode": "PREEMPTIVE", "ha_mode": "ACTIVE_STANDBY", "ha_state": "ACTIVE", ], "rank": 0, "state-history": [ { "event": "Routing Up", "state": "STANDBY", "event_timestamp": "2020-06-18T11:10:45.344657" }, { "event": "Remote State Updated", "state": "SYNC", "event_timestamp": "2020-06-18T11:10:40.344657" }, ] } } ] } Required Permissions: Feature: logical_routers Additional Errors:
Logical-routers diagnosis
Returns information of all logical-routers or specified type oflogical-routers configured on edge.
Request:
Example Request: GET https://<ip>/api/v1/node/logical-routers/diagnosis (or) GET https://<ip>/api/v1/node/logical-routers/diagnosis?router_type=SERVICE_ROUTER_TIER0 Successful Response:
Example Response: { "result_count": 3, "results": [ { "logical_router_uuid": "fd5b1cf9-8e31-47d8-87c3-0e5c0f613a02", "router_type": "SERVICE_ROUTER_TIER0", "mp_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "name": "SR-tier0", "ha_info": { "failover_mode": "PREEMPTIVE", "ha_mode": "ACTIVE_STANDBY", "ha_state": "ACTIVE", ], "rank": 0, "state-history": [ { "event": "Routing Up", "state": "STANDBY", "event_timestamp": "2020-06-18T11:10:45.344657" }, { "event": "Remote State Updated", "state": "SYNC", "event_timestamp": "2020-06-18T11:10:40.344657" }, ] } }, { "router_type": "DISTRIBUTED_ROUTER_TIER0", "logical_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "mp_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "name": "DR-tier0" }, { "router_type": "TUNNEL", "logical_router_uuid": "736a80e3-23f6-5a2d-81d6-bbefb2786666", "name": "" } ] } Required Permissions: Feature: logical_routers Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Nestdb
Read NSX Nestdb service properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX Nestdb service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NSX Nestdb service
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Replication Agent
Read NSX Edge Replica Agent service properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX Edge Replica Agent service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NSX Edge Replica Agent service
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Services
System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Local-Controller
Read NSX Edge NSXA service properties
Request:Example Request: GET https://<ip>/api/v1/node/services/local-controller Successful Response:
Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/local-controller", "rel": "self" }, "service_name": "local-controller", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: Feature: system_administration Additional Errors:
Read NSX EdgeNSXA service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NSX EdgeNSXA service
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Maintenance Mode
Get Edge maintenance mode
Request:Successful Response:
Required Permissions: Feature: system_administration Description:
Set Edge maintenance mode
Request:Successful Response:
Required Permissions: Feature: system_administration Description:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Replication Agent
Read NSX Autonomous Edge Replica Agent client status from the seconday node
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Routing
Read NSX EdgeMSR service properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX EdgeMSRConfig service properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX EdgeMSRConfig service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX EdgeMSR service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: NSX Manager: Services
System Administration: Configuration: Fabric: Nodes: NSX Manager: Services: Local-Controller Service
Update NSX Edge NSXA service properties
Request:Example Request: PUT https://<ip>/api/v1/node/services/local-controller { "service_name": "local-controller", "service_properties": { "logging_level": "DEBUG" } } Successful Response:
Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/local-controller", "rel": "self" }, "service_name": "local-controller", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Network Interfaces
Read network configuration properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/network Successful Response:
Example Response: { "_schema": "NodeNetworkProperties", "_self": { "href": "/node/network", "rel": "self" } } Required Permissions: Feature: system_administration Additional Errors:
List the Node's Network Interfaces
Returns the number of interfaces on the node appliance and detailedinformation about each interface. Interface information includes MTU,
broadcast and host IP addresses, link and admin status, MAC address, network
mask, and the IP configuration method (static or DHCP).
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/interfaces Successful Response:
Example Response: { "result_count": 2, "results": [ { "admin_status": "up", "interface_id": "lo", "ip_addresses": [ { "ip_address": "127.0.0.1", "netmask": "255.0.0.0" } ], "link_status": "up", "mtu": 65536, }, { "admin_status": "up", "broadcast_address": "10.160.31.255", "default_gateway": "10.160.31.253", "interface_id": "eth0", "ip_addresses": [ { "ip_address": "10.160.30.117", "netmask": "255.255.224.0" } ], "ip_configuration": "static", "link_status": "up", "mtu": 1500, "physical_address": "02:00:16:60:c7:8f" } ] } Required Permissions: Feature: system_administration Additional Errors:
Read the Node's Network Interface
Returns detailed information about the specified interface. Interfaceinformation includes MTU, broadcast and host IP addresses, link and admin
status, MAC address, network mask, and the IP configuration method.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/interfaces/eth0 Successful Response:
Example Response: { "admin_status": "up", "broadcast_address": "10.160.31.255", "default_gateway": "10.160.31.253", "interface_id": "eth0", "ip_addresses": [ { "ip_address": "10.160.30.117", "netmask": "255.255.224.0" } ], "ip_configuration": "static", "link_status": "up", "mtu": 1500, "physical_address": "02:00:16:60:c7:8f" } Required Permissions: Feature: system_administration Additional Errors:
Update the Node's Network Interface
Updates the specified interface properties. You cannot changethe properties
ip_configuration
,
ip_addresses
, or plane
. NSX
Manager must have a static IP address.
You must use NSX CLI to configure a controller or an edge node.
Request:
Example Request: PUT https://<nsx-mgr>/api/v1/node/network/interfaces/eth0 { "interface_id": "eth0", "mtu": 1600 } Successful Response:
Example Response: { "admin_status": "up", "broadcast_address": "10.160.31.255", "default_gateway": "10.160.31.253", "interface_id": "eth0", "ip_addresses": [ { "ip_address": "10.160.30.117", "netmask": "255.255.224.0" } ], "ip_configuration": "static", "link_status": "up", "mtu": 1600, "physical_address": "02:00:16:60:c7:8f" } Required Permissions: Feature: system_administration Additional Errors:
Read the Node's Network Interface Statistics
On the specified interface, returns the number of received (rx), transmitted(tx), and dropped packets; the number of bytes and errors received and
transmitted on the interface; and the number of detected collisions.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/interfaces/eth0/stats Successful Response:
Example Response: { "interface_id": "eth0", "rx_bytes": 7360718 "rx_dropped": 1813, "rx_errors": 0, "rx_frame": 0, "rx_packets": 91656, "tx_bytes": 31611, "tx_carrier": 0, "tx_colls": 0, "tx_dropped": 0, "tx_errors": 0, "tx_packets": 261, } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Network Interfaces: Routing
List node network routes
Returns detailed information about each route in the node routingtable. Route information includes the route type (default, static, and so
on), a unique route identifier, the route metric, the protocol from which
the route was learned, the route source (which is the preferred egress
interface), the route destination, and the route scope. The route scope
refers to the distance to the destination network: The "host" scope leads to
a destination address on the node, such as a loopback address;
the "link" scope leads to a destination on the local network; and the
"global" scope leads to addresses that are more than one hop away.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/routes Successful Response:
Example Response: { "result_count": 2, "results": [ { "gateway": "10.33.87.253", "interface_id": "eth0" "route_id": "default-10.33.87.253-eth0-0", "route_type": "default", }, { "destination": "10.33.84.0" "interface_id": "eth0", "netmask": "255.255.252.0", "proto": "kernel", "route_id": "static-10.33.84.0-eth0-0", "route_type": "static", "scope": "link", "src": "10.33.87.207", } ] } Required Permissions: Feature: system_administration Additional Errors:
Create node network route
Add a route to the node routing table. For static routes, theroute_type, interface_id, netmask, and destination are required parameters.
For default routes, the route_type, gateway address, and interface_id
are required. For blackhole routes, the route_type and destination are
required. All other parameters are optional. When you add a static route,
the scope and route_id are created automatically. When you add a default or
blackhole route, the route_id is created automatically. The route_id is
read-only, meaning that it cannot be modified. All other properties can be
modified by deleting and readding the route.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/network/routes { "route_type": "static", "interface_id": "eth0", "netmask": "255.255.255.0", "destination": "10.33.85.0" } Successful Response:
Example Response: { "destination": "10.33.85.0" "interface_id": "eth0", "netmask": "255.255.255.0", "route_id": "static-10.33.85.0-eth0-0", "route_type": "static", "scope": "link", } Required Permissions: Feature: system_administration Additional Errors:
Read node network route
Returns detailed information about a specified route in the noderouting table.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/network/routes/default-10.33.87.253-eth0-0 Successful Response:
Example Response: { "gateway": "10.33.87.253", "interface_id": "eth0" "route_id": "default-10.33.87.253-eth0-0", "route_type": "default", } Required Permissions: Feature: system_administration Additional Errors:
Delete node network route
Delete a route from the node routing table. You can modify anexisting route by deleting it and then posting the modified version of the
route. To verify, remove the route ID from the URI, issue a GET request, and
note the absense of the deleted route.
Request:
Example Request: DELETE https://<nsx-mgr>/api/v1/node/network/routes/static-10.33.85.0-eth0-0 Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services
List node services
Returns a list of all services available on the node applicance.Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/services Successful Response:
Example Response: { "result_count": 5, "results": [ { "service_name": "snmp" }, { "service_name": "syslog" }, { "service_name": "ntp" }, { "service_name": "ssh" }, { "service_name": "node-mgmt" } ] } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: Log Insight
Read liagent service properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/liagent Successful Response:
Example Response: { "_schema": "NodeServiceProperties", "_self": { "href": "/node/services/liagent", "rel": "self" }, "service_name": "liagent" } Required Permissions: Feature: system_administration Additional Errors:
Read liagent service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/liagent/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": { "href": "/node/services/liagent/status", "rel": "self" }, "pids": [], "runtime_state": "stopped" } Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the liagent service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/liagent?action=restart Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: NSX Platform Client
Read NSX Platform Client service properties
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read NSX Platform Client service status
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NSX Platform Client service
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: NTP
Update NTP service properties
Request:Example Request: PUT https://<nsx-mgr>/api/v1/node/services/ntp { "service_name": "ntp", "service_properties": { "start_on_boot": true, "servers": [ "0.ubuntu.pool.ntp.org", "1.ubuntu.pool.ntp.org", "2.ubuntu.pool.ntp.org", "3.ubuntu.pool.ntp.org", "ntp.ubuntu.com", "192.168.110.10" ] } } Successful Response:
Example Response: { "_schema": "NodeNtpServiceProperties", "_self": "/node/services/ntp", "service_name": "ntp", "service_properties": { "start_on_boot": true, "servers": [ "0.ubuntu.pool.ntp.org", "1.ubuntu.pool.ntp.org", "2.ubuntu.pool.ntp.org", "3.ubuntu.pool.ntp.org", "ntp.ubuntu.com", "192.168.110.10" ] } } Required Permissions: Feature: system_administration Additional Errors:
Read NTP service properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/ntp Successful Response:
Example Response: { "_schema": "NodeNtpServiceProperties", "_self": "/node/services/ntp", "service_name": "ntp", "service_properties": { "start_on_boot": true, "servers": [ "0.ubuntu.pool.ntp.org", "1.ubuntu.pool.ntp.org", "2.ubuntu.pool.ntp.org", "3.ubuntu.pool.ntp.org", "ntp.ubuntu.com" ] } } Required Permissions: Feature: system_administration Additional Errors:
Read NTP service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/ntp/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ntp/status", "pids": [ 6270, 6272 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NTP service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/ntp?action=restart Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ntp", "pids": [ 6035, 6270, 6272 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: Node Management
Read appliance management service properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/node-mgmt Successful Response:
Example Response: { "_schema": "NodeServiceProperties", "_self": "/node/services/node-mgmt", "service_name": "node-mgmt" } Required Permissions: Feature: system_administration Additional Errors:
Read appliance management service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/node-mgmt/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/node-mgmt/status", "monitor_pid": 19189, "monitor_runtime_state": "running", "pids": [ 19190 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Restart the node management service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/node-mgmt?action=restart Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: SNMP
Read SNMP service properties
Read SNMP service properties. Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/snmp?show_sensitive_data=true Successful Response:
Example Response: { "_schema": "NodeSnmpServiceProperties", "_self": { "href": "/node/services/snmp", "rel": "self" }, "service_name": "snmp", "service_properties": { "start_on_boot": false, "v2_configured": true, "communities": [ { "access": "READ_ONLY", "community_string": "snmpcommunity" } ], "v2_targets": [ { "server": "10.20.125.4", "port": 1162, "community_string": "snmpcommunity" } ], "v3_configured": false, "v3_auth_protocol": "SHA1", "v3_priv_protocol": "AES128", "v3_targets": [ { "server": "10.20.125.4", "port": 1162, "user_id": "user1", "security_level": "AUTH_PRIV" } ], "v3_users": [ { "user_id": "user1", "security_level": "AUTH_PRIV", "access": "READ_ONLY" } ] } Required Permissions: Feature: system_administration Additional Errors:
Update SNMP service properties
Update SNMP service properties. Request:Example Request: PUT https://<nsx-mgr>/api/v1/node/services/snmp { "service_name": "snmp", "service_properties": { "start_on_boot": false, "v2_configured": true, "communities": [ { "access": "READ_ONLY", "community_string": "snmpcommunity" } ], "v2_targets": [ { "server": "10.20.125.4", "port": 1162, "community_string": "snmpcommunity" } ], "v3_configured": false, "v3_auth_protocol": "SHA1", "v3_priv_protocol": "AES128", "v3_targets": [ { "server": "10.20.125.4", "port": 1162, "user_id": "user1", "security_level": "AUTH_PRIV" }, { "server": "10.20.125.6", "port": 1162, "user_id": "user2", "security_level": "AUTH_PRIV" } ], "v3_users": [ { "user_id": "user1", "auth_password": "password1", "priv_password": "password2", "security_level": "AUTH_PRIV" } ] } } Successful Response:
Example Response: { "_schema": "NodeSnmpServiceProperties", "_self": { "href": "/node/services/snmp", "rel": "self" }, "service_name": "snmp", "service_properties": { "start_on_boot": false, "v2_configured": true, "communities": [ { "access": "READ_ONLY", } ], "v2_targets": [ { "server": "10.20.125.4", "port": 1162 } ], "v3_configured": false, "v3_auth_protocol": "SHA1", "v3_priv_protocol": "AES128", "v3_targets": [ { "server": "10.20.125.4", "port": 1162, "user_id": "user1", "security_level": "AUTH_PRIV" }, { "server": "10.20.125.6", "port": 1162, "user_id": "user2", "security_level": "AUTH_PRIV" } ], "v3_users": [ { "user_id": "user1", "security_level": "AUTH_PRIV" "access": "READ_ONLY", } ] } } Required Permissions: Feature: system_administration Description:
Read SNMP service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/snmp/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/snmp/status", "pids": [ 16754 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Update SNMP V3 Engine ID
Request:Example Request: PUT https://<nsx-mgr>/api/v1/node/services/snmp/v3-engine-id { "service_name": "snmp", "v3_engine_id": "80001adc80992933638c48f75900000001" } Successful Response:
Example Response: { "_schema": "NodeSnmpV3EngineID", "_self": "/node/services/snmp/v3-engine-id", "service_name": "snmp", "v3_engine_id": "80001adc80992933638c48f75900000002" } } Required Permissions: Feature: system_administration Additional Errors:
Read SNMP V3 Engine ID
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/snmp/v3-engine-id Successful Response:
Example Response: { "_schema": "NodeSnmpV3EngineID", "_self": "/node/services/snmp/v3-engine-id", "service_name": "snmp", "v3_engine_id": "80001adc80992933638c48f75900000001" } } Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the SNMP service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/snmp?action=restart Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/snmp", "pids": [ 16361 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: SSH
Update ssh service properties
Update ssh service properties. If the start_on_boot property is updated to true, existing ssh sessions if any are stopped and the ssh service is restarted. Request:Example Request: PUT https://<nsx-mgr>/api/v1/node/services/ssh { "service_name": "ssh", "service_properties": { "start_on_boot": false, "root_login": true } } Successful Response:
Example Response: { "_schema": "NodeSshServiceProperties", "_self": "/node/services/ssh", "service_name": "ssh", "service_properties": { "start_on_boot": false, "root_login": true } } Required Permissions: Feature: system_administration Additional Errors:
Read ssh service properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/ssh Successful Response:
Example Response: { "_schema": "NodeSshServiceProperties", "_self": "/node/services/ssh", "service_name": "ssh", "service_properties": { "start_on_boot": true, "root_login": true } } Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the ssh service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/ssh/notify_mpa?action=start Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ssh", "pids": [ 15930 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Read ssh service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/ssh/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ssh/status", "pids": [ 868 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Remove a host's fingerprint from known hosts file
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/ssh?action=remove_host_fingerprint { "host": "192.168.110.105" } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the ssh service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/ssh?action=start Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ssh", "pids": [ 15930 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: Syslog
- GET /api/v1/node/services/syslog
- POST /api/v1/node/services/syslog?action=restart|start|stop
- DELETE /api/v1/node/services/syslog/exporters
- GET /api/v1/node/services/syslog/exporters
- POST /api/v1/node/services/syslog/exporters
- POST /api/v1/node/services/syslog/exporters?action=verify
- DELETE /api/v1/node/services/syslog/exporters/<exporter-name>
- GET /api/v1/node/services/syslog/exporters/<exporter-name>
- GET /api/v1/node/services/syslog/status
Read syslog service properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog Successful Response:
Example Response: { "_schema": "NodeServiceProperties", "_self": { "href": "/node/services/syslog", "rel": "self" }, "service_name": "syslog" } Required Permissions: Feature: system_administration Additional Errors:
Delete all node syslog exporters
Removes all syslog exporter rules.Request:
Example Request: DELETE https://<nsx-mgr>/api/v1/node/services/syslog/exporters Successful Response:
Required Permissions: Feature: system_log Additional Errors:
List node syslog exporters
Returns the collection of registered syslog exporter rules, if any. Therules specify the collector IP address and port, and the protocol to use.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog/exporters Successful Response:
Example Response: { "result_count": 2, "results": [ { "exporter_name": "syslog1", "level": "INFO", "port": 514, "protocol": "TCP", "server": "192.168.0.2" }, { "exporter_name": "syslog2", "level": "CRIT", "port": 514, "protocol": "TCP", "server": "192.168.0.1" } ] } Required Permissions: Feature: system_log Additional Errors:
Add node syslog exporter
Adds a rule for exporting syslog information to a specified server. Therequired parameters are the rule name (exporter_name); severity level
(emerg, alert, crit, and so on); transmission protocol (TCP or UDP); and
server IP address or hostname. The optional parameters are the syslog port
number, which can be 1 through 65,535 (514, by default); facility level to
use when logging messages to syslog (kern, user, mail, and so on); and
message IDs (msgids), which identify the types of messages to export.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/services/syslog/exporters { "exporter_name": "syslog4", "facilities": ["KERN", "USER"], "level": "INFO", "msgids": ["tcpin", "tcpout"], "port": 514, "protocol": "TCP", "server": "192.168.0.4" } Successful Response:
Example Response: { "exporter_name": "syslog4", "facilities": [ "KERN", "USER" ], "level": "INFO", "msgids": [ "tcpin", "tcpout" ], "port": 514, "protocol": "TCP", "server": "192.168.0.4" } Required Permissions: Feature: system_log Additional Errors:
Delete node syslog exporter
Removes a specified rule from the collection of syslog exporter rules.Request:
Example Request: DELETE https://<nsx-mgr>/api/v1/node/services/syslog/exporters/syslog4 Successful Response:
Required Permissions: Feature: system_log Additional Errors:
Read node syslog exporter
Returns information about a specific syslog collection point. Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog/exporters/syslog1 Successful Response:
Example Response: { "exporter_name": "syslog1", "level": "CRIT", "port": 514, "protocol": "TCP", "server": "192.168.0.1" } Required Permissions: Feature: system_log Additional Errors:
Verify node syslog exporter
Collect iptables rules needed for all existing syslog exporters and verifyif the existing iptables rules are the same. If not, remove the stale rules
and add the new rules to make sure all exporters work properly.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/services/syslog/exporters?action=verify Successful Response:
Required Permissions: Feature: system_log Additional Errors:
Read syslog service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": { "href": "/node/services/syslog/status", "rel": "self" }, "pids": [ 661 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the syslog service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/syslog?action=restart Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: Tasks
List appliance management tasks
Request:Successful Response:
Required Permissions: Feature: system_information Additional Errors:
Read task properties
Request:Successful Response:
Required Permissions: Feature: system_information Additional Errors:
Delete task
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Read asynchronous task response
Request:Successful Response:
Required Permissions: Feature: system_information Additional Errors:
Cancel specified task
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Services: Upgrade Agent
Read NSX upgrade Agent service properties
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/nsx-upgrade-agent Successful Response:
Example Response: { "_schema": "NodeServiceProperties", "_self": "/node/services/nsx-upgrade-agent", "service_name": "nsx-upgrade-agent" } Required Permissions: Feature: system_administration Additional Errors:
Read Nsx upgrade agent service status
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/services/nsx-upgrade-agent/status Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/nsx-upgrade-agent/status", "monitor_pid": 1, "monitor_runtime_state": "running", "pids": [ 17892 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
Restart, start or stop the NSX upgrade agent service
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/services/nsx-upgrade-agent?action=restart Successful Response:
Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/nsx-upgrade-agent", "monitor_pid": 1, "monitor_runtime_state": "running", "pids": [ 17892 ], "runtime_state": "running" } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Settings
Read node properties
Returns information about the NSX appliance. Information includesrelease number, time zone, system time, kernel version, message of the day
(motd), and host name.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node Successful Response:
Example Response: { "cli_timeout": 600, "cli_output_datetime": true, "export_type": "UNRESTRICTED", "hostname": "VMware_NSX_Manager", "kernel_version": "3.14.17-nn1-server", "motd": "", "node_version": "1.0.0.0.0.3063398", "system_time": 1442277320585, "timezone": "Etc/UTC" } Required Permissions: Feature: system_administration Additional Errors:
Update node properties
Modifies NSX appliance properties. Modifiable properties include thetimezone, message of the day (motd), and hostname. The NSX appliance
node_version, system_time, and kernel_version are read only and cannot be
modified with this method.
Request:
Example Request: PUT https://<nsx-mgr>/api/v1/node { "motd":"Welcome to the NSX Manager" } Successful Response:
Example Response: { "cli_timeout": 600, "cli_output_datetime": true, "hostname": "VMware_NSX_Manager", "kernel_version": "3.14.17-nn1-server", "motd": "Welcome to the NSX Manager", "node_version": "1.0.0.0.0.3063398", "system_time": 1442277530217, "timezone": "Etc/UTC" } Required Permissions: Feature: system_administration Additional Errors:
List node processes
Returns the number of processes and information about eachprocess. Process information includes 1) mem_resident, which is roughly
equivalent to the amount of RAM, in bytes, currently used by the process,
2) parent process ID (ppid), 3) process name, 4) process up time in milliseconds,
5) mem_used, wich is the amount of virtual memory used by the process, in
bytes, 6) process start time, in milliseconds since epoch, 7) process ID
(pid), 8) CPU time, both user and the system, consumed by the process in
milliseconds.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/processes Successful Response:
Example Response: { "result_count": 80, "results": [ { "cpu_time": 800, "mem_resident": 593920, "mem_used": 1871872, "pid": 1, "ppid": 0, "process_name": "init", "start_time": 1412624269865, "uptime": 279760 }, ...[content omitted for brevity] ] } Required Permissions: Feature: system_administration Additional Errors:
Read node process
Returns information for a specified process ID (pid). Request:Example Request: GET https://<nsx-mgr>/api/v1/node/processes/1 Successful Response:
Example Response: { "cpu_time": 800, "mem_resident": 593920, "mem_used": 1871872, "pid": 1, "ppid": 0, "process_name": "init", "start_time": 1412624269865, "uptime": 279760 } Required Permissions: Feature: system_administration Additional Errors:
Read node status
Returns information about the node appliance's file system, CPU,memory, disk usage, and uptime.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/status Successful Response:
Example Response: { "cpu_cores": 2, "file_systems": [ { "file_system": "/dev/sda2", "mount": "/", "total": 4790588, "type": "ext4", "used": 1402060 }, ...[content omitted for brevity] ], "load_average": [ 0.09, 0.1, 0.07 ], "mem_cache": 530348, "mem_total": 16430712, "mem_used": 3488064, "swap_total": 3997692, "swap_used": 0, "system_time": 1442278302776, "uptime": 22474490, "bootup_error": "\nBootup Errors:" } Required Permissions: Feature: system_administration Additional Errors:
Update node status
Clear node bootup statusRequest:
Example Request: POST https://<nsx-mgr>/api/v1/node/status?action=clear_bootup_error Successful Response:
Example Response: { "cpu_cores": 2, "file_systems": [ { "file_system": "/dev/sda2", "mount": "/", "total": 4790588, "type": "ext4", "used": 1402060 }, ...[content omitted for brevity] ], "load_average": [ 0.09, 0.1, 0.07 ], "mem_cache": 530348, "mem_total": 16430712, "mem_used": 3488064, "swap_total": 3997692, "swap_used": 0, "system_time": 1442278302776, "uptime": 22474490 } Required Permissions: Feature: system_administration Additional Errors:
Read node version
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/version Successful Response:
Example Response: { "node_version": "1.0.0.0.0.3063398" } Required Permissions: Feature: system_information Additional Errors:
Restart or shutdown node
Restarts or shuts down the NSX appliance. Request:Example Request: POST https://<nsx-mgr>/api/v1/node?action=restart Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Set the node system time
Set the node system time to the given time in UTC in the RFC3339 format'yyyy-mm-ddThh:mm:ssZ'.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node?action=set_system_time { "system_datetime": "2019-03-06T00:19:35Z" } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: Support-Bundle
Read node support bundle
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/support-bundle Successful Response:
Example Response: Headers Content-Disposition : attachment;filename=nsx_support_bundle_20170818_002715.tgz Content-Type : application/x-tar Date : Thu, 18 Aug 2017 00:28:07 GMT Server : NSX Manager Transfer-Encoding : chunked Vmw-Task-Id : 421b38aa-e390-64b9-3fff-7ad6ebf59c40_10b1b5d6-0786-49a4-a61c-a1f64428b40e Required Permissions: Feature: system_support_bundle Additional Errors:
System Administration: Configuration: Fabric: Nodes: User Management
System Administration: Configuration: Fabric: Nodes: User Management: Authentication Policy
Read node authentication policy configuration
Returns information about the currently configured authenticationpolicies on the node.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/aaa/auth-policy Successful Response:
Example Response: { "_schema": "AuthenticationPolicyProperties", "_self": { "href": "/node/aaa/auth-policy", "rel": "self" }, "api_failed_auth_lockout_period": 900, "api_failed_auth_reset_period": 900, "api_max_auth_failures": 5, "cli_failed_auth_lockout_period": 900, "cli_max_auth_failures": 5, "minimum_password_length": 8 } Required Permissions: Feature: system_administration Additional Errors:
Update node authentication policy configuration
Update the currently configured authentication policy on the node.If any of api_max_auth_failures, api_failed_auth_reset_period, or
api_failed_auth_lockout_period are modified, the http service is
automatically restarted.
Request:
Example Request: PUT https://<nsx-mgr>/api/v1/node/aaa/auth-policy { "minimum_password_length": 12 } Successful Response:
Example Response: { "minimum_password_length": 12 } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: Fabric: Nodes: User Management: Users
List node users
Returns the list of users configured to log in to the NSX appliance.Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/users Successful Response:
Example Response: { "result_count": 3, "results": [ { "full_name": "root", "userid": 0, "username": "root" }, { "full_name": "", "userid": 10000, "username": "admin" }, { "full_name": "", "userid": 10002, "username": "audit" } ] } Required Permissions: Feature: system_administration_passwd_mgmt Additional Errors:
Read node user
Returns information about a specified user who is configured to log in to theNSX appliance. The valid user IDs are: 0, 10000, 10002.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/users/10000 Successful Response:
Example Response: { "full_name": "", "userid": 10000, "username": "admin" } Required Permissions: Feature: system_administration Additional Errors:
Update node user
Updates attributes of an existing NSX appliance user. This methodcannot be used to add a new user. Modifiable attributes include the
username, full name of the user, and password. If you specify a password in
a PUT request, it is not returned in the response. Nor is it returned in a
GET request.
The specified password does not meet the following complexity requirements:
- minimum 12 characters in length
- minimum 1 uppercase character
- minimum 1 lowercase character
- minimum 1 numeric character
- minimum 1 special character
- minimum 5 unique characters
- default password complexity rules as enforced by the Linux PAM module
The valid user IDs are: 0, 10000, 10002.
Note that invoking this API does not update any user-related properties of
existing objects in the system and does not modify the username field in existing
audit log entries.
Request:
Example Request: PUT https://<nsx-mgr>/api/v1/node/users/10000 { "full_name": "Jane L. Doe", "username": "admin1" } Successful Response:
Example Response: { "full_name": "Jane L. Doe" "userid": 10000, "username": "admin1" } Required Permissions: Feature: system_administration_passwd_mgmt Additional Errors:
List SSH keys from authorized_keys file for node user
Returns a list of all SSH keys from authorized_keys file for node userRequest:
Example Request: GET https://<nsx-mgr>/api/v1/node/users/10000/ssh-keys Successful Response:
Example Response: { "result_count": 2, "results": [ { "label": "user1@domain1" "type": "ssh-rsa" "value": "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" }, { "label": "user2@domain2" "type": "ssh-rsa" "value": "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" } ] } Required Permissions: Feature: system_administration Additional Errors:
Add SSH public key to authorized_keys file for node user
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/users/10000/ssh-keys?action=add_ssh_key { "label": "user1@domain1", "type": "ssh-rsa", "value": "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", "password": "Pa$$w0rd" } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Remove SSH public key from authorized_keys file for node user
Request:Example Request: POST https://<nsx-mgr>/api/v1/node/users/10000/ssh-keys?action=remove_ssh_key { "label": "user1@domain1", "password": "Pa$$w0rd" } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Configuration: System Properties
System Administration: Configuration: System Properties: Dataplane
Get NSX Edge dataplane geneve cbit setting
Request:Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Update NSX Edge dataplane geneve cbit setting
Enable or disable NSX Edge dataplane geneve critical bit.Request:
Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Lifecycle Management
System Administration: Lifecycle Management: Backup
Create backup for autonomous edge node in primary_api_node role
Create passphrase protected backup file for autonomous edge node in primary_api_node role.Passphrase must be provided in request header.
The passphrase must meet the following complexity requirements -
- minimum 12 characters in length
- minimum 1 uppercase character
- minimum 1 lowercase character
- minimum 1 numeric character
- minimum 1 special character
Backup is only allowed on autonomous edge node in primary_api_node role.
For autonomous edge not in primary_api_node role, does not need backups.
Configurations are kept in sync internally from the primary_api_node to the
peer node in the high availibility cluster
Request:
Example Request: GET https://<nsx-edge>/api/v1/backup Headers passphrase: "Test1234567!" Successful Response:
Example Response: Headers Content-Type: application/octet-stream Content-Disposition: attachment;filename=backup_20200709T193058.tar Vmw-Task-Id: 9d895c88-da84-4391-bdfa-e40cf680625b_2de6f14e-5240-41c0-8594-41e2c830f633 Server: nsx reverse-proxy Required Permissions: Feature: system_administration Additional Errors:
System Administration: Lifecycle Management: Restore
Perform restore on autonomous edge in primary_api_node role
Restore autonomous edge in primary_api_node using the passphrase protected backup file.Passphrase must be provided in request header.
This operation is not supported on autonomous edge not in primary_api_node role.
If you need to restore such a node, please deploy a new autonomous edge VM in
secondary_api_node role and register it with an existing autonomous edge in primary_api_node role.
If the high availability cluster of existing autonomous edge in primary_api_node role
already has another autonomous edge node, delete the other node before registering a new one.
The configuration from primary_api_node autonomous edge will replicate to the peer node
in the high availibility cluster.
Request:
Example Request: POST https://<nsx-edge>/api/v1/restore Headers passphrase: "Test1234567!" Content-Type: application/octet-stream Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Lifecycle Management: Upgrade
System Administration: Lifecycle Management: Upgrade: Nodes
Get upgrade task status (Deprecated)
Get upgrade task status for the given task of the given bundle.Both bundle_name and task_id must be provided, otherwise you
will receive a 404 NOT FOUND response. This api is deprecated.
Please use API GET /node/upgrade/status-summary to get upgrade
status when upgrade is in progress.
Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/upgrade?bundle_name=VMware-NSX-unified-appliance-2.1.0.0.0.6921065&upgrade_task_id=77834e07-7901-4e3d-bfe9-aa1df72cac6b Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Execute upgrade task
Execute upgrade task.Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/upgrade/performtask?action=execute { "bundle_name" : "VMware-NSX-unified-appliance-2.1.0.0.0.6921065", "step": "list_commands", "parameters": { "parameter_key1": "parameter_value1", } } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
Get upgrade progress status
Get progress status of last upgrade step, if upgrade bundle is present.Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/upgrade/progress-status Successful Response:
Example Response: { "last_upgrade_step_status": { "args": { "bundle_files_path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558/files", "from_version": "2.5.1.0.0.30931558", "new_config_path": "/config_bak", "new_os_path": "/os_bak", "node_type": "nsx-manager nsx-policy-manager nsx-controller", "old_config_path": "/config", "old_os_path": "/", "status_file": "/tmp/upgradeLJBKeQ", "to_version": "2.5.1.0.0.30931558" }, "end_time": "2019-11-22 14:01:23.323716", "failure_reason": null, "name": "unregister_ccp", "path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558/scripts/unregister_ccp.py", "pid": 19445, "return_code": 0, "start_time": "2019-11-22 14:01:23.039104", "state": "TASK_SUCCESS", "status_file": "", "stderr": "", "stdout": "Unsupported version for unregistering", "task_id": "a715bc24-948d-441c-938a-4331078d3474" }, "upgrade_bundle_present": true, "upgrade_metadata": { "bundle_path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558", "from_version": "2.5.1.0.0.30931558", "new_config_dev": "/dev/mapper/nsx-config", "new_os_dev": "/dev/sda2", "old_config_dev": "/dev/mapper/nsx-config__bak", "old_os_dev": "/dev/sda3", "to_version": "2.5.1.0.0.30931558" } } Required Permissions: Feature: system_administration Additional Errors:
Get upgrade status summary
Get status summary of node upgrade, if upgrade bundle is present.Request:
Example Request: GET https://<nsx-mgr>/api/v1/node/upgrade/status-summary Successful Response:
Example Response: { "upgrade_steps": [ { "name": "download_os", "start_time": "2019-11-22 14:01:23.323716", "end_time": "2019-11-22 14:01:25.323716", "status" "SUCCESS", }, { "name": "shutdown_manager", "start_time": "2019-11-22 14:02:23.323716", "end_time": "2019-11-22 14:02:25.323716", "status" "SUCCESS", }, { "name": "install_os", "start_time": "2019-11-22 14:03:23.323716", "end_time": "2019-11-22 14:03:25.323716", "status" "SUCCESS", }, { "name": "migrate_manager_config", "start_time": "2019-11-22 14:04:23.323716", "end_time": "2019-11-22 14:04:25.323716", "status" "SUCCESS", }, { "name": "migrate_manager_config", "start_time": "2019-11-22 14:04:23.323716", "end_time": "2019-11-22 14:04:25.323716", "status" "SUCCESS", }, { "name": "start_manager", "start_time": "2019-11-22 14:01:39.323716", "end_time": "2019-11-22 14:01:39.323716", "status" "FAILED", "details": { "status": "wait_for_proton: resp_status: HTTPStatus.INTERNAL_SERVER_ERROR, body: None", "stderr": "Some error", "stdout": "Unsupported version for unregistering", "troubleshooting": "Please collect the support bundle and contact the VMWare GSS team" } } ] "upgrade_bundle_present": true, "upgrade_metadata": { "bundle_path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558", "from_version": "2.5.1.0.0.30931558", "new_config_dev": "/dev/mapper/nsx-config", "new_os_dev": "/dev/sda2", "old_config_dev": "/dev/mapper/nsx-config__bak", "old_os_dev": "/dev/sda3", "to_version": "2.5.1.0.0.30931558" } } Required Permissions: Feature: system_administration Additional Errors:
System Administration: Monitoring: Logs
System Administration: Monitoring: Logs: Core Dumps
List system core dumps
Request:Example Request: GET https://<nsx-mgr>/api/v1/node/core-dumps Successful Response:
Example Response: { "_schema": "FilePropertiesListResult", "_self": "/node/core-dumps", "result_count": 2, "results": [ { "created_epoch_ms": 1457048893748, "modified_epoch_ms": 1457048860639, "name": "core.nginx.1559278043.gz", "size": 12408 }, { "created_epoch_ms": 1457048848624, "modified_epoch_ms": 1457048560936, "name": "core.dp-fp:1.1575263711.2688.0.11.g", "size": 20480 } ] } Required Permissions: Feature: system_log Additional Errors:
Copy system generated core dump file to a remote file store
Copy system generated core dump file to a remote server. If you use scp orsftp, you must provide the remote server's SSH fingerprint. See the
NSX-T Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Example Request: POST https://<nsx-mgr>/api/v1/node/core-dumps/core.nginx.1559278043.gz?action=copy_to_remote_file { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/core.nginx.1559278043.gz", "protocol" : { "name" : "scp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1" , "authentication_scheme" : { "scheme_name" : "password", "username" : "root" , "password" : "s4druMuJEw" } } } Successful Response:
Required Permissions: Feature: system_administration Additional Errors:
System Administration: Settings: Certificates
System Administration: Settings: Certificates: CRL
Return All Added CRLs
Returns information about all CRLs.Request:
Example Request: GET https://<ip>/api/v1/trust-management/crls Successful Response:
Example Response: { "result_count": 1, "results": [ { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL-----
Add a New Certificate Revocation List
Adds a new certificate revocation list (CRL). The CRL is used to verify theclient certificate status against the revocation lists published by the CA.
For this reason, the administrator needs to add the CRL in certificate
repository as well.
Request:
Example Request: POST https://<ip>/api/v1/trust-management/crls?action=import { "pem_encoded": "-----BEGIN X509 CRL-----
Example Response: { "results": [ { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL-----
Show CRL Data for the Given CRL ID
Returns information about the specified CRL.Request:
Example Request: GET https://<ip>/api/v1/trust-management/crls/ebd3032d-728e-44d4-9914-d4f81c9972cb Successful Response:
Example Response: { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL-----
Delete a CRL
Deletes an existing CRL. Request:Example Request: DELETE https://<ip>/api/v1/trust-management/crls/ebd3032d-728e-44d4-9914-d4f81c9972cb Successful Response:
Required Permissions: Feature: trust_crls Additional Errors:
Update CRL for the Given CRL ID
Updates an existing CRL. Request:Example Request: PUT https://<ip>/api/v1/trust-management/crls/ebd3032d-728e-44d4-9914-d4f81c9972cb { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "pem_encoded": "-----BEGIN X509 CRL-----
Example Response: { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL-----
System Administration: Settings: Certificates: Certificate
Return All the User-Facing Components' Certificates
Returns all certificate information viewable by the user, including eachcertificate's UUID; resource_type (for example, certificate_self_signed,
certificate_ca, or certificate_signed); pem_encoded data; and history of the
certificate (who created or modified it and when).
Request:
Example Request: GET https://<ip>/api/v1/trust-management/certificates Successful Response:
Example Response: { "result_count": 2, "results": [ { "id": "2e15955d-acd1-4f49-abae-0c6ea65bf437", "resource_type": "certificate_ca", "pem_encoded": "-----BEGIN CERTIFICATE-----
Add a New Certificate
Adds a new private-public certificate or a chain of certificates (CAs) and,optionally, a private key that can be applied to one of the user-facing
components (appliance management or edge). The certificate and the key
should be stored in PEM format. If no private key is provided, the
certificate is used as a client certificate in the trust store.
Request:
Example Request: POST https://<ip>/api/v1/trust-management/certificates { "pem_encoded": "-----BEGIN CERTIFICATE-----
Example Response: { "results": [ { "id": "2e15955d-acd1-4f49-abae-0c6ea65bf437", "resource_type": "certificate_ca", "pem_encoded": "-----BEGIN CERTIFICATE-----
Delete Certificate for the Given Certificate ID
Removes the specified certificate. The private key associated with thecertificate is also deleted.
Request:
Example Request: DELETE https://<ip>/api/v1/trust-management/certificates/7ded7754-a2fb-48cd-b534-f1f4a980d827 Successful Response:
Required Permissions: Feature: trust_certificates Additional Errors:
Update certificate for the given certificate ID
Updates an existing certificate. Request:Example Request: PUT https://<ip>/api/v1/trust-management/certificates/2e15955d-acd1-4f49-abae-0c6ea65bf437 { "pem_encoded": "-----BEGIN CERTIFICATE-----
Example Response: { "id": "2e15955d-acd1-4f49-abae-0c6ea65bf437", "resource_type": "certificate_ca", "pem_encoded": "-----BEGIN CERTIFICATE-----
Show Certificate Data for the Given Certificate ID
Returns information for the specified certificate ID, including thecertificate's UUID; resource_type (for example, certificate_self_signed,
certificate_ca, or certificate_signed); pem_encoded data; and history of the
certificate (who created or modified it and when).
Request:
Example Request: GET https://<ip>/api/v1/trust-management/certificates/506d00d6-bfd5-4ebe-8b7f-0236f8de4792 Successful Response:
Example Response: { "id": "506d00d6-bfd5-4ebe-8b7f-0236f8de4792", "resource_type": "certificate_signed", "pem_encoded": "-----BEGIN CERTIFICATE-----
VPN: IPSEC
VPN: IPSEC: DPD Profiles
Create dead peer detection (DPD) profile
Create dead peer detection (DPD) profile. Any change in profile affects all sessions consuming this profile. Request:Example Request: POST https://<ip>/api/v1/vpn/ipsec/dpd-profiles { "resource_type" : "IPSecVPNDPDProfile", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Successful Response:
Example Response: { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Required Permissions: Feature: vpn Additional Errors:
Get IPSec dead peer detection (DPD) profile list result
Get paginated list of all dead peer detection (DPD) profiles. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/dpd-profiles Successful Response:
Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } ] } Required Permissions: Feature: vpn Additional Errors:
Get IPSec dead peer detection (DPD) profile
Get IPSec dead peer detection (DPD) profile. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/dpd-profiles/12a39f8c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Example Response: { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Required Permissions: Feature: vpn Additional Errors:
Edit IPSec dead peer detection (DPD) profile
Edit IPSec dead peer detection (DPD) profile. Request:Example Request: PUT https://<ip>/api/v1/vpn/ipsec/dpd-profiles/f962173f-ac03-4d08-8366-56a41779f61d { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Successful Response:
Example Response: { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Required Permissions: Feature: vpn Additional Errors:
Delete dead peer detection (DPD) profile
Delete dead peer detection (DPD) profile. Request:Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/dpd-profiles/12a39f8c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Required Permissions: Feature: vpn Additional Errors:
VPN: IPSEC: IKE Profiles
List IKE profiles
Get paginated list of all IKE Profiles. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/ike-profiles Successful Response:
Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } ] } Required Permissions: Feature: vpn Additional Errors:
Create custom internet key exchange (IKE) Profile
Create custom internet key exchange (IKE) Profile. IKE Profile is a reusable profile that captures IKE and phase one negotiation parameters. System will be pre provisioned with system owned non editable default IKE profile and suggested set of profiles that can be used for peering with popular remote peers like AWS VPN. User can create custom profiles as needed. Any change in profile affects all sessions consuming this profile. Request:Example Request: POST https://<ip>/api/v1/vpn/ipsec/ike-profiles { "resource_type" : "IPSecVPNIKEProfile", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Successful Response:
Example Response: { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Required Permissions: Feature: vpn Additional Errors:
Delete custom IKE Profile
Delete custom IKE Profile. Profile can not be deleted if profile has references to it. Request:Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/ike-profiles/12a3a23e-c37b-11e7-abc4-cec278b6b50a Successful Response:
Required Permissions: Feature: vpn Additional Errors:
Get IKE Profile
Get custom IKE Profile, given the particular id. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/ike-profiles/12a3a23e-c37b-11e7-abc4-cec278b6b50a Successful Response:
Example Response: { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Required Permissions: Feature: vpn Additional Errors:
Edit custom IKE Profile
Edit custom IKE Profile. System owned profiles are non editable. Request:Example Request: PUT https://<ip>/api/v1/vpn/ipsec/ike-profiles/12a3a23e-c37b-11e7-abc4-cec278b6b50a { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_V1", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Successful Response:
Example Response: { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_V1", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Required Permissions: Feature: vpn Additional Errors:
VPN: IPSEC: Multi Path Groups
Get IPSec multipath group list result
Get paginated list of all IPSec multipath groups. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/multi-path-groups Successful Response:
Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } ] } Required Permissions: Feature: vpn Additional Errors:
Create custom IPSec VPN multipath group
Create custom IPSec VPN multipath group. Request:Example Request: POST https://<ip>/api/v1/vpn/ipsec/multi-path-groups { "resource_type" : "IPSecMultiPathGroup", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Successful Response:
Example Response: { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Required Permissions: Feature: vpn Additional Errors:
Delete custom IPSec multipath group
Delete custom IPSec multipath group. It cannot be deleted if it is referencedby any IPSec sessions.
Request:
Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/multi-path-groups/514f0bef-52cc-4652-a886-03501a1cebb6 Successful Response:
Required Permissions: Feature: vpn Additional Errors:
Update custom IPSec multipath group
Update custom IPSec multipath group. Request:Example Request: PUT https://<ip>/api/v1/vpn/ipsec/multi-path-groups/514f0bef-52cc-4652-a886-03501a1cebb6 { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : false, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Successful Response:
Example Response: { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : false, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Required Permissions: Feature: vpn Additional Errors:
Get IPSec multipath group
Get custom IPSec multipath group, given the particular id. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/multi-path-groups/514f0bef-52cc-4652-a886-03501a1cebb6 Successful Response:
Example Response: { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Required Permissions: Feature: vpn Additional Errors:
VPN: IPSEC: Sessions
- GET /api/v1/vpn/ipsec/sessions
- POST /api/v1/vpn/ipsec/sessions
- DELETE /api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>
- GET /api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>
- GET /api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>?action=show-sensitive-data
- PUT /api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>
Create new VPN session
Create new VPN session. Request:Example Request: POST https://<ip>/api/v1/vpn/ipsec/sessions { "resource_type": "PolicyBasedIPSecVPNSession", "display_name": "PBS 12", "enabled": true, "policy_rules": [ { "sources": [ { "subnet": "1.1.2.0/24" } ], "destinations": [ { "subnet": "2.1.4.0/24" } ], "action": "PROTECT" } ], "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "peer_id": "4.4.4.1", "peer_address": "4.4.4.1", "psk": "TESTPSK", "connection_initiation_mode": "ON_DEMAND", "authentication_mode": "PSK" } Successful Response:
Example Response: { "display_name": "PBS 12", "enabled": true, "id": "e23554c3-a4f7-4144-8bbc-1daf88106b7e", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } Required Permissions: Feature: vpn Additional Errors:
Get IPSec VPN session list result
Get paginated list of all IPSec VPN sessions. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions Successful Response:
Example Response: { "_schema": "IPSecVPNSessionListResult", "_self": { "href": "/api/v1/vpn/ipsec/sessions", "rel": "self" }, "result_count": 1, "results": [ { "display_name": "PBS 12", "enabled": true, "id": "df90e18a-08cc-418a-8c0f-259d9531c207", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } ] } Required Permissions: Feature: vpn Additional Errors:
Edit IPSec VPN session
Edit IPSec VPN session. Request:Example Request: PUT https://<ip>/api/v1/vpn/ipsec/sessions/df90e18a-08cc-418a-8c0f-259d9531c207 { "resource_type": "RouteBasedIPSecVPNSession", "display_name": "Route Session", "enabled": true, "tunnel_ports": [ { "ip_subnets": [ { "ip_addresses": [ "192.168.50.1" ], "prefix_length": 24 } ] } ] "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "peer_id": "4.4.4.1", "peer_address": "4.4.4.1", "psk": "TESTPSK", "connection_initiation_mode": "RESPOND_ONLY", "authentication_mode": "PSK" } Successful Response:
Example Response: { "resource_type": "RouteBasedIPSecVPNSession", "display_name": "Route Session", "enabled": true, "tunnel_ports": [ { "ip_subnets": [ { "ip_addresses": [ "192.168.50.1" ], "prefix_length": 24 } ], "tunnel_port_id": "57d1d8e8-edfe-40e0-a45c-44256546d787" } ] "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "peer_id": "4.4.4.1", "peer_address": "4.4.4.1", "psk": "TESTPSK", "connection_initiation_mode": "RESPOND_ONLY", "authentication_mode": "PSK" } Required Permissions: Feature: vpn Additional Errors:
Delete IPSec VPN session
Delete IPSec VPN session. Request:Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/sessions/ee4f7777-f837-4dbb-9a03-eeb9beb52b09 Successful Response:
Required Permissions: Feature: vpn Additional Errors:
Fetch IPSec VPN session
Fetch IPSec VPN session. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions/df90e18a-08cc-418a-8c0f-259d9531c207 Successful Response:
Example Response: { "display_name": "PBS 12", "enabled": true, "id": "df90e18a-08cc-418a-8c0f-259d9531c207", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } Required Permissions: Feature: vpn Additional Errors:
Fetch IPSec VPN session with PSK
Fetch IPSec VPN session with PSK. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions/df90e18a-08cc-418a-8c0f-259d9531c207?action=show-sensitive-data Successful Response:
Example Response: { "display_name": "PBS 12", "enabled": true, "id": "df90e18a-08cc-418a-8c0f-259d9531c207", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "psk": "TESTPSK", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } Required Permissions: Feature: vpn Additional Errors:
VPN: IPSEC: Statistics
Get IPSec VPN session statistics
Get statistics of a vpn session across all tunnels and IKE session. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions/9ac3f2d8-9ba0-4e4e-8d34-2a5eb568f3e0/statistics Successful Response:
Example Response: { "display_name": "IPSecVPN_PolicyBasesdSession_001", "policy_statistics": [ { "policy_id": "1026", "tunnel_statistics": [ { "packets_sent_other_error": 0, "packets_out": 0, "dropped_packets_out": 0, "integrity_failures": 0, "nomatching_policy_errors": 0, "sa_mismatch_errors_in": 0, "peer_subnet": "2.2.5.0/24", "replay_errors": 0, "bytes_in": 0, "local_subnet": "192.168.100.0/24", "dropped_packets_in": 0, "encryption_failures": 0, "decryption_failures": 0, "tunnel_down_reason": "", "packets_receive_other_error": 0, "bytes_out": 0, "sa_mismatch_errors_out": 0, "seq_number_overflow_error": 0, "packets_in": 0, "tunnel_status": "UP" } ], "aggregate_traffic_counters": { "packets_out": 0, "dropped_packets_out": 0, "bytes_out": 0, "dropped_packets_in": 0, "bytes_in": 0, "packets_in": 0 } } ], "partial_stats": false, "ike_status": { "fail_reason": "", "ike_session_state": "UP" }, "aggregate_traffic_counters": { "packets_out": 0, "dropped_packets_out": 0, "bytes_out": 0, "dropped_packets_in": 0, "bytes_in": 0, "packets_in": 0 }, "session_status": "UP", "failed_tunnels": 0, "negotiated_tunnels": 1, "total_tunnels": 1, "ipsec_vpn_session_id": "9ac3f2d8-9ba0-4e4e-8d34-2a5eb568f3e0" } Required Permissions: Feature: vpn Additional Errors:
VPN: IPSEC: Tunnel Profiles
Get IPSecTunnelProfile List Result
Get paginated list of all IPSecTunnelProfiles. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/tunnel-profiles Successful Response:
Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } ] } Required Permissions: Feature: vpn Additional Errors:
Create custom IPSec tunnel profile
Create custom IPSec tunnel profile. IPSec tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. System will be provisioned with system owned non editable default IPSec tunnel profile. Any change in profile affects all sessions consuming this profile. Request:Example Request: POST https://<ip>/api/v1/vpn/ipsec/tunnel-profiles { "resource_type" : "IPSecVPNTunnelProfile", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Successful Response:
Example Response: { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Required Permissions: Feature: vpn Additional Errors:
Edit custom IPSecTunnelProfile
Edit custom IPSec Tunnel Profile. System owned profiles are non editable. Request:Example Request: PUT https://<ip>/api/v1/vpn/ipsec/tunnel-profiles/12a3a34c-c37b-11e7-abc4-cec278b6b50a { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Successful Response:
Example Response: { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Required Permissions: Feature: vpn Additional Errors:
Get IPSec tunnel profile
Get custom IPSec Tunnel Profile. Request:Example Request: GET https://<ip>/api/v1/vpn/ipsec/tunnel-profiles/12a3a34c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Example Response: { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Required Permissions: Feature: vpn Additional Errors:
Delete custom IPSecTunnelProfile
Delete custom IPSec Tunnel Profile. Request:Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/tunnel-profiles/12a3a34c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Required Permissions: Feature: vpn Additional Errors:
API Types
ActionDescriptor (schema)
Name | Description | Type | Notes |
description | A description of what the action does | string | Readonly |
descriptor | The URI of the REST routine provider that implements the action | string | Required Readonly |
name | The name of the action | string | Required Readonly |
uri | The URI to use to invoke the action | string | Required Readonly |
ApiCertificate (schema)
Name | Description | Type | Notes |
api_certificate | API certificate | string | Required |
api_key | API private key | string | |
ca_certificate | CA certificate | string | Required |
ApiCertificateReply (schema)
Name | Description | Type | Notes |
status | API certificate replacement status | string | Required |
ApplianceManagementSuppressRedirectQueryParameter (schema)
Name | Description | Type | Notes |
suppress_redirect | Suppress redirect status if applicable Do not return a redirect HTTP status. |
boolean | Default: "False" |
ApplianceManagementTaskListResult (schema)
Appliance management task query results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Task property results | array of ApplianceManagementTaskProperties | Required |
ApplianceManagementTaskProperties (schema)
Appliance management task properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
async_response_available | True if response for asynchronous request is available | boolean | Readonly |
cancelable | True if this task can be canceled | boolean | Readonly |
description | Description of the task | string | Readonly |
details | Details about the task if known | object | Readonly |
end_time | The end time of the task in epoch milliseconds | EpochMsTimestamp | Readonly |
id | Identifier for this task | string | Readonly Pattern: "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}_[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$" |
message | A message describing the disposition of the task | string | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
progress | Task progress if known, from 0 to 100 | integer | Readonly Minimum: 0 Maximum: 100 |
request_method | HTTP request method | string | Readonly |
request_uri | URI of the method invocation that spawned this task | string | Readonly |
start_time | The start time of the task in epoch milliseconds | EpochMsTimestamp | Readonly |
status | Current status of the task | ApplianceManagementTaskStatus | Readonly |
user | Name of the user who created this task | string | Readonly |
ApplianceManagementTaskQueryParameters (schema)
Name | Description | Type | Notes |
fields | Fields to include in query results Comma-separated field names to include in query result |
string | |
request_method | Request method(s) to include in query result Comma-separated request methods to include in query result |
string | Pattern: "^(=|!=|~|!~)?.+$" |
request_path | Request URI path(s) to include in query result Comma-separated request paths to include in query result |
string | Pattern: "^(=|!=|~|!~)?.+$" |
request_uri | Request URI(s) to include in query result Comma-separated request URIs to include in query result |
string | Pattern: "^(=|!=|~|!~)?.+$" |
status | Status(es) to include in query result Comma-separated status values to include in query result |
string | Pattern: "^(=|!=|~|!~)?.+$" |
user | Names of users to include in query result Comma-separated user names to include in query result |
string | Pattern: "^(=|!=|~|!~)?.+$" |
ApplianceManagementTaskStatus (schema)
Current status of the appliance management task
Name | Description | Type | Notes |
ApplianceManagementTaskStatus | Current status of the appliance management task | string | Enum: running, error, success, canceling, canceled, killed |
AuthenticationPolicyProperties (schema)
Configuration of authentication policies for the NSX node
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
api_failed_auth_lockout_period | Lockout period in seconds Once a lockout occurs, the account remains locked out of the API for this time period. Only applies to NSX Manager nodes. Ignored on other node types. |
integer | Minimum: 0 Default: "900" |
api_failed_auth_reset_period | Period, in seconds, for authentication failures to trigger lockout In order to trigger an account lockout, all authentication failures must occur in this time window. If the reset period expires, the failed login count is reset to zero. Only applies to NSX Manager nodes. Ignored on other node types. |
integer | Minimum: 0 Default: "900" |
api_max_auth_failures | Number of authentication failures that trigger API lockout Only applies to NSX Manager nodes. Ignored on other node types. |
integer | Minimum: 0 Default: "5" |
cli_failed_auth_lockout_period | Lockout period in seconds Once a lockout occurs, the account remains locked out of the CLI for this time period. While the lockout period is in effect, additional authentication attempts restart the lockout period, even if a valid password is specified. |
integer | Minimum: 0 Default: "900" |
cli_max_auth_failures | Number of authentication failures that trigger CLI lockout | integer | Minimum: 0 Default: "5" |
minimum_password_length | Minimum number of characters required in account passwords | integer | Minimum: 8 Default: "8" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
AuthenticationScheme (schema)
Name | Description | Type | Notes |
scheme_name | Authentication scheme name | string | Required |
AutonomousEdgeClusterConfig (schema)
Name | Description | Type | Notes |
nodes | Nodes in the cluster | array of TransportNodeInEdgeCluster | Minimum items: 1 Maximum items: 2 |
BasicAuthenticationScheme (schema)
Name | Description | Type | Notes |
password | Password to authenticate with | string | Required |
scheme_name | Authentication scheme name | string | Required Enum: basic |
username | User name to authenticate with | string | Required Pattern: "^.+$" |
BlackholeAction (schema)
Action to be taken on matching packets for NULL routes. For action is DISCARD, matching packets are dropped rather than forwarded.
Name | Description | Type | Notes |
BlackholeAction | Action to be taken on matching packets for NULL routes. For action is DISCARD, matching packets are dropped rather than forwarded. | string | Enum: DISCARD |
Certificate (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
details | list of X509Certificates | array of X509Certificate | Readonly |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
pem_encoded | pem encoded certificate data | string | Required |
resource_type | Must be set to the value Certificate | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
used_by | list of node IDs with services, that are using this certificate | array of NodeIdServicesMap | Readonly |
CertificateList (schema)
Certificate queries result
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Certificate list | array of Certificate | Required Readonly |
ConfigType (schema)
Config Type
Name | Description | Type | Notes |
ConfigType | Config Type | string | Enum: nsxa-state, nsxa-edge-cluster, nsxa-lrouter, nsxa-service-router, nestdb, edge-agent, dataplane, nsd, manager, controller, core |
CopyFromRemoteFileProperties (schema)
Name | Description | Type | Notes |
port | Server port | integer | Minimum: 1 Maximum: 65535 |
protocol | Protocol to use to copy file | Protocol (Abstract type: pass one of the following concrete types) HttpProtocol HttpsProtocol ScpProtocol SftpProtocol |
Required |
server | Remote server hostname or IP address | string | Required Pattern: "^[^/:]+$" |
uri | URI of file to copy | string | Required |
CopyRemoteFileProperties (schema)
Name | Description | Type | Notes |
port | Server port | integer | Minimum: 1 Maximum: 65535 |
server | Remote server hostname or IP address | string | Required Pattern: "^[^/:]+$" |
uri | URI of file to copy | string | Required |
CopyToRemoteFileProperties (schema)
Name | Description | Type | Notes |
port | Server port | integer | Minimum: 1 Maximum: 65535 |
protocol | Protocol to use to copy file Only scp and sftp may be used. |
Protocol (Abstract type: pass one of the following concrete types) HttpProtocol HttpsProtocol ScpProtocol SftpProtocol |
Required |
server | Remote server hostname or IP address | string | Required Pattern: "^[^/:]+$" |
uri | URI of file to copy | string | Required |
CpuStats (schema)
Name | Description | Type | Notes |
core | core id CPU id |
string | Readonly |
cpu_type | cpu type cpu type, one of datapath_core, controlpath_core and service_core |
string | Readonly Enum: datapath_core, controlpath_core, service_core Default: "controlpath_core" |
crypto | CPU crypto usage CPU crypto usage(pps) |
string | Readonly |
intercore | CPU intercore usage CPU intercore usage(pps) |
string | Readonly |
kni | CPU kni usage CPU kni usage(pps) |
string | Readonly |
packet_processing_usage | Datapath CPU packet processing usage Datapath CPU packet processing usage(%) |
string | Readonly |
rx | CPU rx usage CPU rx usage(pps) |
string | Readonly |
slowpath | CPU slowpath usage CPU slowpath usage(pps) |
string | Readonly |
tx | CPU tx usage CPU tx usage(pps) |
string | Readonly |
usage | CPU usage CPU usage(%) |
string | Readonly |
CreateRemoteDirectoryProperties (schema)
Name | Description | Type | Notes |
port | Server port | integer | Minimum: 1 Maximum: 65535 |
protocol | Protocol to use to copy file | SftpProtocol | Required |
server | Remote server hostname or IP address | string | Required Pattern: "^[^/:]+$" |
uri | URI of file to copy | string | Required |
Crl (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
details | details of the X509Crl object | X509Crl | Readonly |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
pem_encoded | pem encoded crl data | string | Required |
resource_type | Must be set to the value Crl | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
CrlList (schema)
Crl queries result
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | CRL list | array of Crl | Required Readonly |
CrlObjectData (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
pem_encoded | pem encoded crl data | string | Required |
resource_type | Must be set to the value CrlObjectData | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
DHGroup (schema)
Diffie-Hellman groups
Diffie-Hellman groups represent algorithm used to derive shared
keys between IPSec VPN initiator and responder over an
unsecured network.
GROUP2 uses 1024-bit Modular Exponentiation (MODP) group.
GROUP5 uses 1536-bit MODP group.
GROUP14 uses 2048-bit MODP group.
GROUP15 uses 3072-bit MODP group.
GROUP16 uses 4096-bit MODP group.
GROUP19 uses 256-bit random Elliptic Curve (ECP) group.
GROUP20 uses 384-bit random ECP group.
GROUP21 uses 521-bit random ECP group.
Name | Description | Type | Notes |
DHGroup | Diffie-Hellman groups Diffie-Hellman groups represent algorithm used to derive shared keys between IPSec VPN initiator and responder over an unsecured network. GROUP2 uses 1024-bit Modular Exponentiation (MODP) group. GROUP5 uses 1536-bit MODP group. GROUP14 uses 2048-bit MODP group. GROUP15 uses 3072-bit MODP group. GROUP16 uses 4096-bit MODP group. GROUP19 uses 256-bit random Elliptic Curve (ECP) group. GROUP20 uses 384-bit random ECP group. GROUP21 uses 521-bit random ECP group. |
string | Enum: GROUP2, GROUP5, GROUP14, GROUP15, GROUP16, GROUP19, GROUP20, GROUP21 |
DatetimeUTC (schema)
Datetime string in UTC
Datetime string in UTC in the RFC3339 format 'yyyy-mm-ddThh:mm:ssZ'
Name | Description | Type | Notes |
DatetimeUTC | Datetime string in UTC Datetime string in UTC in the RFC3339 format 'yyyy-mm-ddThh:mm:ssZ' |
string |
EdgeConfigDiagnosis (schema)
Name | Description | Type | Notes |
failed | Failed Config | FailedOrWarningConfig | Required |
passed | Passed Config | array of ConfigType | Required |
warning | Config Warning | FailedOrWarningConfig | Required |
EdgeDataplaneCpuStats (schema)
Information about Edge Dataplane CPU Stats
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
cores | Statistics of CPU cores Statistics of CPU cores |
array of CpuStats | Maximum items: 64 |
datapath_cores_mode | Datapath core mode Mode of how the datapath cores get the packets from driver |
string | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplaneCtrlPrioSetting (schema)
Information about Edge Dataplane control packet prioritization setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
ctrl_prio_enabled | Control packet prioritization setting | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplaneDynamicCoreSetting (schema)
Information about Edge Dataplane control dynamic core setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
dynamic_core_enabled | Edge Dataplane dynamic core setting | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplaneFlow (schema)
Edge dataplane flow record
Name | Description | Type | Notes |
dst_ip | Destination IP Destination IP of the flow |
string | |
dst_port | Destination port Destination port of the flow |
integer | |
proto | Protocol Protocol of the flow |
integer | |
src_ip | Source IP Source IP of the flow |
string | |
src_port | Source port Source port of the flow |
integer | |
tunnel_dst_ip | Tunnel destination IP Tunnel destination IP of the flow |
string | |
tunnel_src_ip | Tunnel source IP Tunnel source IP of the flow |
string |
EdgeDataplaneFlowCacheSetting (schema)
Information about Edge Dataplane Flow Cache mode.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
flow_cache_enabled | Flow cache setting | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplaneFlowMonitorMessage (schema)
Edge dataplane flow monitor message
Name | Description | Type | Notes |
message | Message Edge dataplane flow monitor message |
string |
EdgeDataplaneFlowMonitorStartSetting (schema)
Information about Edge Dataplane flow monitor start setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
core_id | Core id Flow monitor core id |
string | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
timeout | Timeout for flow monitor in seconds, in the range of 1 - 600. Flow monitor timeout in seconds |
string | Default: "15" |
EdgeDataplaneFlowQueryParameters (schema)
Name | Description | Type | Notes |
fields | Fields to include in query results Comma-separated field names to include in query result |
string | |
top_10 | Collect top 10 flows when set to true Collect top 10 flows when set to true, else collect all flows. |
boolean | Default: "False" |
EdgeDataplaneGeneveCbitSetting (schema)
Information about Edge Dataplane geneve cbit setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
geneve_cbit_set | geneve critical bit setting | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplaneIntrModeSetting (schema)
Information about Edge Dataplane interrupt mode setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
intr_mode_enabled | interrupt mode setting | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplaneL2vpnPmtuSetting (schema)
Information about Edge Dataplane l2vpn pmtu message generation setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
l2vpn_pmtu_enabled | l2vpn pmtu setting | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
EdgeDataplanePmtuLearningSetting (schema)
Information about Edge Dataplane pmtu learning setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
pmtu_learning_enabled | l3vpn pmtu setting | boolean |
EdgeDataplaneQatAdminSetting (schema)
Information about Edge Dataplane QAT feature enabled setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
qat_admin_enabled | QAT feature enabled setting | boolean |
EdgeDataplaneQatAdminSettingResponse (schema)
Information about Edge Dataplane QAT feature enabled setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
update_message | Datapath QAT enable CLI message Message to display after setting QAT feature |
string | Readonly |
EdgeDataplaneQatStatus (schema)
Information about Edge Dataplane QAT status
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
admin_status | QAT enabled QAT device enabled |
boolean | Readonly |
device_present | QAT present QAT device present |
boolean | Readonly |
fips_compliant | FIPS compliance FIPS compliance of QAT feature |
boolean | Readonly |
is_vm | VM deployment Edge is deployed in VM |
boolean | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
operational_status | QAT running QAT device currently running |
boolean | Readonly |
EdgeDataplaneQueueNumPerPortPerCoreSetting (schema)
Information about Edge Dataplane queue num per port per core setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
queue_num_per_port_per_core | queue number per port per core | integer | Minimum: 1 Maximum: 16 |
EdgeDataplaneRingSize (schema)
Information about Edge physical port ring size.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
rx_ring_size | rx ring size | integer | |
tx_ring_size | tx ring size | integer |
EdgeDataplaneRingSizeSetting (schema)
Information about Edge physical port ring size setting.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
ring_size | ring size | integer |
EdgeDataplaneTopKFlowQueryParameters (schema)
Name | Description | Type | Notes |
core_id | CPU core on which the flows are to be monitored CPU core on which the flows are to be monitored |
integer | Minimum: 0 Maximum: 128 |
fields | Fields to include in query results Comma-separated field names to include in query result |
string | |
timeout | Timeout for flow monitor in seconds Timeout for flow monitor in seconds |
integer | Minimum: 1 Maximum: 120 Default: "30" |
EdgeDataplaneTopKFlows (schema)
Edge dataplane top-k flow dump
Name | Description | Type | Notes |
flow_count | Count of flow records Count of flow records in the result |
integer | |
flows | Array of flow records Array of flow records |
array of EdgeDataplaneFlow |
EdgeDiagnosis (schema)
Name | Description | Type | Notes |
config | Edge Config Diagnosis | EdgeConfigDiagnosis | Required |
ha-state | HA State | string | Required Enum: disabled, offline, discover, statesync, inactive, active, unknown |
EdgeDiagnosisInconsistency (schema)
NSX Edge inconsistency check
Name | Description | Type | Notes |
detail | NSX Edge inconsistency check detail NSX Edge inconsistency check detail |
array of string | |
title | NSX Edge inconsistency check type NSX Edge inconsistency check type |
string |
EdgeDiagnosisInconsistencyResult (schema)
NSX Edge inconsistency check result
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | NSX Edge inconsistency check result | array of EdgeDiagnosisInconsistency |
EdgeInconsistencyQueryParameters (schema)
Name | Description | Type | Notes |
cursor | Opaque cursor to be used for getting next page of records (supplied by current result page) A cursor points to a specific record in the inconsistency check result |
integer | Minimum: 0 |
page_size | Maximum number of results to return in this page (server may return fewer) The page size determines the number of records to be returned |
integer | Minimum: 1 Maximum: 100 |
EdgeNodeServiceLoggingProperties (schema)
Edge node service properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
service_name | Service name | string | Required |
service_properties |
EmbeddedResource (schema)
Base class for resources that are embedded in other resources
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_owner | Owner of this resource | OwnerResourceLink | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Identifier of the resource | string | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | The type of this resource. | string |
EpochMsTimestamp (schema)
Timestamp in milliseconds since epoch
Name | Description | Type | Notes |
EpochMsTimestamp | Timestamp in milliseconds since epoch | integer |
ExitEdgeInterface (schema)
Exit interface for logical router port
Name | Description | Type | Notes |
ExitEdgeInterface | Exit interface for logical router port | string | Enum: eth1, eth2, eth3, eth4, eth5, eth6, eth7, eth8 |
FailedOrWarningConfig (schema)
Failed or Warning Config
Name | Description | Type | Notes |
controller | Controller Connection State | string | |
core | Core Names | array of string | |
dataplane | Dataplane State | string | |
edge-agent | Edge Agent State | string | |
manager | Manager Connection State | string | |
nestdb | NestDB State | string | |
nsd | Nsd State | string | |
nsxa-edge-cluster | Edge Cluster State | string | |
nsxa-lrouter | Logical Router State | string | |
nsxa-service-router | Service Router State | string | |
nsxa-state | NSXA State | string |
FileProperties (schema)
File properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
created_epoch_ms | File creation time in epoch milliseconds | integer | Required |
modified_epoch_ms | File modification time in epoch milliseconds | integer | Required |
name | File name | string | Required Pattern: "^[^/]+$" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
size | Size of the file in bytes | integer | Required |
FilePropertiesListResult (schema)
File properties query results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | File property results | array of FileProperties | Required |
FileThumbprint (schema)
File thumbprint
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
name | File name | string | Required Pattern: "^[^/]+$" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
sha1 | File's SHA1 thumbprint | string | Required |
sha256 | File's SHA256 thumbprint | string | Required |
GetCertParameter (schema)
Name | Description | Type | Notes |
details | whether to expand the pem data and show all its details | boolean | Default: "False" |
GetSNMPParameters (schema)
Get SNMP request parameters
Get SNMP request parameters.
