NSX Autonomous Edge API Guide

NSX-T Data Center 3.2.0

Table of Contents

  1. Overview
  2. API Methods
    1. Logical Routing And Services Configuration
      1. High Availability
      2. Logical Ports
      3. Routing
      4. VPN
        1. L2VPN
    2. System Administration
      1. Configuration
        1. Fabric
          1. Nodes
            1. DNS
            2. File Store
            3. Hardening
              1. Mandatory Access Control
            4. Logs
            5. NSX Edge
              1. Certificates
              2. Dataplane
              3. Diagnosis
              4. Nestdb
              5. Replication Agent
              6. Services
                1. Local-Controller
                2. Maintenance Mode
                3. Replication Agent
                4. Routing
            6. NSX Manager
              1. Services
                1. Local-Controller Service
            7. Network Interfaces
              1. Routing
            8. Services
              1. Log Insight
              2. NSX Platform Client
              3. NTP
              4. Node Management
              5. SNMP
              6. SSH
              7. Syslog
              8. Tasks
              9. Upgrade Agent
            9. Settings
            10. Support-Bundle
            11. User Management
              1. Authentication Policy
              2. Users
        2. System Properties
          1. Dataplane
      2. Lifecycle Management
        1. Backup
        2. Restore
        3. Upgrade
          1. Nodes
      3. Monitoring
        1. Logs
          1. Core Dumps
      4. Settings
        1. Certificates
          1. CRL
          2. Certificate
    3. VPN
      1. IPSEC
        1. DPD Profiles
        2. IKE Profiles
        3. Multi Path Groups
        4. Sessions
        5. Statistics
        6. Tunnel Profiles
  3. API Types
  4. API Type Schemas
  5. API Errors
  6. Deprecated Types and Methods


Overview

Introduction

NSX Autonomous Edge provides a programmatic API to automate management activities. The API follows a resource-oriented Representational State Transfer (REST) architecture, using JSON object encoding. Clients interact with the API using RESTful web service calls over the HTTPS protocol.

Each API method is identified by a request method and URI. Method parameters are specified as key-value pairs appended to the URI. Unless otherwise noted, request and response bodies are encoded using JSON, and must conform to the JSON schema associated with each method. The content type of each request and reply is "application/json" unless otherwise specified. Each request that can be made is documented in the API Methods section. The associated request and response body schemas are documented in the API Schemas section.

If you provide URL-encoded UTF-8 characters in the URL of your API request, you must include the header "Content-Type:charset=UTF-8" in your request.

API Policy: Changes, Deprecations and Removals

VMware NSX Data Center and associated firewall offerings may add new features in a NSX Data Center release. These new features may lead to additional APIs or backward compatible changes to existing APIs to support the new features.

Changes to the API that lead to incompatibility with previous releases will be announced at least one year prior to the change. These changes will be announced and documented in the NSX Data Center API Guide and in the NSX Data Center release notes. These changes can be implemented in either major or minor releases of NSX Data Center.

NSX Data Center APIs marked as "experimental" or that are not documented in the NSX Data Center API Guide are not subject to this policy. This indicates that the API may be changed or removed without notice in a future NSX Data Center release.

Definitions:

API Data Types and Allowed Ranges

The NSX-T API uses JSON to represent API request and response payloads, and uses JSONSchema to describe the schema of these payloads. The data types are:

string: a sequence of UTF-8 characters. If a particular string property has a maximum length, it is represented in the documentation with a maxLength property.

integer: a signed 64-bit value. Unless a minimum or maximum value is shown in the documentation, integer values may take on values in the range -9,223,372,036,854,775,808 to 9,223,372,036,854,775,807.

unsigned_integer: an unsigned 64-bit value. Unless a minimum or maximum value is shown in the documentation, integer values may take on values in the range 0 to 9,223,372,036,854,775,807.

int: a signed 32-bit value. Unless a minimum or maximum value is shown in the documentation, int values may take on values in the range -2,147,483,648 to 2,147,483,647.

number: a 64-bit floating point number. Unless a minimum or maximum value is shown in the documentation, number values may take on values in the range 4.9406564584124654 x 10-324 to 1.7976931348623157 x 10308.

boolean: the values true or false. Do not use quotes when sending boolean values in payloads.

object: a nested JSON object.

array: an array of one of the above types.

Formats

Some API types have a required format, and payloads that do not conform to the required format will be rejected. If a property has a required format, it is listed in the "Notes" section in this API Guide. The following formats are used in NSX-T:

ipv4: Must be a valid Internet Protocol version 4 address, in dotted-quad notation. For example, "192.168.1.232".

ipv6: Must be a valid Internet Protocol version 6 address, as described in RFC 1924. For example, "2001:0db8:85a3:0000:0000:8a2e:0370:7334". Abbreviations are supported.

ip: Either an ipv4 or ipv6 address.

hostname: An internet hostname, as described in RFC 1123. For example, "example.com"

ipv4-cidr-block: An ipv4 Classless Inter-Domain Routing (CIDR) block, expressed as a base ipv4 address, a slash, and the number of bits in the subnet mask. For example, "10.1.0.1/24".

ipv6-cidr-block: An ipv6 Classless Inter-Domain Routing (CIDR) block, expressed as a base ipv6 address, a slash, and the number of bits in the subnet mask. For example, "2001:db8::/32".

ip-cidr-block: Either an ipv4-cidr-block or an ip-v6-cidr-block.

ipv4-address-range: A range of ipv4 addresses, expressed as a lower-bound ipv4 address, a dash, and an upper-bound ipv4 address. For example, "192.168.1.0-192.168.1.255"

ipv6-address-range: A range of ipv6 addresses, expressed as a lower-bound ipv6 address, a dash, and an upper-bound ipv6 address. For example, "fe80::0202:b3ff:fe1e:8329-fe80::0202:b3ff:fe1e:832a"

address-or-block-or-range: Either an ip address, an ip-cidr-block, an ipv4-address-range, or an ipv6-address-range.

port-or-range: A port number (an integer in the range 0 to 65535) or a range of port numbers, expressed as a lower and upper port number, separated by a dash. Examples: "80" or "997-1023".

hostname-or-ip: Either a hostname or an ip address.

hostname-or-ipv4: Either a hostname or an ipv4 address.

list-of-address-or-block-or-range: A comma-separated list address-or-block-or-range.

mac-address: A Media Access Control (MAC) address. MAC addresses are six hexadecimal numbers, separated by either colons ":" or dashes "-". Case is not significant. Examples: "20:f3:75:5e:47:f0" or "20-F3-75-5E-47-F0".

Request Failures

It is possible for any request to fail. Errors are reported using standard HTTP response codes. It should be assumed the following errors could be returned by any API method: 301 Moved Permanently, 307 Temporary Redirect, 400 Bad Request, 401 Unauthorized, 403 Forbidden, 412 Precondition Failed, 429 Too Many Requests, 500 Internal Server Error, 503 Service Unavailable. Where other errors may be returned, the type of error is indicated in the API method description. All errors are documented in the API Errors section. API requests may fail due to concurrent updates, where an API request collides with another API request, and NSX cannot reconcile the two operations. In that case, the client must re-fetch the resource, apply the changes, and re-submit the operation.

Request Authentication

Most API calls require authentication. This API supports several different authentication schemes, which are documented in this section. Multiple authentication schemes may not be used concurrently.

HTTP Basic Authentication

To authenticate a request using HTTP Basic authentication, the caller's credentials are passed using the 'Authorization' header. The header content should consist of a base64-encoded string containing the username and password separated by a single colon (":") character, as specified in RFC 1945 section 11.1.

For example, to authenticate a request using the credentials of user admin with password admin, include the following header with the request:

Authorization: Basic YWRtaW46YWRtaW4=

The following cURL command will authenticate to the manager using basic authentication and will issue a GET request for logical ports:

curl -k -u USERNAME:PASSWORD https://MANAGER/api/v1/logical-ports

where:
USERNAME is the user to authenticate as,
PASSWORD is the password to provide, and
MANAGER is the IP address or host name of the NSX manager

For example:

curl -k -u admin:secretPw99 https://192.168.22.32/api/v1/logical-ports

Note: the -k argument instructs cURL to skip verifying the manager's self-signed X.509 certificate. It is more secure to verify that the server's certificate is signed by a Certificate Authority (CA) that you trust. To do that, omit the -k argument and use the --cacert <ca-file> option, where <ca-file> is a PEM-formatted file containing the CA certificate to trust.

For example:

curl --cacert /home/me/certs/rootca.crt -u admin:secretPw99 https://192.168.22.32/api/v1/logical-ports

Additional cURL examples below use the -k flag, but you can always substitute the --rootca <ca-file> argument for additional security.

In the above examples, USERNAME may be:

  1. A local user name. For example, "admin".
  2. A remote user name, of the form "user@domain", for example, "[email protected]". The domain must match a domain for a configured VIDM identity source or a configured LDAP identity source.
Note: in earlier versions of NSX, in order to authenticate to VIDM, it was required that you provide an authentication header of the form "Authorization: Remote base64-encoded-username-and-password". This is no longer required, but still functions for backward compatibility.

Session-Based Authentication

Session-based authentication is used by calling the /api/session/create authentication API to manage a session cookie. The session cookie returned in the result of a successful login must be provided in subsequent requests in order to associate those requests with the session.

Session state is local to the server responding to the API request. Idle sessions will automatically time-out, or can be terminated immediately using the POST /api/session/destroy API.

To obtain a session cookie, POST form data to the server using the application/x-ww-form-urlencoded media type, with fields "j_username" and "j_password" containing the username and password separated by an ampersand. Since an ampersand is a UNIX shell metacharacter, you may need to surround the argument with single quotes.

If the user is a remote user, append "@domain" to the username, for example, "[email protected]". The domain must match a domain for a configured VIDM identity source or a configured LDAP identity source.

The following cURL command will authenticate to the server, will deposit the session cookie in the file "cookies.txt", and will write all HTTP response headers to the file headers.txt. One of these headers is the X-XSRF-TOKEN header that you will need to provide in subsequent requests.

curl -k -c cookies.txt -D headers.txt -X POST -d 'j_username=USERNAME&j_password=PASSWORD' https://MANAGER/api/session/create

For example:

curl -k -c cookies.txt -D headers.txt -X POST -d 'j_username=admin&j_password=secretPw99' https://192.168.22.32/api/session/create

The manager will respond with the roles and permissions granted to the user, and cURL will deposit the session cookie into the file "cookies.txt".

In subsequent cURL requests, use the -b argument to specify the cookie file. You also need to pass the X-XSRF-TOKEN header that was saved to the headers.txt file, using cURL's -H option:

curl -k -b cookies.txt -H "`grep X-XSRF-TOKEN headers.txt`" https://192.168.22.32/api/v1/logical-ports

When the session expires, the manager will respond with a 403 Forbidden HTTP response, at which point you must obtain a new session cookie and X-XSRF-TOKEN.

Session cookies can be destroyed by using the /api/session/destroy API:

curl -k -b cookies.txt -H "`grep X-XSRF-TOKEN headers.txt`" -X POST https://MANAGER/api/session/destroy

Authentication using an X.509 certificate and a Principal Identity

NSX supports using an X.509 client certificate for authentication. The certificate is associated with a principal identity (a short name, similar to a username), and that principal identity can be bound to an NSX role. This is useful for automated processes or scripts that perform NSX API calls, and has the advantage that a user password does not need to be stored with the script.

For information on how to import a certificate and set up a principal identity, see the section "Add a Role Assignment or Principal Identity" in the NSX-T Administration Guide.

To use the client certificate to authenticate, your client must have access to the certificate and its associated private key. How to specify client authentication depends on the client you are using. For example, with curl, you use the --key argument to give the filename containing the private key and the --cert argument to give the filename containg the public certificate.

Authentication in VMware Cloud on AWS (VMC)

To make API calls to an NSX-T Manager in the VMware Cloud on AWS service (VMC), you need to gather a few pieces of information:

  1. Your VMC Organization ID
  2. Your Software Defined Data Center (SDDC) ID
  3. Your API token

All of this information is available in the VMC web console, https://console.cloud.vmware.com

In VMC, you always exchange your API token for a limited-duration authentication token, which you then pass in a header with your API calls. This authentication token is valid for 30 minutes. After that time, you must obtain a new authentication token using your API token. If you use an expired authentication token, the API call will be rejected.

To obtain an authentication token, you issue a POST request to the URL https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize, passing your API token in a form. To do this with cURL:

curl https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize -d refresh_token=<token>

For example, if your refresh token is aB1jtC5yk2rDL6A1KPxzM0W4D7OeHFUNuXFHZidufYS3fIwn60ZRag0Y9dvX15Qv, the command will be:

curl https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize -d refresh_token=aB1jtC5yk2rDL6A1KPxzM0W4D7OeHFUNuXFHZidufYS3fIwn60ZRag0Y9dvX15Qv

You will receive a JSON response with several properties. The "access_token" property contains the token you will need to provide with your API requests. An easy way to parse this token out of the response is to use the "jq" utility. For example:

curl https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize -d refresh_token=aB1jtC5yk2rDL6A1KPxzM0W4D7OeHFUNuXFHZidufYS3fIwn60ZRag0Y9dvX15Qv | jq --raw-output '.access_token'

produces just the access token. You can set an environment variable with the correct authentication header with:

export AUTH_HDR="csp-auth-token: `curl https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize -d refresh_token=aB1jtC5yk2rDL6A1KPxzM0W4D7OeHFUNuXFHZidufYS3fIwn60ZRag0Y9dvX15Qv | jq --raw-output '.access_token'`"

The AUTH_HDR environment variable now contains the authentication header. The token itself will be a long string of characters and digits.

Once you have your authentication token, you need to determine the URL for accessing the NSX-T manager in your SDDC. To do that, you issue a GET request to the endpoint https://vmc.vmware.com/vmc/api/orgs/<org-id>/sddcs/<sddc-id>, where <org-id> is your organization's ID and <sddc-id> is your SDDC's ID. The URL of the NSX-T manager will be in the resource_config.nsx_api_public_endpoint_url property. For example, if your organizations's ID is a003c3a5-3f68-4a8c-a74f-f79a0625da17 and your SDDC is 449369c7-7936-4f7f-b46e-624cdb2a0a99:

curl -H "$AUTH_HDR" https://vmc.vmware.com/vmc/api/orgs/a003c3a5-3f68-4a8c-a74f-f79a0625da17/sddcs/449369c7-7936-4f7f-b46e-624cdb2a0a99 | jq --raw-output ".resource_config.nsx_api_public_endpoint_url"

The output will look like:

https://nsx-52-41-15-143.rp.vmwarevmc.com/vmc/reverse-proxy/api/orgs/a003c3a5-3f68-4a8c-a74f-f79a0625da17/sddcs/449369c7-7936-4f7f-b46e-624cdb2a0a99/sks-nsxt-manager

This is the URL you should use to access your NSX-T manager from the internet. Append the particular API's URL to this base URL. For example, to list all domains, the API is "/policy/api/v1/infra/domains", so the full request will look like the following:

curl -q -H "$AUTH_HDR" https://nsx-52-41-15-143.rp.vmwarevmc.com/vmc/reverse-proxy/api/orgs/a003c3a5-3f68-4a8c-a74f-f79a0625da17/sddcs/449369c7-7936-4f7f-b46e-624cdb2a0a99/sks-nsxt-manager/policy/api/v1/infra/domains

Example Requests and Responses

Example requests and responses are provided for most of the API calls below. Your actual response might differ from the example in the number of fields returned because optional empty fields are not returned when you make an API call.

Restrictions on Certain Fields in a Request

When configuring layer 2 switching, the following fields can contain any character except semicolon (;), vertical bar (|), equal sign (=), comma (,), tilde (~), and the "at" sign (@). They also have a length limitation as specified below:

Optimistic Concurrency Control and the _revision property

Overview

In order to prevent one client from overwriting another client's updates, NSX-T employs a technique called optimistic concurrency control.

All REST payloads contain a property named "_revision". This is an integer that is incremented each time an existing resource is updated. Clients must provide this property in PUT requests and it must match the current _revision or the update will be rejected. This guards against the following situation:

Client 1 reads resource A.

Client 2 reads resource A.

Client 1 replaces the display_name property of resource A and does a PUT to replace the resource.

Client 2 replaces is different property of resource A and attempts to perform a PUT operation.

Without optimistic concurrency control, Client 2's update would overwrite Client 1's update to the display_name property. Instead, Client 2 receives a 409 Conflict error. To recover, Client 2 must fetch the resource again, apply the change, and perform a PUT.

Exceptions for /policy APIs

APIs whose URI begins with /policy have slightly different behavior. For those APIs, the _revision property must not be set when PUT is used to create a new resource. Once the resource is created, however, the _revision property must be provided with PUT operations.

PATCH and _revision for /policy APIs

APIs whose URI begins with /policy support the PATCH operation. Those APIs do not require that the _revision property be provided. A client can, however, request that the _revision property be checked when it is performing a PATCH in the /infra path. To do this, the client should pass the query parameter enforce_revision_check, e.g. PATCH /infra?enforce_revision_check=true.

PUT Operations

NSX-T conforms to REST and HTTP standards regarding the operation of PUT operations. A PUT is always a full replace of a resource, and if any properties are omitted from the payload, those properties will be reset to default values. It is suggested that API clients retrieve the existing resource, apply any desired changes to the copy of the resource, and PUT the entire modified resource.

Partial patching of objects is a feature supported by NSX that allows patching a subset of properties of any object. This behavior needs to be explicitly enabled. When partial patching is disabled (default behavior), the entire payload of object is expected to be provided in both PUT and PATCH operations for the /policy APIs.

In order to perform partial patching of existing objects using PATCH operation, partial patching should be enabled using either one of the following approach:

  1. System-wide partial patch configuration
    Partial patch can be enabled/disabled in the system by using the Partial Patch Config api (i.e. PATCH /policy/api/v1/system-config/nsx-partial-patch-config) with sample request payload.
    { "enable_partial_patch": "true" }
    Default is 'false'.
    Note: If the API request header has 'nsx-enable-partial-patch' parameter, then the header takes precedence over this system-wide configuration.
  2. Header parameter (request level configuration)
    Partial patch can also be enabled/disabled using API request header parameter. This will override the system-wide configuration for a particular request.
    To enable partial patch, use 'nsx-enable-partial-patch=true'
    To disable partial patch, use 'nsx-enable-partial-patch=false'
    If this parameter is not passed in header, the system level configuration will be considered for Partial Patch operation. This header parameter will be considered only for PATCH requests. For other requests (e.g. PUT, POST etc.), this header parameter will be ignored.

Some important considerations/notes on Partial Patch:

  1. Array properties will be replaced entirely in partial patch.
  2. If PATCH api is executed on a non-existing object, a new object will be created after performing all applicable validations.
  3. There are cases where properties of an object are inter-dependent on each other e.g. username and password, IP address and thumbprint etc. In such cases, the partial patch request expects all such inter-dependent fields to be provided (either all or none).
  4. Partial patch is not supported for 'Infra' object.
  5. Certain types like Labels, Security Policies (for the 'rules' attribute) and Services have special handling for certain attributes in PATCH request. This behavior will not be overridden by Partial Patch.
    For instance, specifying rules on Security policies as a part of the PATCH invocation merges the specified rules with the existing rules. For full replacement of rules, PUT operation needs to be performed on the Security Policy.
  6. Partial patch will not work for properties accepting polymorphic types if the specified value has a type that is different from that of the existing value.

API Rate Limiting

The NSX-T API service has three settings that control the rate of incoming API requests:

1) A per-client rate limit, in requests per second. If a client makes more requests than this limit in one second, the API server will refuse to service the API request and will return an HTTP 429 Too Many Requests Error. By default, this limit is 100 requests per second.

2) A per-client concurrency limit. This is the maximum number of outstanding requests that a client can have. For example, a client can open multiple connections to NSX-T and submit operations on each connection. When this limit is exceeded, the server returns a 429 Too Many Requests error to the client. By default, this limit is 40 concurrent requests.

3) An overall maximum number of concurrent requests. This is the maximum number of API requests that can be in process on the server. If the server is at this limit, additional requests will be refused and the HTTP error 503 Service Unavailable will be returned to the client. By default, this limit is 199 concurrent requests.

The first two limits exist to provide some level of fairness across multiple clients of NSX-T, and are intended to prevent one greedy client from preventing other clients from making API requests.

The last limit is the server's way of protecting itself against an unintentional (or intentional) denial of service attack.

While it is possible to configure these rate limits using the /api/v1/node/services/http API, it is not recommended. Instead, you should design your API client to gracefully deal with situations where limits are exceeded.

Designing API client code to work gracefully with rate limits

One approach is to build in throttling into the client code so that it never sends more than 100 requests in a given second and that it never has more than 40 concurrent requests in flight.

However, there isn't any way to ensure that the overall concurrency limits are never hit. That is because there may be other clients calling APIs, driving up the load on the server. API clients need to check for the HTTP error 503 Service Unavailable. In the event a 503 error is received, the simplest strategy is to insert a delay, possibly with an exponential backoff in the event that server load is high.

There are open-source libraries than can help you implement this retry/backoff behavior, such as Google's Retry helper in its Python google-api-core library. For an example of using this library with the NSX-T APIs, see https://github.com/vmware-samples/nsx-t/blob/master/python/basics/rate-limits.py

OpenAPI Specification of NSX-T APIs

You can download OpenAPI specifications for the various NSX-T APIs at the following URLs:

NSX-T Data Center Manager API:
APIs for NSX-T administration; node and cluster management APIs and fabric management APIs for on-premise customers.

NSX-T Data Center Manager API:
APIs for managing logical networking in NSX-T for on-premise customers. NSX VMC Policy API:
APIs for managing logical networking in NSX-T for VMware Cloud customers. NSX VMC AWS Integration API:
APIs for managing AWS underlay networking for VMware Cloud customers.


API Methods

Toggle all tables +

Logical Routing And Services Configuration

Logical Routing And Services Configuration: High Availability

Associated URIs:

Read all peers in the cluster

Read all peers in the cluster
Request:
Method:
GET
URI Path(s):
/api/v1/high-availability
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/high-availability Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
AutonomousEdgeClusterConfig+

Example Response: { "nodes": [ { "interface": [ { "address": "10.52.6.156/19", "name": "eth0", "interface_type": "MANAGEMENT" }, { "address": "169.254.100.1/24", "name": "nsx-edge-vtep", "interface_type": "TUNNEL" } ], "member_index": 0, "node_id": "9d2869bb-7fda-46d9-8510-7a8bd93849f7", "thumbprint": "0f8bb5b34ad7245765853a578386d75366415be8637a3558f0a672ab4f77a033" } ] } Required Permissions: read Feature: high_availability Additional Errors:

Delete a specific HighAvailabilityPeer

Delete a specific HighAvailabilityPeer
Request:
Method:
DELETE
URI Path(s):
/api/v1/high-availability/nodes/<node-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/high-availability/nodes/640912b0-4820-46f0-b7c2-7a9e2cb57500 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: high_availability Additional Errors:

Read node status

Returns information about the appliance's status
Request:
Method:
GET
URI Path(s):
/api/v1/high-availability/nodes/<node-id>/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/high-availability/nodes/640912b0-4820-46f0-b7c2-7a9e2cb57500/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
HANodeStatusProperties+

Example Response: { "admin_state": "UP", "high_availability_status": "ACTIVE", "node_status": "UP", "vtep_state": "UP" } Required Permissions: read Feature: high_availability Additional Errors:

API to call when the primary API node edge is lost, crashed or dead

Dissolve the high-availability cluster and make this node the primary node
for API server. This node will no longer synchronize config with older peer.
Please deploy and add a new secondary node to the high-availability cluster.
Until this is done, the node is running without a standBy peer for
high-availability.
Request:
Method:
POST
URI Path(s):
/api/v1/high-availability?action=dissolve_and_make_primary
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<ip>/api/v1/high-availability?action=dissolve_and_make_primary Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: high_availability Additional Errors:

Logical Routing And Services Configuration: Logical Ports

Associated URIs:

Create a Logical Port

Creates a logical port. The required parameters include
resource_type.
Request:
Method:
POST
URI Path(s):
/api/v1/ports
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
LogicalRouterIPTunnelPort+
LogicalRouterLoopbackPort+
LogicalRouterPort+

Example Request: POST https://<ip>/api/v1/ports { "display_name": "lrPort_2", "vlan_id": 20, "exit_interface": "eth2", "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "resource_type": "LogicalRouterPort" } Successful Response:
Response Code:
201 Created
Response Headers:
Location
Content-type: application/json
Response Body:
LogicalRouterIPTunnelPort+
LogicalRouterLoopbackPort+
LogicalRouterPort+

Example Response: { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Required Permissions: crud Feature: routing_routers Additional Errors:

List Ports

Returns information about all logical ports.
Request:
Method:
GET
URI Path(s):
/api/v1/ports
Request Headers:
n/a
Query Parameters:
LogicalPortListParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/ports Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalPortListResult+

Example Response: { "_self": { "href": "/api/v1/ports", "rel": "self" }, "result_count": 1, "results": [ { "subnets": [ { "ip_addresses": [ "192.168.1.1" ], "prefix_length": 24 } ], "display_name": "lrport_1", "urpf_mode": "STRICT", "vlan_id": 10, "exit_interface": "eth2", "mac_address": "00:50:56:bc:af:45", "id": "48e5f449-153f-4d31-9e98-64a3f1ecc3fc", "resource_type": "LogicalRouterPort" } ], "_schema": "LogicalPortListResult" } Required Permissions: read Feature: routing_routers Additional Errors:

Get the statistics of a specified LogicalRouterPort

Returns the statistics for the Logical Router Port. Request:
Method:
GET
URI Path(s):
/api/v1/ports/<logical-router-port-id>/statistics
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/ports/f37f587f-171c-41f4-8b6e-6690c0a24649/statistics Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalRouterPortStatistics+

Example Response: { "admin_state": "UP", "operational_state": "UP", "last_update_timestamp": 1535499424061, "logical_router_port_id": "f37f587f-171c-41f4-8b6e-6690c0a24649", "rx": { "dropped_packets": 12954, "total_bytes": 10965364, "total_packets": 108647 }, "tx": { "dropped_packets": 0, "total_bytes": 8915908, "total_packets": 94886 } } Required Permissions: read Feature: routing_routers Additional Errors:

Delete a Logical Port

Deletes the specified logical port.
Request:
Method:
DELETE
URI Path(s):
/api/v1/ports/<port-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/ports/258c50b4-c960-4005-9023-f7946e302162 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Example Response: None Required Permissions: crud Feature: routing_routers Additional Errors:

Read Logical Port

Returns information about the specified logical port. Request:
Method:
GET
URI Path(s):
/api/v1/ports/<port-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/ports/c84f70b4-7500-4087-bb2d-3f68f5a32060 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalRouterIPTunnelPort+
LogicalRouterLoopbackPort+
LogicalRouterPort+

Example Response: { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Required Permissions: read Feature: routing_routers Additional Errors:

Update a Logical Port

Modifies the specified logical port. Required parameters include the
resource_type.
Request:
Method:
PUT
URI Path(s):
/api/v1/ports/<port-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
LogicalRouterIPTunnelPort+
LogicalRouterLoopbackPort+
LogicalRouterPort+

Example Request: PUT https://<ip>/api/v1/ports/258c50b4-c960-4005-9023-f7946e302162 { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalRouterIPTunnelPort+
LogicalRouterLoopbackPort+
LogicalRouterPort+

Example Response: { "subnets": [ { "ip_addresses": [ "172.16.40.1" ], "prefix_length": 24 } ], "display_name": "lrPort_2", "urpf_mode": "NONE", "vlan_id": 20, "exit_interface": "eth2", "mac_address": "00:50:56:bc:7d:f0", "id": "fe2f90bf-cbd3-41f9-b2f5-8f4dcb9e09e9", "resource_type": "LogicalRouterPort" } Required Permissions: crud Feature: routing_routers Additional Errors:

Logical Routing And Services Configuration: Routing

Associated URIs:

Get forwarding table on the logical router

Get forwarding table on the service router (currently only 1 service router
is supported).
Request:
Method:
GET
URI Path(s):
/api/v1/routing/forwarding-table
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/routing/forwarding-table Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalRouterRouteTable+