Name | Description | Type | Notes |
show_sensitive_data | Show SNMP sensitive data or not Whether to show SNMP service properties including community strings if any applicable. |
boolean | Default: "False" |
HANodeStatusProperties (schema)
Name | Description | Type | Notes |
admin_state | Node Admin State | NodeAdminState | |
high_availability_status | Node High Availability Status | NodeHAStatus | |
node_status | Actual Node Status | NodeStatus | |
vtep_state | State of VTEP interfaces. All VTEPs share the same state. | NodeVtepState |
HaInfo (schema)
Name | Description | Type | Notes |
failover_mode | Logical router failover mode Logical router failover mode |
string | Readonly Enum: PREEMPTIVE, NON-PREEMPTIVE |
ha_mode | Logical router HA mode Logical router HA mode |
string | Readonly Enum: ACTIVE-STANDBY, ACTIVE-ACTIVE |
ha_state | Logical router HA state Logical router HA state DOWN - Logical router is not in good health SYNC - Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic |
string | Readonly Enum: DOWN, SYNC, STANDBY, ACTIVE |
rank | Rank of logical router Rank of logical router |
integer | Readonly |
state-history | Logical router high-availability history Logical router high-availability history |
LogicalRouterHaHistory | Readonly |
HostnameOrIPv4Address (schema)
Hostname or IPv4 address
Name | Description | Type | Notes |
HostnameOrIPv4Address | Hostname or IPv4 address | string | Maximum length: 255 Pattern: "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\.?$" |
HttpProtocol (schema)
Name | Description | Type | Notes |
authentication_scheme | Scheme to authenticate if required | BasicAuthenticationScheme | |
name | Must be set to the value HttpProtocol | string | Required Enum: http, https, scp, sftp |
HttpsProtocol (schema)
Name | Description | Type | Notes |
authentication_scheme | Scheme to authenticate if required | BasicAuthenticationScheme | |
name | Must be set to the value HttpsProtocol | string | Required Enum: http, https, scp, sftp |
sha256_thumbprint | SSL thumbprint of server | string | Required |
IKEDigestAlgorithm (schema)
Digest Algorithms used in IKE negotiations
The IKEDigestAlgorithms are used to verify message
integrity during IKE negotiation. SHA1 produces 160
bits hash and SHA2_XXX produces XXX bit hash.
Name | Description | Type | Notes |
IKEDigestAlgorithm | Digest Algorithms used in IKE negotiations The IKEDigestAlgorithms are used to verify message integrity during IKE negotiation. SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash. |
string | Enum: SHA1, SHA2_256, SHA2_384, SHA2_512 |
IKEEncryptionAlgorithm (schema)
Encryption algorithms used in IKE
IKEEncryption algorithms are used to ensure confidentiality of
the messages exchanged during IKE negotiations. AES stands for
Advanced Encryption Standards. AES_128 uses 128-bit keys whereas
AES_256 uses 256-bit keys for encryption and decryption.
AES_GCM stands for Advanced Encryption Standard(AES) in
Galois/Counter Mode(GCM) and is used to provide both
confidentiality and data origin authentication. AES_GCM composed
of two separate functions one for encryption(AES) and one for
authentication(GMAC). AES_GCM algorithms will be available with
IKE_V2 version only.
AES_GCM_128 uses 128-bit keys.
AES_GCM_192 uses 192-bit keys.
AES_GCM_256 uses 256-bit keys.
Name | Description | Type | Notes |
IKEEncryptionAlgorithm | Encryption algorithms used in IKE IKEEncryption algorithms are used to ensure confidentiality of the messages exchanged during IKE negotiations. AES stands for Advanced Encryption Standards. AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_GCM stands for Advanced Encryption Standard(AES) in Galois/Counter Mode(GCM) and is used to provide both confidentiality and data origin authentication. AES_GCM composed of two separate functions one for encryption(AES) and one for authentication(GMAC). AES_GCM algorithms will be available with IKE_V2 version only. AES_GCM_128 uses 128-bit keys. AES_GCM_192 uses 192-bit keys. AES_GCM_256 uses 256-bit keys. |
string | Enum: AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256 |
IPSecMultiPathGroup (schema)
IPSec VPN multipath group
Configuration to allow IPSec VPN traffic through multipaths.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
enabled | Enable IPSec VPN multipath group If true, enable IPSec VPN multipath group. |
boolean | Default: "False" |
id | Unique identifier of this resource | string | Readonly Sortable |
ipsec_vpn_session_ids | List of IPSec VPN session Ids that are using this multipath group List of all IPSec VPN session Ids that are using this multipath group. |
array of string | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value IPSecMultiPathGroup | string | |
scheme | The scheme specified to decide best paths Specify a scheme to probe the quality of different paths for IPSec VPN traffic and to select the best equally good paths. THRESHOLD_BASED: The best paths are selected based on the threshold limit configured. |
Enum: THRESHOLD_BASED Default: "THRESHOLD_BASED" |
|
scheme_value | The value specified for the scheme If scheme is THRESHOLD_BASED, scheme_value represents margin above the average path metric used for selecting the best paths. Paths below the specified threshold are considered good while above the selected threshold are considered bad quality. Threshold is a percentage value in the range of [0-100]. If not specified, the default is 20. |
integer | |
source_port_pool_size | The size of the source port pool The maximum number of best paths allowed for an IPSec VPN session. For each path, a UDP source port number is assigned from an internal source port pool for encapsulating the IPSec VPN traffic through the path. |
integer | Minimum: 2 Maximum: 7 Default: "7" |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
IPSecMultiPathGroupListResult (schema)
List of IPSec multipath groups
List all the IPSec multipath groups.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | IPSec multipath group list results | array of IPSecMultiPathGroup | Required |
IPSecVPNDPDProfile (schema)
Dead peer detection (DPD) profile
Dead peer detection (DPD) is a method that allows detection of unreachable internet key excahnge (IKE) peers. Any changes affects all IPSec VPN sessions consuming this profile.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
dpd_probe_interval | DPD probe interval defines an interval for DPD probes (in seconds) When the DPD probe mode is periodic, this interval is the number of seconds between DPD messages. When the DPD probe mode is on-demand, this interval is the number of seconds during which traffic is not received from the peer before DPD retry messages are sent if there is IPSec traffic to send. For PERIODIC Mode: Minimum: 3 Maximum: 360 Default: 60 For ON_DEMAND Mode: Minimum: 1 Maximum: 10 Default: 3 |
integer | Minimum: 1 Maximum: 360 |
dpd_probe_mode | DPD probe mode DPD probe mode is used to query the liveliness of the peer. Two modes are possible - PERIODIC - is used to query the liveliness of the peer at regular intervals (dpd_probe_interval). It does not take into consideration traffic coming from the peer. The benefit of this mode over the on-demand mode is earlier detection of dead peers. However, use of periodic DPD incurs extra overhead. When communicating to large numbers of peers, please consider using on-demand DPD instead. ON_DEMAND - is used to query the liveliness of the peer by instructing the local endpoint to send DPD message to a peer if there is traffic to send to the peer AND the peer was idle for dpd_probe_interval seconds (i.e. there was no traffic from the peer for dpd_probe_interval seconds) |
string | Enum: PERIODIC, ON_DEMAND Default: "PERIODIC" |
enabled | Enable dead peer detection (DPD) If true, enable dead peer detection. |
boolean | Default: "True" |
id | Unique identifier of this resource | string | Readonly Sortable |
is_default | Default Profile It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile. |
boolean | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value IPSecVPNDPDProfile | string | |
retry_count | Retry count Maximum number of DPD messages retry attempts. This value is applicable for both dpd probe modes, periodic and on-demand. |
integer | Minimum: 1 Maximum: 100 Default: "5" |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
IPSecVPNDPDProfileListResult (schema)
List dead peer detection (DPD) profiles
List all the dead peer detection (DPD) profiles.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | IPSec DPD Profile list results | array of IPSecVPNDPDProfile | Required |
IPSecVPNIKEProfile (schema)
Internet key exchange (IKE) profile
IKE Profile is a reusable profile that captures IKE phase one negotiation parameters. Any changes affects all IPSec VPN sessions consuming this profile.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
dh_groups | DH group Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14. |
array of DHGroup | |
digest_algorithms | Algorithm for message hash Algorithm used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256. |
array of IKEDigestAlgorithm | |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
encryption_algorithms | Encryption algorithm for IKE Encryption algorithm used during Internet Key Exchange(IKE) negotiation. Default is AES_128. |
array of IKEEncryptionAlgorithm | |
id | Unique identifier of this resource | string | Readonly Sortable |
ike_version | IKE version IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2. |
string | Enum: IKE_V1, IKE_V2, IKE_FLEX Default: "IKE_V2" |
is_default | Default Profile It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile. |
boolean | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value IPSecVPNIKEProfile | string | |
sa_life_time | Security association (SA) life time Life time for security association. Default is 86400 seconds (1 day). |
integer | Minimum: 21600 Maximum: 31536000 Default: "86400" |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
IPSecVPNIKEProfileListResult (schema)
List IKE profiles
List all the IKE profiles.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | IKE Profile list results | array of IPSecVPNIKEProfile | Required |
IPSecVPNIKESessionStatus (schema)
IKE session status
Status for IPSec VPN IKE session UP, DOWN, NEGOTIATING and fail reason if IKE session is down.
Name | Description | Type | Notes |
fail_reason | Fail reason Reason for failure. |
string | Readonly |
ike_session_state | IKE session state IKE session service status UP, DOWN and NEGOTIATING. |
string | Readonly Enum: UP, DOWN, NEGOTIATING |
IPSecVPNLocalEndpoint (schema)
IPSec VPN Local Endpoint
Local endpoint represents a logical router on which tunnel needs to be terminated.
Name | Description | Type | Notes |
certificate_id | Certificate Id Site certificate identifier. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
local_address | IPV4 Address for local endpoint IPV4 Address for local endpoint. |
IPv4Address | Required |
local_id | Local identifier Local identifier. Only one Local id is allowed for a local address. |
string | |
trust_ca_ids | Certificate authority (CA) identifiers Certificate authority (CA) identifier list to verify peer certificates. |
array of string | |
trust_crl_ids | Certificate revocation list (CRL) Identifiers Certificate revocation list (CRL) identifier list of peer certificates. |
array of string |
IPSecVPNPolicyRule (schema)
IPSec VPN policy rules
For policy-based IPsec VPNs, a security policy specifies as its action the VPN tunnel to be used for transit traffic that meets the policy's match criteria.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_owner | Owner of this resource | OwnerResourceLink | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
action | Action to be applied PROTECT - Protect rules are defined per policy based IPSec VPN session. |
string | Readonly Enum: PROTECT Default: "PROTECT" |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
destinations | Destination list List of peer subnets. |
array of IPSecVPNPolicySubnet | Maximum items: 128 |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
enabled | Enabled flag A flag to enable/disable the policy rule. |
boolean | Default: "True" |
id | Unique policy id Unique policy id. |
string | |
logged | Logging flag A flag to enable/disable the logging for the policy rule. |
boolean | Default: "False" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value IPSecVPNPolicyRule | string | |
sources | Source list List of local subnets. |
array of IPSecVPNPolicySubnet | Maximum items: 128 |
IPSecVPNPolicySubnet (schema)
Subnet for IPSec Policy based VPN
Used to specify the local/peer subnets in IPSec VPN Policy rule.
Name | Description | Type | Notes |
subnet | Peer or local subnet Subnet used in policy rule. |
IPv4CIDRBlock | Required |
IPSecVPNPolicyTrafficStatistics (schema)
IPSec VPN policy traffic statistics
IPSec VPN policy traffic statistics
Name | Description | Type | Notes |
aggregate_traffic_counters | Traffic summary Aggregate traffic statistics across all ipsec tunnels. |
IPSecVPNTrafficCounters | Readonly |
policy_id | Policy Identifier Policy Identifier. |
string | Readonly |
tunnel_statistics | Tunnel statistics Tunnel statistics. |
array of IPSecVPNTunnelTrafficStatistics | Readonly |
IPSecVPNSession (schema)
IPSec VPN session
VPN session defines connection between local and peer endpoint. Untill VPN session is defined configuration is not realized.
This is an abstract type. Concrete child types:
PolicyBasedIPSecVPNSession
RouteBasedIPSecVPNSession
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
authentication_mode | Authentication Mode Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory. |
string | Enum: PSK, CERTIFICATE Default: "PSK" |
connection_initiation_mode | Connection initiation mode Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request. |
string | Enum: INITIATOR, RESPOND_ONLY, ON_DEMAND Default: "INITIATOR" |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
dpd_profile_id | Dead peer detection (DPD) profile id Dead peer detection (DPD) profile id. Default will be set according to system default policy. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
enabled | Enable/Disable IPSec VPN session Enable/Disable IPSec VPN session. |
boolean | Default: "True" |
id | Unique identifier of this resource | string | Readonly Sortable |
ike_profile_id | Internet key exchange (IKE) profile id IKE profile id to be used. Default will be set according to system default policy. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
ipsec_tunnel_profile_id | IPSec tunnel profile id Tunnel profile id to be used. By default it will point to system default profile. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
local_endpoint | Local endpoint Local endpoint. |
IPSecVPNLocalEndpoint | Required |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
peer_address | IPV4 address of peer endpoint on remote site. IPV4 address of peer endpoint on remote site. |
string | Required |
peer_id | Peer id Peer identifier. |
string | Required |
psk | Pre-shared key IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode. |
string | Minimum: 1 Maximum: 128 |
resource_type | Must be set to the value IPSecVPNSession | IPSecVPNSessionResourceType | Required |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
tcp_mss_clamping | TcpMssClamping |
IPSecVPNSessionListParameters (schema)
List parameters for IPSec VPN Sessions
Parameters to get filtered list of IPSec VPN Sessions. The filter parameters are not mutually exclusive and can be used together.
Name | Description | Type | Notes |
session_type | Type of the vpn session All the IPSec VPN sessions of specified type will be included in the result. |
IPSecVPNSessionResourceType |
IPSecVPNSessionListResult (schema)
List IPSec VPN sessions
List all the IPSec VPN sessions.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | IPSec VPN sessions list result | array of IPSecVPNSession (Abstract type: pass one of the following concrete types) PolicyBasedIPSecVPNSession RouteBasedIPSecVPNSession |
Required |
IPSecVPNSessionResourceType (schema)
Resource types of IPsec VPN session
A Policy Based VPN requires to define protect rules that match
local and peer subnets. IPSec security associations is
negotiated for each pair of local and peer subnet.
A Route Based VPN is more flexible, more powerful and recommended over
policy based VPN. IP Tunnel port is created and all traffic routed via
tunnel port is protected. Routes can be configured statically
or can be learned through BGP. A route based VPN is must for establishing
redundant VPN session to remote site.
Name | Description | Type | Notes |
IPSecVPNSessionResourceType | Resource types of IPsec VPN session A Policy Based VPN requires to define protect rules that match local and peer subnets. IPSec security associations is negotiated for each pair of local and peer subnet. A Route Based VPN is more flexible, more powerful and recommended over policy based VPN. IP Tunnel port is created and all traffic routed via tunnel port is protected. Routes can be configured statically or can be learned through BGP. A route based VPN is must for establishing redundant VPN session to remote site. |
string | Enum: PolicyBasedIPSecVPNSession, RouteBasedIPSecVPNSession |
IPSecVPNSessionStatistics (schema)
IPSec VPN session statistics
Session statistics gives aggregated statistics of all policies for all the tunnels.
Name | Description | Type | Notes |
aggregate_traffic_counters | Traffic summary Aggregate traffic statistics across all ipsec tunnels. |
IPSecVPNTrafficCounters | Readonly |
display_name | Display name Display name of vpn session. |
string | Readonly |
failed_tunnels | Failed tunnels Number of failed tunnels. |
integer | Readonly |
ike_status | IKE status summary Status for IPSec VPN IKE session UP/DOWN and fail reason if IKE session is down. |
IPSecVPNIKESessionStatus | Readonly |
ipsec_vpn_session_id | Session identifier UUID of vpn session. |
string | Readonly |
last_update_timestamp | Last updated timestamp Timestamp when the data was last updated. |
EpochMsTimestamp | Readonly |
negotiated_tunnels | Negotiated tunnels Number of negotiated tunnels. |
integer | Readonly |
partial_stats | Partial Statistics Partial statistics if true specifies that the statistics are only from active node. |
boolean | Readonly |
policy_statistics | IPSec policy statistics Gives aggregate traffic statistics across all ipsec tunnels and individual tunnel statistics. |
array of IPSecVPNPolicyTrafficStatistics | Readonly |
session_status | Session status Gives session status consolidated using IKE status and tunnel status. It can be UP, DOWN, DEGRADED. If IKE and all tunnels are UP status will be UP, if all down it will be DOWN, otherwise it will be DEGRADED. |
string | Readonly Enum: UP, DOWN, DEGRADED |
total_tunnels | Total tunnels Total number of tunnels. |
integer | Readonly |
IPSecVPNTrafficCounters (schema)
IPSec VPN traffic counters
Traffic counters for IPSec VPN session.
Name | Description | Type | Notes |
bytes_in | Bytes in Total number of bytes recevied. |
integer | Readonly |
bytes_out | Bytes out Total number of bytes sent. |
integer | Readonly |
dropped_packets_in | Dropped incoming packets Total number of incoming packets dropped on inbound security association. |
integer | Readonly |
dropped_packets_out | Dropped outgoing packets Total number of outgoing packets dropped on outbound security association. |
integer | Readonly |
packets_in | Packets in Total number of packets received. |
integer | Readonly |
packets_out | Packets out Total number of packets sent. |
integer | Readonly |
IPSecVPNTunnelProfile (schema)
IPSec VPN tunnel profile
IPSec VPN tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. Any changes affects all IPSec VPN sessions consuming this profile.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
df_policy | Policy for handling defragmentation bit Defragmentation policy helps to handle defragmentation bit present in the inner packet. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. |
string | Enum: COPY, CLEAR Default: "COPY" |
dh_groups | DH group Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14. |
array of DHGroup | |
digest_algorithms | Algorithm for message hash Algorithm used for message digest. Default digest algorithm is implicitly covered by default encryption algorithm "AES_GCM_128". |
array of TunnelDigestAlgorithm | |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
enable_perfect_forward_secrecy | Enable perfect forward secrecy If true, perfect forward secrecy (PFS) is enabled. |
boolean | Default: "True" |
encapsulation_mode | Encapsulation Mode Encapsulation Mode to be used for encryption of packet. Tunnel mode protects internal routing information by encrypting IP header of original packet. |
string | Readonly Enum: TUNNEL_MODE Default: "TUNNEL_MODE" |
encryption_algorithms | Encryption algorithm to use in tunnel establishement Encryption algorithm to encrypt/decrypt the messages exchanged between IPSec VPN initiator and responder during tunnel negotiation. Default is AES_GCM_128. |
array of TunnelEncryptionAlgorithm | |
id | Unique identifier of this resource | string | Readonly Sortable |
is_default | Default Profile It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile. |
boolean | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value IPSecVPNTunnelProfile | string | |
sa_life_time | Security association (SA) life time SA life time specifies the expiry time of security association. Default is 3600 seconds. |
integer | Minimum: 900 Maximum: 31536000 Default: "3600" |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
transform_protocol | Tunnel protocol IPSec transform specifies IPSec security protocol. |
string | Readonly Enum: ESP Default: "ESP" |
IPSecVPNTunnelProfileListResult (schema)
List tunnel profiles
List all the tunnel profiles.
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | IPSec Tunnel Profile list results | array of IPSecVPNTunnelProfile | Required |
IPSecVPNTunnelTrafficStatistics (schema)
IPSec VPN tunnel traffic statistics
IPSec VPN tunnel traffic statistics.
Name | Description | Type | Notes |
bytes_in | Bytes in Total number of incoming bytes on inbound Security association (SA). |
integer | Readonly |
bytes_out | Bytes out Total number of outgoing bytes on outbound Security association (SA). |
integer | Readonly |
decryption_failures | Decryption failures Total number of packets dropped due to decryption failures. |
integer | Readonly |
dropped_packets_in | Dropped incoming packets Total number of incoming packets dropped on inbound security association. |
integer | Readonly |
dropped_packets_out | Dropped outgoing packets Total number of outgoing packets dropped on outbound security association. |
integer | Readonly |
encryption_failures | Encryption failures Total number of packets dropped because of failure in encryption. |
integer | Readonly |
integrity_failures | Integrity failures Total number of packets dropped due to integrity failures. |
integer | Readonly |
local_subnet | Local subnet Local subnet to which a tunnel belongs. |
string | Readonly |
nomatching_policy_errors | Nomatching Policy errors Number of packets dropped because of no matching policy is available. |
integer | Readonly |
packets_in | Packets in Total number of incoming packets on inbound Security association (SA). |
integer | Readonly |
packets_out | Packets out Total number of outgoing packets on outbound Security association (SA). |
integer | Readonly |
packets_receive_other_error | Packets receive other error Total number of incoming packets dropped on inbound Security association (SA)(misc). |
integer | Readonly |
packets_sent_other_error | Packets sent other error Total number of packets dropped while sending for any reason. |
integer | Readonly |
peer_subnet | Peer subnet Peer subnet to which a tunnel belongs. |
string | Readonly |
replay_errors | Replay errors Total number of packets dropped due to replay check on that Security association (SA). |
integer | Readonly |
sa_mismatch_errors_in | Security association (SA) mismatch errors on incoming packets Totoal number of security association (SA) mismatch errors on incoming packets. |
integer | Readonly |
sa_mismatch_errors_out | Security association (SA) mismatch errors on outgoing packets Totoal number of security association (SA) mismatch errors on outgoing packets. |
integer | Readonly |
seq_number_overflow_error | Sequence number overflow error Total number of packets dropped while sending due to overflow in sequence number. |
integer | Readonly |
tunnel_down_reason | Tunnel down reason Gives the detailed reason about the tunnel when it is down. If tunnel is UP tunnel down reason will be empty. |
string | Readonly |
tunnel_status | Tunnel Status Specifies the status of tunnel. If all the SA (Security association) are negotiated then tunnels status will be UP. If negotiation fails for the SAs status will be DOWN, if SAs are in negotiating phase tunnels status will be NEGOTIATING. |
string | Readonly Enum: UP, DOWN, NEGOTIATING |
IPSubnet (schema)
Name | Description | Type | Notes |
ip_addresses | IPv4 Addresses | array of IPv4Address | Required Minimum items: 1 Maximum items: 1 |
prefix_length | Subnet Prefix Length | integer | Required Minimum: 1 Maximum: 32 |
IPv4Address (schema)
IPv4 address
Name | Description | Type | Notes |
IPv4Address | IPv4 address | string | Maximum length: 255 Pattern: "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$" |
IPv4AddressProperties (schema)
IPv4 address properties
Name | Description | Type | Notes |
ip_address | Interface IPv4 address | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
netmask | Interface netmask | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
IPv4CIDRBlock (schema)
IPv4 CIDR Block
Name | Description | Type | Notes |
IPv4CIDRBlock | IPv4 CIDR Block | string | Maximum length: 255 Pattern: "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(3[0-2]|[1-2][0-9]|[0-9]))$" |
IncludedFieldsParameters (schema)
A list of fields to include in query results
Name | Description | Type | Notes |
included_fields | Comma separated list of fields that should be included in query result | string |
Interface (schema)
Interface properties
Interface properties.
Name | Description | Type | Notes |
address | IPv4 CIDR block IPv4 CIDR block. |
IPv4CIDRBlock | Required |
interface_type | Interface type Interface type. |
string | Required Enum: MANAGEMENT, TUNNEL |
name | Interface name Interface name. |
string | Required |
KnownHostParameter (schema)
Name | Description | Type | Notes |
host | Known host hostname or IP address | HostnameOrIPv4Address | Required |
port | Known host port | integer | Minimum: 1 Maximum: 65535 Default: "22" |
L2Extension (schema)
L2 Extension
Configuration for extending L2 domain with L2VPN.
Name | Description | Type | Notes |
l2vpn_session_id | L2VPN session ID L2VPN sessions identifier for L2 extension. |
string | Required |
l2vpn_session_name | Display name of the given l2vpn session Display name of the given l2vpn session. |
string | |
tunnel_id | Tunnel ID Tunnel ID to uniquely identify the L2 extension. |
integer | Required Minimum: 1 Maximum: 4093 |
L2VPNSession (schema)
L2VPN Session
L2VPN Session represents meta data necessary to create
the L2VPN Session. For client, it is represented by an array
of peer code for each transport tunnel.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
enabled | Enable L2VPN session Enable to extend all the associated logical switches. |
boolean | Default: "True" |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value L2VPNSession | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
transport_tunnels | List of L2VPN Transport Tunnel List of L2VPN transport tunnel. |
array of TransportTunnel | Required Minimum items: 1 Maximum items: 4 |
L2VPNSessionListResult (schema)
List all L2VPN sessions
list all the L2VPN sessions
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | L2VPN sessions list result | array of L2VPNSession | Required |
L2VPNSessionStatistics (schema)
L2VPN session statistics
L2VPN session statistics.
Name | Description | Type | Notes |
display_name | Display name Display name of L2VPN session. |
string | Readonly |
l2vpn_session_id | Session identifier UUID of L2VPN session. |
string | Readonly |
reference_count | Number of references to L2VPN session Number of logical ports that are referencing the L2VPN session. |
integer | Readonly |
session_status | L2VPN session status L2VPN session status. It can be UP and DOWN. |
string | Readonly Enum: UP, DOWN |
traffic_counter | Traffic counter Traffic counter through the L2VPN session. |
L2VPNTrafficStatistics | Readonly |
transport_tunnels | List of transport tunnels List of transport tunnels. |
array of TransportTunnel | Readonly |
L2VPNTrafficStatistics (schema)
L2VPN traffic statistics
Traffic statistics for L2VPN.
Name | Description | Type | Notes |
bytes_in | Bytes in Total number of incoming bytes. |
integer | Readonly |
bytes_out | Bytes out Total number of outgoing bytes. |
integer | Readonly |
dropped_packets_in | Dropped incoming packets Total number of incoming packets dropped. |
integer | Readonly |
dropped_packets_out | Dropped outgoing packets Total number of outgoing packets dropped. |
integer | Readonly |
packets_in | Packets in Total number of incoming packets. |
integer | Readonly |
packets_out | Packets out Total number of outgoing packets. |
integer | Readonly |
ListCertParameter (schema)
Name | Description | Type | Notes |
cursor | Opaque cursor to be used for getting next page of records (supplied by current result page) | string | |
details | whether to expand the pem data and show all its details | boolean | Default: "False" |
included_fields | Comma separated list of fields that should be included in query result | string | |
page_size | Maximum number of results to return in this page (server may return fewer) | integer | Minimum: 0 Maximum: 1000 Default: "1000" |
sort_ascending | boolean | ||
sort_by | Field by which records are sorted | string | |
type | Type of certificate to return Provide this parameter to limit the list of returned certificates to those matching a particular usage. Passing cluster_certificate will return the certificate used for the cluster wide API service. |
string | Enum: cluster_api_certificate |
ListRequestParameters (schema)
Name | Description | Type | Notes |
cursor | Opaque cursor to be used for getting next page of records (supplied by current result page) | string | |
included_fields | Comma separated list of fields that should be included in query result | string | |
page_size | Maximum number of results to return in this page (server may return fewer) | integer | Minimum: 0 Maximum: 1000 Default: "1000" |
sort_ascending | boolean | ||
sort_by | Field by which records are sorted | string |
ListResult (schema)
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Result list | array of Resource | Required |
ListResultQueryParameters (schema)
Name | Description | Type | Notes |
fields | Fields to include in query results Comma-separated field names to include in query result |
string |
LogicalPort (schema)
This is an abstract type. Concrete child types:
LogicalRouterIPTunnelPort
LogicalRouterLoopbackPort
LogicalRouterPort
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value LogicalPort | LogicalPortResourceType | Required |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
LogicalPortListParameters (schema)
List parameters for logical port
Parameters to get filtered list of logical ports. The filter parameters are mutually exclusive.
Name | Description | Type | Notes |
l2_extension_id | Id of a specified l2vpn session List all of the logical ports that are extended via the specified l2vpn session id. |
string | |
port_type | Type of logical port If routed, list all of the routed logical ports. If extended, list all of the extended logial ports. If none, list all pure l2 logical ports (not routed and extended). |
string | Enum: routed, extended, none |
LogicalPortListResult (schema)
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Logical port list results | array of LogicalPort (Abstract type: pass one of the following concrete types) LogicalRouterIPTunnelPort LogicalRouterLoopbackPort LogicalRouterPort |
Required |
LogicalPortResourceType (schema)
Resource types of logical port
LogicalRouterPort is the L3 Port attached to the router.
LogicalRouterIPTunnelPort is a IPSec VPN tunnel port created on
logical router when route based VPN session configured.
LogicalRouterLoopbackPort is a loopback port for the logical router.
LogicalRouterManagementPort is a management port on the logical router.