Example Response: { "last_update_timestamp": 1536891039759, "result_count": 2, "results": [ { "admin_distance": 0, "logical_router_port_id": "5d4500b0-1355-4b17-a944-97412b49bfda", "network": "100.64.144.0/31", "next_hop": "169.254.0.1", "route_type": "route" }, { "admin_distance": 0, "logical_router_port_id": "f2342125-da97-42c2-ac22-1951360268e2", "network": "127.0.0.1/32", "next_hop": "", "route_type": "route" } ] } Required Permissions: read Feature: routing_routers Additional Errors:

Paginated List of Static Routes

Returns information about configured static routes, including the
network address and next hops for each static route.
Request:
Method:
GET
URI Path(s):
/api/v1/routing/static-routes
Request Headers:
n/a
Query Parameters:
ListRequestParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/routing/static-routes Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
StaticRouteListResult+

Example Response: TBD Required Permissions: read Feature: routing_routers Additional Errors:

Add Static Routes on a Logical Router

Adds a new static route on a Logical Router
Request:
Method:
POST
URI Path(s):
/api/v1/routing/static-routes
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
StaticRoute+

Example Request: POST https://<ip>/api/v1/routing/static-routes { "resource_type": "StaticRoute", "description": "", "display_name": "to customer A", "next_hops": [ { "administrative_distance": "2", "ip_address": "192.168.200.254" } ], "network": "192.168.200.0/24" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
StaticRoute+

Example Response: TBD Required Permissions: crud Feature: routing_routers Additional Errors:

Delete a specific Static Route on a Logical Router

Deletes a specific static route on the specified logical router.
Request:
Method:
DELETE
URI Path(s):
/api/v1/routing/static-routes/<static-route-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/routing/static-routes/7a62a0c5-1ea1-4b25-9d43-dce1c0fa4444 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: routing_routers Additional Errors:

Get a specific Static Route on a Logical Router

Read a specific static routes on the specified logical router.
Request:
Method:
GET
URI Path(s):
/api/v1/routing/static-routes/<static-route-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/routing/static-routes/65fb67d8-0485-4c23-8e59-b9ccd8799a4c Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
StaticRoute+

Example Response: TBD Required Permissions: read Feature: routing_routers Additional Errors:

Update a specific Static Route Rule on a Logical Router

Update a specific static route on the specified logical router.
Request:
Method:
PUT
URI Path(s):
/api/v1/routing/static-routes/<static-route-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
StaticRoute+

Example Request: PUT https://<ip>/api/v1/routing/static-routes/65fb67d8-0485-4c23-8e59-b9ccd8799a4c { "resource_type": "StaticRoute", "description": "Static route to customer A", "display_name": "to customer A", "next_hops": [ { "administrative_distance": 2, "ip_address": "192.168.200.254" } ], "network": "192.168.200.0/24", "_revision": 0 } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
StaticRoute+

Example Response: TBD Required Permissions: crud Feature: routing_routers Additional Errors:

Logical Routing And Services Configuration: VPN

Logical Routing And Services Configuration: VPN: L2VPN

Associated URIs:

Get all L2VPN sessions

Get list of all L2VPN sessions Request:
Method:
GET
URI Path(s):
/api/v1/vpn/l2vpn/sessions
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/l2vpn/sessions Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
L2VPNSessionListResult+

Example Response: { "result_count": 1, "results": [ { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } ] } Required Permissions: read Feature: vpn Additional Errors:

Delete a L2VPN session

Delete a specific L2VPN session. Request:
Method:
DELETE
URI Path(s):
/api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/vpn/l2vpn/sessions/f962173f-ac03-4d08-8366-56a41779f611 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: vpn Additional Errors:

Get a L2VPN session

Get a specific L2VPN session Request:
Method:
GET
URI Path(s):
/api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/l2vpn/sessions/a4181e5c-5532-4498-af88-1c09a452a0b6 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
L2VPNSession+

Example Response: { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } Required Permissions: read Feature: vpn Additional Errors:

Get L2VPN session statistics

Get statistics of a specific L2VPN session Request:
Method:
GET
URI Path(s):
/api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>/statistics
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/l2vpn/sessions/a4181e5c-5532-4498-af88-1c09a452a0b6/statistics Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
L2VPNSessionStatistics+

Example Response: { "display_name": "L2Vpn session", "transport_tunnels": [ { "ipsec_session_id": "75c2ab96-7bd1-4084-bfcf-faca45756376" } ] "l2vpn_session_id": "6851e7d9-a0be-4445-a3b8-b43cfeed7a84", "reference_count": 1, "session_status": "UP", "traffic_counter": { "bytes_in": 7422140, "bytes_out": 9036376, "dropped_packets_in": 0, "dropped_packets_out": 0, "packets_in": 20200, "packets_out": 24492 } } Required Permissions: read Feature: vpn Additional Errors:

Update an L2VPN session with a new peer code

Updating an L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the system-owned resources associated with it
is not allowed.
API supported only when L2VPN Service is in Client Mode.
Request:
Method:
PUT
URI Path(s):
/api/v1/vpn/l2vpn/sessions/<l2vpn-session-id>?action=update_with_peer_code
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
L2VPNSession+

Example Request: PUT https://<ip>/api/v1/vpn/l2vpn/sessions/?action=update_with_peer_code { "description": "L2Vpn session", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_code": "MCwwYTMyNWE4LHsic2l0ZU5hbWUiOiJJUFNlY1ZQTl9Sb3V0ZUJhc2VzZFNlc3Npb25fMDAxIiwic3JjVGFwSXAiOiIx NjkuMjU0LjY0LjIiLCJkc3RUYXBJcCI6IjE2OS4yNTQuNjQuMSIsImlrZU9wdGlvbiI6ImlrZXYyIiwiZW5jYXBQcm90 byI6ImdyZS9pcHNlYyIsImRoR3JvdXAiOiJkaDE0IiwiZW5jcnlwdEFuZERpZ2VzdCI6ImFlcy1nY20vc2hhLTI1NiIs InBzayI6InBhbmthaiIsInR1bm5lbHMiOlt7ImxvY2FsSWQiOiIxLjEuNS4xMDAiLCJwZWVySWQiOiIxOTIuMTY4LjEy OC4xIiwibG9jYWxWdGlJcCI6IjE5Mi4xNjguMS4yLzI0In1dfQ==", "peer_address": "10.10.10.10", "local_address": "20.20.20.20" } ] } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
L2VPNSession+

Example Response: { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } Required Permissions: crud Feature: vpn Additional Errors:

Create an L2VPN session from Peer Code

Create an L2VPN session from Peer Code.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. Local Endpoint are created only when required, i.e.,
an IPSec VPN Local Endpoint with same local address does not
already exist.
API supported only when L2VPN Service is in Client Mode.
Request:
Method:
POST
URI Path(s):
/api/v1/vpn/l2vpn/sessions?action=create_with_peer_code
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
L2VPNSession+

Example Request: POST https://<ip>/api/v1/vpn/l2vpn/sessions?action=create_with_peer_code { "description": "L2Vpn session", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_code": "MCwwYTMyNWE4LHsic2l0ZU5hbWUiOiJJUFNlY1ZQTl9Sb3V0ZUJhc2VzZFNlc3Npb25fMDAxIiwic3JjVGFwSXAiOiIx NjkuMjU0LjY0LjIiLCJkc3RUYXBJcCI6IjE2OS4yNTQuNjQuMSIsImlrZU9wdGlvbiI6ImlrZXYyIiwiZW5jYXBQcm90 byI6ImdyZS9pcHNlYyIsImRoR3JvdXAiOiJkaDE0IiwiZW5jcnlwdEFuZERpZ2VzdCI6ImFlcy1nY20vc2hhLTI1NiIs InBzayI6InBhbmthaiIsInR1bm5lbHMiOlt7ImxvY2FsSWQiOiIxLjEuNS4xMDAiLCJwZWVySWQiOiIxOTIuMTY4LjEy OC4xIiwibG9jYWxWdGlJcCI6IjE5Mi4xNjguMS4yLzI0In1dfQ==", "peer_address": "10.10.10.10", "local_address": "20.20.20.20" } ] } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
L2VPNSession+

Example Response: { "resource_type": "L2VPNSession", "description": "L2vpn session", "id": "a4181e5c-5532-4498-af88-1c09a452a0b6", "display_name": "L2Vpn session", "transport_tunnels": [ { "peer_address": "10.10.10.10", "local_address": "20.20.20.20", "ipsec_session_id": "07829375-9aa8-4f82-9cb7-3c028bf81ca3" } ] "enabled": true } Required Permissions: crud Feature: vpn Additional Errors:

System Administration: Configuration: Fabric: Nodes

System Administration: Configuration: Fabric: Nodes: DNS

Associated URIs:

Update the Node's Name Servers

Modifies the list of servers that the node uses to look up IP
addresses associated with given domain names. If DHCP is configured, this
method returns a 409 CONFLICT error, because DHCP manages the list of name
servers.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/network/name-servers
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeNameServersProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/network/name-servers { "name_servers": [ "10.33.38.1", "10.33.38.2", "10.33.38.3" ] } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNameServersProperties+

Example Response: { "name_servers": [ "10.33.38.1", "10.33.38.2", "10.33.38.3" ] } Required Permissions: crud Feature: system_administration Additional Errors:

Read the Node's Name Servers

Returns the list of servers that the node uses to look up IP
addresses associated with given domain names.
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/name-servers
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/name-servers Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNameServersProperties+

Example Response: { "name_servers": [ "10.33.38.1", "10.33.38.2" ] } Required Permissions: read Feature: system_administration Additional Errors:

Read the Node's Search Domains

Returns the domain list that the node uses to complete
unqualified host names. When a host name does not include a fully
qualified domain name (FQDN), the NSX Management node appends the
first-listed domain name to the host name before the host name is looked
up. The NSX Management node continues this for each entry in the domain
list until it finds a match.
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/search-domains
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/search-domains Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSearchDomainsProperties+

Example Response: { "search_domains": [ "eng.company.com", "company.com" ] } Required Permissions: read Feature: system_administration Additional Errors:

Update the Node's Search Domains

Modifies the list of domain names that the node uses to complete
unqualified host names. If DHCP is configured, this method returns
a 409 CONFLICT error, because DHCP manages the list of name servers.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/network/search-domains
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeSearchDomainsProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/network/search-domains { "search_domains": [ "eng.company.com", "company.com", "eng-backup.company.com" ] } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSearchDomainsProperties+

Example Response: { "search_domains": [ "eng.company.com", "company.com" "eng-backup.company.com" ] } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: File Store

Associated URIs:

List node files

Request:
Method:
GET
URI Path(s):
/api/v1/node/file-store
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/file-store Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
FilePropertiesListResult+

Example Response: { "_schema": "FilePropertiesListResult", "_self": "/node/file-store", "result_count": 2, "results": [ { "_schema": "FileProperties", "_self": "/node/file-store/test1.txt", "created_epoch_ms": 1457048893748, "modified_epoch_ms": 1457048860639, "name": "test1.txt", "size": 71 }, { "_schema": "FileProperties", "_self": "/node/file-store/test.txt", "created_epoch_ms": 1457048848624, "modified_epoch_ms": 1457048560936, "name": "test.txt", "size": 50 } ] } Required Permissions: read Feature: system_administration Additional Errors:

Read file properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/file-store/<file-name>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/file-store/test1.txt Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
FileProperties+

Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/test1.txt", "created_epoch_ms": 1457049714901, "modified_epoch_ms": 1457048860639, "name": "test1.txt", "size": 71 } Required Permissions: read Feature: system_administration Additional Errors:

Delete file

Request:
Method:
DELETE
URI Path(s):
/api/v1/node/file-store/<file-name>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Upload a file to the file store

When you issue this API, the client must specify:
- HTTP header Content-Type:application/octet-stream.
- Request body with the contents of the file in the filestore.
In the CLI, you can view the filestore with the get files command.
Request:
Method:
POST
URI Path(s):
/api/v1/node/file-store/<file-name>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/file-store/test.txt This is a sentence that is added to the file test.txt. Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
FileProperties+

Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/test.txt", "created_epoch_ms": 1457048560936, "modified_epoch_ms": 1457048560936, "name": "test.txt", "size": 54 } Required Permissions: crud Feature: system_administration Additional Errors:

Replace file contents

Request:
Method:
PUT
URI Path(s):
/api/v1/node/file-store/<file-name>/data
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: PUT https://<nsx-mgr>/api/v1/node/file-store/test1.txt/data This is updated content that overwrites the former content. Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
FileProperties+

Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/test2.txt", "created_epoch_ms": 1457116797106, "modified_epoch_ms": 1457116797106, "name": "test2.txt", "size": 59 } Required Permissions: crud Feature: system_administration Additional Errors:

Read file contents

Request:
Method:
GET
URI Path(s):
/api/v1/node/file-store/<file-name>/data
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/file-store/test1.txt/data Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/octet-stream
Response Body:
n/a

Example Response: This content can include anything that would be in a text file. Required Permissions: read Feature: system_administration Additional Errors:

Read file thumbprint

Request:
Method:
GET
URI Path(s):
/api/v1/node/file-store/<file-name>/thumbprint
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/file-store/test1.txt/thumbprint Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
FileThumbprint+

Example Response: { "_schema": "FileThumbprint", "_self": "/node/file-store/test1.txt/thumbprint", "name": "test1.txt", "sha1": "ec23cb4208447ce1f81f7cfd4acc9000e20d4949", "sha256": "bda2390dc831e66c4977bc6d16968ed630793031c51e9072297f1e9746b3aca5" } Required Permissions: read Feature: system_administration Additional Errors:

Copy a remote file to the file store

Copy a remote file to the file store. If you use scp or sftp,
you must provide the remote server's SSH fingerprint. See the
NSX-T Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Method:
POST
URI Path(s):
/api/v1/node/file-store/<file-name>?action=copy_from_remote_file
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
CopyFromRemoteFileProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/file-store/file.txt?action=copy_from_remote_file { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/file.txt", "protocol" : { "name" : "scp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1", "authentication_scheme" : { "scheme_name" : "password", "username" : "root", "password" : "s4druMuJEw" } } } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
FileProperties+

Example Response: { "_schema": "FileProperties", "_self": "/node/file-store/file.txt", "created_epoch_ms": 1459401409964, "modified_epoch_ms": 1459401409748, "name": "file.txt", "size": 19 } Required Permissions: crud Feature: system_administration Additional Errors:

Copy file in the file store to a remote file store

Copy a file in the file store to a remote server. If you use scp or
sftp, you must provide the remote server's SSH fingerprint. See the
NSX-T Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Method:
POST
URI Path(s):
/api/v1/node/file-store/<file-name>?action=copy_to_remote_file
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
CopyToRemoteFileProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/file-store/supportbundle.tgz?action=copy_to_remote_file { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/supportbundle.tgz", "protocol" : { "name" : "scp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1" , "authentication_scheme" : { "scheme_name" : "password", "username" : "root" , "password" : "s4druMuJEw" } } } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

Create directory in remote file server

Create a directory on the remote remote server. Supports only SFTP.
You must provide the remote server's SSH fingerprint. See the
NSX Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Method:
POST
URI Path(s):
/api/v1/node/file-store?action=create_remote_directory
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
CreateRemoteDirectoryProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/file-store?action=create_remote_directory { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/folder", "protocol" : { "name" : "sftp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1" , "authentication_scheme" : { "scheme_name" : "password", "username" : "root" , "password" : "s4druMuJEw" } } } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Hardening

System Administration: Configuration: Fabric: Nodes: Hardening: Mandatory Access Control

Associated URIs:

Enable or disable Mandatory Access Control

Request:
Method:
PUT
URI Path(s):
/api/v1/node/hardening-policy/mandatory-access-control
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
MandatoryAccessControlProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/hardening-policy/mandatory-access-control -d '{"enabled": true}' Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
MandatoryAccessControlProperties+

Example Response: { "enabled": true, "status": "ENABLED_PENDING_REBOOT" } Required Permissions: crud Feature: system_administration Additional Errors:

Gets the enable status for Mandatory Access Control

Request:
Method:
GET
URI Path(s):
/api/v1/node/hardening-policy/mandatory-access-control
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/hardening-policy/mandatory-access-control Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
MandatoryAccessControlProperties+

Example Response: { "status": "ENABLED" } Required Permissions: read Feature: system_administration Additional Errors:

Get the report for Mandatory Access Control

Request:
Method:
GET
URI Path(s):
/api/v1/node/hardening-policy/mandatory-access-control/report
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/hardening-policy/mandatory-access-control/report > mac.tar.gz Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/octet-stream
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Logs

Associated URIs:

List available node logs

Returns the number of log files and lists the log files that reside on the
NSX virtual appliance. The list includes the filename, file size,
and last-modified time in milliseconds since epoch (1 January 1970) for each
log file. Knowing the last-modified time with millisecond accuracy since
epoch is helpful when you are comparing two times, such as the time of a
POST request and the end time on a server.
Request:
Method:
GET
URI Path(s):
/api/v1/node/logs
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/logs Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeLogPropertiesListResult+

Example Response: { "result_count": 70, "results": [ ... { "last_modified_time": 1442255851363, "log_name": "kern.log", "log_size": 175171 }, ... { "last_modified_time": 1442257962797, "log_name": "syslog", "log_size": 221701 }, ... ] } Required Permissions: read Feature: system_log Additional Errors:

Read node log properties

For a single specified log file, lists the filename, file size, and
last-modified time.
Request:
Method:
GET
URI Path(s):
/api/v1/node/logs/<log-name>
Request Headers:
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/logs/syslog Successful Response:
Response Code:
200 OK, 206 Partial Content
Response Headers:
Content-type: application/json
Content-type: application/octet-stream
Response Body:
NodeLogProperties+

Example Response: { "last_modified_time": 1442258255032, "log_name": "syslog", "log_size": 224075 } Required Permissions: read Feature: system_log Additional Errors:

Read node log contents

For a single specified log file, returns the content of the log file.
This method supports byte-range requests. To request just a portion of a
log file, supply an HTTP Range header, e.g. "Range: bytes=<start>-<end>".
<end> is optional, and, if omitted, the file contents from start to the
end of the file are returned.'
Request:
Method:
GET
URI Path(s):
/api/v1/node/logs/<log-name>/data
Request Headers:
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/logs/syslog/data Successful Response:
Response Code:
200 OK, 206 Partial Content
Response Headers:
FileRequestHeaders
Content-type: application/octet-stream
Response Body:
n/a

Example Response: 2015-09-14T19:35:23.688Z 10.160.30.117 NSX - - - UserName:'[email protected]', ModuleName:'ACCESS_CONTROL', Operation:'LOGIN', Operation status:'success' 2015-09-14T19:35:23.817Z nsx-manager NSX - - - "GET /api/v1/node/status HTTP/1.1" 200 2550 "" "" 0.123531 Required Permissions: read Feature: system_log Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge

System Administration: Configuration: Fabric: Nodes: NSX Edge: Certificates

Associated URIs:

Read api certificate properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/api-certificate
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
ApiCertificate+

Required Permissions: read Feature: system_administration Additional Errors:

Update api certificate properties

Request:
Method:
POST
URI Path(s):
/api/v1/node/api-certificate
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
ApiCertificate+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
ApiCertificateReply+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Dataplane

Associated URIs:

Read NSX EdgeDatapath service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/node/services/dataplane Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeNodeServiceLoggingProperties+

Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/dataplane", "rel": "self" }, "service_name": "dataplane", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge Datapath service properties

Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeNodeServiceLoggingProperties+

Example Request: PUT https://<ip>/api/v1/node/services/dataplane { "service_name": "dataplane", "service_properties": { "logging_level": "DEBUG" } } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeNodeServiceLoggingProperties+

Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/dataplane", "rel": "self" }, "service_name": "dataplane", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: crud Feature: system_administration Additional Errors:

Get NSX Edge dataplane cpu stats

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/cpu-stats
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneCpuStats+

Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge dataplane control packets prioritization setting

Enable or disable NSX Edge dataplane control packets prioritization.
Dataplane service must be restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/ctrl-prio
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneCtrlPrioSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneCtrlPrioSetting+

Required Permissions: crud Feature: system_administration Additional Errors:

Update NSX Edge dataplane dynamic core feature enabled status

Enable or disable NSX Edge dataplane dynamic core feature. Dataplane service must be
restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/dynamic-core
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneDynamicCoreSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Check dynamic core feature enabled status of NSX Edge dataplane

Check current status of NSX Edge dataplane dynamic core feature.
Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/dynamic-core
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneDynamicCoreSetting+

Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge dataplane flow cache setting

Enable or disable NSX Edge dataplane flow cache. Dataplane service must be
restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/flow-cache
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneFlowCacheSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneFlowCacheSetting+

Required Permissions: crud Feature: system_administration Additional Errors:

Get NSX Edge dataplane flow cache setting

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/flow-cache
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneFlowCacheSetting+

Required Permissions: read Feature: system_administration Additional Errors:

Start NSX Edge dataplane flow monitor

Starts NSX Edge dataplane flow monitor on all or certain CPU core(s) with a timeout.
Stops flow monitor after timeout and dumps the flow file on local file store
on edge. If top_10 argument is set to true top 10 flows are collected,
else all flows are collected.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/flow-mon
Request Headers:
n/a
Query Parameters:
EdgeDataplaneFlowQueryParameters+
Request Body:
EdgeDataplaneFlowMonitorStartSetting+

Example Request: PUT https://<ip>/api/v1/node/services/dataplane/flow-mon { "core_id": "1", "timeout": "30" } (or) PUT https://<ip>/api/v1/node/services/dataplane/flow-mon?top_10=true { "core_id": "1", "timeout": "30" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneFlowMonitorMessage+

Example Response: { "message": "flow_mon.tgz will be available in edge filestore in 30 seconds. Go to edge CLI, use the following command to transfer the file: copy file flow_mon.tgz url " } Required Permissions: read Feature: system_administration Additional Errors:

Return top 10 flows information

Run flow monitor for timeout seconds for all or certain CPU core(s)
and return top 10 flows.
Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/flow-mon
Request Headers:
n/a
Query Parameters:
EdgeDataplaneTopKFlowQueryParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/node/services/dataplane/flow-mon?core_id=3&timeout=60 (or) GET https://<ip>/api/v1/node/services/dataplane/flow-mon?core_id=3 (or) GET https://<ip>/api/v1/node/services/dataplane/flow-mon?timeout=60 (or) GET https://<ip>/api/v1/node/services/dataplane/flow-mon Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneTopKFlows+

Example Response: { "flow_count": 10, "flows": [ { "dst_ip": "192.168.1.11", "dst_port": 6081, "proto": 17, "src_ip": "192.168.1.8", "src_port": 59205, "tunnel_dst_ip": "0.0.0.0", "tunnel_src_ip": "0.0.0.0" }, { "dst_ip": "192.168.1.11", "dst_port": 3784, "proto": 17, "src_ip": "192.168.1.8", "src_port": 49155, "tunnel_dst_ip": "192.168.1.11", "tunnel_src_ip": "192.168.1.8" }, ... ... { "dst_ip": "192.168.1.10", "dst_port": 6081, "proto": 17, "src_ip": "192.168.1.6", "src_port": 52030, "tunnel_dst_ip": "0.0.0.0", "tunnel_src_ip": "0.0.0.0" } ] } Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge dataplane interrupt mode setting

Enable or disable NSX Edge dataplane interrupt mode.
Dataplane service must be restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/intr-mode
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneIntrModeSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Get NSX Edge dataplane l2vpn pmtu message generation setting

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/l2vpn-pmtu
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneL2vpnPmtuSetting+

Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge dataplane l2vpn pmtu message generation setting

Enable or disable NSX Edge dataplane pmtu cache in l2vpn.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/l2vpn-pmtu
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneL2vpnPmtuSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneL2vpnPmtuSetting+

Required Permissions: crud Feature: system_administration Additional Errors:

Depreciated. Please use /node/services/dataplane/pmtu-learning (Deprecated)

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/l3vpn-pmtu
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplanePmtuLearningSetting+

Required Permissions: read Feature: system_administration Additional Errors:

Depreciated. Please use /node/services/dataplane/pmtu-learning (Deprecated)

Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/l3vpn-pmtu
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplanePmtuLearningSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplanePmtuLearningSetting+

Required Permissions: crud Feature: system_administration Additional Errors:

Update NSX Edge dataplane pmtu learning setting

Enable or disable NSX Edge dataplane pmtu learning
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/pmtu-learning
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplanePmtuLearningSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplanePmtuLearningSetting+

Required Permissions: crud Feature: system_administration Additional Errors:

Get NSX Edge dataplane pmtu learning setting

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/pmtu-learning
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplanePmtuLearningSetting+

Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge dataplane QAT feature enabled status

Enable or disable NSX Edge dataplane QAT feature. Dataplane service must be
restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/qat-enable
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneQatAdminSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneQatAdminSettingResponse+

Required Permissions: crud Feature: system_administration Additional Errors:

Get NSX Edge dataplane QAT setting

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/qat-status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneQatStatus+

Required Permissions: read Feature: system_administration Additional Errors:

Get NSX Edge rx and tx queue number per port per core

Get NSX Edge rx and tx queue number per port per core.
Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/queue-num-per-port-per-core
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/node/services/dataplane/queue-num-per-port-per-core Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneQueueNumPerPortPerCoreSetting+

Example Response: { "queue_num_per_port_per_core": 1 } Required Permissions: read Feature: system_administration Additional Errors:

Set NSX Edge rx and tx queue number per port per core

Set NSX Edge rx and tx queue number per port per core.
Dataplane service must be restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/queue-num-per-port-per-core
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneQueueNumPerPortPerCoreSetting+

Example Request: PUT https://<ip>/api/v1/node/services/dataplane/queue-num-per-port-per-core { "queue_num_per_port_per_core": 1 } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Return rx/tx ring size information

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/ring-size
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneRingSize+

Required Permissions: read Feature: system_administration Additional Errors:

Set NSX Edge rx ring size for physical ports

Set NSX Edge rx ring size for physical ports.
Dataplane service must be restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/rx-ring-size
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneRingSizeSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Read NSX EdgeDatapath service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Set NSX Edge tx ring size for physical ports

Set NSX Edge tx ring size for physical ports.
Dataplane service must be restarted for the change to take effect.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/tx-ring-size
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneRingSizeSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Restart, start or stop the NSX EdgeDatapath service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/dataplane?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Diagnosis

Associated URIs:

Read edge config diagnosis

Request:
Method:
GET
URI Path(s):
/api/v1/node/diagnosis
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<edge>/api/v1/node/diagnosis Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDiagnosis+

Example Response: { "config": { "failed": { "nestdb": "not running" }, "passed": [ "nsxa-state", "nsxa-edge-cluster", "nsxa-lrouter", "nsxa-service-router", "manager", "controller", "edge-agent", "dataplane", "nsd", "core" ], "warning": { "nsxa-edge-cluster": "no peers" } }, "ha-state": "active" } Required Permissions: read Feature: system_administration Additional Errors:

Read edge diagnosis inconsistency

Request:
Method:
GET
URI Path(s):
/api/v1/node/diagnosis/inconsistency
Request Headers:
n/a
Query Parameters:
EdgeInconsistencyQueryParameters+
Request Body:
n/a

Example Request: GET https://<edge>/api/v1/node/diagnosis/inconsistency Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDiagnosisInconsistencyResult+

Example Response: { "results": [ { "title": "Checking routing is up on T0 SR/RTEP", "detail": [ "Tier0 SR c154f2bf-4c61-40ea-9c4b-7e03967a1325 routing is down" ] }, { "title": "Checking no xtep-group is empty", "detail": [ "Remote RTEP group 4441344 is empty for lswitch 736d49c1-67d8-42dd-aa7e-c2964931d127", "Remote RTEP group 2930182 is empty for lswitch 8d513022-23e5-98ca-ac60-d1256882c656" ] } ] "page_cursor": "10" } Required Permissions: read Feature: system_administration Additional Errors:

Logical-router diagnosis

Returns information of specified logical-router configured on edge.
Request:
Method:
GET
URI Path(s):
/api/v1/node/logical-routers/<logical-router-id>/diagnosis
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/node/logical-routers/fd5b1cf9-8e31-47d8-87c3-0e5c0f613a02/diagnosis Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalRoutersInfo+