Name | Description | Type | Notes |
LogicalPortResourceType | Resource types of logical port LogicalRouterPort is the L3 Port attached to the router. LogicalRouterIPTunnelPort is a IPSec VPN tunnel port created on logical router when route based VPN session configured. LogicalRouterLoopbackPort is a loopback port for the logical router. LogicalRouterManagementPort is a management port on the logical router. |
string | Enum: LogicalRouterPort, LogicalRouterIPTunnelPort, LogicalRouterLoopbackPort, LogicalRouterManagementPort |
LogicalRouterHaHistory (schema)
Name | Description | Type | Notes |
event | Logical router HA event that triggered state change Logical router HA event that triggered state change |
string | Readonly |
event_timestamp | Time in UTC when the last HA event occured Time in UTC when the last HA event occured |
EpochMsTimestamp | Readonly |
state | Logical router HA state Logical router HA state DOWN - Logical router is not in good health SYNC - Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic |
string | Readonly Enum: DOWN, SYNC, STANDBY, ACTIVE |
LogicalRouterIPTunnelPort (schema)
Logical router IP tunnel port
Logical router IP tunnel port.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
admin_state | Admin state of port Admin state of port. |
string | Readonly Enum: UP, DOWN |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value LogicalRouterIPTunnelPort | LogicalPortResourceType | Required |
subnets | Tunnel port subnets Tunnel port subnets. |
array of IPSubnet | Required Readonly Minimum items: 1 Maximum items: 1 |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
vpn_session_id | VPN session identifier Associated VPN session identifier. |
string | Readonly |
LogicalRouterLoopbackPort (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value LogicalRouterLoopbackPort | LogicalPortResourceType | Required |
subnets | Logical router loopback port subnets | array of IPSubnet | Maximum items: 1 |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
LogicalRouterPort (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
dhcp_server_id | DHCP server ID Specify DHCP server for L2 domain to use. If not given, there is no DHCP service in the L2 domain. |
string | |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
exit_interface | Exit interface from edge Exit interface from edge |
ExitEdgeInterface | Required |
id | Unique identifier of this resource | string | Readonly Sortable |
l2_extensions | L2 extensions Configuration for extending L2 domain via L2VPN. |
array of L2Extension | Minimum items: 1 |
mac_address | MAC address MAC address |
string | Readonly |
mtu | Maximum transmission unit (MTU) Maximum transmission unit specifies the size of the largest packet that a network protocol can transmit. |
integer | Minimum: 64 Maximum: 9000 Default: "1500" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value LogicalRouterPort | LogicalPortResourceType | Required |
subnets | Logical router port subnets | array of IPSubnet | Maximum items: 1 |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
urpf_mode | Unicast Reverse Path Forwarding mode | UrpfMode | Default: "STRICT" |
vlan_id | VLAN for the Logical Switch | integer | Required Minimum: 0 Maximum: 4091 |
LogicalRouterPortCounters (schema)
Name | Description | Type | Notes |
dropped_packets | Number of Dropped Packets | integer | Required |
total_bytes | Total Number of Bytes | integer | Required |
total_packets | Total Number of Packets | integer | Required |
LogicalRouterPortStatistics (schema)
Name | Description | Type | Notes |
admin_state | Administrative State Configurable administrative state. |
string | Required Enum: UP, DOWN |
last_update_timestamp | Timestamp in Milliseconds Since Epoch | integer | Required |
logical_router_port_id | Logical Router Port UUID | string | Required |
operational_state | Operational State Operational state of the port. Takes into account the exit interface status. |
string | Required Enum: UP, DOWN |
rx | Logical Router Port Receive Count | LogicalRouterPortCounters | Required |
tx | Logical Router Port Transmit Count | LogicalRouterPortCounters | Required |
LogicalRouterRouteEntry (schema)
Name | Description | Type | Notes |
admin_distance | Admin Distance | integer | Required |
logical_router_port_id | Logical Router Port ID | string | Required |
network | Network | IPv4CIDRBlock | Required |
next_hop | Next Hop | IPv4Address | |
route_type | Route Type | RouteType | Required |
LogicalRouterRouteTable (schema)
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
last_update_timestamp | Timestamp in Milliseconds Since Epoch | integer | Required Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Logical Router Route Entry | array of LogicalRouterRouteEntry | Required |
LogicalRouterType (schema)
Name | Description | Type | Notes |
fields | Fields to include in query results Comma-separated field names to include in query result |
string | |
router_type | Logical router type Logical router type |
string | Enum: SERVICE_ROUTER_TIER0, VRF_SERVICE_ROUTER_TIER0, DISTRIBUTED_ROUTER_TIER0, VRF_DISTRIBUTED_ROUTER_TIER0, SERVICE_ROUTER_TIER1, VRF_SERVICE_ROUTER_TIER1, DISTRIBUTED_ROUTER_TIER1, VRF_DISTRIBUTED_ROUTER_TIER1, TUNNEL, RTEP_TUNNEL_VRF |
LogicalRoutersInfo (schema)
Name | Description | Type | Notes |
ha_info | Logical router high-availability information Logical router high-availability information |
HaInfo | Readonly |
logical_router_uuid | Logical router UUID Logical router UUID |
string | Readonly |
mp_router_uuid | MP logical router UUID MP logical router UUID |
string | Readonly |
name | Name of the logical router Name of the logical router |
string | Readonly |
router_type | Logical router type Logical router type |
string | Readonly Enum: SERVICE_ROUTER_TIER0, VRF_SERVICE_ROUTER_TIER0, DISTRIBUTED_ROUTER_TIER0, VRF_DISTRIBUTED_ROUTER_TIER0, SERVICE_ROUTER_TIER1, VRF_SERVICE_ROUTER_TIER1, DISTRIBUTED_ROUTER_TIER1, VRF_DISTRIBUTED_ROUTER_TIER1, TUNNEL, RTEP_TUNNEL_VRF |
MaintenanceModePropertiesReply (schema)
Information about the Edge maintenance mode
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
maintenance_mode | current maintenance mode | string | Readonly Enum: enabled, disabled Default: "disabled" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
MaintenanceModePropertiesRequest (schema)
Information about the Edge maintenance mode
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
maintenance_mode | current maintenance mode | boolean | |
notify_mpa | send notification to MPA | boolean | Default: "True" |
ManagedResource (schema)
Base type for resources that are managed by API clients
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | The type of this resource. | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
MandatoryAccessControlProperties (schema)
Information about mandatory access control
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
enabled | Enabled can be True/False | boolean | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
status | current status of Mandatory Access Control | string | Readonly Enum: ENABLED, DISABLED, ENABLED_PENDING_REBOOT |
NodeAdminState (schema)
Node Admin State
Name | Description | Type | Notes |
NodeAdminState | Node Admin State | string | Enum: UP, DOWN, UNKNOWN |
NodeFileSystemProperties (schema)
File system properties
Name | Description | Type | Notes |
file_system | File system id | string | Readonly |
mount | File system mount | string | Readonly |
total | File system size in kilobytes | integer | Readonly |
type | File system type | string | Readonly |
used | Amount of file system used in kilobytes | integer | Readonly |
NodeHAStatus (schema)
Node High Availability Status
Name | Description | Type | Notes |
NodeHAStatus | Node High Availability Status | string | Enum: ACTIVE, INACTIVE, STATE_SYNC, DISCOVER, OFFLINE, DISABLED, UNKNOWN |
NodeIdServicesMap (schema)
Name | Description | Type | Notes |
node_id | NodeId | string | Required Maximum length: 255 |
service_types | list of ServiceTypes | array of ServiceType | Required |
NodeInterfaceStatisticsProperties (schema)
Node network interface statistic properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
interface_id | Interface ID | string | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
rx_bytes | Number of bytes received | integer | Readonly |
rx_dropped | Number of packets dropped | integer | Readonly |
rx_errors | Number of receive errors | integer | Readonly |
rx_frame | Number of framing errors | integer | Readonly |
rx_packets | Number of packets received | integer | Readonly |
tx_bytes | Number of bytes transmitted | integer | Readonly |
tx_carrier | Number of carrier losses detected | integer | Readonly |
tx_colls | Number of collisions detected | integer | Readonly |
tx_dropped | Number of packets dropped | integer | Readonly |
tx_errors | Number of transmit errors | integer | Readonly |
tx_packets | Number of packets transmitted | integer | Readonly |
NodeLogProperties (schema)
Node log properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
last_modified_time | Last modified time expressed in milliseconds since epoch | EpochMsTimestamp | Readonly |
log_name | Name of log file | string | Readonly |
log_size | Size of log file in bytes | integer | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
NodeLogPropertiesListResult (schema)
Node log property query results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Node log property results | array of NodeLogProperties | Required |
NodeNameServersProperties (schema)
Node network name servers properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
name_servers | Name servers | array of string | Required Maximum items: 3 |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
NodeNetworkInterfaceProperties (schema)
Node network interface properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
admin_status | Interface administration status | string | Readonly Enum: up, down |
bond_cur_active_slave | Bond's currently active slave device | string | Readonly |
bond_lacp_rate | Bond's rate at which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode | string | Readonly |
bond_mode | Bond mode | string | Enum: ACTIVE_BACKUP, 802_3AD, ROUND_ROBIN, BROADCAST, XOR, TLB, ALB |
bond_primary | Bond's primary device name in active-backup bond mode | string | |
bond_primary_slave | Bond's primary device name in active-backup bond mode | string | Readonly |
bond_slaves | Bond's slave devices | array of string | |
bond_xmit_hash_policy | Bond's transmit hash policy for balance-xor and 802.3ad modes | string | Readonly Enum: layer2, layer2+3, layer3+4, encap2+3, encap3+4 |
broadcast_address | Interface broadcast address | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
default_gateway | Interface's default gateway | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
interface_id | Interface ID | string | Required Readonly |
ip_addresses | Interface IP addresses | array of IPv4AddressProperties | Maximum items: 1 |
ip_configuration | Interface configuration | string | Required Enum: dhcp, static, not configured |
is_kni | Interface is a KNI | boolean | Readonly |
link_status | Interface administration status | string | Readonly Enum: up, down |
mtu | Interface MTU | integer | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
physical_address | Interface MAC address | string | Readonly Pattern: "^[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}$" |
plane | Interface plane | string | Enum: mgmt, debug, none |
vlan | VLAN Id | integer | Readonly Minimum: 1 Maximum: 4094 |
NodeNetworkInterfacePropertiesListResult (schema)
Node network interface properties list results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Node network interface property results | array of NodeNetworkInterfaceProperties | Required |
NodeNetworkProperties (schema)
Network configuration properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
NodeNtpServiceProperties (schema)
Node NTP service properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
service_name | Service name | string | Required |
service_properties | NTP Service properties | NtpServiceProperties |
NodeProcessProperties (schema)
Node process properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
cpu_time | CPU time (user and system) consumed by process in milliseconds | integer | Readonly |
mem_resident | Resident set size of process in bytes | integer | Readonly |
mem_used | Virtual memory used by process in bytes | integer | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
pid | Process id | integer | Readonly |
ppid | Parent process id | integer | Readonly |
process_name | Process name | string | Readonly |
start_time | Process start time expressed in milliseconds since epoch | EpochMsTimestamp | Readonly |
uptime | Milliseconds since process started | integer | Readonly |
NodeProcessPropertiesListResult (schema)
Node process property query results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Node process property results | array of NodeProcessProperties | Required |
NodeProperties (schema)
Node properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
cli_history_size | NSX CLI command history limit, set to 0 to configure no history size limit | integer | Minimum: 0 |
cli_output_datetime | NSX CLI display datetime stamp in command output | boolean | |
cli_timeout | NSX CLI inactivity timeout, set to 0 to configure no timeout | integer | Minimum: 0 |
export_type | Export restrictions in effect, if any | string | Readonly Enum: RESTRICTED, UNRESTRICTED |
fully_qualified_domain_name | Fully qualified domain name | string | Readonly |
hostname | Host name or fully qualified domain name of node | SystemHostname | |
kernel_version | Kernel version | string | Readonly |
motd | Message of the day to display when users login to node using the NSX CLI | string or null | |
node_type | Node type | string | Readonly Enum: NSX Manager, NSX Global Manager, NSX Edge, NSX Autonomous Edge, NSX Cloud Service Manager, NSX Public Cloud Gateway |
node_uuid | Node Unique Identifier | string | Readonly Maximum length: 36 |
node_version | Node version | string | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
product_version | Product version | string | Readonly |
system_datetime | System date time in UTC | DatetimeUTC | |
system_time | Current time expressed in milliseconds since epoch | EpochMsTimestamp | Readonly |
timezone | Timezone | string |
NodeRouteProperties (schema)
Node network route properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
destination | Destination covered by route | string | |
from_address | From address | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
gateway | Address of next hop | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
interface_id | Network interface id of route | string | |
metric | Metric value of route | string | |
netmask | Netmask of destination covered by route | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
proto | Routing protocol identifier of route | string | Enum: unspec, redirect, kernel, boot, static, gated, ra, mrt, zebra, bird, dnrouted, xorp, ntk, dhcp Default: "boot" |
route_id | Unique identifier for the route | string | Readonly |
route_type | Route type | string | Required Enum: default, static, blackhole, prohibit, throw, unreachable |
scope | Scope of destinations covered by route | string | |
src | Source address to prefer when sending to destinations of route | string | Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$" |
NodeRoutePropertiesListResult (schema)
Node network route properties list results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Node route property results | array of NodeRouteProperties | Required |
NodeSearchDomainsProperties (schema)
Node network search domains properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
search_domains | Search domains | array of string | Required |
NodeServiceProperties (schema)
Node service properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
service_name | Service name | string | Required |
NodeServicePropertiesListResult (schema)
Node service property query results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Node service property results | array of NodeServiceProperties | Required |
NodeServiceStatusProperties (schema)
Node service status properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
health | Service health in addition to runtime_state | string | Readonly Enum: STABLE, DEGRADED |
monitor_pid | Service monitor process id | integer | Readonly |
monitor_runtime_state | Service monitor runtime state | string | Readonly Enum: running, stopped |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
pids | Service process ids | array of integer | Readonly |
reason | Reason for service degradation | string | Readonly |
runtime_state | Service runtime state | string | Readonly Enum: running, stopped |
NodeSnmpServiceProperties (schema)
Node SNMP service properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
service_name | Service name | string | Required |
service_properties | SNMP Service properties | SnmpServiceProperties | Required |
NodeSnmpV3EngineID (schema)
SNMP V3 Engine Id
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
service_name | Service name | string | Required |
v3_engine_id | SNMP v3 engine id | string | Required |
NodeSshServiceProperties (schema)
Node SSH service properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
service_name | Service name | string | Required |
service_properties | SSH Service properties | SshServiceProperties |
NodeStatus (schema)
Node Status
Name | Description | Type | Notes |
NodeStatus | Node Status | string | Enum: DOWN, UP, UNREACHABLE, ADMIN_DOWN, UP_ROUTING_DOWN, INVALID, UNKNOWN |
NodeStatusProperties (schema)
Node status properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
bootup_error | Autonomous edge bootup error | string | Readonly |
cpu_cores | Number of CPU cores on the system | integer | Readonly |
file_systems | File systems configured on the system | array of NodeFileSystemProperties | Readonly |
load_average | One, five, and fifteen minute load averages for the system | array of number | Readonly |
mem_available | Amount of available RAM in the system, in kilobytes. The amount of reclaimable buffer/cache memory in use is taken into consideration here to provide a better idea of how much memory is really available in the system | integer | Readonly |
mem_buffer | Amount of RAM on the system used for temporary disk block storage, in kilobytes | integer | Readonly |
mem_cache | Amount of RAM on the system that can be flushed out to disk, in kilobytes | integer | Readonly |
mem_free | Amount of unused RAM in the system, in kilobytes | integer | Readonly |
mem_slab | Amount of RAM allocated to the kernel slab allocator, in kilobytes | integer | Readonly |
mem_slab_reclaimable | Amount of RAM allocated to the kernel slab allocator that is not currently in use, in kilobytes | integer | Readonly |
mem_total | Amount of RAM allocated to the system, in kilobytes | integer | Readonly |
mem_used | Amount of RAM in use on the system, in kilobytes. (This is mem_total - mem_available) | integer | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
swap_total | Amount of disk available for swap, in kilobytes | integer | Readonly |
swap_used | Amount of swap disk in use, in kilobytes | integer | Readonly |
system_time | Current time expressed in milliseconds since epoch | EpochMsTimestamp | Readonly |
uptime | Milliseconds since system start | integer | Readonly |
NodeSyslogExporterProperties (schema)
Node syslog exporter properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
exporter_name | Syslog exporter name | string | Required |
facilities | Facilities to export | array of SyslogFacility | |
level | Logging level to export | string | Required Enum: EMERG, ALERT, CRIT, ERR, WARNING, NOTICE, INFO, DEBUG |
msgids | MSGIDs to export | array of string | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
port | Port to export to, defaults to 514 for TCP, TLS, UDP protocols or 9000 for LI, LI-TLS protocols | integer | Minimum: 1 Maximum: 65535 |
protocol | Export protocol | string | Required Enum: TCP, TLS, UDP, LI, LI-TLS |
server | IP address or hostname of server to export to | HostnameOrIPv4Address | Required |
structured_data | Structured data to export | array of string | |
tls_ca_pem | CA certificate PEM of TLS server to export to | string | |
tls_cert_pem | Certificate PEM of the rsyslog client | string | |
tls_client_ca_pem | CA certificate PEM of the rsyslog client | string | |
tls_key_pem | Private key PEM of the rsyslog client | string |
NodeSyslogExporterPropertiesListResult (schema)
Node syslog exporter list results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Node syslog exporter results | array of NodeSyslogExporterProperties | Required |
NodeTime (schema)
Node system time in UTC
Node system time in UTC
Name | Description | Type | Notes |
system_datetime | Datetime string in UTC | DatetimeUTC | Required |
NodeUserProperties (schema)
Node user properties
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
full_name | Full name for the user | string | |
last_password_change | Number of days since password was last changed | integer | Readonly Minimum: 0 Maximum: 2147483647 |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
old_password | Old password for the user (required on PUT if password specified) | string | |
password | Password for the user (optionally specified on PUT, unspecified on GET) | string | |
password_change_frequency | Number of days password is valid before it must be changed Number of days password is valid before it must be changed. This can be set to 0 to indicate no password change is required or a positive integer up to 9999. By default local user passwords must be changed every 90 days. |
integer | Minimum: 0 Maximum: 9999 |
password_reset_required | Boolean value that states if a password reset is required | boolean | |
status | User status Status of the user. This value can be ACTIVE indicating authentication attempts will be successful if the correct credentials are specified. The value can also be PASSWORD_EXPIRED indicating authentication attempts will fail because the user's password has expired and must be changed. Or, this value can be NOT_ACTIVATED indicating the user's password has not yet been set and must be set before the user can authenticate. |
string | Readonly Enum: ACTIVE, PASSWORD_EXPIRED, NOT_ACTIVATED |
userid | Numeric id for the user | integer | Readonly Minimum: 0 Maximum: 2147483647 |
username | User login name (must be "root" if userid is 0) | string | Minimum length: 1 Maximum length: 32 Pattern: "^[a-zA-Z][a-zA-Z0-9@-_.\-]*$" |
NodeUserPropertiesListResult (schema)
Node users list results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | List of node users | array of NodeUserProperties | Required |
NodeVersion (schema)
Name | Description | Type | Notes |
node_version | Node version | string | Readonly |
product_version | Product version | string | Readonly |
NodeVtepState (schema)
VTEP interfaces State
Name | Description | Type | Notes |
NodeVtepState | VTEP interfaces State | string | Enum: UP, DOWN, UNKNOWN |
NtpServiceProperties (schema)
NTP Service properties
Name | Description | Type | Notes |
servers | NTP servers | array of HostnameOrIPv4Address | Required |
start_on_boot | Start NTP service when system boots | boolean | Default: "True" |
OwnerResourceLink (schema)
Link to this resource
The server will populate this field when returing the resource. Ignored on PUT and POST.
Name | Description | Type | Notes |
action | Optional action | string | |
href | string | Required | |
rel | string | Readonly Enum: owner |
PasswordAuthenticationScheme (schema)
Name | Description | Type | Notes |
password | Password to authenticate with | string | Required |
scheme_name | Authentication scheme name | string | Required Enum: password |
username | User name to authenticate with | string | Required Pattern: "^.+$" |
PolicyBasedIPSecVPNSession (schema)
Policy based VPN session
A Policy Based VPN requires to define protect rules that match local and peer subnets. IPSec security associations is negotiated for each pair of local and peer subnet.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
authentication_mode | Authentication Mode Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory. |
string | Enum: PSK, CERTIFICATE Default: "PSK" |
connection_initiation_mode | Connection initiation mode Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request. |
string | Enum: INITIATOR, RESPOND_ONLY, ON_DEMAND Default: "INITIATOR" |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
dpd_profile_id | Dead peer detection (DPD) profile id Dead peer detection (DPD) profile id. Default will be set according to system default policy. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
enabled | Enable/Disable IPSec VPN session Enable/Disable IPSec VPN session. |
boolean | Default: "True" |
id | Unique identifier of this resource | string | Readonly Sortable |
ike_profile_id | Internet key exchange (IKE) profile id IKE profile id to be used. Default will be set according to system default policy. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
ipsec_tunnel_profile_id | IPSec tunnel profile id Tunnel profile id to be used. By default it will point to system default profile. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
local_endpoint | Local endpoint Local endpoint. |
IPSecVPNLocalEndpoint | Required |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
peer_address | IPV4 address of peer endpoint on remote site. IPV4 address of peer endpoint on remote site. |
string | Required |
peer_id | Peer id Peer identifier. |
string | Required |
policy_rules | Policy rules | array of IPSecVPNPolicyRule | Required |
psk | Pre-shared key IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode. |
string | Minimum: 1 Maximum: 128 |
resource_type | Must be set to the value PolicyBasedIPSecVPNSession | IPSecVPNSessionResourceType | Required |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
tcp_mss_clamping | TcpMssClamping |
Protocol (schema)
This is an abstract type. Concrete child types:
HttpProtocol
HttpsProtocol
ScpProtocol
SftpProtocol
Name | Description | Type | Notes |
name | Protocol name | string | Required Enum: http, https, scp, sftp |
ReplicaAgentClientStatusProperties (schema)
Name | Description | Type | Notes |
last_fullsync_time | Timestamp when replica-agent performed last fullsync of messages from primary node's Nestdb | string | |
last_replication_time | Timestamp when replica-agent performed last replication from primary node. | string | |
last_rewrite_time | Timestamp when replica-agent performed last rewriting of message in secondary node's Nestdb | string | |
local_nestdb_connection_time | Timestamp when replica-agent established connection to Nestdb local to the secondary node. | string | |
node_api_server_role | Node High Availability Mode | string | Enum: PRIMARY, SECONDARY |
node_id | Node UUID | string | |
peer_nestdb_connection_time | Timestamp when replica-agent established connection to the NestDB of primary node | string |
Resource (schema)
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
ResourceLink (schema)
Name | Description | Type | Notes |
action | Optional action | string | |
href | string | Required | |
rel | Link relation type Custom relation type (follows RFC 5988 where appropriate definitions exist) |
string | Required |
ResourceReference (schema)
A weak reference to an NSX resource.
Name | Description | Type | Notes |
is_valid | Target validity Will be set to false if the referenced NSX resource has been deleted. |
boolean | Readonly |
target_display_name | Target display name Display name of the NSX resource. |
string | Readonly Maximum length: 255 |
target_id | Target ID Identifier of the NSX resource. |
string | Maximum length: 64 |
target_type | Target type Type of the NSX resource. |
string | Maximum length: 255 |
RevisionedResource (schema)
A base class for types that track revisions
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
RouteBasedIPSecVPNSession (schema)
Route based VPN session
A Route Based VPN is more flexible, more powerful and recommended over policy based VPN. IP Tunnel port is created and all traffic routed via tunnel port is protected. Routes can be configured statically or can be learned through BGP. A route based VPN is must for establishing redundant VPN session to remote site.
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
authentication_mode | Authentication Mode Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory. |
string | Enum: PSK, CERTIFICATE Default: "PSK" |
connection_initiation_mode | Connection initiation mode Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request. |
string | Enum: INITIATOR, RESPOND_ONLY, ON_DEMAND Default: "INITIATOR" |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
dpd_profile_id | Dead peer detection (DPD) profile id Dead peer detection (DPD) profile id. Default will be set according to system default policy. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
enabled | Enable/Disable IPSec VPN session Enable/Disable IPSec VPN session. |
boolean | Default: "True" |
id | Unique identifier of this resource | string | Readonly Sortable |
ike_profile_id | Internet key exchange (IKE) profile id IKE profile id to be used. Default will be set according to system default policy. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
ipsec_tunnel_profile_id | IPSec tunnel profile id Tunnel profile id to be used. By default it will point to system default profile. |
string | Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$" |
local_endpoint | Local endpoint Local endpoint. |
IPSecVPNLocalEndpoint | Required |
multi_path_group_id | IPSec VPN multiple path group identifier Specify a multiple path group for the IPSec session to join for utilizing multipath functionality. |
string | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
peer_address | IPV4 address of peer endpoint on remote site. IPV4 address of peer endpoint on remote site. |
string | Required |
peer_id | Peer id Peer identifier. |
string | Required |
psk | Pre-shared key IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode. |
string | Minimum: 1 Maximum: 128 |
resource_type | Must be set to the value RouteBasedIPSecVPNSession | IPSecVPNSessionResourceType | Required |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
tcp_mss_clamping | TcpMssClamping | ||
tunnel_ports | IP Tunnel ports IP Tunnel ports. |
array of TunnelPortConfig | Required Minimum items: 1 Maximum items: 1 |
RouteType (schema)
Route Type
Name | Description | Type | Notes |
RouteType | Route Type | string | Enum: route, neighbor, connected, blackhole, unknown |
ScpProtocol (schema)
Name | Description | Type | Notes |
authentication_scheme | Scheme to authenticate if required | PasswordAuthenticationScheme | Required |
name | Must be set to the value ScpProtocol | string | Required Enum: http, https, scp, sftp |
ssh_fingerprint | SSH fingerprint of server | string | Required |
SelfResourceLink (schema)
Link to this resource
The server will populate this field when returing the resource. Ignored on PUT and POST.
Name | Description | Type | Notes |
action | Optional action | string | |
href | string | Required | |
rel | string | Readonly Enum: self |
ServiceType (schema)
Supported service types, that are using certificates.
Name | Description | Type | Notes |
ServiceType | Supported service types, that are using certificates. | string | Enum: MGMT_CLUSTER, MGMT_PLANE, API, NOTIFICATION_COLLECTOR, SYSLOG_SERVER, RSYSLOG_CLIENT |
SftpProtocol (schema)
Name | Description | Type | Notes |
authentication_scheme | Scheme to authenticate if required | PasswordAuthenticationScheme | Required |
name | Must be set to the value SftpProtocol | string | Required Enum: http, https, scp, sftp |
ssh_fingerprint | SSH fingerprint of server | string | Required |
SnmpCommunity (schema)
SNMP v1, v2c community
SNMP v1, v2c community.
Name | Description | Type | Notes |
access | Type of access Access permissions for this community. |
string | Enum: read_only Default: "read_only" |
community_string | Community string at most 64 characters long Community alias string at most 64 characters long. |
string |
SnmpServiceProperties (schema)
SNMP Service properties
Name | Description | Type | Notes |
communities | SNMP v1, v2c community | array of SnmpCommunity | Maximum items: 10 |
start_on_boot | Start when system boots | boolean | |
v2_configured | SNMP v2 is configured or not Indicates whether the local SNMP agent is configured with community string(s). |
boolean | Readonly |
v2_targets | SNMP v2c targets information | array of SnmpV2Target | Maximum items: 3 |
v3_auth_protocol | SNMP v3 auth protocol | string | Enum: SHA1 Default: "SHA1" |
v3_configured | SNMP v3 is configured or not Indicates whether the local SNMP agent is configured with v3 user(s). |
boolean | Readonly |
v3_priv_protocol | SNMP v3 private protocol | string | Enum: AES128 Default: "AES128" |
v3_targets | SNMP v3 targets information | array of SnmpV3Target | Maximum items: 3 |
v3_users | SNMP v3 users information | array of SnmpV3User | Maximum items: 5 |
SnmpV2Target (schema)
SNMP v2c targets information
SNMP v2c manager's reachability information.
Name | Description | Type | Notes |
community_string | Community string Community alias string at most 64 characters long. |
string | |
port | SNMP v2c manager port SNMP v2c manager's port. |
integer | Minimum: 1 Maximum: 65535 Default: "162" |
server | SNMP v2c manager SNMP v2c manager's IP or FQDN. |
HostnameOrIPv4Address | Required |
SnmpV3Target (schema)
SNMP v3 targets information
SNMP v3 manager's reachability information.
Name | Description | Type | Notes |
port | SNMP v2c manager port SNMP v2c manager's port. |
integer | Minimum: 1 Maximum: 65535 Default: "162" |
security_level | Security level SNMP v3 security level. |
string | Enum: AUTH_PRIV Default: "AUTH_PRIV" |
server | FQDN or IP address of the SNMP Manager Specify the fully qualified domain name, or ip address, of the server. |
HostnameOrIPv4Address | Required |
user_id | SNMP v3 user id Specify the user name used to authenticate with the SNMP Manager. |
string | Required |
SnmpV3User (schema)
Name | Description | Type | Notes |
access | Type of access Access permissions for this User. |
string | Readonly Enum: READ_ONLY Default: "READ_ONLY" |
auth_password | SNMP v3 user auth password | string | |
priv_password | SNMP v3 user private password | string | |
security_level | Security level SNMP v3 security level. |
string | Readonly Enum: AUTH_PRIV Default: "AUTH_PRIV" |
user_id | SNMP v3 user id | string | Required |
SshKeyBaseProperties (schema)
Name | Description | Type | Notes |
label | SSH key label (used to identify the key) | string | Required |
password | Current password for user (required for users root and admin) | string |
SshKeyProperties (schema)
Name | Description | Type | Notes |
label | SSH key label (used to identify the key) | string | Required |
password | Current password for user (required for users root and admin) | string | |
type | SSH key type | string | Required Pattern: "^(ecdsa-sha2-nistp256|ecdsa-sha2-nistp384|ecdsa-sha2-nistp521|ssh-dss|ssh-ed25519|ssh-rsa)$" |
value | SSH key value | string | Required |
SshKeyPropertiesListResult (schema)
SSH key properties query results
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | SSH key properties query results | array of SshKeyProperties | Required |
SshServiceProperties (schema)
SSH Service properties
Name | Description | Type | Notes |
root_login | Permit SSH Root login | boolean | |
start_on_boot | Start service when system boots | boolean | Required |
StaticRoute (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
network | CIDR | IPv4CIDRBlock | Required |
next_hops | Next Hops | array of StaticRouteNextHop | Required Minimum items: 1 Maximum items: 8 |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
resource_type | Must be set to the value StaticRoute | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
StaticRouteListResult (schema)
Name | Description | Type | Notes |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
page_cursor | Opaque cursor for next page of results, (not set on last page) | string | Readonly |
result_count | Count of results found (across all pages), set only on first page | integer | Readonly |
results | Paginated list of static routes | array of StaticRoute | Required |
StaticRouteNextHop (schema)
Name | Description | Type | Notes |
administrative_distance | Administrative Distance for the next hop IP | integer | Minimum: 1 Maximum: 255 Default: "1" |
blackhole_action | Action to be taken on matching packets for NULL routes. | BlackholeAction | Readonly |
ip_address | Next Hop IP | IPv4Address | |
logical_router_port_id | Reference of logical router port to be used for next hop | ResourceReference |
SupportBundleQueryParameters (schema)
Name | Description | Type | Notes |
all | Include all files Include all files including files that may have sensitive information like core files. |
boolean | Default: "False" |
SyslogFacility (schema)
Syslog facility
Name | Description | Type | Notes |
SyslogFacility | Syslog facility | string | Enum: KERN, USER, MAIL, DAEMON, AUTH, SYSLOG, LPR, NEWS, UUCP, AUTHPRIV, FTP, LOGALERT, CRON, LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7 |
SystemHostname (schema)
System host name
Name | Description | Type | Notes |
SystemHostname | System host name | string | Maximum length: 255 Pattern: "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\.?$" |
Tag (schema)
Arbitrary key-value pairs that may be attached to an entity
Name | Description | Type | Notes |
scope | Tag scope Tag searches may optionally be restricted by scope |
string | Maximum length: 128 Default: "" |
tag | Tag value Identifier meaningful to user |
string | Maximum length: 256 Default: "" |
TcpMssClamping (schema)
Tcp Mss Clamping Object
Tcp Mss Clamping Direction and value
Name | Description | Type | Notes |
direction | MSS Clamping direction Specifies the traffic direction for which to apply MSS Clamping. |
string | Enum: NONE, INBOUND_CONNECTION, OUTBOUND_CONNECTION, BOTH Default: "NONE" |
max_segment_size | Maximum Segment Size value It defines the maximum amount of data that a host is willing to accept in a single TCP segment. This field is set in TCP header during connection establishment. To avoid packet fragmentation, you can set this field depending on uplink MTU and VPN overhead. This is optional field and in case it is left unconfigured, best possible MSS value will be calculated based on effective mtu of uplink interface. Supported MSS range is 108 to 8902. |
integer | Minimum: 108 Maximum: 8902 |
TransportNodeInEdgeCluster (schema)
Transport node parameters
Transport node parameters.
Name | Description | Type | Notes |
interface | Interface properties Interface properties. |
array of Interface | Required |
member_index | Transport node index in the edge cluster Transport node index in the edge cluster. |
integer | Required |
node_id | Transport node ID Transport node ID |
string | Required |
thumbprint | Transport node thumbprint Transport node thumbprint. |
string | Required |
TransportTunnel (schema)
L2VPN Session Transport Tunnel
For client, L2VPN Session Transport Tunnel uses a peer code
which has all the information to create the transport tunnel.
Name | Description | Type | Notes |
display_name | Name for transport tunnel Name for transport tunnel. |
string | |
ipsec_session_id | Transport tunnel id Transport tunnel id. When service is in client mode, this is read only. |
string | |
local_address | IPv4 Address of local endpoint IPv4 Address of local endpoint. This is required when service is in client mode. |
IPv4Address | |
peer_address | IPv4 Address of Peer endpoint IPv4 Address of Peer endpoint on remote site. This is required when service is in client mode. |
IPv4Address | |
peer_code | Peer code for the transport tunnel Peer code represents a base64 encoded string which has all the configuration for tunnel. E.g. local/peer ids and protocol, encryption algorithm, etc. Peer code also contains PSK; be careful when sharing or storing it. This is required when service is in client mode. |
string |
TrustObjectData (schema)
Name | Description | Type | Notes |
_create_time | Timestamp of resource creation | EpochMsTimestamp | Readonly Sortable |
_create_user | ID of the user who created this resource | string | Readonly |
_last_modified_time | Timestamp of last modification | EpochMsTimestamp | Readonly Sortable |
_last_modified_user | ID of the user who last modified this resource | string | Readonly |
_links | References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST. |
array of ResourceLink | Readonly |
_protection | Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity. |
string | Readonly |
_revision | Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected. |
integer | Readonly |
_schema | Location of schema for this resource | string | Readonly |
_self | SelfResourceLink | Readonly | |
_system_owned | Indicates system owned resource | boolean | Readonly |
actions | Actions applicable to the resource at this time | array of ActionDescriptor | Readonly |
description | Description of this resource | string | Maximum length: 1024 Sortable |
display_name | Identifier to use when displaying entity in logs or GUI Defaults to ID if not set |
string | Maximum length: 255 Sortable |
id | Unique identifier of this resource | string | Readonly Sortable |
key_algo | Key algorithm contained in this certificate | string | |
notify_mpa | send notification to MPA about this config change (applicable on edge node) | boolean | Default: "False" |
passphrase | Password for private key encryption | string | |
pem_encoded | pem encoded certificate data | string | Required |
private_key | private key data | string | |
resource_type | Must be set to the value TrustObjectData | string | |
tags | Opaque identifiers meaningful to the API user | array of Tag | Maximum items: 30 |
TunnelDigestAlgorithm (schema)
Digest Algorithms used in tunnel establishment
The TunnelDigestAlgorithms are used to verify message
integrity during IPSec VPN tunnel establishment.
SHA1 produces 160 bits hash and SHA2_XXX produces
XXX bit hash.
Name | Description | Type | Notes |
TunnelDigestAlgorithm | Digest Algorithms used in tunnel establishment The TunnelDigestAlgorithms are used to verify message integrity during IPSec VPN tunnel establishment. SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash. |
string | Enum: SHA1, SHA2_256, SHA2_384, SHA2_512 |
TunnelEncryptionAlgorithm (schema)
Encryption algorithm used in tunnel
TunnelEncryption algorithms are used to ensure confidentiality
of the messages exchanged during Tunnel negotiations. AES
stands for Advanced Encryption Standards. AES_128 uses 128-bit
keys whereas AES_256 uses 256-bit keys for encryption and
decryption. AES_GCM stands for Advanced Encryption Standard(AES)
in Galois/Counter Mode (GCM) and is used to provide both
confidentiality and data origin authentication.
NO_ENCRYPTION_AUTH_AES_GMAC_* enables authentication on input
data without encyption. Digest algorithm should be empty for this
option.
Name | Description | Type | Notes |
TunnelEncryptionAlgorithm | Encryption algorithm used in tunnel TunnelEncryption algorithms are used to ensure confidentiality of the messages exchanged during Tunnel negotiations. AES stands for Advanced Encryption Standards. AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_GCM stands for Advanced Encryption Standard(AES) in Galois/Counter Mode (GCM) and is used to provide both confidentiality and data origin authentication. NO_ENCRYPTION_AUTH_AES_GMAC_* enables authentication on input data without encyption. Digest algorithm should be empty for this option. |
string | Enum: AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256, NO_ENCRYPTION_AUTH_AES_GMAC_128, NO_ENCRYPTION_AUTH_AES_GMAC_192, NO_ENCRYPTION_AUTH_AES_GMAC_256, NO_ENCRYPTION |
TunnelPortConfig (schema)
IP Tunnel port configuration
IP Tunnel port configuration.
Name | Description | Type | Notes |
ip_subnets | IP Tunnel port subnet IP Tunnel port (commonly referred as VTI) subnet. |
array of IPSubnet | Required Minimum items: 1 Maximum items: 1 |
tunnel_port_id | Logical route port identifier Logical route port identifier. |
string | Readonly |
UpgradeProgressStatus (schema)
Upgrade progress status
Name | Description | Type | Notes |
last_upgrade_step_status | Status of last upgrade step | object | |
upgrade_bundle_present | True if upgrade bundle is present | boolean | |
upgrade_metadata | Meta info of upgrade | object |
UpgradeStatusSummary (schema)
Upgrade status summry
Name | Description | Type | Notes |
upgrade_bundle_present | True if upgrade bundle is present | boolean | |
upgrade_metadata | Meta info of upgrade | object | |
upgrade_steps | List of all upgrade steps performed | array of object |
UpgradeTaskActionParameters (schema)
Name | Description | Type | Notes |
action | Upgrade task The upgrade task to perform. |
string | Pattern: "^[^/]+$" |
UpgradeTaskProperties (schema)
Task properties
Name | Description | Type | Notes |
bundle_name | Name of Bundle | string | Required |
parameters | Bundle arguments | object | Readonly |
step | Step name | string |
UpgradeTaskStatusQueryParameters (schema)
Name | Description | Type | Notes |
bundle_name | Bundle Name Provide a bundle name |
string | Pattern: "^[a-zA-Z0-9-.]+$" |
upgrade_task_id | Upgrade Task ID Provide a task id |
string | Pattern: "^[a-z0-9-]+$" |
UrpfMode (schema)
Unicast Reverse Path Forwarding mode
Name | Description | Type | Notes |
UrpfMode | Unicast Reverse Path Forwarding mode | string | Enum: NONE, STRICT |
X509Certificate (schema)
Name | Description | Type | Notes |
dsa_public_key_g | One of the DSA cryptogaphic algorithm's strength parameters, base | string | Readonly |
dsa_public_key_p | One of the DSA cryptogaphic algorithm's strength parameters, prime | string | Readonly |
dsa_public_key_q | One of the DSA cryptogaphic algorithm's strength parameters, sub-prime | string | Readonly |
dsa_public_key_y | One of the DSA cryptogaphic algorithm's strength parameters | string | Readonly |
ecdsa_curve_name | ECDSA Curve Name The Curve name for the ECDSA certificate. |
string | Readonly |
ecdsa_ec_field | ECDSA Elliptic Curve Finite Field Represents an elliptic curve (EC) finite field in ECDSA. |
string | Readonly Enum: F2M, FP |
ecdsa_ec_field_f2mks | ECDSA Elliptic Curve F2MKS The order of the middle term(s) of the reduction polynomial in elliptic curve (EC) | characteristic 2 finite field.| Contents of this array are copied to protect against subsequent modification in ECDSA. |
array of integer | Readonly |
ecdsa_ec_field_f2mm | ECDSA Elliptic Curve F2MM The first coefficient of this elliptic curve in elliptic curve (EC) | characteristic 2 finite field for ECDSA. |
integer | Readonly |
ecdsa_ec_field_f2mrp | ECDSA Elliptic Curve F2MRP The value whose i-th bit corresponds to the i-th coefficient of the reduction polynomial | in elliptic curve (EC) characteristic 2 finite field for ECDSA. |
string | Readonly |
ecdsa_ec_field_f2pp | ECDSA Elliptic Curve F2PP The specified prime for the elliptic curve prime finite field in ECDSA. |
string | Readonly |
ecdsa_public_key_a | ECDSA Elliptic Curve Public Key A The first coefficient of this elliptic curve in ECDSA. |
string | Readonly |
ecdsa_public_key_b | ECDSA Elliptic Curve Public Key B The second coefficient of this elliptic curve in ECDSA. |
string | Readonly |
ecdsa_public_key_cofactor | ECDSA Elliptic Curve Public Key Cofactor The co-factor in ECDSA. |
integer | Readonly |
ecdsa_public_key_generator_x | ECDSA Elliptic Curve Public Key X x co-ordinate of G (the generator which is also known as the base point) in ECDSA. |
string | Readonly |
ecdsa_public_key_generator_y | ECDSA Elliptic Curve Public Key Y y co-ordinate of G (the generator which is also known as the base point) in ECDSA. |
string | Readonly |
ecdsa_public_key_order | ECDSA Elliptic Curve Public Key Order The order of generator G in ECDSA. |
string | Readonly |
ecdsa_public_key_seed | ECDSA Elliptic Curve Public Key Seed The bytes used during curve generation for later validation in ECDSA.| Contents of this array are copied to protect against subsequent modification. |
array of string | Readonly |
is_ca | True if this is a CA certificate. | boolean | Required Readonly |
is_valid | True if this certificate is valid. | boolean | Required Readonly |
issuer | the certificate issuers complete distinguished name | string | Required Readonly |
issuer_cn | the certificate issuer's common name | string | Required Readonly |
not_after | the time in epoch milliseconds at which the certificate becomes invalid | EpochMsTimestamp | Required Readonly |
not_before | the time in epoch milliseconds at which the certificate becomes valid | EpochMsTimestamp | Required Readonly |
public_key_algo | Public Key Algorithm Cryptographic algorithm used by the public key for data encryption. |
string | Required Readonly Enum: RSA, DSA, ECDSA |
public_key_length | size measured in bits of the public/private keys used in a cryptographic algorithm | integer | Required Readonly |
rsa_public_key_exponent | An RSA public key is made up of the modulus and the public exponent. Exponent is a power number | string | Readonly |
rsa_public_key_modulus | An RSA public key is made up of the modulus and the public exponent. Modulus is wrap around number | string | Readonly |
serial_number | certificate's serial number | string | Required Readonly |
signature | the signature value(the raw signature bits) used for signing and validate the cert | string | Required Readonly |
signature_algorithm | the algorithm used by the Certificate Authority to sign the certificate | string | Required Readonly |
subject | the certificate owners complete distinguished name | string | Required Readonly |
subject_cn | the certificate owner's common name | string | Required Readonly |
version | Certificate version (default v1) | string | Required Readonly |
X509Crl (schema)
A CRL is a time-stamped list identifying revoked certificates.
Name | Description | Type | Notes |
crl_entries | list of X509CrlEntry | array of X509CrlEntry | Readonly |
issuer | Issuer's distinguished name(DN) | string | Readonly |
next_update | Next update time for the CRL | string | Readonly |
version | CRL's version number either 1 or 2 | string | Readonly |
X509CrlEntry (schema)
Each revoked certificate is identified in a CRL by its certificate serial number.
Name | Description | Type | Notes |
revocation_date | Revocation date | string | Readonly |
serial_number | the revoked certificate's serial number | string | Readonly |
API Type Schemas
Request and response bodies for API Methods are specified using the proposed JSON Schema format (revision 03) documented at http://json-schema.org/ . All data returned by API methods references the schema being used through the an attribute of the top-level object named "_schema". These will refer to the schema definitions provided as described in the Embedded API Documentation methods of the API. The schemas make use of JSON referencing to reduce restatement of the same schema information in multiple places.
JsonSchema
As defined in http://tools.ietf.org/html/draft-zyp-json-schema-03.
ActionDescriptor (type)
{ "additionalProperties": false, "id": "ActionDescriptor", "properties": { "description": { "readonly": true, "title": "A description of what the action does", "type": "string" }, "descriptor": { "readonly": true, "required": true, "title": "The URI of the REST routine provider that implements the action", "type": "string" }, "name": { "readonly": true, "required": true, "title": "The name of the action", "type": "string" }, "uri": { "readonly": true, "required": true, "title": "The URI to use to invoke the action", "type": "string" } }, "type": "object" }
ApiCertificate (type)
{ "additionalProperties": false, "id": "ApiCertificate", "properties": { "api_certificate": { "description": "API certificate", "required": true, "type": "string" }, "api_key": { "description": "API private key", "required": false, "sensitive": true, "type": "string" }, "ca_certificate": { "description": "CA certificate", "required": true, "type": "string" } }, "type": "object" }
ApiCertificateReply (type)
{ "id": "ApiCertificateReply", "properties": { "status": { "description": "API certificate replacement status", "required": true, "type": "string" } }, "type": "object" }
ApplianceManagementSuppressRedirectQueryParameter (type)
{ "additionalProperties": false, "id": "ApplianceManagementSuppressRedirectQueryParameter", "properties": { "suppress_redirect": { "default": false, "description": "Do not return a redirect HTTP status.", "title": "Suppress redirect status if applicable", "type": "boolean" } }, "type": "object" }
ApplianceManagementTaskListResult (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResult }, "id": "ApplianceManagementTaskListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "ApplianceManagementTaskProperties }, "required": true, "title": "Task property results", "type": "array" } }, "title": "Appliance management task query results", "type": "object" }
ApplianceManagementTaskProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "ApplianceManagementTaskProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "async_response_available": { "readonly": true, "title": "True if response for asynchronous request is available", "type": "boolean" }, "cancelable": { "readonly": true, "title": "True if this task can be canceled", "type": "boolean" }, "description": { "readonly": true, "title": "Description of the task", "type": "string" }, "details": { "readonly": true, "title": "Details about the task if known", "type": "object" }, "end_time": { "$ref": "EpochMsTimestamp, "readonly": true, "title": "The end time of the task in epoch milliseconds" }, "id": { "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}_[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$", "readonly": true, "title": "Identifier for this task", "type": "string" }, "message": { "readonly": true, "title": "A message describing the disposition of the task", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "progress": { "maximum": 100, "minimum": 0, "readonly": true, "title": "Task progress if known, from 0 to 100", "type": "integer" }, "request_method": { "readonly": true, "title": "HTTP request method", "type": "string" }, "request_uri": { "readonly": true, "title": "URI of the method invocation that spawned this task", "type": "string" }, "start_time": { "$ref": "EpochMsTimestamp, "readonly": true, "title": "The start time of the task in epoch milliseconds" }, "status": { "$ref": "ApplianceManagementTaskStatus, "readonly": true, "title": "Current status of the task" }, "user": { "readonly": true, "title": "Name of the user who created this task", "type": "string" } }, "title": "Appliance management task properties", "type": "object" }
ApplianceManagementTaskQueryParameters (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResultQueryParameters }, "id": "ApplianceManagementTaskQueryParameters", "properties": { "fields": { "description": "Comma-separated field names to include in query result", "title": "Fields to include in query results", "type": "string" }, "request_method": { "description": "Comma-separated request methods to include in query result", "pattern": "^(=|!=|~|!~)?.+$", "title": "Request method(s) to include in query result", "type": "string" }, "request_path": { "description": "Comma-separated request paths to include in query result", "pattern": "^(=|!=|~|!~)?.+$", "title": "Request URI path(s) to include in query result", "type": "string" }, "request_uri": { "description": "Comma-separated request URIs to include in query result", "pattern": "^(=|!=|~|!~)?.+$", "title": "Request URI(s) to include in query result", "type": "string" }, "status": { "description": "Comma-separated status values to include in query result", "pattern": "^(=|!=|~|!~)?.+$", "title": "Status(es) to include in query result", "type": "string" }, "user": { "description": "Comma-separated user names to include in query result", "pattern": "^(=|!=|~|!~)?.+$", "title": "Names of users to include in query result", "type": "string" } }, "type": "object" }
ApplianceManagementTaskStatus (type)
{ "enum": [ "running", "error", "success", "canceling", "canceled", "killed" ], "id": "ApplianceManagementTaskStatus", "title": "Current status of the appliance management task", "type": "string" }
AuthenticationPolicyProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "AuthenticationPolicyProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "api_failed_auth_lockout_period": { "default": 900, "description": "Once a lockout occurs, the account remains locked out of the API for this time period. Only applies to NSX Manager nodes. Ignored on other node types.", "minimum": 0, "title": "Lockout period in seconds", "type": "integer" }, "api_failed_auth_reset_period": { "default": 900, "description": "In order to trigger an account lockout, all authentication failures must occur in this time window. If the reset period expires, the failed login count is reset to zero. Only applies to NSX Manager nodes. Ignored on other node types.", "minimum": 0, "title": "Period, in seconds, for authentication failures to trigger lockout", "type": "integer" }, "api_max_auth_failures": { "default": 5, "description": "Only applies to NSX Manager nodes. Ignored on other node types.", "minimum": 0, "title": "Number of authentication failures that trigger API lockout", "type": "integer" }, "cli_failed_auth_lockout_period": { "default": 900, "description": "Once a lockout occurs, the account remains locked out of the CLI for this time period. While the lockout period is in effect, additional authentication attempts restart the lockout period, even if a valid password is specified.", "minimum": 0, "title": "Lockout period in seconds", "type": "integer" }, "cli_max_auth_failures": { "default": 5, "minimum": 0, "title": "Number of authentication failures that trigger CLI lockout", "type": "integer" }, "minimum_password_length": { "default": 8, "minimum": 8, "title": "Minimum number of characters required in account passwords", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Configuration of authentication policies for the NSX node", "type": "object" }
AuthenticationScheme (type)
{ "additionalProperties": {}, "id": "AuthenticationScheme", "properties": { "scheme_name": { "required": true, "title": "Authentication scheme name", "type": "string" } }, "type": "object" }
AutonomousEdgeClusterConfig (type)
{ "id": "AutonomousEdgeClusterConfig", "properties": { "nodes": { "items": { "$ref": "TransportNodeInEdgeCluster }, "maxItems": 2, "minItems": 1, "title": "Nodes in the cluster", "type": "array" } }, "type": "object" }
BasicAuthenticationScheme (type)
{ "additionalProperties": false, "extends": { "$ref": "AuthenticationScheme }, "id": "BasicAuthenticationScheme", "properties": { "password": { "required": true, "sensitive": true, "title": "Password to authenticate with", "type": "string" }, "scheme_name": { "enum": [ "basic" ], "required": true, "title": "Authentication scheme name", "type": "string" }, "username": { "pattern": "^.+$", "required": true, "title": "User name to authenticate with", "type": "string" } }, "type": "object" }
BlackholeAction (type)
{ "additionalProperties": false, "enum": [ "DISCARD" ], "id": "BlackholeAction", "title": "Action to be taken on matching packets for NULL routes. For action is DISCARD, matching packets are dropped rather than forwarded.", "type": "string" }
Certificate (type)
{ "additionalProperties": false, "extends": { "$ref": "ManagedResource }, "id": "Certificate", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "details": { "description": "list of X509Certificates", "items": { "$ref": "X509Certificate }, "readonly": true, "required": false, "type": "array" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "pem_encoded": { "description": "pem encoded certificate data", "readonly": false, "required": true, "type": "string" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "used_by": { "description": "list of node IDs with services, that are using this certificate", "items": { "$ref": "NodeIdServicesMap }, "readonly": true, "required": false, "type": "array" } }, "type": "object" }
CertificateList (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResult }, "id": "CertificateList", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "description": "Certificate list", "items": { "$ref": "Certificate }, "readonly": true, "required": true, "type": "array" } }, "title": "Certificate queries result", "type": "object" }
ConfigType (type)
{ "enum": [ "nsxa-state", "nsxa-edge-cluster", "nsxa-lrouter", "nsxa-service-router", "nestdb", "edge-agent", "dataplane", "nsd", "manager", "controller", "core" ], "id": "ConfigType", "title": "Config Type", "type": "string" }
CopyFromRemoteFileProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "CopyRemoteFileProperties }, "id": "CopyFromRemoteFileProperties", "properties": { "port": { "maximum": 65535, "minimum": 1, "title": "Server port", "type": "integer" }, "protocol": { "$ref": "Protocol, "required": true, "title": "Protocol to use to copy file" }, "server": { "pattern": "^[^/:]+$", "required": true, "title": "Remote server hostname or IP address", "type": "string" }, "uri": { "required": true, "title": "URI of file to copy", "type": "string" } }, "type": "object" }
CopyRemoteFileProperties (type)
{ "additionalProperties": {}, "id": "CopyRemoteFileProperties", "properties": { "port": { "maximum": 65535, "minimum": 1, "title": "Server port", "type": "integer" }, "server": { "pattern": "^[^/:]+$", "required": true, "title": "Remote server hostname or IP address", "type": "string" }, "uri": { "required": true, "title": "URI of file to copy", "type": "string" } }, "type": "object" }
CopyToRemoteFileProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "CopyRemoteFileProperties }, "id": "CopyToRemoteFileProperties", "properties": { "port": { "maximum": 65535, "minimum": 1, "title": "Server port", "type": "integer" }, "protocol": { "$ref": "Protocol, "description": "Only scp and sftp may be used.", "required": true, "title": "Protocol to use to copy file" }, "server": { "pattern": "^[^/:]+$", "required": true, "title": "Remote server hostname or IP address", "type": "string" }, "uri": { "required": true, "title": "URI of file to copy", "type": "string" } }, "type": "object" }
CpuStats (type)
{ "additionalProperties": false, "id": "CpuStats", "properties": { "core": { "description": "CPU id", "readonly": true, "title": "core id", "type": "string" }, "cpu_type": { "default": "controlpath_core", "description": "cpu type, one of datapath_core, controlpath_core and service_core", "enum": [ "datapath_core", "controlpath_core", "service_core" ], "readonly": true, "title": "cpu type", "type": "string" }, "crypto": { "description": "CPU crypto usage(pps)", "readonly": true, "title": "CPU crypto usage", "type": "string" }, "intercore": { "description": "CPU intercore usage(pps)", "readonly": true, "title": "CPU intercore usage", "type": "string" }, "kni": { "description": "CPU kni usage(pps)", "readonly": true, "title": "CPU kni usage", "type": "string" }, "packet_processing_usage": { "description": "Datapath CPU packet processing usage(%)", "readonly": true, "title": "Datapath CPU packet processing usage", "type": "string" }, "rx": { "description": "CPU rx usage(pps)", "readonly": true, "title": "CPU rx usage", "type": "string" }, "slowpath": { "description": "CPU slowpath usage(pps)", "readonly": true, "title": "CPU slowpath usage", "type": "string" }, "tx": { "description": "CPU tx usage(pps)", "readonly": true, "title": "CPU tx usage", "type": "string" }, "usage": { "description": "CPU usage(%)", "readonly": true, "title": "CPU usage", "type": "string" } }, "type": "object" }
CreateRemoteDirectoryProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "CopyRemoteFileProperties }, "id": "CreateRemoteDirectoryProperties", "properties": { "port": { "maximum": 65535, "minimum": 1, "title": "Server port", "type": "integer" }, "protocol": { "$ref": "SftpProtocol, "required": true, "title": "Protocol to use to copy file" }, "server": { "pattern": "^[^/:]+$", "required": true, "title": "Remote server hostname or IP address", "type": "string" }, "uri": { "required": true, "title": "URI of file to copy", "type": "string" } }, "type": "object" }
Crl (type)
{ "additionalProperties": false, "extends": { "$ref": "ManagedResource }, "id": "Crl", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "details": { "$ref": "X509Crl, "description": "details of the X509Crl object", "readonly": true, "required": false }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "pem_encoded": { "description": "pem encoded crl data", "readonly": false, "required": true, "type": "string" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "type": "object" }
CrlList (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResult }, "id": "CrlList", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "description": "CRL list", "items": { "$ref": "Crl }, "readonly": true, "required": true, "type": "array" } }, "title": "Crl queries result", "type": "object" }
CrlObjectData (type)
{ "additionalProperties": false, "extends": { "$ref": "ManagedResource }, "id": "CrlObjectData", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "pem_encoded": { "description": "pem encoded crl data", "readonly": false, "required": true, "type": "string" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "type": "object" }
DHGroup (type)
{ "additionalProperties": false, "description": "Diffie-Hellman groups represent algorithm used to derive shared keys between IPSec VPN initiator and responder over an unsecured network. GROUP2 uses 1024-bit Modular Exponentiation (MODP) group. GROUP5 uses 1536-bit MODP group. GROUP14 uses 2048-bit MODP group. GROUP15 uses 3072-bit MODP group. GROUP16 uses 4096-bit MODP group. GROUP19 uses 256-bit random Elliptic Curve (ECP) group. GROUP20 uses 384-bit random ECP group. GROUP21 uses 521-bit random ECP group.", "enum": [ "GROUP2", "GROUP5", "GROUP14", "GROUP15", "GROUP16", "GROUP19", "GROUP20", "GROUP21" ], "id": "DHGroup", "title": "Diffie-Hellman groups", "type": "string" }
DatetimeUTC (type)
{ "description": "Datetime string in UTC in the RFC3339 format 'yyyy-mm-ddThh:mm:ssZ'", "id": "DatetimeUTC", "title": "Datetime string in UTC", "type": "string" }
EdgeConfigDiagnosis (type)
{ "additionalProperties": false, "id": "EdgeConfigDiagnosis", "properties": { "failed": { "$ref": "FailedOrWarningConfig, "required": true, "title": "Failed Config", "type": "object" }, "passed": { "items": { "$ref": "ConfigType }, "required": true, "title": "Passed Config", "type": "array" }, "warning": { "$ref": "FailedOrWarningConfig, "required": true, "title": "Config Warning", "type": "object" } }, "type": "object" }
EdgeDataplaneCpuStats (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneCpuStats", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "cores": { "description": "Statistics of CPU cores", "items": { "$ref": "CpuStats }, "maxItems": 64, "title": "Statistics of CPU cores", "type": "array" }, "datapath_cores_mode": { "description": "Mode of how the datapath cores get the packets from driver", "readonly": true, "title": "Datapath core mode", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane CPU Stats", "type": "object" }
EdgeDataplaneCtrlPrioSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneCtrlPrioSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "ctrl_prio_enabled": { "description": "Control packet prioritization setting", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane control packet prioritization setting.", "type": "object" }
EdgeDataplaneDynamicCoreSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneDynamicCoreSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "dynamic_core_enabled": { "description": "Edge Dataplane dynamic core setting", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane control dynamic core setting.", "type": "object" }
EdgeDataplaneFlow (type)
{ "additionalProperties": false, "id": "EdgeDataplaneFlow", "properties": { "dst_ip": { "description": "Destination IP of the flow", "title": "Destination IP", "type": "string" }, "dst_port": { "description": "Destination port of the flow", "title": "Destination port", "type": "integer" }, "proto": { "description": "Protocol of the flow", "title": "Protocol", "type": "integer" }, "src_ip": { "description": "Source IP of the flow", "title": "Source IP", "type": "string" }, "src_port": { "description": "Source port of the flow", "title": "Source port", "type": "integer" }, "tunnel_dst_ip": { "description": "Tunnel destination IP of the flow", "title": "Tunnel destination IP", "type": "string" }, "tunnel_src_ip": { "description": "Tunnel source IP of the flow", "title": "Tunnel source IP", "type": "string" } }, "title": "Edge dataplane flow record", "type": "object" }
EdgeDataplaneFlowCacheSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneFlowCacheSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "flow_cache_enabled": { "description": "Flow cache setting", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane Flow Cache mode.", "type": "object" }
EdgeDataplaneFlowMonitorMessage (type)
{ "additionalProperties": false, "id": "EdgeDataplaneFlowMonitorMessage", "properties": { "message": { "description": "Edge dataplane flow monitor message", "title": "Message", "type": "string" } }, "title": "Edge dataplane flow monitor message", "type": "object" }
EdgeDataplaneFlowMonitorStartSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneFlowMonitorStartSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "core_id": { "description": "Flow monitor core id", "title": "Core id", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "timeout": { "default": "15", "description": "Flow monitor timeout in seconds", "title": "Timeout for flow monitor in seconds, in the range of 1 - 600.", "type": "string" } }, "title": "Information about Edge Dataplane flow monitor start setting.", "type": "object" }
EdgeDataplaneFlowQueryParameters (type)
{ "extends": { "$ref": "ListResultQueryParameters }, "id": "EdgeDataplaneFlowQueryParameters", "properties": { "fields": { "description": "Comma-separated field names to include in query result", "title": "Fields to include in query results", "type": "string" }, "top_10": { "default": false, "description": "Collect top 10 flows when set to true, else collect all flows.", "title": "Collect top 10 flows when set to true", "type": "boolean" } }, "type": "object" }
EdgeDataplaneGeneveCbitSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneGeneveCbitSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "geneve_cbit_set": { "description": "geneve critical bit setting", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane geneve cbit setting.", "type": "object" }
EdgeDataplaneIntrModeSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneIntrModeSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "intr_mode_enabled": { "description": "interrupt mode setting", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane interrupt mode setting.", "type": "object" }
EdgeDataplaneL2vpnPmtuSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneL2vpnPmtuSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "l2vpn_pmtu_enabled": { "description": "l2vpn pmtu setting", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about Edge Dataplane l2vpn pmtu message generation setting.", "type": "object" }
EdgeDataplanePmtuLearningSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplanePmtuLearningSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "pmtu_learning_enabled": { "description": "l3vpn pmtu setting", "type": "boolean" } }, "title": "Information about Edge Dataplane pmtu learning setting.", "type": "object" }
EdgeDataplaneQatAdminSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneQatAdminSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "qat_admin_enabled": { "description": "QAT feature enabled setting", "type": "boolean" } }, "title": "Information about Edge Dataplane QAT feature enabled setting.", "type": "object" }
EdgeDataplaneQatAdminSettingResponse (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneQatAdminSettingResponse", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "update_message": { "description": "Message to display after setting QAT feature", "readonly": true, "title": "Datapath QAT enable CLI message", "type": "string" } }, "title": "Information about Edge Dataplane QAT feature enabled setting.", "type": "object" }
EdgeDataplaneQatStatus (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneQatStatus", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "admin_status": { "description": "QAT device enabled", "readonly": true, "title": "QAT enabled", "type": "boolean" }, "device_present": { "description": "QAT device present", "readonly": true, "title": "QAT present", "type": "boolean" }, "fips_compliant": { "description": "FIPS compliance of QAT feature", "readonly": true, "title": "FIPS compliance", "type": "boolean" }, "is_vm": { "description": "Edge is deployed in VM", "readonly": true, "title": "VM deployment", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "operational_status": { "description": "QAT device currently running", "readonly": true, "title": "QAT running", "type": "boolean" } }, "title": "Information about Edge Dataplane QAT status", "type": "object" }
EdgeDataplaneQueueNumPerPortPerCoreSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneQueueNumPerPortPerCoreSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "queue_num_per_port_per_core": { "description": "queue number per port per core", "maximum": 16, "minimum": 1, "type": "integer" } }, "title": "Information about Edge Dataplane queue num per port per core setting.", "type": "object" }
EdgeDataplaneRingSize (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneRingSize", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "rx_ring_size": { "description": "rx ring size", "type": "integer" }, "tx_ring_size": { "description": "tx ring size", "type": "integer" } }, "title": "Information about Edge physical port ring size.", "type": "object" }
EdgeDataplaneRingSizeSetting (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "EdgeDataplaneRingSizeSetting", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "ring_size": { "description": "ring size", "type": "integer" } }, "title": "Information about Edge physical port ring size setting.", "type": "object" }
EdgeDataplaneTopKFlowQueryParameters (type)
{ "extends": { "$ref": "ListResultQueryParameters }, "id": "EdgeDataplaneTopKFlowQueryParameters", "properties": { "core_id": { "description": "CPU core on which the flows are to be monitored", "maximum": 128, "minimum": 0, "title": "CPU core on which the flows are to be monitored", "type": "integer" }, "fields": { "description": "Comma-separated field names to include in query result", "title": "Fields to include in query results", "type": "string" }, "timeout": { "default": 30, "description": "Timeout for flow monitor in seconds", "maximum": 120, "minimum": 1, "title": "Timeout for flow monitor in seconds", "type": "integer" } }, "type": "object" }
EdgeDataplaneTopKFlows (type)
{ "id": "EdgeDataplaneTopKFlows", "properties": { "flow_count": { "description": "Count of flow records in the result", "title": "Count of flow records", "type": "integer" }, "flows": { "description": "Array of flow records", "items": { "$ref": "EdgeDataplaneFlow }, "title": "Array of flow records", "type": "array" } }, "title": "Edge dataplane top-k flow dump", "type": "object" }
EdgeDiagnosis (type)
{ "additionalProperties": false, "id": "EdgeDiagnosis", "properties": { "config": { "$ref": "EdgeConfigDiagnosis, "required": true, "title": "Edge Config Diagnosis", "type": "object" }, "ha-state": { "enum": [ "disabled", "offline", "discover", "statesync", "inactive", "active", "unknown" ], "required": true, "title": "HA State", "type": "string" } }, "type": "object" }
EdgeDiagnosisInconsistency (type)
{ "id": "EdgeDiagnosisInconsistency", "properties": { "detail": { "description": "NSX Edge inconsistency check detail", "items": { "type": "string" }, "title": "NSX Edge inconsistency check detail", "type": "array" }, "title": { "description": "NSX Edge inconsistency check type", "title": "NSX Edge inconsistency check type", "type": "string" } }, "title": "NSX Edge inconsistency check", "type": "object" }
EdgeDiagnosisInconsistencyResult (type)
{ "extends": { "$ref": "ListResult }, "id": "EdgeDiagnosisInconsistencyResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "EdgeDiagnosisInconsistency }, "title": "NSX Edge inconsistency check result", "type": "array" } }, "title": "NSX Edge inconsistency check result", "type": "object" }
EdgeInconsistencyQueryParameters (type)
{ "additionalProperties": false, "id": "EdgeInconsistencyQueryParameters", "properties": { "cursor": { "description": "A cursor points to a specific record in the inconsistency check result", "minimum": 0, "required": false, "title": "Opaque cursor to be used for getting next page of records (supplied by current result page)", "type": "integer" }, "page_size": { "description": "The page size determines the number of records to be returned", "maximum": 100, "minimum": 1, "required": false, "title": "Maximum number of results to return in this page (server may return fewer)", "type": "integer" } }, "type": "object" }
EdgeNodeServiceLoggingProperties (type)
{ "extends": { "$ref": "NodeServiceProperties }, "id": "EdgeNodeServiceLoggingProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "service_name": { "required": true, "title": "Service name", "type": "string" }, "service_properties": { "logging_level": { "enum": [ "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" ], "required": true, "title": "Service logging level", "type": "string" } } }, "title": "Edge node service properties", "type": "object" }
EmbeddedResource (type)
{ "abstract": true, "extends": { "$ref": "RevisionedResource }, "id": "EmbeddedResource", "polymorphic-type-descriptor": { "property-name": "resource_type" }, "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_owner": { "$ref": "OwnerResourceLink, "readonly": true, "title": "Owner of this resource" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "description": "Identifier of the resource", "readonly": true, "required": false, "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" } }, "title": "Base class for resources that are embedded in other resources", "type": "object" }
EpochMsTimestamp (type)
{ "id": "EpochMsTimestamp", "title": "Timestamp in milliseconds since epoch", "type": "integer" }
ExitEdgeInterface (type)
{ "enum": [ "eth1", "eth2", "eth3", "eth4", "eth5", "eth6", "eth7", "eth8" ], "id": "ExitEdgeInterface", "title": "Exit interface for logical router port", "type": "string" }
FailedOrWarningConfig (type)
{ "additionalProperties": false, "id": "FailedOrWarningConfig", "properties": { "controller": { "title": "Controller Connection State", "type": "string" }, "core": { "items": { "type": "string" }, "title": "Core Names", "type": "array" }, "dataplane": { "title": "Dataplane State", "type": "string" }, "edge-agent": { "title": "Edge Agent State", "type": "string" }, "manager": { "title": "Manager Connection State", "type": "string" }, "nestdb": { "title": "NestDB State", "type": "string" }, "nsd": { "title": "Nsd State", "type": "string" }, "nsxa-edge-cluster": { "title": "Edge Cluster State", "type": "string" }, "nsxa-lrouter": { "title": "Logical Router State", "type": "string" }, "nsxa-service-router": { "title": "Service Router State", "type": "string" }, "nsxa-state": { "title": "NSXA State", "type": "string" } }, "title": "Failed or Warning Config", "type": "object" }
FileProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "FileProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "created_epoch_ms": { "required": true, "title": "File creation time in epoch milliseconds", "type": "integer" }, "modified_epoch_ms": { "required": true, "title": "File modification time in epoch milliseconds", "type": "integer" }, "name": { "pattern": "^[^/]+$", "required": true, "title": "File name", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "size": { "required": true, "title": "Size of the file in bytes", "type": "integer" } }, "title": "File properties", "type": "object" }
FilePropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "FilePropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "FileProperties }, "required": true, "title": "File property results", "type": "array" } }, "title": "File properties query results", "type": "object" }
FileThumbprint (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "FileThumbprint", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "name": { "pattern": "^[^/]+$", "required": true, "title": "File name", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "sha1": { "required": true, "title": "File's SHA1 thumbprint", "type": "string" }, "sha256": { "required": true, "title": "File's SHA256 thumbprint", "type": "string" } }, "title": "File thumbprint", "type": "object" }
GetCertParameter (type)
{ "additionalProperties": false, "id": "GetCertParameter", "properties": { "details": { "default": false, "required": false, "title": "whether to expand the pem data and show all its details", "type": "boolean" } }, "type": "object" }
GetSNMPParameters (type)
{ "additionalProperties": false, "description": "Get SNMP request parameters.", "id": "GetSNMPParameters", "properties": { "show_sensitive_data": { "default": false, "description": "Whether to show SNMP service properties including community strings if any applicable.", "required": false, "title": "Show SNMP sensitive data or not", "type": "boolean" } }, "title": "Get SNMP request parameters", "type": "object" }
HANodeStatusProperties (type)
{ "id": "HANodeStatusProperties", "properties": { "admin_state": { "$ref": "NodeAdminState, "title": "Node Admin State" }, "high_availability_status": { "$ref": "NodeHAStatus, "title": "Node High Availability Status" }, "node_status": { "$ref": "NodeStatus, "title": "Actual Node Status" }, "vtep_state": { "$ref": "NodeVtepState, "description": "State of VTEP interfaces. All VTEPs share the same state." } }, "type": "object" }
HaInfo (type)
{ "id": "HaInfo", "properties": { "failover_mode": { "description": "Logical router failover mode", "enum": [ "PREEMPTIVE", "NON-PREEMPTIVE" ], "readonly": true, "title": "Logical router failover mode", "type": "string" }, "ha_mode": { "description": "Logical router HA mode", "enum": [ "ACTIVE-STANDBY", "ACTIVE-ACTIVE" ], "readonly": true, "title": "Logical router HA mode", "type": "string" }, "ha_state": { "description": "Logical router HA state DOWN - Logical router is not in good health SYNC - Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic", "enum": [ "DOWN", "SYNC", "STANDBY", "ACTIVE" ], "readonly": true, "title": "Logical router HA state", "type": "string" }, "rank": { "description": "Rank of logical router", "readonly": true, "title": "Rank of logical router", "type": "integer" }, "state-history": { "$ref": "LogicalRouterHaHistory, "description": "Logical router high-availability history", "readonly": true, "title": "Logical router high-availability history" } }, "type": "object" }