Example Response: { "result_count": 1, "results": [ { "logical_router_uuid": "fd5b1cf9-8e31-47d8-87c3-0e5c0f613a02", "router_type": "SERVICE_ROUTER_TIER0", "mp_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "name": "SR-tier0", "ha_info": { "failover_mode": "PREEMPTIVE", "ha_mode": "ACTIVE_STANDBY", "ha_state": "ACTIVE", ], "rank": 0, "state-history": [ { "event": "Routing Up", "state": "STANDBY", "event_timestamp": "2020-06-18T11:10:45.344657" }, { "event": "Remote State Updated", "state": "SYNC", "event_timestamp": "2020-06-18T11:10:40.344657" }, ] } } ] } Required Permissions: read Feature: logical_routers Additional Errors:

Logical-routers diagnosis

Returns information of all logical-routers or specified type of
logical-routers configured on edge.
Request:
Method:
GET
URI Path(s):
/api/v1/node/logical-routers/diagnosis
Request Headers:
n/a
Query Parameters:
LogicalRouterType+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/node/logical-routers/diagnosis (or) GET https://<ip>/api/v1/node/logical-routers/diagnosis?router_type=SERVICE_ROUTER_TIER0 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
LogicalRoutersInfo+

Example Response: { "result_count": 3, "results": [ { "logical_router_uuid": "fd5b1cf9-8e31-47d8-87c3-0e5c0f613a02", "router_type": "SERVICE_ROUTER_TIER0", "mp_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "name": "SR-tier0", "ha_info": { "failover_mode": "PREEMPTIVE", "ha_mode": "ACTIVE_STANDBY", "ha_state": "ACTIVE", ], "rank": 0, "state-history": [ { "event": "Routing Up", "state": "STANDBY", "event_timestamp": "2020-06-18T11:10:45.344657" }, { "event": "Remote State Updated", "state": "SYNC", "event_timestamp": "2020-06-18T11:10:40.344657" }, ] } }, { "router_type": "DISTRIBUTED_ROUTER_TIER0", "logical_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "mp_router_uuid": "7141da82-ecb9-4087-82ba-aed1b0d1dda1", "name": "DR-tier0" }, { "router_type": "TUNNEL", "logical_router_uuid": "736a80e3-23f6-5a2d-81d6-bbefb2786666", "name": "" } ] } Required Permissions: read Feature: logical_routers Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Nestdb

Associated URIs:

Read NSX Nestdb service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/nestdb
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Read NSX Nestdb service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/nestdb/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the NSX Nestdb service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/nestdb?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Replication Agent

Associated URIs:

Read NSX Edge Replica Agent service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/replica-agent
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Read NSX Edge Replica Agent service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/replica-agent/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the NSX Edge Replica Agent service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/replica-agent?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Services

System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Local-Controller

Associated URIs:

Read NSX Edge NSXA service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/local-controller
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/node/services/local-controller Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeNodeServiceLoggingProperties+

Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/local-controller", "rel": "self" }, "service_name": "local-controller", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: read Feature: system_administration Additional Errors:

Read NSX EdgeNSXA service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/local-controller/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the NSX EdgeNSXA service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/local-controller?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Maintenance Mode

Associated URIs:

Get Edge maintenance mode

Request:
Method:
GET
URI Path(s):
/api/v1/node/maintenance-mode
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
MaintenanceModePropertiesReply+

Required Permissions: read Feature: system_administration Description:
Get the maintenance mode of the edge node directly. When NAPI PUT /node/maintenance-mode is used to update maintenance mode, then desired state api will not reflect maintenance mode status accurately. To see the desired maintenance mode state of the edge node, use the API: GET /api/v1/transport-nodes/<node-id>
Additional Errors:

Set Edge maintenance mode

Request:
Method:
PUT
URI Path(s):
/api/v1/node/maintenance-mode
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
MaintenanceModePropertiesRequest+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
MaintenanceModePropertiesReply+

Required Permissions: crud Feature: system_administration Description:
Set the maintenance mode of the edge node directly, without updating the desired state on the NSX manager. To set the desired maintenance mode state of the edge node, use the APIs: POST /api/v1/transport-nodes/<node-id>?action=enter_maintenance_mode POST /api/v1/transport-nodes/<node-id>?action=exit_maintenance_mode
Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Replication Agent

Associated URIs:

Read NSX Autonomous Edge Replica Agent client status from the seconday node

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/replica-agent/client/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
ReplicaAgentClientStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Edge: Services: Routing

Associated URIs:

Read NSX EdgeMSR service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/router
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Read NSX EdgeMSRConfig service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/router-config
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Read NSX EdgeMSRConfig service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/router-config/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Read NSX EdgeMSR service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/router/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: NSX Manager: Services

System Administration: Configuration: Fabric: Nodes: NSX Manager: Services: Local-Controller Service

Associated URIs:

Update NSX Edge NSXA service properties

Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/local-controller
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeNodeServiceLoggingProperties+

Example Request: PUT https://<ip>/api/v1/node/services/local-controller { "service_name": "local-controller", "service_properties": { "logging_level": "DEBUG" } } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeNodeServiceLoggingProperties+

Example Response: { "_schema": "EdgeNodeServiceLoggingProperties", "_self": { "href": "/node/services/local-controller", "rel": "self" }, "service_name": "local-controller", "service_properties": { "logging_level": "DEBUG" } } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Network Interfaces

Associated URIs:

Read network configuration properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/network
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNetworkProperties+

Example Response: { "_schema": "NodeNetworkProperties", "_self": { "href": "/node/network", "rel": "self" } } Required Permissions: read Feature: system_administration Additional Errors:

List the Node's Network Interfaces

Returns the number of interfaces on the node appliance and detailed
information about each interface. Interface information includes MTU,
broadcast and host IP addresses, link and admin status, MAC address, network
mask, and the IP configuration method (static or DHCP).
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/interfaces
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/interfaces Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNetworkInterfacePropertiesListResult+

Example Response: { "result_count": 2, "results": [ { "admin_status": "up", "interface_id": "lo", "ip_addresses": [ { "ip_address": "127.0.0.1", "netmask": "255.0.0.0" } ], "link_status": "up", "mtu": 65536, }, { "admin_status": "up", "broadcast_address": "10.160.31.255", "default_gateway": "10.160.31.253", "interface_id": "eth0", "ip_addresses": [ { "ip_address": "10.160.30.117", "netmask": "255.255.224.0" } ], "ip_configuration": "static", "link_status": "up", "mtu": 1500, "physical_address": "02:00:16:60:c7:8f" } ] } Required Permissions: read Feature: system_administration Additional Errors:

Read the Node's Network Interface

Returns detailed information about the specified interface. Interface
information includes MTU, broadcast and host IP addresses, link and admin
status, MAC address, network mask, and the IP configuration method.
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/interfaces/<interface-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/interfaces/eth0 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNetworkInterfaceProperties+

Example Response: { "admin_status": "up", "broadcast_address": "10.160.31.255", "default_gateway": "10.160.31.253", "interface_id": "eth0", "ip_addresses": [ { "ip_address": "10.160.30.117", "netmask": "255.255.224.0" } ], "ip_configuration": "static", "link_status": "up", "mtu": 1500, "physical_address": "02:00:16:60:c7:8f" } Required Permissions: read Feature: system_administration Additional Errors:

Update the Node's Network Interface

Updates the specified interface properties. You cannot change
the properties ip_configuration,
ip_addresses, or plane. NSX
Manager must have a static IP address.
You must use NSX CLI to configure a controller or an edge node.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/network/interfaces/<interface-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeNetworkInterfaceProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/network/interfaces/eth0 { "interface_id": "eth0", "mtu": 1600 } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNetworkInterfaceProperties+

Example Response: { "admin_status": "up", "broadcast_address": "10.160.31.255", "default_gateway": "10.160.31.253", "interface_id": "eth0", "ip_addresses": [ { "ip_address": "10.160.30.117", "netmask": "255.255.224.0" } ], "ip_configuration": "static", "link_status": "up", "mtu": 1600, "physical_address": "02:00:16:60:c7:8f" } Required Permissions: crud Feature: system_administration Additional Errors:

Read the Node's Network Interface Statistics

On the specified interface, returns the number of received (rx), transmitted
(tx), and dropped packets; the number of bytes and errors received and
transmitted on the interface; and the number of detected collisions.
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/interfaces/<interface-id>/stats
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/interfaces/eth0/stats Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeInterfaceStatisticsProperties+

Example Response: { "interface_id": "eth0", "rx_bytes": 7360718 "rx_dropped": 1813, "rx_errors": 0, "rx_frame": 0, "rx_packets": 91656, "tx_bytes": 31611, "tx_carrier": 0, "tx_colls": 0, "tx_dropped": 0, "tx_errors": 0, "tx_packets": 261, } Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Network Interfaces: Routing

Associated URIs:

List node network routes

Returns detailed information about each route in the node routing
table. Route information includes the route type (default, static, and so
on), a unique route identifier, the route metric, the protocol from which
the route was learned, the route source (which is the preferred egress
interface), the route destination, and the route scope. The route scope
refers to the distance to the destination network: The "host" scope leads to
a destination address on the node, such as a loopback address;
the "link" scope leads to a destination on the local network; and the
"global" scope leads to addresses that are more than one hop away.
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/routes
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/routes Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeRoutePropertiesListResult+

Example Response: { "result_count": 2, "results": [ { "gateway": "10.33.87.253", "interface_id": "eth0" "route_id": "default-10.33.87.253-eth0-0", "route_type": "default", }, { "destination": "10.33.84.0" "interface_id": "eth0", "netmask": "255.255.252.0", "proto": "kernel", "route_id": "static-10.33.84.0-eth0-0", "route_type": "static", "scope": "link", "src": "10.33.87.207", } ] } Required Permissions: read Feature: system_administration Additional Errors:

Create node network route

Add a route to the node routing table. For static routes, the
route_type, interface_id, netmask, and destination are required parameters.
For default routes, the route_type, gateway address, and interface_id
are required. For blackhole routes, the route_type and destination are
required. All other parameters are optional. When you add a static route,
the scope and route_id are created automatically. When you add a default or
blackhole route, the route_id is created automatically. The route_id is
read-only, meaning that it cannot be modified. All other properties can be
modified by deleting and readding the route.
Request:
Method:
POST
URI Path(s):
/api/v1/node/network/routes
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeRouteProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/network/routes { "route_type": "static", "interface_id": "eth0", "netmask": "255.255.255.0", "destination": "10.33.85.0" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
NodeRouteProperties+

Example Response: { "destination": "10.33.85.0" "interface_id": "eth0", "netmask": "255.255.255.0", "route_id": "static-10.33.85.0-eth0-0", "route_type": "static", "scope": "link", } Required Permissions: crud Feature: system_administration Additional Errors:

Read node network route

Returns detailed information about a specified route in the node
routing table.
Request:
Method:
GET
URI Path(s):
/api/v1/node/network/routes/<route-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/network/routes/default-10.33.87.253-eth0-0 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeRouteProperties+

Example Response: { "gateway": "10.33.87.253", "interface_id": "eth0" "route_id": "default-10.33.87.253-eth0-0", "route_type": "default", } Required Permissions: read Feature: system_administration Additional Errors:

Delete node network route

Delete a route from the node routing table. You can modify an
existing route by deleting it and then posting the modified version of the
route. To verify, remove the route ID from the URI, issue a GET request, and
note the absense of the deleted route.
Request:
Method:
DELETE
URI Path(s):
/api/v1/node/network/routes/<route-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<nsx-mgr>/api/v1/node/network/routes/static-10.33.85.0-eth0-0 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services

Associated URIs:

List node services

Returns a list of all services available on the node applicance.
Request:
Method:
GET
URI Path(s):
/api/v1/node/services
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServicePropertiesListResult+

Example Response: { "result_count": 5, "results": [ { "service_name": "snmp" }, { "service_name": "syslog" }, { "service_name": "ntp" }, { "service_name": "ssh" }, { "service_name": "node-mgmt" } ] } Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: Log Insight

Associated URIs:

Read liagent service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/liagent
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/liagent Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Example Response: { "_schema": "NodeServiceProperties", "_self": { "href": "/node/services/liagent", "rel": "self" }, "service_name": "liagent" } Required Permissions: read Feature: system_administration Additional Errors:

Read liagent service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/liagent/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/liagent/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": { "href": "/node/services/liagent/status", "rel": "self" }, "pids": [], "runtime_state": "stopped" } Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the liagent service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/liagent?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/liagent?action=restart Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: NSX Platform Client

Associated URIs:

Read NSX Platform Client service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/nsx-platform-client
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Read NSX Platform Client service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/nsx-platform-client/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the NSX Platform Client service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/nsx-platform-client?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: NTP

Associated URIs:

Update NTP service properties

Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/ntp
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeNtpServiceProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/services/ntp { "service_name": "ntp", "service_properties": { "start_on_boot": true, "servers": [ "0.ubuntu.pool.ntp.org", "1.ubuntu.pool.ntp.org", "2.ubuntu.pool.ntp.org", "3.ubuntu.pool.ntp.org", "ntp.ubuntu.com", "192.168.110.10" ] } } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNtpServiceProperties+

Example Response: { "_schema": "NodeNtpServiceProperties", "_self": "/node/services/ntp", "service_name": "ntp", "service_properties": { "start_on_boot": true, "servers": [ "0.ubuntu.pool.ntp.org", "1.ubuntu.pool.ntp.org", "2.ubuntu.pool.ntp.org", "3.ubuntu.pool.ntp.org", "ntp.ubuntu.com", "192.168.110.10" ] } } Required Permissions: crud Feature: system_administration Additional Errors:

Read NTP service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/ntp
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/ntp Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeNtpServiceProperties+

Example Response: { "_schema": "NodeNtpServiceProperties", "_self": "/node/services/ntp", "service_name": "ntp", "service_properties": { "start_on_boot": true, "servers": [ "0.ubuntu.pool.ntp.org", "1.ubuntu.pool.ntp.org", "2.ubuntu.pool.ntp.org", "3.ubuntu.pool.ntp.org", "ntp.ubuntu.com" ] } } Required Permissions: read Feature: system_administration Additional Errors:

Read NTP service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/ntp/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/ntp/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ntp/status", "pids": [ 6270, 6272 ], "runtime_state": "running" } Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the NTP service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/ntp?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/ntp?action=restart Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ntp", "pids": [ 6035, 6270, 6272 ], "runtime_state": "running" } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: Node Management

Associated URIs:

Read appliance management service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/node-mgmt
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/node-mgmt Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Example Response: { "_schema": "NodeServiceProperties", "_self": "/node/services/node-mgmt", "service_name": "node-mgmt" } Required Permissions: read Feature: system_administration Additional Errors:

Read appliance management service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/node-mgmt/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/node-mgmt/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/node-mgmt/status", "monitor_pid": 19189, "monitor_runtime_state": "running", "pids": [ 19190 ], "runtime_state": "running" } Required Permissions: read Feature: system_administration Additional Errors:

Restart the node management service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/node-mgmt?action=restart
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/node-mgmt?action=restart Successful Response:
Response Code:
202 Accepted
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: SNMP

Associated URIs:

Read SNMP service properties

Read SNMP service properties. Request:
Method:
GET
URI Path(s):
/api/v1/node/services/snmp
Request Headers:
n/a
Query Parameters:
GetSNMPParameters+
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/snmp?show_sensitive_data=true Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSnmpServiceProperties+

Example Response: { "_schema": "NodeSnmpServiceProperties", "_self": { "href": "/node/services/snmp", "rel": "self" }, "service_name": "snmp", "service_properties": { "start_on_boot": false, "v2_configured": true, "communities": [ { "access": "READ_ONLY", "community_string": "snmpcommunity" } ], "v2_targets": [ { "server": "10.20.125.4", "port": 1162, "community_string": "snmpcommunity" } ], "v3_configured": false, "v3_auth_protocol": "SHA1", "v3_priv_protocol": "AES128", "v3_targets": [ { "server": "10.20.125.4", "port": 1162, "user_id": "user1", "security_level": "AUTH_PRIV" } ], "v3_users": [ { "user_id": "user1", "security_level": "AUTH_PRIV", "access": "READ_ONLY" } ] } Required Permissions: read Feature: system_administration Additional Errors:

Update SNMP service properties

Update SNMP service properties. Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/snmp
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeSnmpServiceProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/services/snmp { "service_name": "snmp", "service_properties": { "start_on_boot": false, "v2_configured": true, "communities": [ { "access": "READ_ONLY", "community_string": "snmpcommunity" } ], "v2_targets": [ { "server": "10.20.125.4", "port": 1162, "community_string": "snmpcommunity" } ], "v3_configured": false, "v3_auth_protocol": "SHA1", "v3_priv_protocol": "AES128", "v3_targets": [ { "server": "10.20.125.4", "port": 1162, "user_id": "user1", "security_level": "AUTH_PRIV" }, { "server": "10.20.125.6", "port": 1162, "user_id": "user2", "security_level": "AUTH_PRIV" } ], "v3_users": [ { "user_id": "user1", "auth_password": "password1", "priv_password": "password2", "security_level": "AUTH_PRIV" } ] } } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSnmpServiceProperties+

Example Response: { "_schema": "NodeSnmpServiceProperties", "_self": { "href": "/node/services/snmp", "rel": "self" }, "service_name": "snmp", "service_properties": { "start_on_boot": false, "v2_configured": true, "communities": [ { "access": "READ_ONLY", } ], "v2_targets": [ { "server": "10.20.125.4", "port": 1162 } ], "v3_configured": false, "v3_auth_protocol": "SHA1", "v3_priv_protocol": "AES128", "v3_targets": [ { "server": "10.20.125.4", "port": 1162, "user_id": "user1", "security_level": "AUTH_PRIV" }, { "server": "10.20.125.6", "port": 1162, "user_id": "user2", "security_level": "AUTH_PRIV" } ], "v3_users": [ { "user_id": "user1", "security_level": "AUTH_PRIV" "access": "READ_ONLY", } ] } } Required Permissions: crud Feature: system_administration Description:
Update SNMP service properties. The SNMP service is started if the communities property specifies a community or stopped if it contains an empty array. The start_on_boot property can only be true if a community is specified in the request or is already configured.
Additional Errors:

Read SNMP service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/snmp/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/snmp/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/snmp/status", "pids": [ 16754 ], "runtime_state": "running" } Required Permissions: read Feature: system_administration Additional Errors:

Update SNMP V3 Engine ID

Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/snmp/v3-engine-id
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeSnmpV3EngineID+

Example Request: PUT https://<nsx-mgr>/api/v1/node/services/snmp/v3-engine-id { "service_name": "snmp", "v3_engine_id": "80001adc80992933638c48f75900000001" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSnmpV3EngineID+

Example Response: { "_schema": "NodeSnmpV3EngineID", "_self": "/node/services/snmp/v3-engine-id", "service_name": "snmp", "v3_engine_id": "80001adc80992933638c48f75900000002" } } Required Permissions: crud Feature: system_administration Additional Errors:

Read SNMP V3 Engine ID

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/snmp/v3-engine-id
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/snmp/v3-engine-id Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSnmpV3EngineID+

Example Response: { "_schema": "NodeSnmpV3EngineID", "_self": "/node/services/snmp/v3-engine-id", "service_name": "snmp", "v3_engine_id": "80001adc80992933638c48f75900000001" } } Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the SNMP service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/snmp?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/snmp?action=restart Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/snmp", "pids": [ 16361 ], "runtime_state": "running" } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: SSH

Associated URIs:

Update ssh service properties

Update ssh service properties. If the start_on_boot property is updated to true, existing ssh sessions if any are stopped and the ssh service is restarted. Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/ssh
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeSshServiceProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/services/ssh { "service_name": "ssh", "service_properties": { "start_on_boot": false, "root_login": true } } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSshServiceProperties+

Example Response: { "_schema": "NodeSshServiceProperties", "_self": "/node/services/ssh", "service_name": "ssh", "service_properties": { "start_on_boot": false, "root_login": true } } Required Permissions: crud Feature: system_administration Additional Errors:

Read ssh service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/ssh
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/ssh Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSshServiceProperties+

Example Response: { "_schema": "NodeSshServiceProperties", "_self": "/node/services/ssh", "service_name": "ssh", "service_properties": { "start_on_boot": true, "root_login": true } } Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the ssh service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/ssh/notify_mpa?action=start|stop|restart
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/ssh/notify_mpa?action=start Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ssh", "pids": [ 15930 ], "runtime_state": "running" } Required Permissions: crud Feature: system_administration Additional Errors:

Read ssh service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/ssh/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/ssh/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ssh/status", "pids": [ 868 ], "runtime_state": "running" } Required Permissions: read Feature: system_administration Additional Errors:

Remove a host's fingerprint from known hosts file

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/ssh?action=remove_host_fingerprint
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
KnownHostParameter+

Example Request: POST https://<nsx-mgr>/api/v1/node/services/ssh?action=remove_host_fingerprint { "host": "192.168.110.105" } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Restart, start or stop the ssh service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/ssh?action=start|stop|restart
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/ssh?action=start Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/ssh", "pids": [ 15930 ], "runtime_state": "running" } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: Syslog

Associated URIs:

Read syslog service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/syslog
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Example Response: { "_schema": "NodeServiceProperties", "_self": { "href": "/node/services/syslog", "rel": "self" }, "service_name": "syslog" } Required Permissions: read Feature: system_administration Additional Errors:

Delete all node syslog exporters

Removes all syslog exporter rules.
Request:
Method:
DELETE
URI Path(s):
/api/v1/node/services/syslog/exporters
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<nsx-mgr>/api/v1/node/services/syslog/exporters Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_log Additional Errors:

List node syslog exporters

Returns the collection of registered syslog exporter rules, if any. The
rules specify the collector IP address and port, and the protocol to use.
Request:
Method:
GET
URI Path(s):
/api/v1/node/services/syslog/exporters
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog/exporters Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSyslogExporterPropertiesListResult+

Example Response: { "result_count": 2, "results": [ { "exporter_name": "syslog1", "level": "INFO", "port": 514, "protocol": "TCP", "server": "192.168.0.2" }, { "exporter_name": "syslog2", "level": "CRIT", "port": 514, "protocol": "TCP", "server": "192.168.0.1" } ] } Required Permissions: read Feature: system_log Additional Errors:

Add node syslog exporter

Adds a rule for exporting syslog information to a specified server. The
required parameters are the rule name (exporter_name); severity level
(emerg, alert, crit, and so on); transmission protocol (TCP or UDP); and
server IP address or hostname. The optional parameters are the syslog port
number, which can be 1 through 65,535 (514, by default); facility level to
use when logging messages to syslog (kern, user, mail, and so on); and
message IDs (msgids), which identify the types of messages to export.
Request:
Method:
POST
URI Path(s):
/api/v1/node/services/syslog/exporters
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeSyslogExporterProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/services/syslog/exporters { "exporter_name": "syslog4", "facilities": ["KERN", "USER"], "level": "INFO", "msgids": ["tcpin", "tcpout"], "port": 514, "protocol": "TCP", "server": "192.168.0.4" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
NodeSyslogExporterProperties+

Example Response: { "exporter_name": "syslog4", "facilities": [ "KERN", "USER" ], "level": "INFO", "msgids": [ "tcpin", "tcpout" ], "port": 514, "protocol": "TCP", "server": "192.168.0.4" } Required Permissions: crud Feature: system_log Additional Errors:

Delete node syslog exporter

Removes a specified rule from the collection of syslog exporter rules.
Request:
Method:
DELETE
URI Path(s):
/api/v1/node/services/syslog/exporters/<exporter-name>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<nsx-mgr>/api/v1/node/services/syslog/exporters/syslog4 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_log Additional Errors:

Read node syslog exporter

Returns information about a specific syslog collection point. Request:
Method:
GET
URI Path(s):
/api/v1/node/services/syslog/exporters/<exporter-name>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog/exporters/syslog1 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeSyslogExporterProperties+

Example Response: { "exporter_name": "syslog1", "level": "CRIT", "port": 514, "protocol": "TCP", "server": "192.168.0.1" } Required Permissions: read Feature: system_log Additional Errors:

Verify node syslog exporter

Collect iptables rules needed for all existing syslog exporters and verify
if the existing iptables rules are the same. If not, remove the stale rules
and add the new rules to make sure all exporters work properly.
Request:
Method:
POST
URI Path(s):
/api/v1/node/services/syslog/exporters?action=verify
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/syslog/exporters?action=verify Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_log Additional Errors:

Read syslog service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/syslog/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/syslog/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": { "href": "/node/services/syslog/status", "rel": "self" }, "pids": [ 661 ], "runtime_state": "running" } Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the syslog service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/syslog?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/syslog?action=restart Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: Tasks

Associated URIs:

List appliance management tasks

Request:
Method:
GET
URI Path(s):
/api/v1/node/tasks
Request Headers:
n/a
Query Parameters:
ApplianceManagementTaskQueryParameters+
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
ApplianceManagementTaskListResult+

Required Permissions: read Feature: system_information Additional Errors:

Read task properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/tasks/<task-id>
Request Headers:
n/a
Query Parameters:
ApplianceManagementSuppressRedirectQueryParameter+
Request Body:
n/a

Successful Response:
Response Code:
200 OK, 303 See Other
Response Headers:
Content-type: application/json
Response Body:
ApplianceManagementTaskProperties+

Required Permissions: read Feature: system_information Additional Errors:

Delete task

Request:
Method:
DELETE
URI Path(s):
/api/v1/node/tasks/<task-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

Read asynchronous task response

Request:
Method:
GET
URI Path(s):
/api/v1/node/tasks/<task-id>/response
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK, 201 Created, 202 Accepted, 204 No Content, 303 See Other
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_information Additional Errors:

Cancel specified task

Request:
Method:
POST
URI Path(s):
/api/v1/node/tasks/<task-id>?action=cancel
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Services: Upgrade Agent

Associated URIs:

Read NSX upgrade Agent service properties

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/nsx-upgrade-agent
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/nsx-upgrade-agent Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceProperties+

Example Response: { "_schema": "NodeServiceProperties", "_self": "/node/services/nsx-upgrade-agent", "service_name": "nsx-upgrade-agent" } Required Permissions: read Feature: system_administration Additional Errors:

Read Nsx upgrade agent service status

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/nsx-upgrade-agent/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/services/nsx-upgrade-agent/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/nsx-upgrade-agent/status", "monitor_pid": 1, "monitor_runtime_state": "running", "pids": [ 17892 ], "runtime_state": "running" } Required Permissions: read Feature: system_administration Additional Errors:

Restart, start or stop the NSX upgrade agent service

Request:
Method:
POST
URI Path(s):
/api/v1/node/services/nsx-upgrade-agent?action=restart|start|stop
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/services/nsx-upgrade-agent?action=restart Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeServiceStatusProperties+

Example Response: { "_schema": "NodeServiceStatusProperties", "_self": "/node/services/nsx-upgrade-agent", "monitor_pid": 1, "monitor_runtime_state": "running", "pids": [ 17892 ], "runtime_state": "running" } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Settings

Associated URIs:

Read node properties

Returns information about the NSX appliance. Information includes
release number, time zone, system time, kernel version, message of the day
(motd), and host name.
Request:
Method:
GET
URI Path(s):
/api/v1/node
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeProperties+

Example Response: { "cli_timeout": 600, "cli_output_datetime": true, "export_type": "UNRESTRICTED", "hostname": "VMware_NSX_Manager", "kernel_version": "3.14.17-nn1-server", "motd": "", "node_version": "1.0.0.0.0.3063398", "system_time": 1442277320585, "timezone": "Etc/UTC" } Required Permissions: read Feature: system_administration Additional Errors:

Update node properties

Modifies NSX appliance properties. Modifiable properties include the
timezone, message of the day (motd), and hostname. The NSX appliance
node_version, system_time, and kernel_version are read only and cannot be
modified with this method.
Request:
Method:
PUT
URI Path(s):
/api/v1/node
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node { "motd":"Welcome to the NSX Manager" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeProperties+

Example Response: { "cli_timeout": 600, "cli_output_datetime": true, "hostname": "VMware_NSX_Manager", "kernel_version": "3.14.17-nn1-server", "motd": "Welcome to the NSX Manager", "node_version": "1.0.0.0.0.3063398", "system_time": 1442277530217, "timezone": "Etc/UTC" } Required Permissions: crud Feature: system_administration Additional Errors:

List node processes

Returns the number of processes and information about each
process. Process information includes 1) mem_resident, which is roughly
equivalent to the amount of RAM, in bytes, currently used by the process,
2) parent process ID (ppid), 3) process name, 4) process up time in milliseconds,
5) mem_used, wich is the amount of virtual memory used by the process, in
bytes, 6) process start time, in milliseconds since epoch, 7) process ID
(pid), 8) CPU time, both user and the system, consumed by the process in
milliseconds.
Request:
Method:
GET
URI Path(s):
/api/v1/node/processes
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/processes Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeProcessPropertiesListResult+