HostnameOrIPv4Address (type)
{ "id": "HostnameOrIPv4Address", "maxLength": 255, "pattern": "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?$", "title": "Hostname or IPv4 address", "type": "string" }
HttpProtocol (type)
{ "additionalProperties": false, "extends": { "$ref": "Protocol }, "id": "HttpProtocol", "polymorphic-type-descriptor": { "type-identifier": "http" }, "properties": { "authentication_scheme": { "$ref": "BasicAuthenticationScheme, "title": "Scheme to authenticate if required" }, "name": { "enum": [ "http", "https", "scp", "sftp" ], "required": true, "title": "Protocol name", "type": "string" } }, "type": "object" }
HttpsProtocol (type)
{ "additionalProperties": false, "extends": { "$ref": "Protocol }, "id": "HttpsProtocol", "polymorphic-type-descriptor": { "type-identifier": "https" }, "properties": { "authentication_scheme": { "$ref": "BasicAuthenticationScheme, "title": "Scheme to authenticate if required" }, "name": { "enum": [ "http", "https", "scp", "sftp" ], "required": true, "title": "Protocol name", "type": "string" }, "sha256_thumbprint": { "required": true, "title": "SSL thumbprint of server", "type": "string" } }, "type": "object" }
IKEDigestAlgorithm (type)
{ "additionalProperties": false, "description": "The IKEDigestAlgorithms are used to verify message integrity during IKE negotiation. SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.", "enum": [ "SHA1", "SHA2_256", "SHA2_384", "SHA2_512" ], "id": "IKEDigestAlgorithm", "title": "Digest Algorithms used in IKE negotiations", "type": "string" }
IKEEncryptionAlgorithm (type)
{ "additionalProperties": false, "description": "IKEEncryption algorithms are used to ensure confidentiality of the messages exchanged during IKE negotiations. AES stands for Advanced Encryption Standards. AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_GCM stands for Advanced Encryption Standard(AES) in Galois/Counter Mode(GCM) and is used to provide both confidentiality and data origin authentication. AES_GCM composed of two separate functions one for encryption(AES) and one for authentication(GMAC). AES_GCM algorithms will be available with IKE_V2 version only. AES_GCM_128 uses 128-bit keys. AES_GCM_192 uses 192-bit keys. AES_GCM_256 uses 256-bit keys.", "enum": [ "AES_128", "AES_256", "AES_GCM_128", "AES_GCM_192", "AES_GCM_256" ], "id": "IKEEncryptionAlgorithm", "title": "Encryption algorithms used in IKE", "type": "string" }
IPSecMultiPathGroup (type)
{ "additionalProperties": false, "description": "Configuration to allow IPSec VPN traffic through multipaths.", "extends": { "$ref": "ManagedResource }, "id": "IPSecMultiPathGroup", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "enabled": { "default": false, "description": "If true, enable IPSec VPN multipath group.", "title": "Enable IPSec VPN multipath group", "type": "boolean" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "ipsec_vpn_session_ids": { "description": "List of all IPSec VPN session Ids that are using this multipath group.", "items": { "type": "string" }, "readonly": true, "title": "List of IPSec VPN session Ids that are using this multipath group", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "scheme": { "default": "THRESHOLD_BASED", "description": "Specify a scheme to probe the quality of different paths for IPSec VPN traffic and to select the best equally good paths. THRESHOLD_BASED: The best paths are selected based on the threshold limit configured.", "enum": [ "THRESHOLD_BASED" ], "title": "The scheme specified to decide best paths" }, "scheme_value": { "description": "If scheme is THRESHOLD_BASED, scheme_value represents margin above the average path metric used for selecting the best paths. Paths below the specified threshold are considered good while above the selected threshold are considered bad quality. Threshold is a percentage value in the range of [0-100]. If not specified, the default is 20.", "title": "The value specified for the scheme", "type": "integer" }, "source_port_pool_size": { "default": 7, "description": "The maximum number of best paths allowed for an IPSec VPN session. For each path, a UDP source port number is assigned from an internal source port pool for encapsulating the IPSec VPN traffic through the path.", "maximum": 7, "minimum": 2, "title": "The size of the source port pool", "type": "integer" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "title": "IPSec VPN multipath group", "type": "object" }
IPSecMultiPathGroupListResult (type)
{ "additionalProperties": false, "description": "List all the IPSec multipath groups.", "extends": { "$ref": "ListResult }, "id": "IPSecMultiPathGroupListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "IPSecMultiPathGroup }, "required": true, "title": "IPSec multipath group list results", "type": "array" } }, "title": "List of IPSec multipath groups", "type": "object" }
IPSecVPNDPDProfile (type)
{ "additionalProperties": false, "description": "Dead peer detection (DPD) is a method that allows detection of unreachable internet key excahnge (IKE) peers. Any changes affects all IPSec VPN sessions consuming this profile.", "extends": { "$ref": "ManagedResource }, "id": "IPSecVPNDPDProfile", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "dpd_probe_interval": { "description": "When the DPD probe mode is periodic, this interval is the number of seconds between DPD messages. When the DPD probe mode is on-demand, this interval is the number of seconds during which traffic is not received from the peer before DPD retry messages are sent if there is IPSec traffic to send. For PERIODIC Mode: Minimum: 3 Maximum: 360 Default: 60 For ON_DEMAND Mode: Minimum: 1 Maximum: 10 Default: 3", "maximum": 360, "minimum": 1, "required": false, "title": "DPD probe interval defines an interval for DPD probes (in seconds)", "type": "integer" }, "dpd_probe_mode": { "default": "PERIODIC", "description": "DPD probe mode is used to query the liveliness of the peer. Two modes are possible - PERIODIC - is used to query the liveliness of the peer at regular intervals (dpd_probe_interval). It does not take into consideration traffic coming from the peer. The benefit of this mode over the on-demand mode is earlier detection of dead peers. However, use of periodic DPD incurs extra overhead. When communicating to large numbers of peers, please consider using on-demand DPD instead. ON_DEMAND - is used to query the liveliness of the peer by instructing the local endpoint to send DPD message to a peer if there is traffic to send to the peer AND the peer was idle for dpd_probe_interval seconds (i.e. there was no traffic from the peer for dpd_probe_interval seconds)", "enum": [ "PERIODIC", "ON_DEMAND" ], "title": "DPD probe mode", "type": "string" }, "enabled": { "default": true, "description": "If true, enable dead peer detection.", "title": "Enable dead peer detection (DPD)", "type": "boolean" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "is_default": { "description": "It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.", "readonly": true, "required": false, "title": "Default Profile", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "retry_count": { "default": 5, "description": "Maximum number of DPD messages retry attempts. This value is applicable for both dpd probe modes, periodic and on-demand.", "maximum": 100, "minimum": 1, "title": "Retry count", "type": "integer" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "title": "Dead peer detection (DPD) profile", "type": "object" }
IPSecVPNDPDProfileListResult (type)
{ "additionalProperties": false, "description": "List all the dead peer detection (DPD) profiles.", "extends": { "$ref": "ListResult }, "id": "IPSecVPNDPDProfileListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "IPSecVPNDPDProfile }, "required": true, "title": "IPSec DPD Profile list results", "type": "array" } }, "title": "List dead peer detection (DPD) profiles", "type": "object" }
IPSecVPNIKEProfile (type)
{ "additionalProperties": false, "description": "IKE Profile is a reusable profile that captures IKE phase one negotiation parameters. Any changes affects all IPSec VPN sessions consuming this profile.", "extends": { "$ref": "ManagedResource }, "id": "IPSecVPNIKEProfile", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "dh_groups": { "description": "Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.", "items": { "$ref": "DHGroup }, "required": false, "title": "DH group", "type": "array" }, "digest_algorithms": { "description": "Algorithm used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.", "items": { "$ref": "IKEDigestAlgorithm }, "required": false, "title": "Algorithm for message hash", "type": "array" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "encryption_algorithms": { "description": "Encryption algorithm used during Internet Key Exchange(IKE) negotiation. Default is AES_128.", "items": { "$ref": "IKEEncryptionAlgorithm }, "required": false, "title": "Encryption algorithm for IKE", "type": "array" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "ike_version": { "default": "IKE_V2", "description": "IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.", "enum": [ "IKE_V1", "IKE_V2", "IKE_FLEX" ], "title": "IKE version", "type": "string" }, "is_default": { "description": "It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.", "readonly": true, "required": false, "title": "Default Profile", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "sa_life_time": { "default": 86400, "description": "Life time for security association. Default is 86400 seconds (1 day).", "maximum": 31536000, "minimum": 21600, "title": "Security association (SA) life time", "type": "integer" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "title": "Internet key exchange (IKE) profile", "type": "object" }
IPSecVPNIKEProfileListResult (type)
{ "additionalProperties": false, "description": "List all the IKE profiles.", "extends": { "$ref": "ListResult }, "id": "IPSecVPNIKEProfileListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "IPSecVPNIKEProfile }, "required": true, "title": "IKE Profile list results", "type": "array" } }, "title": "List IKE profiles", "type": "object" }
IPSecVPNIKESessionStatus (type)
{ "additionalProperties": false, "description": "Status for IPSec VPN IKE session UP, DOWN, NEGOTIATING and fail reason if IKE session is down.", "id": "IPSecVPNIKESessionStatus", "properties": { "fail_reason": { "description": "Reason for failure.", "readonly": true, "title": "Fail reason", "type": "string" }, "ike_session_state": { "description": "IKE session service status UP, DOWN and NEGOTIATING.", "enum": [ "UP", "DOWN", "NEGOTIATING" ], "readonly": true, "title": "IKE session state", "type": "string" } }, "title": "IKE session status", "type": "object" }
IPSecVPNLocalEndpoint (type)
{ "additionalProperties": false, "description": "Local endpoint represents a logical router on which tunnel needs to be terminated.", "id": "IPSecVPNLocalEndpoint", "properties": { "certificate_id": { "description": "Site certificate identifier.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "required": false, "title": "Certificate Id", "type": "string" }, "local_address": { "$ref": "IPv4Address, "description": "IPV4 Address for local endpoint.", "required": true, "title": "IPV4 Address for local endpoint" }, "local_id": { "description": "Local identifier. Only one Local id is allowed for a local address.", "title": "Local identifier", "type": "string" }, "trust_ca_ids": { "description": "Certificate authority (CA) identifier list to verify peer certificates.", "items": { "type": "string" }, "required": false, "title": "Certificate authority (CA) identifiers", "type": "array" }, "trust_crl_ids": { "description": "Certificate revocation list (CRL) identifier list of peer certificates.", "items": { "type": "string" }, "required": false, "title": "Certificate revocation list (CRL) Identifiers", "type": "array" } }, "title": "IPSec VPN Local Endpoint", "type": "object" }
IPSecVPNPolicyRule (type)
{ "additionalProperties": false, "description": "For policy-based IPsec VPNs, a security policy specifies as its action the VPN tunnel to be used for transit traffic that meets the policy's match criteria.", "extends": { "$ref": "EmbeddedResource }, "id": "IPSecVPNPolicyRule", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_owner": { "$ref": "OwnerResourceLink, "readonly": true, "title": "Owner of this resource" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "action": { "default": "PROTECT", "description": "PROTECT - Protect rules are defined per policy based IPSec VPN session.", "enum": [ "PROTECT" ], "readonly": true, "title": "Action to be applied", "type": "string" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "destinations": { "description": "List of peer subnets.", "items": { "$ref": "IPSecVPNPolicySubnet }, "maxItems": 128, "required": false, "title": "Destination list", "type": "array" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "enabled": { "default": true, "description": "A flag to enable/disable the policy rule.", "title": "Enabled flag", "type": "boolean" }, "id": { "description": "Unique policy id.", "title": "Unique policy id", "type": "string" }, "logged": { "default": false, "description": "A flag to enable/disable the logging for the policy rule.", "title": "Logging flag", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "sources": { "description": "List of local subnets.", "items": { "$ref": "IPSecVPNPolicySubnet }, "maxItems": 128, "required": false, "title": "Source list", "type": "array" } }, "title": "IPSec VPN policy rules", "type": "object" }
IPSecVPNPolicySubnet (type)
{ "additionalProperties": false, "description": "Used to specify the local/peer subnets in IPSec VPN Policy rule.", "id": "IPSecVPNPolicySubnet", "properties": { "subnet": { "$ref": "IPv4CIDRBlock, "description": "Subnet used in policy rule.", "required": true, "title": "Peer or local subnet" } }, "title": "Subnet for IPSec Policy based VPN", "type": "object" }
IPSecVPNPolicyTrafficStatistics (type)
{ "additionalProperties": false, "description": "IPSec VPN policy traffic statistics", "id": "IPSecVPNPolicyTrafficStatistics", "properties": { "aggregate_traffic_counters": { "$ref": "IPSecVPNTrafficCounters, "description": "Aggregate traffic statistics across all ipsec tunnels.", "readonly": true, "title": "Traffic summary" }, "policy_id": { "description": "Policy Identifier.", "readonly": true, "title": "Policy Identifier", "type": "string" }, "tunnel_statistics": { "description": "Tunnel statistics.", "items": { "$ref": "IPSecVPNTunnelTrafficStatistics }, "readonly": true, "title": "Tunnel statistics", "type": "array" } }, "title": "IPSec VPN policy traffic statistics", "type": "object" }
IPSecVPNSession (type)
{ "abstract": true, "description": "VPN session defines connection between local and peer endpoint. Untill VPN session is defined configuration is not realized.", "extends": { "$ref": "ManagedResource }, "id": "IPSecVPNSession", "polymorphic-type-descriptor": { "mode": "enabled" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "authentication_mode": { "default": "PSK", "description": "Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.", "enum": [ "PSK", "CERTIFICATE" ], "title": "Authentication Mode", "type": "string" }, "connection_initiation_mode": { "default": "INITIATOR", "description": "Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request.", "enum": [ "INITIATOR", "RESPOND_ONLY", "ON_DEMAND" ], "title": "Connection initiation mode", "type": "string" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "dpd_profile_id": { "description": "Dead peer detection (DPD) profile id. Default will be set according to system default policy.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "Dead peer detection (DPD) profile id", "type": "string" }, "enabled": { "default": true, "description": "Enable/Disable IPSec VPN session.", "title": "Enable/Disable IPSec VPN session", "type": "boolean" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "ike_profile_id": { "description": "IKE profile id to be used. Default will be set according to system default policy.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "Internet key exchange (IKE) profile id", "type": "string" }, "ipsec_tunnel_profile_id": { "description": "Tunnel profile id to be used. By default it will point to system default profile.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "IPSec tunnel profile id", "type": "string" }, "local_endpoint": { "$ref": "IPSecVPNLocalEndpoint, "description": "Local endpoint.", "required": true, "title": "Local endpoint" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "peer_address": { "description": "IPV4 address of peer endpoint on remote site.", "required": true, "title": "IPV4 address of peer endpoint on remote site.", "type": "string" }, "peer_id": { "description": "Peer identifier.", "required": true, "title": "Peer id", "type": "string" }, "psk": { "description": "IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.", "maximum": 128, "minimum": 1, "required": false, "sensitive": true, "title": "Pre-shared key", "type": "string" }, "resource_type": { "$ref": "IPSecVPNSessionResourceType, "required": true }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "tcp_mss_clamping": { "$ref": "TcpMssClamping, "required": false } }, "title": "IPSec VPN session", "type": "object" }
IPSecVPNSessionListParameters (type)
{ "additionalProperties": false, "description": "Parameters to get filtered list of IPSec VPN Sessions. The filter parameters are not mutually exclusive and can be used together.", "id": "IPSecVPNSessionListParameters", "properties": { "session_type": { "$ref": "IPSecVPNSessionResourceType, "description": "All the IPSec VPN sessions of specified type will be included in the result.", "required": false, "title": "Type of the vpn session" } }, "title": "List parameters for IPSec VPN Sessions", "type": "object" }
IPSecVPNSessionListResult (type)
{ "additionalProperties": false, "description": "List all the IPSec VPN sessions.", "extends": { "$ref": "ListResult }, "id": "IPSecVPNSessionListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "IPSecVPNSession }, "required": true, "title": "IPSec VPN sessions list result", "type": "array" } }, "title": "List IPSec VPN sessions", "type": "object" }
IPSecVPNSessionResourceType (type)
{ "additionalProperties": false, "description": "A Policy Based VPN requires to define protect rules that match local and peer subnets. IPSec security associations is negotiated for each pair of local and peer subnet. A Route Based VPN is more flexible, more powerful and recommended over policy based VPN. IP Tunnel port is created and all traffic routed via tunnel port is protected. Routes can be configured statically or can be learned through BGP. A route based VPN is must for establishing redundant VPN session to remote site.", "enum": [ "PolicyBasedIPSecVPNSession", "RouteBasedIPSecVPNSession" ], "id": "IPSecVPNSessionResourceType", "title": "Resource types of IPsec VPN session", "type": "string" }
IPSecVPNSessionStatistics (type)
{ "additionalProperties": false, "description": "Session statistics gives aggregated statistics of all policies for all the tunnels.", "id": "IPSecVPNSessionStatistics", "properties": { "aggregate_traffic_counters": { "$ref": "IPSecVPNTrafficCounters, "description": "Aggregate traffic statistics across all ipsec tunnels.", "readonly": true, "title": "Traffic summary" }, "display_name": { "description": "Display name of vpn session.", "readonly": true, "title": "Display name", "type": "string" }, "failed_tunnels": { "description": "Number of failed tunnels.", "readonly": true, "title": "Failed tunnels", "type": "integer" }, "ike_status": { "$ref": "IPSecVPNIKESessionStatus, "description": "Status for IPSec VPN IKE session UP/DOWN and fail reason if IKE session is down.", "readonly": true, "title": "IKE status summary" }, "ipsec_vpn_session_id": { "description": "UUID of vpn session.", "readonly": true, "title": "Session identifier", "type": "string" }, "last_update_timestamp": { "$ref": "EpochMsTimestamp, "description": "Timestamp when the data was last updated.", "readonly": true, "title": "Last updated timestamp" }, "negotiated_tunnels": { "description": "Number of negotiated tunnels.", "readonly": true, "title": "Negotiated tunnels", "type": "integer" }, "partial_stats": { "description": "Partial statistics if true specifies that the statistics are only from active node.", "readonly": true, "title": "Partial Statistics", "type": "boolean" }, "policy_statistics": { "description": "Gives aggregate traffic statistics across all ipsec tunnels and individual tunnel statistics.", "items": { "$ref": "IPSecVPNPolicyTrafficStatistics }, "readonly": true, "title": "IPSec policy statistics", "type": "array" }, "session_status": { "description": "Gives session status consolidated using IKE status and tunnel status. It can be UP, DOWN, DEGRADED. If IKE and all tunnels are UP status will be UP, if all down it will be DOWN, otherwise it will be DEGRADED.", "enum": [ "UP", "DOWN", "DEGRADED" ], "readonly": true, "title": "Session status", "type": "string" }, "total_tunnels": { "description": "Total number of tunnels.", "readonly": true, "title": "Total tunnels", "type": "integer" } }, "title": "IPSec VPN session statistics", "type": "object" }
IPSecVPNTrafficCounters (type)
{ "additionalProperties": false, "description": "Traffic counters for IPSec VPN session.", "id": "IPSecVPNTrafficCounters", "properties": { "bytes_in": { "description": "Total number of bytes recevied.", "readonly": true, "title": "Bytes in", "type": "integer" }, "bytes_out": { "description": "Total number of bytes sent.", "readonly": true, "title": "Bytes out", "type": "integer" }, "dropped_packets_in": { "description": "Total number of incoming packets dropped on inbound security association.", "readonly": true, "title": "Dropped incoming packets", "type": "integer" }, "dropped_packets_out": { "description": "Total number of outgoing packets dropped on outbound security association.", "readonly": true, "title": "Dropped outgoing packets", "type": "integer" }, "packets_in": { "description": "Total number of packets received.", "readonly": true, "title": "Packets in", "type": "integer" }, "packets_out": { "description": "Total number of packets sent.", "readonly": true, "title": "Packets out", "type": "integer" } }, "title": "IPSec VPN traffic counters", "type": "object" }
IPSecVPNTunnelProfile (type)
{ "additionalProperties": false, "description": "IPSec VPN tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. Any changes affects all IPSec VPN sessions consuming this profile.", "extends": { "$ref": "ManagedResource }, "id": "IPSecVPNTunnelProfile", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "df_policy": { "default": "COPY", "description": "Defragmentation policy helps to handle defragmentation bit present in the inner packet. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet.", "enum": [ "COPY", "CLEAR" ], "title": "Policy for handling defragmentation bit", "type": "string" }, "dh_groups": { "description": "Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.", "items": { "$ref": "DHGroup }, "required": false, "title": "DH group", "type": "array" }, "digest_algorithms": { "description": "Algorithm used for message digest. Default digest algorithm is implicitly covered by default encryption algorithm \"AES_GCM_128\".", "items": { "$ref": "TunnelDigestAlgorithm }, "required": false, "title": "Algorithm for message hash", "type": "array" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "enable_perfect_forward_secrecy": { "default": true, "description": "If true, perfect forward secrecy (PFS) is enabled.", "title": "Enable perfect forward secrecy", "type": "boolean" }, "encapsulation_mode": { "default": "TUNNEL_MODE", "description": "Encapsulation Mode to be used for encryption of packet. Tunnel mode protects internal routing information by encrypting IP header of original packet.", "enum": [ "TUNNEL_MODE" ], "readonly": true, "title": "Encapsulation Mode", "type": "string" }, "encryption_algorithms": { "description": "Encryption algorithm to encrypt/decrypt the messages exchanged between IPSec VPN initiator and responder during tunnel negotiation. Default is AES_GCM_128.", "items": { "$ref": "TunnelEncryptionAlgorithm }, "required": false, "title": "Encryption algorithm to use in tunnel establishement", "type": "array" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "is_default": { "description": "It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.", "readonly": true, "required": false, "title": "Default Profile", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "sa_life_time": { "default": 3600, "description": "SA life time specifies the expiry time of security association. Default is 3600 seconds.", "maximum": 31536000, "minimum": 900, "title": "Security association (SA) life time", "type": "integer" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "transform_protocol": { "default": "ESP", "description": "IPSec transform specifies IPSec security protocol.", "enum": [ "ESP" ], "readonly": true, "title": "Tunnel protocol", "type": "string" } }, "title": "IPSec VPN tunnel profile", "type": "object" }
IPSecVPNTunnelProfileListResult (type)
{ "additionalProperties": false, "description": "List all the tunnel profiles.", "extends": { "$ref": "ListResult }, "id": "IPSecVPNTunnelProfileListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "IPSecVPNTunnelProfile }, "required": true, "title": "IPSec Tunnel Profile list results", "type": "array" } }, "title": "List tunnel profiles", "type": "object" }
IPSecVPNTunnelTrafficStatistics (type)
{ "additionalProperties": false, "description": "IPSec VPN tunnel traffic statistics.", "id": "IPSecVPNTunnelTrafficStatistics", "properties": { "bytes_in": { "description": "Total number of incoming bytes on inbound Security association (SA).", "readonly": true, "title": "Bytes in", "type": "integer" }, "bytes_out": { "description": "Total number of outgoing bytes on outbound Security association (SA).", "readonly": true, "title": "Bytes out", "type": "integer" }, "decryption_failures": { "description": "Total number of packets dropped due to decryption failures.", "readonly": true, "title": "Decryption failures", "type": "integer" }, "dropped_packets_in": { "description": "Total number of incoming packets dropped on inbound security association.", "readonly": true, "title": "Dropped incoming packets", "type": "integer" }, "dropped_packets_out": { "description": "Total number of outgoing packets dropped on outbound security association.", "readonly": true, "title": "Dropped outgoing packets", "type": "integer" }, "encryption_failures": { "description": "Total number of packets dropped because of failure in encryption.", "readonly": true, "title": "Encryption failures", "type": "integer" }, "integrity_failures": { "description": "Total number of packets dropped due to integrity failures.", "readonly": true, "title": "Integrity failures", "type": "integer" }, "local_subnet": { "description": "Local subnet to which a tunnel belongs.", "readonly": true, "title": "Local subnet", "type": "string" }, "nomatching_policy_errors": { "description": "Number of packets dropped because of no matching policy is available.", "readonly": true, "title": "Nomatching Policy errors", "type": "integer" }, "packets_in": { "description": "Total number of incoming packets on inbound Security association (SA).", "readonly": true, "title": "Packets in", "type": "integer" }, "packets_out": { "description": "Total number of outgoing packets on outbound Security association (SA).", "readonly": true, "title": "Packets out", "type": "integer" }, "packets_receive_other_error": { "description": "Total number of incoming packets dropped on inbound Security association (SA)(misc).", "readonly": true, "title": "Packets receive other error", "type": "integer" }, "packets_sent_other_error": { "description": "Total number of packets dropped while sending for any reason.", "readonly": true, "title": "Packets sent other error", "type": "integer" }, "peer_subnet": { "description": "Peer subnet to which a tunnel belongs.", "readonly": true, "title": "Peer subnet", "type": "string" }, "replay_errors": { "description": "Total number of packets dropped due to replay check on that Security association (SA).", "readonly": true, "title": "Replay errors", "type": "integer" }, "sa_mismatch_errors_in": { "description": "Totoal number of security association (SA) mismatch errors on incoming packets.", "readonly": true, "title": "Security association (SA) mismatch errors on incoming packets", "type": "integer" }, "sa_mismatch_errors_out": { "description": "Totoal number of security association (SA) mismatch errors on outgoing packets.", "readonly": true, "title": "Security association (SA) mismatch errors on outgoing packets", "type": "integer" }, "seq_number_overflow_error": { "description": "Total number of packets dropped while sending due to overflow in sequence number.", "readonly": true, "title": "Sequence number overflow error", "type": "integer" }, "tunnel_down_reason": { "description": "Gives the detailed reason about the tunnel when it is down. If tunnel is UP tunnel down reason will be empty.", "readonly": true, "title": "Tunnel down reason", "type": "string" }, "tunnel_status": { "description": "Specifies the status of tunnel. If all the SA (Security association) are negotiated then tunnels status will be UP. If negotiation fails for the SAs status will be DOWN, if SAs are in negotiating phase tunnels status will be NEGOTIATING.", "enum": [ "UP", "DOWN", "NEGOTIATING" ], "readonly": true, "title": "Tunnel Status", "type": "string" } }, "title": "IPSec VPN tunnel traffic statistics", "type": "object" }
IPSubnet (type)
{ "additionalProperties": false, "id": "IPSubnet", "properties": { "ip_addresses": { "items": { "$ref": "IPv4Address }, "maxItems": 1, "minItems": 1, "required": true, "title": "IPv4 Addresses", "type": "array" }, "prefix_length": { "maximum": 32, "minimum": 1, "required": true, "title": "Subnet Prefix Length", "type": "integer" } }, "type": "object" }
IPv4Address (type)
{ "id": "IPv4Address", "maxLength": 255, "pattern": "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$", "title": "IPv4 address", "type": "string" }
IPv4AddressProperties (type)
{ "additionalProperties": false, "id": "IPv4AddressProperties", "properties": { "ip_address": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Interface IPv4 address", "type": "string" }, "netmask": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Interface netmask", "type": "string" } }, "title": "IPv4 address properties", "type": "object" }
IPv4CIDRBlock (type)
{ "id": "IPv4CIDRBlock", "maxLength": 255, "pattern": "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\\/(3[0-2]|[1-2][0-9]|[0-9]))$", "title": "IPv4 CIDR Block", "type": "string" }
IncludedFieldsParameters (type)
{ "additionalProperties": false, "id": "IncludedFieldsParameters", "properties": { "included_fields": { "title": "Comma separated list of fields that should be included in query result", "type": "string" } }, "title": "A list of fields to include in query results", "type": "object" }
Interface (type)
{ "additionalProperties": false, "description": "Interface properties.", "id": "Interface", "properties": { "address": { "$ref": "IPv4CIDRBlock, "description": "IPv4 CIDR block.", "required": true, "title": "IPv4 CIDR block", "type": "string" }, "interface_type": { "description": "Interface type.", "enum": [ "MANAGEMENT", "TUNNEL" ], "required": true, "title": "Interface type", "type": "string" }, "name": { "description": "Interface name.", "required": true, "title": "Interface name", "type": "string" } }, "title": "Interface properties", "type": "object" }
KnownHostParameter (type)
{ "additionalProperties": false, "id": "KnownHostParameter", "properties": { "host": { "$ref": "HostnameOrIPv4Address, "required": true, "title": "Known host hostname or IP address" }, "port": { "default": 22, "maximum": 65535, "minimum": 1, "title": "Known host port", "type": "integer" } }, "type": "object" }
L2Extension (type)
{ "description": "Configuration for extending L2 domain with L2VPN.", "id": "L2Extension", "properties": { "l2vpn_session_id": { "description": "L2VPN sessions identifier for L2 extension.", "required": true, "title": "L2VPN session ID", "type": "string" }, "l2vpn_session_name": { "description": "Display name of the given l2vpn session.", "readOnly": true, "required": false, "title": "Display name of the given l2vpn session", "type": "string" }, "tunnel_id": { "description": "Tunnel ID to uniquely identify the L2 extension.", "maximum": 4093, "minimum": 1, "required": true, "title": "Tunnel ID", "type": "integer" } }, "title": "L2 Extension", "type": "object" }
L2VPNSession (type)
{ "additionalProperties": false, "description": "L2VPN Session represents meta data necessary to create the L2VPN Session. For client, it is represented by an array of peer code for each transport tunnel.", "extends": { "$ref": "ManagedResource }, "id": "L2VPNSession", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "enabled": { "default": true, "description": "Enable to extend all the associated logical switches.", "required": false, "title": "Enable L2VPN session", "type": "boolean" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "transport_tunnels": { "description": "List of L2VPN transport tunnel.", "items": { "$ref": "TransportTunnel }, "maxItems": 4, "minItems": 1, "required": true, "title": "List of L2VPN Transport Tunnel", "type": "array" } }, "title": "L2VPN Session", "type": "object" }
L2VPNSessionListResult (type)
{ "additionalProperties": false, "description": "list all the L2VPN sessions", "extends": { "$ref": "ListResult }, "id": "L2VPNSessionListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "L2VPNSession }, "required": true, "title": "L2VPN sessions list result", "type": "array" } }, "title": "List all L2VPN sessions", "type": "object" }
L2VPNSessionStatistics (type)
{ "description": "L2VPN session statistics.", "id": "L2VPNSessionStatistics", "properties": { "display_name": { "description": "Display name of L2VPN session.", "readonly": true, "title": "Display name", "type": "string" }, "l2vpn_session_id": { "description": "UUID of L2VPN session.", "readonly": true, "title": "Session identifier", "type": "string" }, "reference_count": { "description": "Number of logical ports that are referencing the L2VPN session.", "readonly": true, "title": "Number of references to L2VPN session", "type": "integer" }, "session_status": { "description": "L2VPN session status. It can be UP and DOWN.", "enum": [ "UP", "DOWN" ], "readonly": true, "title": "L2VPN session status", "type": "string" }, "traffic_counter": { "$ref": "L2VPNTrafficStatistics, "description": "Traffic counter through the L2VPN session.", "readonly": true, "title": "Traffic counter" }, "transport_tunnels": { "description": "List of transport tunnels.", "items": { "$ref": "TransportTunnel }, "readonly": true, "title": "List of transport tunnels", "type": "array" } }, "title": "L2VPN session statistics", "type": "object" }
L2VPNTrafficStatistics (type)
{ "additionalProperties": false, "description": "Traffic statistics for L2VPN.", "id": "L2VPNTrafficStatistics", "properties": { "bytes_in": { "description": "Total number of incoming bytes.", "readonly": true, "title": "Bytes in", "type": "integer" }, "bytes_out": { "description": "Total number of outgoing bytes.", "readonly": true, "title": "Bytes out", "type": "integer" }, "dropped_packets_in": { "description": "Total number of incoming packets dropped.", "readonly": true, "title": "Dropped incoming packets", "type": "integer" }, "dropped_packets_out": { "description": "Total number of outgoing packets dropped.", "readonly": true, "title": "Dropped outgoing packets", "type": "integer" }, "packets_in": { "description": "Total number of incoming packets.", "readonly": true, "title": "Packets in", "type": "integer" }, "packets_out": { "description": "Total number of outgoing packets.", "readonly": true, "title": "Packets out", "type": "integer" } }, "title": "L2VPN traffic statistics", "type": "object" }
ListCertParameter (type)
{ "additionalProperties": false, "extends": { "$ref": "ListRequestParameters }, "id": "ListCertParameter", "properties": { "cursor": { "readonly": false, "title": "Opaque cursor to be used for getting next page of records (supplied by current result page)", "type": "string" }, "details": { "default": false, "required": false, "title": "whether to expand the pem data and show all its details", "type": "boolean" }, "included_fields": { "title": "Comma separated list of fields that should be included in query result", "type": "string" }, "page_size": { "default": 1000, "maximum": 1000, "minimum": 0, "title": "Maximum number of results to return in this page (server may return fewer)", "type": "integer" }, "sort_ascending": { "type": "boolean" }, "sort_by": { "title": "Field by which records are sorted", "type": "string" }, "type": { "description": "Provide this parameter to limit the list of returned certificates to those matching a particular usage. Passing cluster_certificate will return the certificate used for the cluster wide API service.", "enum": [ "cluster_api_certificate" ], "required": false, "title": "Type of certificate to return", "type": "string" } }, "type": "object" }
ListRequestParameters (type)
{ "additionalProperties": {}, "extends": { "$ref": "IncludedFieldsParameters }, "id": "ListRequestParameters", "properties": { "cursor": { "readonly": false, "title": "Opaque cursor to be used for getting next page of records (supplied by current result page)", "type": "string" }, "included_fields": { "title": "Comma separated list of fields that should be included in query result", "type": "string" }, "page_size": { "default": 1000, "maximum": 1000, "minimum": 0, "title": "Maximum number of results to return in this page (server may return fewer)", "type": "integer" }, "sort_ascending": { "type": "boolean" }, "sort_by": { "title": "Field by which records are sorted", "type": "string" } }, "type": "object" }
ListResult (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "ListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "Resource }, "required": true, "title": "Result list", "type": "array" } }, "type": "object" }
ListResultQueryParameters (type)
{ "id": "ListResultQueryParameters", "properties": { "fields": { "description": "Comma-separated field names to include in query result", "title": "Fields to include in query results", "type": "string" } }, "type": "object" }
LogicalPort (type)
{ "abstract": true, "extends": { "$ref": "ManagedResource }, "id": "LogicalPort", "polymorphic-type-descriptor": { "mode": "enabled" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "$ref": "LogicalPortResourceType, "required": true }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "type": "object" }
LogicalPortListParameters (type)
{ "additionalProperties": false, "description": "Parameters to get filtered list of logical ports. The filter parameters are mutually exclusive.", "id": "LogicalPortListParameters", "properties": { "l2_extension_id": { "description": "List all of the logical ports that are extended via the specified l2vpn session id.", "title": "Id of a specified l2vpn session", "type": "string" }, "port_type": { "description": "If routed, list all of the routed logical ports. If extended, list all of the extended logial ports. If none, list all pure l2 logical ports (not routed and extended).", "enum": [ "routed", "extended", "none" ], "required": false, "title": "Type of logical port", "type": "string" } }, "title": "List parameters for logical port", "type": "object" }
LogicalPortListResult (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResult }, "id": "LogicalPortListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "LogicalPort }, "required": true, "title": "Logical port list results", "type": "array" } }, "type": "object" }
LogicalPortResourceType (type)
{ "additionalProperties": false, "description": "LogicalRouterPort is the L3 Port attached to the router. LogicalRouterIPTunnelPort is a IPSec VPN tunnel port created on logical router when route based VPN session configured. LogicalRouterLoopbackPort is a loopback port for the logical router. LogicalRouterManagementPort is a management port on the logical router.", "enum": [ "LogicalRouterPort", "LogicalRouterIPTunnelPort", "LogicalRouterLoopbackPort", "LogicalRouterManagementPort" ], "id": "LogicalPortResourceType", "title": "Resource types of logical port", "type": "string" }
LogicalRouterHaHistory (type)
{ "id": "LogicalRouterHaHistory", "properties": { "event": { "description": "Logical router HA event that triggered state change", "readonly": true, "title": "Logical router HA event that triggered state change", "type": "string" }, "event_timestamp": { "$ref": "EpochMsTimestamp, "description": "Time in UTC when the last HA event occured", "readonly": true, "title": "Time in UTC when the last HA event occured" }, "state": { "description": "Logical router HA state DOWN - Logical router is not in good health SYNC - Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic", "enum": [ "DOWN", "SYNC", "STANDBY", "ACTIVE" ], "readonly": true, "title": "Logical router HA state", "type": "string" } }, "type": "object" }
LogicalRouterIPTunnelPort (type)
{ "additionalProperties": false, "description": "Logical router IP tunnel port.", "extends": { "$ref": "LogicalPort }, "id": "LogicalRouterIPTunnelPort", "polymorphic-type-descriptor": { "type-identifier": "LogicalRouterIPTunnelPort" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "admin_state": { "description": "Admin state of port.", "enum": [ "UP", "DOWN" ], "readonly": true, "title": "Admin state of port", "type": "string" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "$ref": "LogicalPortResourceType, "required": true }, "subnets": { "description": "Tunnel port subnets.", "items": { "$ref": "IPSubnet }, "maxItems": 1, "minItems": 1, "readonly": true, "required": true, "title": "Tunnel port subnets", "type": "array" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "vpn_session_id": { "description": "Associated VPN session identifier.", "readonly": true, "title": "VPN session identifier", "type": "string" } }, "title": "Logical router IP tunnel port", "type": "object" }
LogicalRouterLoopbackPort (type)
{ "additionalProperties": false, "extends": { "$ref": "LogicalPort }, "id": "LogicalRouterLoopbackPort", "polymorphic-type-descriptor": { "type-identifier": "LogicalRouterLoopbackPort" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "$ref": "LogicalPortResourceType, "required": true }, "subnets": { "items": { "$ref": "IPSubnet }, "maxItems": 1, "required": false, "title": "Logical router loopback port subnets", "type": "array" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "type": "object" }
LogicalRouterPort (type)
{ "additionalProperties": false, "extends": { "$ref": "LogicalPort }, "id": "LogicalRouterPort", "polymorphic-type-descriptor": { "type-identifier": "LogicalRouterPort" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "dhcp_server_id": { "description": "Specify DHCP server for L2 domain to use. If not given, there is no DHCP service in the L2 domain.", "required": false, "title": "DHCP server ID", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "exit_interface": { "$ref": "ExitEdgeInterface, "description": "Exit interface from edge", "readonly": false, "required": true, "title": "Exit interface from edge" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "l2_extensions": { "description": "Configuration for extending L2 domain via L2VPN.", "items": { "$ref": "L2Extension }, "minItems": 1, "required": false, "title": "L2 extensions", "type": "array" }, "mac_address": { "description": "MAC address", "readonly": true, "required": false, "title": "MAC address", "type": "string" }, "mtu": { "default": 1500, "description": "Maximum transmission unit specifies the size of the largest packet that a network protocol can transmit.", "maximum": 9000, "minimum": 64, "title": "Maximum transmission unit (MTU)", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "$ref": "LogicalPortResourceType, "required": true }, "subnets": { "items": { "$ref": "IPSubnet }, "maxItems": 1, "required": false, "title": "Logical router port subnets", "type": "array" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "urpf_mode": { "$ref": "UrpfMode, "default": "STRICT", "required": false, "title": "Unicast Reverse Path Forwarding mode" }, "vlan_id": { "maximum": 4091, "minimum": 0, "required": true, "title": "VLAN for the Logical Switch", "type": "integer" } }, "type": "object" }
LogicalRouterPortCounters (type)
{ "additionalProperties": false, "id": "LogicalRouterPortCounters", "properties": { "dropped_packets": { "required": true, "title": "Number of Dropped Packets", "type": "integer" }, "total_bytes": { "required": true, "title": "Total Number of Bytes", "type": "integer" }, "total_packets": { "required": true, "title": "Total Number of Packets", "type": "integer" } }, "type": "object" }
LogicalRouterPortStatistics (type)
{ "additionalProperties": false, "id": "LogicalRouterPortStatistics", "properties": { "admin_state": { "description": "Configurable administrative state.", "enum": [ "UP", "DOWN" ], "required": true, "title": "Administrative State", "type": "string" }, "last_update_timestamp": { "required": true, "title": "Timestamp in Milliseconds Since Epoch", "type": "integer" }, "logical_router_port_id": { "required": true, "title": "Logical Router Port UUID", "type": "string" }, "operational_state": { "description": "Operational state of the port. Takes into account the exit interface status.", "enum": [ "UP", "DOWN" ], "required": true, "title": "Operational State", "type": "string" }, "rx": { "$ref": "LogicalRouterPortCounters, "required": true, "title": "Logical Router Port Receive Count", "type": "object" }, "tx": { "$ref": "LogicalRouterPortCounters, "required": true, "title": "Logical Router Port Transmit Count", "type": "object" } }, "type": "object" }
LogicalRouterRouteEntry (type)
{ "additionalProperties": false, "id": "LogicalRouterRouteEntry", "properties": { "admin_distance": { "required": true, "title": "Admin Distance", "type": "integer" }, "logical_router_port_id": { "required": true, "title": "Logical Router Port ID", "type": "string" }, "network": { "$ref": "IPv4CIDRBlock, "required": true, "title": "Network" }, "next_hop": { "$ref": "IPv4Address, "required": false, "title": "Next Hop" }, "route_type": { "$ref": "RouteType, "required": true, "title": "Route Type" } }, "type": "object" }
LogicalRouterRouteTable (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResult }, "id": "LogicalRouterRouteTable", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "last_update_timestamp": { "readonly": true, "required": true, "title": "Timestamp in Milliseconds Since Epoch", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "LogicalRouterRouteEntry }, "required": true, "title": "Logical Router Route Entry", "type": "array" } }, "type": "object" }
LogicalRouterType (type)
{ "extends": { "$ref": "ListResultQueryParameters }, "id": "LogicalRouterType", "properties": { "fields": { "description": "Comma-separated field names to include in query result", "title": "Fields to include in query results", "type": "string" }, "router_type": { "description": "Logical router type", "enum": [ "SERVICE_ROUTER_TIER0", "VRF_SERVICE_ROUTER_TIER0", "DISTRIBUTED_ROUTER_TIER0", "VRF_DISTRIBUTED_ROUTER_TIER0", "SERVICE_ROUTER_TIER1", "VRF_SERVICE_ROUTER_TIER1", "DISTRIBUTED_ROUTER_TIER1", "VRF_DISTRIBUTED_ROUTER_TIER1", "TUNNEL", "RTEP_TUNNEL_VRF" ], "title": "Logical router type", "type": "string" } }, "type": "object" }
LogicalRoutersInfo (type)
{ "id": "LogicalRoutersInfo", "properties": { "ha_info": { "$ref": "HaInfo, "description": "Logical router high-availability information", "readonly": true, "title": "Logical router high-availability information" }, "logical_router_uuid": { "description": "Logical router UUID", "readonly": true, "title": "Logical router UUID", "type": "string" }, "mp_router_uuid": { "description": "MP logical router UUID", "readonly": true, "title": "MP logical router UUID", "type": "string" }, "name": { "description": "Name of the logical router", "readonly": true, "title": "Name of the logical router", "type": "string" }, "router_type": { "description": "Logical router type", "enum": [ "SERVICE_ROUTER_TIER0", "VRF_SERVICE_ROUTER_TIER0", "DISTRIBUTED_ROUTER_TIER0", "VRF_DISTRIBUTED_ROUTER_TIER0", "SERVICE_ROUTER_TIER1", "VRF_SERVICE_ROUTER_TIER1", "DISTRIBUTED_ROUTER_TIER1", "VRF_DISTRIBUTED_ROUTER_TIER1", "TUNNEL", "RTEP_TUNNEL_VRF" ], "readonly": true, "title": "Logical router type", "type": "string" } }, "type": "object" }
MaintenanceModePropertiesReply (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "MaintenanceModePropertiesReply", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "maintenance_mode": { "default": "disabled", "description": "current maintenance mode", "enum": [ "enabled", "disabled" ], "readonly": true, "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Information about the Edge maintenance mode", "type": "object" }
MaintenanceModePropertiesRequest (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "MaintenanceModePropertiesRequest", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "maintenance_mode": { "description": "current maintenance mode", "readonly": false, "type": "boolean" }, "notify_mpa": { "default": true, "description": "send notification to MPA", "readonly": false, "type": "boolean" } }, "title": "Information about the Edge maintenance mode", "type": "object" }
ManagedResource (type)
{ "abstract": true, "extends": { "$ref": "RevisionedResource }, "id": "ManagedResource", "polymorphic-type-descriptor": { "property-name": "resource_type" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "title": "Base type for resources that are managed by API clients", "type": "object" }
MandatoryAccessControlProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "MandatoryAccessControlProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "enabled": { "description": "Enabled can be True/False", "type": "boolean" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "status": { "description": "current status of Mandatory Access Control", "enum": [ "ENABLED", "DISABLED", "ENABLED_PENDING_REBOOT" ], "readonly": true, "type": "string" } }, "title": "Information about mandatory access control", "type": "object" }
NodeAdminState (type)
{ "enum": [ "UP", "DOWN", "UNKNOWN" ], "id": "NodeAdminState", "title": "Node Admin State", "type": "string" }
NodeFileSystemProperties (type)
{ "additionalProperties": false, "id": "NodeFileSystemProperties", "properties": { "file_system": { "readonly": true, "title": "File system id", "type": "string" }, "mount": { "readonly": true, "title": "File system mount", "type": "string" }, "total": { "readonly": true, "title": "File system size in kilobytes", "type": "integer" }, "type": { "readonly": true, "title": "File system type", "type": "string" }, "used": { "readonly": true, "title": "Amount of file system used in kilobytes", "type": "integer" } }, "title": "File system properties", "type": "object" }
NodeHAStatus (type)
{ "enum": [ "ACTIVE", "INACTIVE", "STATE_SYNC", "DISCOVER", "OFFLINE", "DISABLED", "UNKNOWN" ], "id": "NodeHAStatus", "title": "Node High Availability Status", "type": "string" }
NodeIdServicesMap (type)
{ "additionalProperties": false, "id": "NodeIdServicesMap", "properties": { "node_id": { "maxLength": 255, "readonly": false, "required": true, "title": "NodeId", "type": "string" }, "service_types": { "description": "list of ServiceTypes", "items": { "$ref": "ServiceType }, "readonly": false, "required": true, "type": "array" } }, "type": "object" }
NodeInterfaceStatisticsProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeInterfaceStatisticsProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "interface_id": { "readonly": true, "title": "Interface ID", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "rx_bytes": { "readonly": true, "title": "Number of bytes received", "type": "integer" }, "rx_dropped": { "readonly": true, "title": "Number of packets dropped", "type": "integer" }, "rx_errors": { "readonly": true, "title": "Number of receive errors", "type": "integer" }, "rx_frame": { "readonly": true, "title": "Number of framing errors", "type": "integer" }, "rx_packets": { "readonly": true, "title": "Number of packets received", "type": "integer" }, "tx_bytes": { "readonly": true, "title": "Number of bytes transmitted", "type": "integer" }, "tx_carrier": { "readonly": true, "title": "Number of carrier losses detected", "type": "integer" }, "tx_colls": { "readonly": true, "title": "Number of collisions detected", "type": "integer" }, "tx_dropped": { "readonly": true, "title": "Number of packets dropped", "type": "integer" }, "tx_errors": { "readonly": true, "title": "Number of transmit errors", "type": "integer" }, "tx_packets": { "readonly": true, "title": "Number of packets transmitted", "type": "integer" } }, "title": "Node network interface statistic properties", "type": "object" }
NodeLogProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeLogProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "last_modified_time": { "$ref": "EpochMsTimestamp, "readonly": true, "title": "Last modified time expressed in milliseconds since epoch" }, "log_name": { "readonly": true, "title": "Name of log file", "type": "string" }, "log_size": { "readonly": true, "title": "Size of log file in bytes", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Node log properties", "type": "object" }
NodeLogPropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeLogPropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeLogProperties }, "required": true, "title": "Node log property results", "type": "array" } }, "title": "Node log property query results", "type": "object" }
NodeNameServersProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeNameServersProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "name_servers": { "items": { "type": "string" }, "maxItems": 3, "required": true, "title": "Name servers", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Node network name servers properties", "type": "object" }
NodeNetworkInterfaceProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeNetworkInterfaceProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "admin_status": { "enum": [ "up", "down" ], "readonly": true, "title": "Interface administration status", "type": "string" }, "bond_cur_active_slave": { "readonly": true, "title": "Bond's currently active slave device", "type": "string" }, "bond_lacp_rate": { "readonly": true, "title": "Bond's rate at which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode", "type": "string" }, "bond_mode": { "enum": [ "ACTIVE_BACKUP", "802_3AD", "ROUND_ROBIN", "BROADCAST", "XOR", "TLB", "ALB" ], "title": "Bond mode", "type": "string" }, "bond_primary": { "title": "Bond's primary device name in active-backup bond mode", "type": "string" }, "bond_primary_slave": { "readonly": true, "title": "Bond's primary device name in active-backup bond mode", "type": "string" }, "bond_slaves": { "items": { "type": "string" }, "title": "Bond's slave devices", "type": "array" }, "bond_xmit_hash_policy": { "enum": [ "layer2", "layer2+3", "layer3+4", "encap2+3", "encap3+4" ], "readonly": true, "title": "Bond's transmit hash policy for balance-xor and 802.3ad modes", "type": "string" }, "broadcast_address": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Interface broadcast address", "type": "string" }, "default_gateway": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Interface's default gateway", "type": "string" }, "interface_id": { "readonly": true, "required": true, "title": "Interface ID", "type": "string" }, "ip_addresses": { "items": { "$ref": "IPv4AddressProperties }, "maxItems": 1, "title": "Interface IP addresses", "type": "array" }, "ip_configuration": { "enum": [ "dhcp", "static", "not configured" ], "required": true, "title": "Interface configuration", "type": "string" }, "is_kni": { "readonly": true, "title": "Interface is a KNI", "type": "boolean" }, "link_status": { "enum": [ "up", "down" ], "readonly": true, "title": "Interface administration status", "type": "string" }, "mtu": { "title": "Interface MTU", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "physical_address": { "pattern": "^[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}$", "readonly": true, "title": "Interface MAC address", "type": "string" }, "plane": { "enum": [ "mgmt", "debug", "none" ], "title": "Interface plane", "type": "string" }, "vlan": { "maximum": 4094, "minimum": 1, "readonly": true, "title": "VLAN Id", "type": "integer" } }, "title": "Node network interface properties", "type": "object" }
NodeNetworkInterfacePropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeNetworkInterfacePropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeNetworkInterfaceProperties }, "required": true, "title": "Node network interface property results", "type": "array" } }, "title": "Node network interface properties list results", "type": "object" }
NodeNetworkProperties (type)
{ "extends": { "$ref": "Resource }, "id": "NodeNetworkProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "Network configuration properties", "type": "object" }
NodeNtpServiceProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "NodeServiceProperties }, "id": "NodeNtpServiceProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "service_name": { "required": true, "title": "Service name", "type": "string" }, "service_properties": { "$ref": "NtpServiceProperties, "title": "NTP Service properties" } }, "title": "Node NTP service properties", "type": "object" }
NodeProcessProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeProcessProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "cpu_time": { "readonly": true, "title": "CPU time (user and system) consumed by process in milliseconds", "type": "integer" }, "mem_resident": { "readonly": true, "title": "Resident set size of process in bytes", "type": "integer" }, "mem_used": { "readonly": true, "title": "Virtual memory used by process in bytes", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "pid": { "readonly": true, "title": "Process id", "type": "integer" }, "ppid": { "readonly": true, "title": "Parent process id", "type": "integer" }, "process_name": { "readonly": true, "title": "Process name", "type": "string" }, "start_time": { "$ref": "EpochMsTimestamp, "readonly": true, "title": "Process start time expressed in milliseconds since epoch" }, "uptime": { "readonly": true, "title": "Milliseconds since process started", "type": "integer" } }, "title": "Node process properties", "type": "object" }
NodeProcessPropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeProcessPropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeProcessProperties }, "required": true, "title": "Node process property results", "type": "array" } }, "title": "Node process property query results", "type": "object" }
NodeProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "cli_history_size": { "minimum": 0, "title": "NSX CLI command history limit, set to 0 to configure no history size limit", "type": "integer" }, "cli_output_datetime": { "title": "NSX CLI display datetime stamp in command output", "type": "boolean" }, "cli_timeout": { "minimum": 0, "title": "NSX CLI inactivity timeout, set to 0 to configure no timeout", "type": "integer" }, "export_type": { "enum": [ "RESTRICTED", "UNRESTRICTED" ], "readonly": true, "title": "Export restrictions in effect, if any", "type": "string" }, "fully_qualified_domain_name": { "readonly": true, "title": "Fully qualified domain name", "type": "string" }, "hostname": { "$ref": "SystemHostname, "title": "Host name or fully qualified domain name of node", "type": "string" }, "kernel_version": { "readonly": true, "title": "Kernel version", "type": "string" }, "motd": { "title": "Message of the day to display when users login to node using the NSX CLI", "type": [ "string", "null" ] }, "node_type": { "enum": [ "NSX Manager", "NSX Global Manager", "NSX Edge", "NSX Autonomous Edge", "NSX Cloud Service Manager", "NSX Public Cloud Gateway" ], "readonly": true, "title": "Node type", "type": "string" }, "node_uuid": { "maxLength": 36, "readonly": true, "title": "Node Unique Identifier", "type": "string" }, "node_version": { "readonly": true, "title": "Node version", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "product_version": { "readonly": true, "title": "Product version", "type": "string" }, "system_datetime": { "$ref": "DatetimeUTC, "title": "System date time in UTC" }, "system_time": { "$ref": "EpochMsTimestamp, "readonly": true, "title": "Current time expressed in milliseconds since epoch" }, "timezone": { "title": "Timezone", "type": "string" } }, "title": "Node properties", "type": "object" }
NodeRouteProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeRouteProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "destination": { "title": "Destination covered by route", "type": "string" }, "from_address": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "From address", "type": "string" }, "gateway": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Address of next hop", "type": "string" }, "interface_id": { "title": "Network interface id of route", "type": "string" }, "metric": { "title": "Metric value of route", "type": "string" }, "netmask": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Netmask of destination covered by route", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "proto": { "default": "boot", "enum": [ "unspec", "redirect", "kernel", "boot", "static", "gated", "ra", "mrt", "zebra", "bird", "dnrouted", "xorp", "ntk", "dhcp" ], "title": "Routing protocol identifier of route", "type": "string" }, "route_id": { "readonly": true, "title": "Unique identifier for the route", "type": "string" }, "route_type": { "enum": [ "default", "static", "blackhole", "prohibit", "throw", "unreachable" ], "required": true, "title": "Route type", "type": "string" }, "scope": { "title": "Scope of destinations covered by route", "type": "string" }, "src": { "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", "title": "Source address to prefer when sending to destinations of route", "type": "string" } }, "title": "Node network route properties", "type": "object" }
NodeRoutePropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeRoutePropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeRouteProperties }, "required": true, "title": "Node route property results", "type": "array" } }, "title": "Node network route properties list results", "type": "object" }
NodeSearchDomainsProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeSearchDomainsProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "search_domains": { "items": { "type": "string" }, "required": true, "title": "Search domains", "type": "array" } }, "title": "Node network search domains properties", "type": "object" }
NodeServiceProperties (type)
{ "extends": { "$ref": "Resource }, "id": "NodeServiceProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "service_name": { "required": true, "title": "Service name", "type": "string" } }, "title": "Node service properties", "type": "object" }
NodeServicePropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeServicePropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeServiceProperties }, "required": true, "title": "Node service property results", "type": "array" } }, "title": "Node service property query results", "type": "object" }
NodeServiceStatusProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeServiceStatusProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "health": { "enum": [ "STABLE", "DEGRADED" ], "readonly": true, "required": false, "title": "Service health in addition to runtime_state", "type": "string" }, "monitor_pid": { "readonly": true, "title": "Service monitor process id", "type": "integer" }, "monitor_runtime_state": { "enum": [ "running", "stopped" ], "readonly": true, "title": "Service monitor runtime state", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "pids": { "items": { "type": "integer" }, "readonly": true, "title": "Service process ids", "type": "array" }, "reason": { "readonly": true, "required": false, "title": "Reason for service degradation", "type": "string" }, "runtime_state": { "enum": [ "running", "stopped" ], "readonly": true, "title": "Service runtime state", "type": "string" } }, "title": "Node service status properties", "type": "object" }
NodeSnmpServiceProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "NodeServiceProperties }, "id": "NodeSnmpServiceProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "service_name": { "required": true, "title": "Service name", "type": "string" }, "service_properties": { "$ref": "SnmpServiceProperties, "required": true, "title": "SNMP Service properties" } }, "title": "Node SNMP service properties", "type": "object" }
NodeSnmpV3EngineID (type)
{ "additionalProperties": false, "extends": { "$ref": "NodeServiceProperties }, "id": "NodeSnmpV3EngineID", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "service_name": { "required": true, "title": "Service name", "type": "string" }, "v3_engine_id": { "required": true, "title": "SNMP v3 engine id", "type": "string" } }, "title": "SNMP V3 Engine Id", "type": "object" }
NodeSshServiceProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "NodeServiceProperties }, "id": "NodeSshServiceProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "service_name": { "required": true, "title": "Service name", "type": "string" }, "service_properties": { "$ref": "SshServiceProperties, "title": "SSH Service properties" } }, "title": "Node SSH service properties", "type": "object" }
NodeStatus (type)
{ "enum": [ "DOWN", "UP", "UNREACHABLE", "ADMIN_DOWN", "UP_ROUTING_DOWN", "INVALID", "UNKNOWN" ], "id": "NodeStatus", "title": "Node Status", "type": "string" }
NodeStatusProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeStatusProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "bootup_error": { "readonly": true, "title": "Autonomous edge bootup error", "type": "string" }, "cpu_cores": { "readonly": true, "title": "Number of CPU cores on the system", "type": "integer" }, "file_systems": { "items": { "$ref": "NodeFileSystemProperties }, "readonly": true, "title": "File systems configured on the system", "type": "array" }, "load_average": { "items": { "type": "number" }, "readonly": true, "title": "One, five, and fifteen minute load averages for the system", "type": "array" }, "mem_available": { "readonly": true, "title": "Amount of available RAM in the system, in kilobytes. The amount of reclaimable buffer/cache memory in use is taken into consideration here to provide a better idea of how much memory is really available in the system", "type": "integer" }, "mem_buffer": { "readonly": true, "title": "Amount of RAM on the system used for temporary disk block storage, in kilobytes", "type": "integer" }, "mem_cache": { "readonly": true, "title": "Amount of RAM on the system that can be flushed out to disk, in kilobytes", "type": "integer" }, "mem_free": { "readonly": true, "title": "Amount of unused RAM in the system, in kilobytes", "type": "integer" }, "mem_slab": { "readonly": true, "title": "Amount of RAM allocated to the kernel slab allocator, in kilobytes", "type": "integer" }, "mem_slab_reclaimable": { "readonly": true, "title": "Amount of RAM allocated to the kernel slab allocator that is not currently in use, in kilobytes", "type": "integer" }, "mem_total": { "readonly": true, "title": "Amount of RAM allocated to the system, in kilobytes", "type": "integer" }, "mem_used": { "readonly": true, "title": "Amount of RAM in use on the system, in kilobytes. (This is mem_total - mem_available)", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "swap_total": { "readonly": true, "title": "Amount of disk available for swap, in kilobytes", "type": "integer" }, "swap_used": { "readonly": true, "title": "Amount of swap disk in use, in kilobytes", "type": "integer" }, "system_time": { "$ref": "EpochMsTimestamp, "readonly": true, "title": "Current time expressed in milliseconds since epoch" }, "uptime": { "readonly": true, "title": "Milliseconds since system start", "type": "integer" } }, "title": "Node status properties", "type": "object" }
NodeSyslogExporterProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeSyslogExporterProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "exporter_name": { "required": true, "title": "Syslog exporter name", "type": "string" }, "facilities": { "items": { "$ref": "SyslogFacility }, "title": "Facilities to export", "type": "array" }, "level": { "enum": [ "EMERG", "ALERT", "CRIT", "ERR", "WARNING", "NOTICE", "INFO", "DEBUG" ], "required": true, "title": "Logging level to export", "type": "string" }, "msgids": { "items": { "pattern": "^.+$", "type": "string" }, "title": "MSGIDs to export", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "port": { "maximum": 65535, "minimum": 1, "title": "Port to export to, defaults to 514 for TCP, TLS, UDP protocols or 9000 for LI, LI-TLS protocols", "type": "integer" }, "protocol": { "enum": [ "TCP", "TLS", "UDP", "LI", "LI-TLS" ], "required": true, "title": "Export protocol", "type": "string" }, "server": { "$ref": "HostnameOrIPv4Address, "required": true, "title": "IP address or hostname of server to export to", "type": "string" }, "structured_data": { "items": { "pattern": "^(alarmId|alarmState|audit|comp|entId|eReqId|errorCode|eventFeatureName|eventId|eventSev|eventState|eventType|euser|level|nodeId|security|subcomp|s2comp|splitId|splitIndex|tenantId|tid|tname|update|username)=.+$", "type": "string" }, "title": "Structured data to export", "type": "array" }, "tls_ca_pem": { "title": "CA certificate PEM of TLS server to export to", "type": "string" }, "tls_cert_pem": { "title": "Certificate PEM of the rsyslog client", "type": "string" }, "tls_client_ca_pem": { "title": "CA certificate PEM of the rsyslog client", "type": "string" }, "tls_key_pem": { "sensitive": true, "title": "Private key PEM of the rsyslog client", "type": "string" } }, "title": "Node syslog exporter properties", "type": "object" }
NodeSyslogExporterPropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeSyslogExporterPropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeSyslogExporterProperties }, "required": true, "title": "Node syslog exporter results", "type": "array" } }, "title": "Node syslog exporter list results", "type": "object" }
NodeTime (type)
{ "additionalProperties": false, "description": "Node system time in UTC", "id": "NodeTime", "properties": { "system_datetime": { "$ref": "DatetimeUTC, "required": true, "title": "Datetime string in UTC" } }, "title": "Node system time in UTC", "type": "object" }
NodeUserProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "Resource }, "id": "NodeUserProperties", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "full_name": { "title": "Full name for the user", "type": "string" }, "last_password_change": { "maximum": 2147483647, "minimum": 0, "readonly": true, "title": "Number of days since password was last changed", "type": "integer" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "old_password": { "sensitive": true, "title": "Old password for the user (required on PUT if password specified)", "type": "string" }, "password": { "sensitive": true, "title": "Password for the user (optionally specified on PUT, unspecified on GET)", "type": "string" }, "password_change_frequency": { "description": "Number of days password is valid before it must be changed. This can be set to 0 to indicate no password change is required or a positive integer up to 9999. By default local user passwords must be changed every 90 days.", "maximum": 9999, "minimum": 0, "title": "Number of days password is valid before it must be changed", "type": "integer" }, "password_reset_required": { "title": "Boolean value that states if a password reset is required", "type": "boolean" }, "status": { "description": "Status of the user. This value can be ACTIVE indicating authentication attempts will be successful if the correct credentials are specified. The value can also be PASSWORD_EXPIRED indicating authentication attempts will fail because the user's password has expired and must be changed. Or, this value can be NOT_ACTIVATED indicating the user's password has not yet been set and must be set before the user can authenticate.", "enum": [ "ACTIVE", "PASSWORD_EXPIRED", "NOT_ACTIVATED" ], "readonly": true, "title": "User status", "type": "string" }, "userid": { "maximum": 2147483647, "minimum": 0, "readonly": true, "title": "Numeric id for the user", "type": "integer" }, "username": { "maxLength": 32, "minLength": 1, "pattern": "^[a-zA-Z][a-zA-Z0-9@-_.\\-]*$", "title": "User login name (must be \"root\" if userid is 0)", "type": "string" } }, "title": "Node user properties", "type": "object" }
NodeUserPropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "NodeUserPropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "NodeUserProperties }, "required": true, "title": "List of node users", "type": "array" } }, "title": "Node users list results", "type": "object" }
NodeVersion (type)
{ "additionalProperties": false, "id": "NodeVersion", "properties": { "node_version": { "readonly": true, "title": "Node version", "type": "string" }, "product_version": { "readonly": true, "title": "Product version", "type": "string" } }, "type": "object" }
NodeVtepState (type)
{ "enum": [ "UP", "DOWN", "UNKNOWN" ], "id": "NodeVtepState", "title": "VTEP interfaces State", "type": "string" }
NtpServiceProperties (type)
{ "additionalProperties": false, "id": "NtpServiceProperties", "properties": { "servers": { "items": { "$ref": "HostnameOrIPv4Address }, "required": true, "title": "NTP servers", "type": "array" }, "start_on_boot": { "default": true, "required": false, "title": "Start NTP service when system boots", "type": "boolean" } }, "title": "NTP Service properties", "type": "object" }
OwnerResourceLink (type)
{ "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "extends": { "$ref": "ResourceLink }, "id": "OwnerResourceLink", "properties": { "action": { "title": "Optional action", "type": "string" }, "href": { "required": true, "type": "string" }, "rel": { "enum": [ "owner" ], "readonly": true, "type": "string" } }, "title": "Link to this resource", "type": "object" }
PasswordAuthenticationScheme (type)
{ "additionalProperties": false, "extends": { "$ref": "AuthenticationScheme }, "id": "PasswordAuthenticationScheme", "properties": { "password": { "required": true, "sensitive": true, "title": "Password to authenticate with", "type": "string" }, "scheme_name": { "enum": [ "password" ], "required": true, "title": "Authentication scheme name", "type": "string" }, "username": { "pattern": "^.+$", "required": true, "title": "User name to authenticate with", "type": "string" } }, "type": "object" }
PolicyBasedIPSecVPNSession (type)
{ "additionalProperties": false, "description": "A Policy Based VPN requires to define protect rules that match local and peer subnets. IPSec security associations is negotiated for each pair of local and peer subnet.", "extends": { "$ref": "IPSecVPNSession }, "id": "PolicyBasedIPSecVPNSession", "polymorphic-type-descriptor": { "type-identifier": "PolicyBasedIPSecVPNSession" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "authentication_mode": { "default": "PSK", "description": "Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.", "enum": [ "PSK", "CERTIFICATE" ], "title": "Authentication Mode", "type": "string" }, "connection_initiation_mode": { "default": "INITIATOR", "description": "Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request.", "enum": [ "INITIATOR", "RESPOND_ONLY", "ON_DEMAND" ], "title": "Connection initiation mode", "type": "string" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "dpd_profile_id": { "description": "Dead peer detection (DPD) profile id. Default will be set according to system default policy.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "Dead peer detection (DPD) profile id", "type": "string" }, "enabled": { "default": true, "description": "Enable/Disable IPSec VPN session.", "title": "Enable/Disable IPSec VPN session", "type": "boolean" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "ike_profile_id": { "description": "IKE profile id to be used. Default will be set according to system default policy.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "Internet key exchange (IKE) profile id", "type": "string" }, "ipsec_tunnel_profile_id": { "description": "Tunnel profile id to be used. By default it will point to system default profile.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "IPSec tunnel profile id", "type": "string" }, "local_endpoint": { "$ref": "IPSecVPNLocalEndpoint, "description": "Local endpoint.", "required": true, "title": "Local endpoint" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "peer_address": { "description": "IPV4 address of peer endpoint on remote site.", "required": true, "title": "IPV4 address of peer endpoint on remote site.", "type": "string" }, "peer_id": { "description": "Peer identifier.", "required": true, "title": "Peer id", "type": "string" }, "policy_rules": { "items": { "$ref": "IPSecVPNPolicyRule }, "required": true, "title": "Policy rules", "type": "array" }, "psk": { "description": "IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.", "maximum": 128, "minimum": 1, "required": false, "sensitive": true, "title": "Pre-shared key", "type": "string" }, "resource_type": { "$ref": "IPSecVPNSessionResourceType, "required": true }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "tcp_mss_clamping": { "$ref": "TcpMssClamping, "required": false } }, "title": "Policy based VPN session", "type": "object" }
Protocol (type)
{ "abstract": true, "additionalProperties": {}, "id": "Protocol", "polymorphic-type-descriptor": { "mode": "enabled", "property-name": "name" }, "properties": { "name": { "enum": [ "http", "https", "scp", "sftp" ], "required": true, "title": "Protocol name", "type": "string" } }, "type": "object" }
ReplicaAgentClientStatusProperties (type)
{ "additionalProperties": false, "id": "ReplicaAgentClientStatusProperties", "properties": { "last_fullsync_time": { "title": "Timestamp when replica-agent performed last fullsync of messages from primary node's Nestdb", "type": "string" }, "last_replication_time": { "title": "Timestamp when replica-agent performed last replication from primary node.", "type": "string" }, "last_rewrite_time": { "title": "Timestamp when replica-agent performed last rewriting of message in secondary node's Nestdb", "type": "string" }, "local_nestdb_connection_time": { "title": "Timestamp when replica-agent established connection to Nestdb local to the secondary node.", "type": "string" }, "node_api_server_role": { "enum": [ "PRIMARY", "SECONDARY" ], "title": "Node High Availability Mode", "type": "string" }, "node_id": { "title": "Node UUID", "type": "string" }, "peer_nestdb_connection_time": { "title": "Timestamp when replica-agent established connection to the NestDB of primary node", "type": "string" } }, "type": "object" }
Resource (type)
{ "id": "Resource", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "type": "object" }
ResourceLink (type)
{ "additionalProperties": false, "id": "ResourceLink", "properties": { "action": { "title": "Optional action", "type": "string" }, "href": { "required": true, "type": "string" }, "rel": { "description": "Custom relation type (follows RFC 5988 where appropriate definitions exist)", "required": true, "title": "Link relation type", "type": "string" } }, "type": "object" }
ResourceReference (type)
{ "description": "A weak reference to an NSX resource.", "id": "ResourceReference", "properties": { "is_valid": { "description": "Will be set to false if the referenced NSX resource has been deleted.", "readonly": true, "required": false, "title": "Target validity", "type": "boolean" }, "target_display_name": { "description": "Display name of the NSX resource.", "maxLength": 255, "readonly": true, "required": false, "title": "Target display name", "type": "string" }, "target_id": { "description": "Identifier of the NSX resource.", "maxLength": 64, "readonly": false, "required": false, "title": "Target ID", "type": "string" }, "target_type": { "description": "Type of the NSX resource.", "maxLength": 255, "readonly": false, "required": false, "title": "Target type", "type": "string" } }, "type": "object" }
RevisionedResource (type)
{ "abstract": true, "extends": { "$ref": "Resource }, "id": "RevisionedResource", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" } }, "title": "A base class for types that track revisions", "type": "object" }
RouteBasedIPSecVPNSession (type)
{ "additionalProperties": false, "description": "A Route Based VPN is more flexible, more powerful and recommended over policy based VPN. IP Tunnel port is created and all traffic routed via tunnel port is protected. Routes can be configured statically or can be learned through BGP. A route based VPN is must for establishing redundant VPN session to remote site.", "extends": { "$ref": "IPSecVPNSession }, "id": "RouteBasedIPSecVPNSession", "polymorphic-type-descriptor": { "type-identifier": "RouteBasedIPSecVPNSession" }, "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "authentication_mode": { "default": "PSK", "description": "Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.", "enum": [ "PSK", "CERTIFICATE" ], "title": "Authentication Mode", "type": "string" }, "connection_initiation_mode": { "default": "INITIATOR", "description": "Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request.", "enum": [ "INITIATOR", "RESPOND_ONLY", "ON_DEMAND" ], "title": "Connection initiation mode", "type": "string" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "dpd_profile_id": { "description": "Dead peer detection (DPD) profile id. Default will be set according to system default policy.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "Dead peer detection (DPD) profile id", "type": "string" }, "enabled": { "default": true, "description": "Enable/Disable IPSec VPN session.", "title": "Enable/Disable IPSec VPN session", "type": "boolean" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "ike_profile_id": { "description": "IKE profile id to be used. Default will be set according to system default policy.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "Internet key exchange (IKE) profile id", "type": "string" }, "ipsec_tunnel_profile_id": { "description": "Tunnel profile id to be used. By default it will point to system default profile.", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "title": "IPSec tunnel profile id", "type": "string" }, "local_endpoint": { "$ref": "IPSecVPNLocalEndpoint, "description": "Local endpoint.", "required": true, "title": "Local endpoint" }, "multi_path_group_id": { "description": "Specify a multiple path group for the IPSec session to join for utilizing multipath functionality.", "title": "IPSec VPN multiple path group identifier", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "peer_address": { "description": "IPV4 address of peer endpoint on remote site.", "required": true, "title": "IPV4 address of peer endpoint on remote site.", "type": "string" }, "peer_id": { "description": "Peer identifier.", "required": true, "title": "Peer id", "type": "string" }, "psk": { "description": "IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.", "maximum": 128, "minimum": 1, "required": false, "sensitive": true, "title": "Pre-shared key", "type": "string" }, "resource_type": { "$ref": "IPSecVPNSessionResourceType, "required": true }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" }, "tcp_mss_clamping": { "$ref": "TcpMssClamping, "required": false }, "tunnel_ports": { "description": "IP Tunnel ports.", "items": { "$ref": "TunnelPortConfig }, "maxItems": 1, "minItems": 1, "required": true, "title": "IP Tunnel ports", "type": "array" } }, "title": "Route based VPN session", "type": "object" }
RouteType (type)
{ "enum": [ "route", "neighbor", "connected", "blackhole", "unknown" ], "id": "RouteType", "title": "Route Type", "type": "string" }
ScpProtocol (type)
{ "additionalProperties": false, "extends": { "$ref": "Protocol }, "id": "ScpProtocol", "polymorphic-type-descriptor": { "type-identifier": "scp" }, "properties": { "authentication_scheme": { "$ref": "PasswordAuthenticationScheme, "required": true, "title": "Scheme to authenticate if required" }, "name": { "enum": [ "http", "https", "scp", "sftp" ], "required": true, "title": "Protocol name", "type": "string" }, "ssh_fingerprint": { "required": true, "title": "SSH fingerprint of server", "type": "string" } }, "type": "object" }
SelfResourceLink (type)
{ "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "extends": { "$ref": "ResourceLink }, "id": "SelfResourceLink", "properties": { "action": { "title": "Optional action", "type": "string" }, "href": { "required": true, "type": "string" }, "rel": { "enum": [ "self" ], "readonly": true, "type": "string" } }, "title": "Link to this resource", "type": "object" }
ServiceType (type)
{ "enum": [ "MGMT_CLUSTER", "MGMT_PLANE", "API", "NOTIFICATION_COLLECTOR", "SYSLOG_SERVER", "RSYSLOG_CLIENT" ], "id": "ServiceType", "title": "Supported service types, that are using certificates.", "type": "string" }
SftpProtocol (type)
{ "additionalProperties": false, "extends": { "$ref": "Protocol }, "id": "SftpProtocol", "polymorphic-type-descriptor": { "type-identifier": "sftp" }, "properties": { "authentication_scheme": { "$ref": "PasswordAuthenticationScheme, "required": true, "title": "Scheme to authenticate if required" }, "name": { "enum": [ "http", "https", "scp", "sftp" ], "required": true, "title": "Protocol name", "type": "string" }, "ssh_fingerprint": { "required": true, "title": "SSH fingerprint of server", "type": "string" } }, "type": "object" }
SnmpCommunity (type)
{ "additionalProperties": false, "description": "SNMP v1, v2c community.", "id": "SnmpCommunity", "properties": { "access": { "default": "read_only", "description": "Access permissions for this community.", "enum": [ "read_only" ], "title": "Type of access", "type": "string" }, "community_string": { "description": "Community alias string at most 64 characters long.", "required": false, "sensitive": true, "title": "Community string at most 64 characters long", "type": "string" } }, "title": "SNMP v1, v2c community", "type": "object" }
SnmpServiceProperties (type)
{ "additionalProperties": false, "id": "SnmpServiceProperties", "properties": { "communities": { "items": { "$ref": "SnmpCommunity }, "maxItems": 10, "required": false, "title": "SNMP v1, v2c community", "type": "array" }, "start_on_boot": { "required": false, "title": "Start when system boots", "type": "boolean" }, "v2_configured": { "description": "Indicates whether the local SNMP agent is configured with community string(s).", "readonly": true, "title": "SNMP v2 is configured or not", "type": "boolean" }, "v2_targets": { "items": { "$ref": "SnmpV2Target }, "maxItems": 3, "required": false, "title": "SNMP v2c targets information", "type": "array" }, "v3_auth_protocol": { "default": "SHA1", "enum": [ "SHA1" ], "required": false, "title": "SNMP v3 auth protocol", "type": "string" }, "v3_configured": { "description": "Indicates whether the local SNMP agent is configured with v3 user(s).", "readonly": true, "title": "SNMP v3 is configured or not", "type": "boolean" }, "v3_priv_protocol": { "default": "AES128", "enum": [ "AES128" ], "required": false, "title": "SNMP v3 private protocol", "type": "string" }, "v3_targets": { "items": { "$ref": "SnmpV3Target }, "maxItems": 3, "required": false, "title": "SNMP v3 targets information", "type": "array" }, "v3_users": { "items": { "$ref": "SnmpV3User }, "maxItems": 5, "required": false, "title": "SNMP v3 users information", "type": "array" } }, "title": "SNMP Service properties", "type": "object" }
SnmpV2Target (type)
{ "description": "SNMP v2c manager's reachability information.", "id": "SnmpV2Target", "properties": { "community_string": { "description": "Community alias string at most 64 characters long.", "required": false, "sensitive": true, "title": "Community string", "type": "string" }, "port": { "default": 162, "description": "SNMP v2c manager's port.", "maximum": 65535, "minimum": 1, "required": false, "title": "SNMP v2c manager port", "type": "integer" }, "server": { "$ref": "HostnameOrIPv4Address, "description": "SNMP v2c manager's IP or FQDN.", "required": true, "title": "SNMP v2c manager", "type": "string" } }, "title": "SNMP v2c targets information", "type": "object" }
SnmpV3Target (type)
{ "description": "SNMP v3 manager's reachability information.", "id": "SnmpV3Target", "properties": { "port": { "default": 162, "description": "SNMP v2c manager's port.", "maximum": 65535, "minimum": 1, "required": false, "title": "SNMP v2c manager port", "type": "integer" }, "security_level": { "default": "AUTH_PRIV", "description": "SNMP v3 security level.", "enum": [ "AUTH_PRIV" ], "title": "Security level", "type": "string" }, "server": { "$ref": "HostnameOrIPv4Address, "description": "Specify the fully qualified domain name, or ip address, of the server.", "required": true, "title": "FQDN or IP address of the SNMP Manager", "type": "string" }, "user_id": { "description": "Specify the user name used to authenticate with the SNMP Manager.", "required": true, "title": "SNMP v3 user id", "type": "string" } }, "title": "SNMP v3 targets information", "type": "object" }
SnmpV3User (type)
{ "id": "SnmpV3User", "properties": { "access": { "default": "READ_ONLY", "description": "Access permissions for this User.", "enum": [ "READ_ONLY" ], "readonly": true, "title": "Type of access", "type": "string" }, "auth_password": { "required": false, "sensitive": true, "title": "SNMP v3 user auth password", "type": "string" }, "priv_password": { "required": false, "sensitive": true, "title": "SNMP v3 user private password", "type": "string" }, "security_level": { "default": "AUTH_PRIV", "description": "SNMP v3 security level.", "enum": [ "AUTH_PRIV" ], "readonly": true, "title": "Security level", "type": "string" }, "user_id": { "required": true, "title": "SNMP v3 user id", "type": "string" } }, "type": "object" }
SshKeyBaseProperties (type)
{ "additionalProperties": {}, "id": "SshKeyBaseProperties", "properties": { "label": { "required": true, "title": "SSH key label (used to identify the key)", "type": "string" }, "password": { "required": false, "sensitive": true, "title": "Current password for user (required for users root and admin)", "type": "string" } }, "type": "object" }
SshKeyProperties (type)
{ "additionalProperties": false, "extends": { "$ref": "SshKeyBaseProperties }, "id": "SshKeyProperties", "properties": { "label": { "required": true, "title": "SSH key label (used to identify the key)", "type": "string" }, "password": { "required": false, "sensitive": true, "title": "Current password for user (required for users root and admin)", "type": "string" }, "type": { "pattern": "^(ecdsa-sha2-nistp256|ecdsa-sha2-nistp384|ecdsa-sha2-nistp521|ssh-dss|ssh-ed25519|ssh-rsa)$", "required": true, "title": "SSH key type", "type": "string" }, "value": { "required": true, "title": "SSH key value", "type": "string" } }, "type": "object" }
SshKeyPropertiesListResult (type)
{ "extends": { "$ref": "ListResult }, "id": "SshKeyPropertiesListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "SshKeyProperties }, "required": true, "title": "SSH key properties query results", "type": "array" } }, "title": "SSH key properties query results", "type": "object" }
SshServiceProperties (type)
{ "additionalProperties": false, "id": "SshServiceProperties", "properties": { "root_login": { "title": "Permit SSH Root login", "type": "boolean" }, "start_on_boot": { "required": true, "title": "Start service when system boots", "type": "boolean" } }, "title": "SSH Service properties", "type": "object" }
StaticRoute (type)
{ "additionalProperties": false, "extends": { "$ref": "ManagedResource }, "id": "StaticRoute", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "network": { "$ref": "IPv4CIDRBlock, "required": true, "title": "CIDR" }, "next_hops": { "items": { "$ref": "StaticRouteNextHop }, "maxItems": 8, "minItems": 1, "required": true, "title": "Next Hops", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "type": "object" }
StaticRouteListResult (type)
{ "additionalProperties": false, "extends": { "$ref": "ListResult }, "id": "StaticRouteListResult", "properties": { "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "page_cursor": { "readonly": true, "title": "Opaque cursor for next page of results, (not set on last page)", "type": "string" }, "result_count": { "readonly": true, "title": "Count of results found (across all pages), set only on first page", "type": "integer" }, "results": { "items": { "$ref": "StaticRoute }, "required": true, "title": "Paginated list of static routes", "type": "array" } }, "type": "object" }
StaticRouteNextHop (type)
{ "additionalProperties": false, "id": "StaticRouteNextHop", "properties": { "administrative_distance": { "default": 1, "maximum": 255, "minimum": 1, "required": false, "title": "Administrative Distance for the next hop IP", "type": "integer" }, "blackhole_action": { "$ref": "BlackholeAction, "readonly": true, "required": false, "title": "Action to be taken on matching packets for NULL routes." }, "ip_address": { "$ref": "IPv4Address, "required": false, "title": "Next Hop IP" }, "logical_router_port_id": { "$ref": "ResourceReference, "required": false, "title": "Reference of logical router port to be used for next hop" } }, "type": "object" }
SupportBundleQueryParameters (type)
{ "additionalProperties": false, "id": "SupportBundleQueryParameters", "properties": { "all": { "default": false, "description": "Include all files including files that may have sensitive information like core files.", "title": "Include all files", "type": "boolean" } }, "type": "object" }
SyslogFacility (type)
{ "enum": [ "KERN", "USER", "MAIL", "DAEMON", "AUTH", "SYSLOG", "LPR", "NEWS", "UUCP", "AUTHPRIV", "FTP", "LOGALERT", "CRON", "LOCAL0", "LOCAL1", "LOCAL2", "LOCAL3", "LOCAL4", "LOCAL5", "LOCAL6", "LOCAL7" ], "id": "SyslogFacility", "title": "Syslog facility", "type": "string" }
SystemHostname (type)
{ "id": "SystemHostname", "maxLength": 255, "pattern": "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?$", "title": "System host name", "type": "string" }
Tag (type)
{ "id": "Tag", "properties": { "scope": { "default": "", "description": "Tag searches may optionally be restricted by scope", "display": { "order": 1 }, "maxLength": 128, "readonly": false, "title": "Tag scope", "type": "string" }, "tag": { "default": "", "description": "Identifier meaningful to user", "display": { "order": 2 }, "maxLength": 256, "readonly": false, "title": "Tag value", "type": "string" } }, "title": "Arbitrary key-value pairs that may be attached to an entity", "type": "object" }
TcpMssClamping (type)
{ "additionalProperties": false, "description": "Tcp Mss Clamping Direction and value", "id": "TcpMssClamping", "properties": { "direction": { "default": "NONE", "description": "Specifies the traffic direction for which to apply MSS Clamping.", "enum": [ "NONE", "INBOUND_CONNECTION", "OUTBOUND_CONNECTION", "BOTH" ], "required": false, "title": "MSS Clamping direction", "type": "string" }, "max_segment_size": { "description": "It defines the maximum amount of data that a host is willing to accept in a single TCP segment. This field is set in TCP header during connection establishment. To avoid packet fragmentation, you can set this field depending on uplink MTU and VPN overhead. This is optional field and in case it is left unconfigured, best possible MSS value will be calculated based on effective mtu of uplink interface. Supported MSS range is 108 to 8902.", "maximum": 8902, "minimum": 108, "required": false, "title": "Maximum Segment Size value", "type": "integer" } }, "title": "Tcp Mss Clamping Object", "type": "object" }
TransportNodeInEdgeCluster (type)
{ "additionalProperties": false, "description": "Transport node parameters.", "id": "TransportNodeInEdgeCluster", "properties": { "interface": { "description": "Interface properties.", "items": { "$ref": "Interface }, "required": true, "title": "Interface properties", "type": "array" }, "member_index": { "description": "Transport node index in the edge cluster.", "required": true, "title": "Transport node index in the edge cluster", "type": "integer" }, "node_id": { "description": "Transport node ID", "required": true, "title": "Transport node ID", "type": "string" }, "thumbprint": { "description": "Transport node thumbprint.", "required": true, "title": "Transport node thumbprint", "type": "string" } }, "title": "Transport node parameters", "type": "object" }
TransportTunnel (type)
{ "additionalProperties": false, "description": "For client, L2VPN Session Transport Tunnel uses a peer code which has all the information to create the transport tunnel.", "id": "TransportTunnel", "properties": { "display_name": { "description": "Name for transport tunnel.", "required": false, "title": "Name for transport tunnel", "type": "string" }, "ipsec_session_id": { "description": "Transport tunnel id. When service is in client mode, this is read only.", "required": false, "title": "Transport tunnel id", "type": "string" }, "local_address": { "$ref": "IPv4Address, "description": "IPv4 Address of local endpoint. This is required when service is in client mode.", "required": false, "title": "IPv4 Address of local endpoint" }, "peer_address": { "$ref": "IPv4Address, "description": "IPv4 Address of Peer endpoint on remote site. This is required when service is in client mode.", "required": false, "title": "IPv4 Address of Peer endpoint" }, "peer_code": { "description": "Peer code represents a base64 encoded string which has all the configuration for tunnel. E.g. local/peer ids and protocol, encryption algorithm, etc. Peer code also contains PSK; be careful when sharing or storing it. This is required when service is in client mode.", "required": false, "sensitive": true, "title": "Peer code for the transport tunnel", "type": "string" } }, "title": "L2VPN Session Transport Tunnel", "type": "object" }
TrustObjectData (type)
{ "additionalProperties": false, "extends": { "$ref": "ManagedResource }, "id": "TrustObjectData", "properties": { "_create_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of resource creation", "readonly": true }, "_create_user": { "description": "ID of the user who created this resource", "readonly": true, "type": "string" }, "_last_modified_time": { "$ref": "EpochMsTimestamp, "can_sort": true, "description": "Timestamp of last modification", "readonly": true }, "_last_modified_user": { "description": "ID of the user who last modified this resource", "readonly": true, "type": "string" }, "_links": { "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", "items": { "$ref": "ResourceLink }, "readonly": true, "title": "References related to this resource", "type": "array" }, "_protection": { "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.", "readonly": true, "title": "Indicates protection status of this resource", "type": "string" }, "_revision": { "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", "readonly": true, "title": "Generation of this resource config", "type": "integer" }, "_schema": { "display": { "hidden": true }, "readonly": true, "title": "Location of schema for this resource", "type": "string" }, "_self": { "$ref": "SelfResourceLink, "readonly": true }, "_system_owned": { "description": "Indicates system owned resource", "readonly": true, "type": "boolean" }, "actions": { "items": { "$ref": "ActionDescriptor }, "readonly": true, "title": "Actions applicable to the resource at this time", "type": "array" }, "description": { "can_sort": true, "maxLength": 1024, "title": "Description of this resource", "type": "string" }, "display_name": { "can_sort": true, "description": "Defaults to ID if not set", "maxLength": 255, "title": "Identifier to use when displaying entity in logs or GUI", "type": "string" }, "id": { "can_sort": true, "readonly": true, "title": "Unique identifier of this resource", "type": "string" }, "key_algo": { "description": "Key algorithm contained in this certificate", "type": "string" }, "notify_mpa": { "default": false, "description": "send notification to MPA about this config change (applicable on edge node)", "display": { "hidden": true }, "readonly": false, "type": "boolean" }, "passphrase": { "description": "Password for private key encryption", "readonly": false, "required": false, "sensitive": true, "type": "string" }, "pem_encoded": { "description": "pem encoded certificate data", "readonly": false, "required": true, "type": "string" }, "private_key": { "description": "private key data", "readonly": false, "required": false, "sensitive": true, "type": "string" }, "resource_type": { "description": "The type of this resource.", "readonly": false, "type": "string" }, "tags": { "items": { "$ref": "Tag }, "maxItems": 30, "title": "Opaque identifiers meaningful to the API user", "type": "array" } }, "type": "object" }
TunnelDigestAlgorithm (type)
{ "additionalProperties": false, "description": "The TunnelDigestAlgorithms are used to verify message integrity during IPSec VPN tunnel establishment. SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.", "enum": [ "SHA1", "SHA2_256", "SHA2_384", "SHA2_512" ], "id": "TunnelDigestAlgorithm", "title": "Digest Algorithms used in tunnel establishment", "type": "string" }
TunnelEncryptionAlgorithm (type)
{ "additionalProperties": false, "description": "TunnelEncryption algorithms are used to ensure confidentiality of the messages exchanged during Tunnel negotiations. AES stands for Advanced Encryption Standards. AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_GCM stands for Advanced Encryption Standard(AES) in Galois/Counter Mode (GCM) and is used to provide both confidentiality and data origin authentication. NO_ENCRYPTION_AUTH_AES_GMAC_* enables authentication on input data without encyption. Digest algorithm should be empty for this option.", "enum": [ "AES_128", "AES_256", "AES_GCM_128", "AES_GCM_192", "AES_GCM_256", "NO_ENCRYPTION_AUTH_AES_GMAC_128", "NO_ENCRYPTION_AUTH_AES_GMAC_192", "NO_ENCRYPTION_AUTH_AES_GMAC_256", "NO_ENCRYPTION" ], "id": "TunnelEncryptionAlgorithm", "title": "Encryption algorithm used in tunnel", "type": "string" }
TunnelPortConfig (type)
{ "additionalProperties": false, "description": "IP Tunnel port configuration.", "id": "TunnelPortConfig", "properties": { "ip_subnets": { "description": "IP Tunnel port (commonly referred as VTI) subnet.", "items": { "$ref": "IPSubnet }, "maxItems": 1, "minItems": 1, "required": true, "title": "IP Tunnel port subnet", "type": "array" }, "tunnel_port_id": { "description": "Logical route port identifier.", "readonly": true, "title": "Logical route port identifier", "type": "string" } }, "title": "IP Tunnel port configuration", "type": "object" }
UpgradeProgressStatus (type)
{ "id": "UpgradeProgressStatus", "properties": { "last_upgrade_step_status": { "title": "Status of last upgrade step", "type": "object" }, "upgrade_bundle_present": { "title": "True if upgrade bundle is present", "type": "boolean" }, "upgrade_metadata": { "title": "Meta info of upgrade", "type": "object" } }, "title": "Upgrade progress status", "type": "object" }
UpgradeStatusSummary (type)
{ "id": "UpgradeStatusSummary", "properties": { "upgrade_bundle_present": { "title": "True if upgrade bundle is present", "type": "boolean" }, "upgrade_metadata": { "title": "Meta info of upgrade", "type": "object" }, "upgrade_steps": { "items": { "type": "object" }, "title": "List of all upgrade steps performed", "type": "array" } }, "title": "Upgrade status summry", "type": "object" }
UpgradeTaskActionParameters (type)
{ "id": "UpgradeTaskActionParameters", "properties": { "action": { "description": "The upgrade task to perform.", "pattern": "^[^/]+$", "title": "Upgrade task", "type": "string" } }, "type": "object" }
UpgradeTaskProperties (type)
{ "additionalProperties": false, "id": "UpgradeTaskProperties", "properties": { "bundle_name": { "required": true, "title": "Name of Bundle", "type": "string" }, "parameters": { "readonly": true, "required": false, "title": "Bundle arguments", "type": "object" }, "step": { "required": false, "title": "Step name", "type": "string" } }, "title": "Task properties", "type": "object" }
UpgradeTaskStatusQueryParameters (type)
{ "id": "UpgradeTaskStatusQueryParameters", "properties": { "bundle_name": { "description": "Provide a bundle name", "pattern": "^[a-zA-Z0-9-.]+$", "title": "Bundle Name", "type": "string" }, "upgrade_task_id": { "description": "Provide a task id", "pattern": "^[a-z0-9-]+$", "title": "Upgrade Task ID", "type": "string" } }, "type": "object" }
UrpfMode (type)
{ "enum": [ "NONE", "STRICT" ], "id": "UrpfMode", "title": "Unicast Reverse Path Forwarding mode", "type": "string" }
X509Certificate (type)
{ "additionalProperties": false, "id": "X509Certificate", "properties": { "dsa_public_key_g": { "description": "One of the DSA cryptogaphic algorithm's strength parameters, base", "readonly": true, "required": false, "type": "string" }, "dsa_public_key_p": { "description": "One of the DSA cryptogaphic algorithm's strength parameters, prime", "readonly": true, "required": false, "type": "string" }, "dsa_public_key_q": { "description": "One of the DSA cryptogaphic algorithm's strength parameters, sub-prime", "readonly": true, "required": false, "type": "string" }, "dsa_public_key_y": { "description": "One of the DSA cryptogaphic algorithm's strength parameters", "readonly": true, "required": false, "type": "string" }, "ecdsa_curve_name": { "description": "The Curve name for the ECDSA certificate.", "readonly": true, "required": false, "title": "ECDSA Curve Name", "type": "string" }, "ecdsa_ec_field": { "description": "Represents an elliptic curve (EC) finite field in ECDSA.", "enum": [ "F2M", "FP" ], "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Finite Field", "type": "string" }, "ecdsa_ec_field_f2mks": { "description": "The order of the middle term(s) of the reduction polynomial in elliptic curve (EC) | characteristic 2 finite field.| Contents of this array are copied to protect against subsequent modification in ECDSA.", "items": { "type": "integer" }, "readonly": true, "required": false, "title": "ECDSA Elliptic Curve F2MKS", "type": "array" }, "ecdsa_ec_field_f2mm": { "description": "The first coefficient of this elliptic curve in elliptic curve (EC) | characteristic 2 finite field for ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve F2MM", "type": "integer" }, "ecdsa_ec_field_f2mrp": { "description": "The value whose i-th bit corresponds to the i-th coefficient of the reduction polynomial | in elliptic curve (EC) characteristic 2 finite field for ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve F2MRP", "type": "string" }, "ecdsa_ec_field_f2pp": { "description": "The specified prime for the elliptic curve prime finite field in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve F2PP", "type": "string" }, "ecdsa_public_key_a": { "description": "The first coefficient of this elliptic curve in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key A", "type": "string" }, "ecdsa_public_key_b": { "description": "The second coefficient of this elliptic curve in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key B", "type": "string" }, "ecdsa_public_key_cofactor": { "description": "The co-factor in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key Cofactor", "type": "integer" }, "ecdsa_public_key_generator_x": { "description": "x co-ordinate of G (the generator which is also known as the base point) in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key X", "type": "string" }, "ecdsa_public_key_generator_y": { "description": "y co-ordinate of G (the generator which is also known as the base point) in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key Y", "type": "string" }, "ecdsa_public_key_order": { "description": "The order of generator G in ECDSA.", "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key Order", "type": "string" }, "ecdsa_public_key_seed": { "description": "The bytes used during curve generation for later validation in ECDSA.| Contents of this array are copied to protect against subsequent modification.", "items": { "type": "string" }, "readonly": true, "required": false, "title": "ECDSA Elliptic Curve Public Key Seed", "type": "array" }, "is_ca": { "description": "True if this is a CA certificate.", "readonly": true, "required": true, "type": "boolean" }, "is_valid": { "description": "True if this certificate is valid.", "readonly": true, "required": true, "type": "boolean" }, "issuer": { "description": "the certificate issuers complete distinguished name", "readonly": true, "required": true, "type": "string" }, "issuer_cn": { "description": "the certificate issuer's common name", "readonly": true, "required": true, "type": "string" }, "not_after": { "$ref": "EpochMsTimestamp, "description": "the time in epoch milliseconds at which the certificate becomes invalid", "readonly": true, "required": true }, "not_before": { "$ref": "EpochMsTimestamp, "description": "the time in epoch milliseconds at which the certificate becomes valid", "readonly": true, "required": true }, "public_key_algo": { "description": "Cryptographic algorithm used by the public key for data encryption.", "enum": [ "RSA", "DSA", "ECDSA" ], "readonly": true, "required": true, "title": "Public Key Algorithm", "type": "string" }, "public_key_length": { "description": "size measured in bits of the public/private keys used in a cryptographic algorithm", "readonly": true, "required": true, "type": "integer" }, "rsa_public_key_exponent": { "description": "An RSA public key is made up of the modulus and the public exponent. Exponent is a power number", "readonly": true, "required": false, "type": "string" }, "rsa_public_key_modulus": { "description": "An RSA public key is made up of the modulus and the public exponent. Modulus is wrap around number", "readonly": true, "required": false, "type": "string" }, "serial_number": { "description": "certificate's serial number", "readonly": true, "required": true, "type": "string" }, "signature": { "description": "the signature value(the raw signature bits) used for signing and validate the cert", "readonly": true, "required": true, "type": "string" }, "signature_algorithm": { "description": "the algorithm used by the Certificate Authority to sign the certificate", "readonly": true, "required": true, "type": "string" }, "subject": { "description": "the certificate owners complete distinguished name", "readonly": true, "required": true, "type": "string" }, "subject_cn": { "description": "the certificate owner's common name", "readonly": true, "required": true, "type": "string" }, "version": { "description": "Certificate version (default v1)", "readonly": true, "required": true, "type": "string" } }, "type": "object" }
X509Crl (type)
{ "additionalProperties": false, "id": "X509Crl", "properties": { "crl_entries": { "description": "list of X509CrlEntry", "items": { "$ref": "X509CrlEntry }, "readonly": true, "required": false, "type": "array" }, "issuer": { "description": "Issuer's distinguished name(DN)", "readonly": true, "required": false, "type": "string" }, "next_update": { "description": "Next update time for the CRL", "readonly": true, "required": false, "type": "string" }, "version": { "description": "CRL's version number either 1 or 2", "readonly": true, "required": false, "type": "string" } }, "title": "A CRL is a time-stamped list identifying revoked certificates.", "type": "object" }
X509CrlEntry (type)
{ "additionalProperties": false, "id": "X509CrlEntry", "properties": { "revocation_date": { "description": "Revocation date", "readonly": true, "required": false, "type": "string" }, "serial_number": { "description": "the revoked certificate's serial number", "readonly": true, "required": false, "type": "string" } }, "title": "Each revoked certificate is identified in a CRL by its certificate serial number.", "type": "object" }
API Errors
301 - Moved Permanently
Request must be reissued to a different controller node.
The controller node has been replaced by a new node that should be used for this and all future requests.
Response Code | 301 Moved Permanently |
Response Headers | Content-Type: text/plain Location: <URI for new request> |
Response Body | Additional information about the error, if available. |
303 - See Other
The response to the request can be found under a different URI identified by the Location response header.
Response Code | 303 See Other |
Response Headers | Content-Type: text/plain Location: <URI for new request> |
Response Body | Additional information about the error, if available. |
307 - Temporary Redirect
Request should be reissued to a different controller node.
The controller node is requesting the client make further requests against the controller node specified in the Location header. Clients should continue to use the new server until directed otherwise by the new controller node.
Response Code | 307 Temporary Redirect |
Response Headers | Content-Type: text/plain Location: <URI for new request> |
Response Body | Additional information about the error, if available. |
400 - Bad Request
Request was improperly formatted or contained an invalid parameter.
Response Code | 400 Bad Request |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
403 - Forbidden
The client does not have sufficient privileges to execute the request.
The API is likely in read-only mode, or a request was made to modify a read-only property.
Response Code | 403 Forbidden |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
404 - Not Found
An entity referenced in the request does not exist.
Create the referenced resource first, then reissue the request.
Response Code | 404 Not Found |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
409 - Conflict
The request can not be performed because it conflicts with configuration on a different entity, or because another client modified the same entity.
If the conflict arose because of a conflict with a different entity, modify the conflicting configuration. If the problem is due to a concurrent update, re-fetch the resource, apply the desired update, and reissue the request.
Response Code | 409 Conflict |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
410 - Gone
Response Code | 410 Gone |
Response Headers | |
Response Body | Additional information about the error, if available. |
412 - Precondition Failed
The request can not be performed because a precondition check failed. Usually, this means that the client sent a PUT or PATCH request with an out-of-date _revision property, probably because some other client has modified the entity since it was retrieved. The client should re-fetch the entry, apply any desired changes, and re-submit the operation.
Response Code | 412 Precondition Failed |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
500 - Internal Server Error
An internal error occurred while executing the request. If the problem persists, perform diagnostic system tests, or contact your support representative.
Response Code | 500 Internal Server Error |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
502 - Bad Gateway
Response Code | 502 Bad Gateway |
Response Headers | |
Response Body | Additional information about the error, if available. |
503 - Service Unavailable
The request can not be performed because the associatedresource could not be reached or is temporarily busy. Verify theassociated resource is connected, then reissue the request.
Response Code | 503 Service Unavailable |
Response Headers | Content-Type: text/plain |
Response Body | Additional information about the error, if available. |
504 - Gateway Timeout
Response Code | 504 Gateway Timeout |
Response Headers | |
Response Body | Additional information about the error, if available. |
Deprecated Types and Methods
** Deprecated Type Definitions ** Deprecated Property Definitions ** Deprecated APIs ReadPmtuLearningSettingDepreciated (GET /node/services/dataplane/l3vpn-pmtu): Depreciated. Please use /node/services/dataplane/pmtu-learning UpdatePmtuLearningSettingDepreciated (PUT /node/services/dataplane/l3vpn-pmtu): Depreciated. Please use /node/services/dataplane/pmtu-learning GetUpgradeTaskStatus (GET /node/upgrade): Get upgrade task status for the given task of the given bundle. Both bundle_name and task_id must be provided, otherwise you will receive a 404 NOT FOUND response. This api is deprecated. Please use API GET /node/upgrade /status-summary to get upgrade status when upgrade is in progress.