Example Response: { "result_count": 80, "results": [ { "cpu_time": 800, "mem_resident": 593920, "mem_used": 1871872, "pid": 1, "ppid": 0, "process_name": "init", "start_time": 1412624269865, "uptime": 279760 }, ...[content omitted for brevity] ] } Required Permissions: read Feature: system_administration Additional Errors:

Read node process

Returns information for a specified process ID (pid). Request:
Method:
GET
URI Path(s):
/api/v1/node/processes/<process-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/processes/1 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeProcessProperties+

Example Response: { "cpu_time": 800, "mem_resident": 593920, "mem_used": 1871872, "pid": 1, "ppid": 0, "process_name": "init", "start_time": 1412624269865, "uptime": 279760 } Required Permissions: read Feature: system_administration Additional Errors:

Read node status

Returns information about the node appliance's file system, CPU,
memory, disk usage, and uptime.
Request:
Method:
GET
URI Path(s):
/api/v1/node/status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeStatusProperties+

Example Response: { "cpu_cores": 2, "file_systems": [ { "file_system": "/dev/sda2", "mount": "/", "total": 4790588, "type": "ext4", "used": 1402060 }, ...[content omitted for brevity] ], "load_average": [ 0.09, 0.1, 0.07 ], "mem_cache": 530348, "mem_total": 16430712, "mem_used": 3488064, "swap_total": 3997692, "swap_used": 0, "system_time": 1442278302776, "uptime": 22474490, "bootup_error": "\nBootup Errors:" } Required Permissions: read Feature: system_administration Additional Errors:

Update node status

Clear node bootup status
Request:
Method:
POST
URI Path(s):
/api/v1/node/status?action=clear_bootup_error
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node/status?action=clear_bootup_error Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeStatusProperties+

Example Response: { "cpu_cores": 2, "file_systems": [ { "file_system": "/dev/sda2", "mount": "/", "total": 4790588, "type": "ext4", "used": 1402060 }, ...[content omitted for brevity] ], "load_average": [ 0.09, 0.1, 0.07 ], "mem_cache": 530348, "mem_total": 16430712, "mem_used": 3488064, "swap_total": 3997692, "swap_used": 0, "system_time": 1442278302776, "uptime": 22474490 } Required Permissions: read Feature: system_administration Additional Errors:

Read node version

Request:
Method:
GET
URI Path(s):
/api/v1/node/version
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/version Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeVersion+

Example Response: { "node_version": "1.0.0.0.0.3063398" } Required Permissions: read Feature: system_information Additional Errors:

Restart or shutdown node

Restarts or shuts down the NSX appliance. Request:
Method:
POST
URI Path(s):
/api/v1/node?action=restart|shutdown
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-mgr>/api/v1/node?action=restart Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Set the node system time

Set the node system time to the given time in UTC in the RFC3339 format
'yyyy-mm-ddThh:mm:ssZ'.
Request:
Method:
POST
URI Path(s):
/api/v1/node?action=set_system_time
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeTime+

Example Request: POST https://<nsx-mgr>/api/v1/node?action=set_system_time { "system_datetime": "2019-03-06T00:19:35Z" } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: Support-Bundle

Associated URIs:

Read node support bundle

Request:
Method:
GET
URI Path(s):
/api/v1/node/support-bundle
Request Headers:
n/a
Query Parameters:
SupportBundleQueryParameters+
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/support-bundle Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/octet-stream
Response Body:
n/a

Example Response: Headers Content-Disposition : attachment;filename=nsx_support_bundle_20170818_002715.tgz Content-Type : application/x-tar Date : Thu, 18 Aug 2017 00:28:07 GMT Server : NSX Manager Transfer-Encoding : chunked Vmw-Task-Id : 421b38aa-e390-64b9-3fff-7ad6ebf59c40_10b1b5d6-0786-49a4-a61c-a1f64428b40e Required Permissions: read Feature: system_support_bundle Additional Errors:

System Administration: Configuration: Fabric: Nodes: User Management

System Administration: Configuration: Fabric: Nodes: User Management: Authentication Policy

Associated URIs:

Read node authentication policy configuration

Returns information about the currently configured authentication
policies on the node.
Request:
Method:
GET
URI Path(s):
/api/v1/node/aaa/auth-policy
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/aaa/auth-policy Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
AuthenticationPolicyProperties+

Example Response: { "_schema": "AuthenticationPolicyProperties", "_self": { "href": "/node/aaa/auth-policy", "rel": "self" }, "api_failed_auth_lockout_period": 900, "api_failed_auth_reset_period": 900, "api_max_auth_failures": 5, "cli_failed_auth_lockout_period": 900, "cli_max_auth_failures": 5, "minimum_password_length": 8 } Required Permissions: read Feature: system_administration Additional Errors:

Update node authentication policy configuration

Update the currently configured authentication policy on the node.
If any of api_max_auth_failures, api_failed_auth_reset_period, or
api_failed_auth_lockout_period are modified, the http service is
automatically restarted.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/aaa/auth-policy
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
AuthenticationPolicyProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/aaa/auth-policy { "minimum_password_length": 12 } Successful Response:
Response Code:
202 Accepted
Response Headers:
Content-type: application/json
Response Body:
AuthenticationPolicyProperties+

Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
AuthenticationPolicyProperties+

Example Response: { "minimum_password_length": 12 } Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: Fabric: Nodes: User Management: Users

Associated URIs:

List node users

Returns the list of users configured to log in to the NSX appliance.
Request:
Method:
GET
URI Path(s):
/api/v1/node/users
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/users Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeUserPropertiesListResult+

Example Response: { "result_count": 3, "results": [ { "full_name": "root", "userid": 0, "username": "root" }, { "full_name": "", "userid": 10000, "username": "admin" }, { "full_name": "", "userid": 10002, "username": "audit" } ] } Required Permissions: read Feature: system_administration_passwd_mgmt Additional Errors:

Read node user

Returns information about a specified user who is configured to log in to the
NSX appliance. The valid user IDs are: 0, 10000, 10002.
Request:
Method:
GET
URI Path(s):
/api/v1/node/users/<userid>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/users/10000 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeUserProperties+

Example Response: { "full_name": "", "userid": 10000, "username": "admin" } Required Permissions: read Feature: system_administration Additional Errors:

Update node user

Updates attributes of an existing NSX appliance user. This method
cannot be used to add a new user. Modifiable attributes include the
username, full name of the user, and password. If you specify a password in
a PUT request, it is not returned in the response. Nor is it returned in a
GET request.
The specified password does not meet the following complexity requirements:
- minimum 12 characters in length
- minimum 1 uppercase character
- minimum 1 lowercase character
- minimum 1 numeric character
- minimum 1 special character
- minimum 5 unique characters
- default password complexity rules as enforced by the Linux PAM module
The valid user IDs are: 0, 10000, 10002.
Note that invoking this API does not update any user-related properties of
existing objects in the system and does not modify the username field in existing
audit log entries.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/users/<userid>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
NodeUserProperties+

Example Request: PUT https://<nsx-mgr>/api/v1/node/users/10000 { "full_name": "Jane L. Doe", "username": "admin1" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
NodeUserProperties+

Example Response: { "full_name": "Jane L. Doe" "userid": 10000, "username": "admin1" } Required Permissions: crud Feature: system_administration_passwd_mgmt Additional Errors:

List SSH keys from authorized_keys file for node user

Returns a list of all SSH keys from authorized_keys file for node user
Request:
Method:
GET
URI Path(s):
/api/v1/node/users/<userid>/ssh-keys
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/users/10000/ssh-keys Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
SshKeyPropertiesListResult+

Example Response: { "result_count": 2, "results": [ { "label": "user1@domain1" "type": "ssh-rsa" "value": "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" }, { "label": "user2@domain2" "type": "ssh-rsa" "value": "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" } ] } Required Permissions: read Feature: system_administration Additional Errors:

Add SSH public key to authorized_keys file for node user

Request:
Method:
POST
URI Path(s):
/api/v1/node/users/<userid>/ssh-keys?action=add_ssh_key
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
SshKeyProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/users/10000/ssh-keys?action=add_ssh_key { "label": "user1@domain1", "type": "ssh-rsa", "value": "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", "password": "Pa$$w0rd" } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

Remove SSH public key from authorized_keys file for node user

Request:
Method:
POST
URI Path(s):
/api/v1/node/users/<userid>/ssh-keys?action=remove_ssh_key
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
SshKeyBaseProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/users/10000/ssh-keys?action=remove_ssh_key { "label": "user1@domain1", "password": "Pa$$w0rd" } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Configuration: System Properties

System Administration: Configuration: System Properties: Dataplane

Associated URIs:

Get NSX Edge dataplane geneve cbit setting

Request:
Method:
GET
URI Path(s):
/api/v1/node/services/dataplane/geneve-cbit
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneGeneveCbitSetting+

Required Permissions: read Feature: system_administration Additional Errors:

Update NSX Edge dataplane geneve cbit setting

Enable or disable NSX Edge dataplane geneve critical bit.
Request:
Method:
PUT
URI Path(s):
/api/v1/node/services/dataplane/geneve-cbit
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
EdgeDataplaneGeneveCbitSetting+

Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
EdgeDataplaneGeneveCbitSetting+

Required Permissions: crud Feature: system_administration Additional Errors:

System Administration: Lifecycle Management

System Administration: Lifecycle Management: Backup

Associated URIs:

Create backup for autonomous edge node in primary_api_node role

Create passphrase protected backup file for autonomous edge node in primary_api_node role.
Passphrase must be provided in request header.
The passphrase must meet the following complexity requirements -
- minimum 12 characters in length
- minimum 1 uppercase character
- minimum 1 lowercase character
- minimum 1 numeric character
- minimum 1 special character
Backup is only allowed on autonomous edge node in primary_api_node role.
For autonomous edge not in primary_api_node role, does not need backups.
Configurations are kept in sync internally from the primary_api_node to the
peer node in the high availibility cluster
Request:
Method:
GET
URI Path(s):
/api/v1/backup
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-edge>/api/v1/backup Headers passphrase: "Test1234567!" Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Example Response: Headers Content-Type: application/octet-stream Content-Disposition: attachment;filename=backup_20200709T193058.tar Vmw-Task-Id: 9d895c88-da84-4391-bdfa-e40cf680625b_2de6f14e-5240-41c0-8594-41e2c830f633 Server: nsx reverse-proxy Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Lifecycle Management: Restore

Associated URIs:

Perform restore on autonomous edge in primary_api_node role

Restore autonomous edge in primary_api_node using the passphrase protected backup file.
Passphrase must be provided in request header.
This operation is not supported on autonomous edge not in primary_api_node role.
If you need to restore such a node, please deploy a new autonomous edge VM in
secondary_api_node role and register it with an existing autonomous edge in primary_api_node role.
If the high availability cluster of existing autonomous edge in primary_api_node role
already has another autonomous edge node, delete the other node before registering a new one.
The configuration from primary_api_node autonomous edge will replicate to the peer node
in the high availibility cluster.
Request:
Method:
POST
URI Path(s):
/api/v1/restore
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: POST https://<nsx-edge>/api/v1/restore Headers passphrase: "Test1234567!" Content-Type: application/octet-stream Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Lifecycle Management: Upgrade

System Administration: Lifecycle Management: Upgrade: Nodes

Associated URIs:

Get upgrade task status (Deprecated)

Get upgrade task status for the given task of the given bundle.
Both bundle_name and task_id must be provided, otherwise you
will receive a 404 NOT FOUND response. This api is deprecated.
Please use API GET /node/upgrade/status-summary to get upgrade
status when upgrade is in progress.
Request:
Method:
GET
URI Path(s):
/api/v1/node/upgrade
Request Headers:
n/a
Query Parameters:
UpgradeTaskStatusQueryParameters+
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/upgrade?bundle_name=VMware-NSX-unified-appliance-2.1.0.0.0.6921065&upgrade_task_id=77834e07-7901-4e3d-bfe9-aa1df72cac6b Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
UpgradeTaskProperties+

Required Permissions: read Feature: system_administration Additional Errors:

Execute upgrade task

Execute upgrade task.
Request:
Method:
POST
URI Path(s):
/api/v1/node/upgrade/performtask
Request Headers:
n/a
Query Parameters:
UpgradeTaskActionParameters+
Request Body:
UpgradeTaskProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/upgrade/performtask?action=execute { "bundle_name" : "VMware-NSX-unified-appliance-2.1.0.0.0.6921065", "step": "list_commands", "parameters": { "parameter_key1": "parameter_value1", } } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
UpgradeTaskProperties+

Required Permissions: crud Feature: system_administration Additional Errors:

Get upgrade progress status

Get progress status of last upgrade step, if upgrade bundle is present.
Request:
Method:
GET
URI Path(s):
/api/v1/node/upgrade/progress-status
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/upgrade/progress-status Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
UpgradeProgressStatus+

Example Response: { "last_upgrade_step_status": { "args": { "bundle_files_path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558/files", "from_version": "2.5.1.0.0.30931558", "new_config_path": "/config_bak", "new_os_path": "/os_bak", "node_type": "nsx-manager nsx-policy-manager nsx-controller", "old_config_path": "/config", "old_os_path": "/", "status_file": "/tmp/upgradeLJBKeQ", "to_version": "2.5.1.0.0.30931558" }, "end_time": "2019-11-22 14:01:23.323716", "failure_reason": null, "name": "unregister_ccp", "path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558/scripts/unregister_ccp.py", "pid": 19445, "return_code": 0, "start_time": "2019-11-22 14:01:23.039104", "state": "TASK_SUCCESS", "status_file": "", "stderr": "", "stdout": "Unsupported version for unregistering", "task_id": "a715bc24-948d-441c-938a-4331078d3474" }, "upgrade_bundle_present": true, "upgrade_metadata": { "bundle_path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558", "from_version": "2.5.1.0.0.30931558", "new_config_dev": "/dev/mapper/nsx-config", "new_os_dev": "/dev/sda2", "old_config_dev": "/dev/mapper/nsx-config__bak", "old_os_dev": "/dev/sda3", "to_version": "2.5.1.0.0.30931558" } } Required Permissions: read Feature: system_administration Additional Errors:

Get upgrade status summary

Get status summary of node upgrade, if upgrade bundle is present.
Request:
Method:
GET
URI Path(s):
/api/v1/node/upgrade/status-summary
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/upgrade/status-summary Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
UpgradeStatusSummary+

Example Response: { "upgrade_steps": [ { "name": "download_os", "start_time": "2019-11-22 14:01:23.323716", "end_time": "2019-11-22 14:01:25.323716", "status" "SUCCESS", }, { "name": "shutdown_manager", "start_time": "2019-11-22 14:02:23.323716", "end_time": "2019-11-22 14:02:25.323716", "status" "SUCCESS", }, { "name": "install_os", "start_time": "2019-11-22 14:03:23.323716", "end_time": "2019-11-22 14:03:25.323716", "status" "SUCCESS", }, { "name": "migrate_manager_config", "start_time": "2019-11-22 14:04:23.323716", "end_time": "2019-11-22 14:04:25.323716", "status" "SUCCESS", }, { "name": "migrate_manager_config", "start_time": "2019-11-22 14:04:23.323716", "end_time": "2019-11-22 14:04:25.323716", "status" "SUCCESS", }, { "name": "start_manager", "start_time": "2019-11-22 14:01:39.323716", "end_time": "2019-11-22 14:01:39.323716", "status" "FAILED", "details": { "status": "wait_for_proton: resp_status: HTTPStatus.INTERNAL_SERVER_ERROR, body: None", "stderr": "Some error", "stdout": "Unsupported version for unregistering", "troubleshooting": "Please collect the support bundle and contact the VMWare GSS team" } } ] "upgrade_bundle_present": true, "upgrade_metadata": { "bundle_path": "/image/VMware-NSX-unified-appliance-2.5.1.0.0.30931558", "from_version": "2.5.1.0.0.30931558", "new_config_dev": "/dev/mapper/nsx-config", "new_os_dev": "/dev/sda2", "old_config_dev": "/dev/mapper/nsx-config__bak", "old_os_dev": "/dev/sda3", "to_version": "2.5.1.0.0.30931558" } } Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Monitoring: Logs

System Administration: Monitoring: Logs: Core Dumps

Associated URIs:

List system core dumps

Request:
Method:
GET
URI Path(s):
/api/v1/node/core-dumps
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<nsx-mgr>/api/v1/node/core-dumps Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
FilePropertiesListResult+

Example Response: { "_schema": "FilePropertiesListResult", "_self": "/node/core-dumps", "result_count": 2, "results": [ { "created_epoch_ms": 1457048893748, "modified_epoch_ms": 1457048860639, "name": "core.nginx.1559278043.gz", "size": 12408 }, { "created_epoch_ms": 1457048848624, "modified_epoch_ms": 1457048560936, "name": "core.dp-fp:1.1575263711.2688.0.11.g", "size": 20480 } ] } Required Permissions: read Feature: system_log Additional Errors:

Copy system generated core dump file to a remote file store

Copy system generated core dump file to a remote server. If you use scp or
sftp, you must provide the remote server's SSH fingerprint. See the
NSX-T Administration Guide for information and instructions
about finding the SSH fingerprint.
Request:
Method:
POST
URI Path(s):
/api/v1/node/core-dumps/<file-name>?action=copy_to_remote_file
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
CopyToRemoteFileProperties+

Example Request: POST https://<nsx-mgr>/api/v1/node/core-dumps/core.nginx.1559278043.gz?action=copy_to_remote_file { "port" : 22, "server": "192.168.120.151", "uri" : "/tmp/core.nginx.1559278043.gz", "protocol" : { "name" : "scp", "ssh_fingerprint" : "b5:08:df:c6:55:62:e4:6e:95:70:7c:25:ba:f2:46:f1" , "authentication_scheme" : { "scheme_name" : "password", "username" : "root" , "password" : "s4druMuJEw" } } } Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: read Feature: system_administration Additional Errors:

System Administration: Settings: Certificates

System Administration: Settings: Certificates: CRL

Associated URIs:

Return All Added CRLs

Returns information about all CRLs.
Request:
Method:
GET
URI Path(s):
/api/v1/trust-management/crls
Request Headers:
n/a
Query Parameters:
ListCertParameter+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/trust-management/crls Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
CrlList+

Example Response: { "result_count": 1, "results": [ { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL----------END X509 CRL-----\n", "_last_modified_time": 1413387436438, "_create_time": 1413386249116, "_create_user": "admin", "_last_modified_user": "admin" } ] } Required Permissions: read Feature: trust_crls Additional Errors:

Add a New Certificate Revocation List

Adds a new certificate revocation list (CRL). The CRL is used to verify the
client certificate status against the revocation lists published by the CA.
For this reason, the administrator needs to add the CRL in certificate
repository as well.
Request:
Method:
POST
URI Path(s):
/api/v1/trust-management/crls
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
CrlObjectData+

Example Request: POST https://<ip>/api/v1/trust-management/crls?action=import { "pem_encoded": "-----BEGIN X509 CRL----------END X509 CRL-----\n" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
CrlList+

Example Response: { "results": [ { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL----------END X509 CRL-----\n", "_last_modified_time": 1413386249116, "_create_time": 1413386249116, "_create_user": "admin", "_last_modified_user": "admin" } ] } Required Permissions: crud Feature: trust_crls Additional Errors:

Show CRL Data for the Given CRL ID

Returns information about the specified CRL.
Request:
Method:
GET
URI Path(s):
/api/v1/trust-management/crls/<crl-id>
Request Headers:
n/a
Query Parameters:
GetCertParameter+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/trust-management/crls/ebd3032d-728e-44d4-9914-d4f81c9972cb Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
Crl+

Example Response: { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL----------END X509 CRL-----\n", "details": { "next_update": "945220365000", "issuer": "1.2.840.113549.1.9.1=#161d726f6f744069676c6f6f2e6974732e756e696d656c622e6564752e6175,CN=igloo Certificate Authority,OU=Certificates Administration,O=igloo CA,L=Melbourne,ST=Victoria,C=AU", "version": "1" }, "_last_modified_user": "admin", "_last_modified_time": 1413387436438, "_create_time": 1413386249116, "_create_user": "admin" } Required Permissions: read Feature: trust_crls Additional Errors:

Delete a CRL

Deletes an existing CRL. Request:
Method:
DELETE
URI Path(s):
/api/v1/trust-management/crls/<crl-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/trust-management/crls/ebd3032d-728e-44d4-9914-d4f81c9972cb Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: trust_crls Additional Errors:

Update CRL for the Given CRL ID

Updates an existing CRL. Request:
Method:
PUT
URI Path(s):
/api/v1/trust-management/crls/<crl-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
Crl+

Example Request: PUT https://<ip>/api/v1/trust-management/crls/ebd3032d-728e-44d4-9914-d4f81c9972cb { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "pem_encoded": "-----BEGIN X509 CRL----------END X509 CRL-----\n" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
Crl+

Example Response: { "id": "ebd3032d-728e-44d4-9914-d4f81c9972cb", "display_name": "igloo Certificate Authority", "resource_type": "crl", "pem_encoded": "-----BEGIN X509 CRL----------END X509 CRL-----\n", "_last_modified_time": 1413387436438, "_create_time": 1413386249116, "_create_user": "admin", "_last_modified_user": "admin" } Required Permissions: crud Feature: trust_crls Additional Errors:

System Administration: Settings: Certificates: Certificate

Associated URIs:

Return All the User-Facing Components' Certificates

Returns all certificate information viewable by the user, including each
certificate's UUID; resource_type (for example, certificate_self_signed,
certificate_ca, or certificate_signed); pem_encoded data; and history of the
certificate (who created or modified it and when).
Request:
Method:
GET
URI Path(s):
/api/v1/trust-management/certificates
Request Headers:
n/a
Query Parameters:
ListCertParameter+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/trust-management/certificates Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
CertificateList+

Example Response: { "result_count": 2, "results": [ { "id": "2e15955d-acd1-4f49-abae-0c6ea65bf437", "resource_type": "certificate_ca", "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "_last_modified_time": 1413369285797, "_create_time": 1413369285797, "_create_user": "admin", "_last_modified_user": "admin" }, { "id": "506d00d6-bfd5-4ebe-8b7f-0236f8de4792", "resource_type": "certificate_signed", "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "_last_modified_time": 1413369285811, "_create_time": 1413369285811, "_create_user": "admin", "_last_modified_user": "admin" } ] } Required Permissions: read Feature: trust_certificates Additional Errors:

Add a New Certificate

Adds a new private-public certificate or a chain of certificates (CAs) and,
optionally, a private key that can be applied to one of the user-facing
components (appliance management or edge). The certificate and the key
should be stored in PEM format. If no private key is provided, the
certificate is used as a client certificate in the trust store.
Request:
Method:
POST
URI Path(s):
/api/v1/trust-management/certificates
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
TrustObjectData+

Example Request: POST https://<ip>/api/v1/trust-management/certificates { "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "private_key": "-----BEGIN RSA PRIVATE KEY----------END RSA PRIVATE KEY-----\n", "passphrase": "1234" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
CertificateList+

Example Response: { "results": [ { "id": "2e15955d-acd1-4f49-abae-0c6ea65bf437", "resource_type": "certificate_ca", "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "_last_modified_time": 1413369285797, "_create_time": 1413369285797, "_create_user": "admin", "_last_modified_user": "admin" }, { "id": "506d00d6-bfd5-4ebe-8b7f-0236f8de4792", "resource_type": "certificate_signed", "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "_last_modified_time": 1413369285811, "_create_time": 1413369285811, "_create_user": "admin", "_last_modified_user": "admin" } ] } Required Permissions: crud Feature: trust_certificates Additional Errors:

Delete Certificate for the Given Certificate ID

Removes the specified certificate. The private key associated with the
certificate is also deleted.
Request:
Method:
DELETE
URI Path(s):
/api/v1/trust-management/certificates/<cert-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/trust-management/certificates/7ded7754-a2fb-48cd-b534-f1f4a980d827 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: trust_certificates Additional Errors:

Update certificate for the given certificate ID

Updates an existing certificate. Request:
Method:
PUT
URI Path(s):
/api/v1/trust-management/certificates/<cert-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
TrustObjectData+

Example Request: PUT https://<ip>/api/v1/trust-management/certificates/2e15955d-acd1-4f49-abae-0c6ea65bf437 { "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "private_key": "-----BEGIN RSA PRIVATE KEY----------END RSA PRIVATE KEY-----\n", "passphrase": "1234" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
Certificate+

Example Response: { "id": "2e15955d-acd1-4f49-abae-0c6ea65bf437", "resource_type": "certificate_ca", "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "_last_modified_time": 1413369285797, "_create_time": 1413369285797, "_create_user": "admin", "_last_modified_user": "admin" } Required Permissions: crud Feature: trust_certificates Additional Errors:

Show Certificate Data for the Given Certificate ID

Returns information for the specified certificate ID, including the
certificate's UUID; resource_type (for example, certificate_self_signed,
certificate_ca, or certificate_signed); pem_encoded data; and history of the
certificate (who created or modified it and when).
Request:
Method:
GET
URI Path(s):
/api/v1/trust-management/certificates/<cert-id>
Request Headers:
n/a
Query Parameters:
GetCertParameter+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/trust-management/certificates/506d00d6-bfd5-4ebe-8b7f-0236f8de4792 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
Certificate+

Example Response: { "id": "506d00d6-bfd5-4ebe-8b7f-0236f8de4792", "resource_type": "certificate_signed", "pem_encoded": "-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n-----BEGIN CERTIFICATE----------END CERTIFICATE-----\n", "_last_modified_time": 1413369285811, "_create_time": 1413369285811, "_create_user": "admin", "_last_modified_user": "admin" } Required Permissions: read Feature: trust_certificates Additional Errors:

VPN: IPSEC

VPN: IPSEC: DPD Profiles

Associated URIs:

Create dead peer detection (DPD) profile

Create dead peer detection (DPD) profile. Any change in profile affects all sessions consuming this profile. Request:
Method:
POST
URI Path(s):
/api/v1/vpn/ipsec/dpd-profiles
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecVPNDPDProfile+

Example Request: POST https://<ip>/api/v1/vpn/ipsec/dpd-profiles { "resource_type" : "IPSecVPNDPDProfile", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNDPDProfile+

Example Response: { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Required Permissions: crud Feature: vpn Additional Errors:

Get IPSec dead peer detection (DPD) profile list result

Get paginated list of all dead peer detection (DPD) profiles. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/dpd-profiles
Request Headers:
n/a
Query Parameters:
ListRequestParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/dpd-profiles Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNDPDProfileListResult+

Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } ] } Required Permissions: read Feature: vpn Additional Errors:

Get IPSec dead peer detection (DPD) profile

Get IPSec dead peer detection (DPD) profile. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/dpd-profiles/<ipsec-vpn-dpd-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/dpd-profiles/12a39f8c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNDPDProfile+

Example Response: { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Required Permissions: read Feature: vpn Additional Errors:

Edit IPSec dead peer detection (DPD) profile

Edit IPSec dead peer detection (DPD) profile. Request:
Method:
PUT
URI Path(s):
/api/v1/vpn/ipsec/dpd-profiles/<ipsec-vpn-dpd-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecVPNDPDProfile+

Example Request: PUT https://<ip>/api/v1/vpn/ipsec/dpd-profiles/f962173f-ac03-4d08-8366-56a41779f61d { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNDPDProfile+

Example Response: { "resource_type" : "IPSecVPNDPDProfile", "id" : "12a39f8c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-dpd-profile", "enabled" : true, "dpd_probe_interval" : 90 } Required Permissions: crud Feature: vpn Additional Errors:

Delete dead peer detection (DPD) profile

Delete dead peer detection (DPD) profile. Request:
Method:
DELETE
URI Path(s):
/api/v1/vpn/ipsec/dpd-profiles/<ipsec-vpn-dpd-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/dpd-profiles/12a39f8c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: vpn Additional Errors:

VPN: IPSEC: IKE Profiles

Associated URIs:

List IKE profiles

Get paginated list of all IKE Profiles. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/ike-profiles
Request Headers:
n/a
Query Parameters:
ListRequestParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/ike-profiles Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNIKEProfileListResult+

Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } ] } Required Permissions: read Feature: vpn Additional Errors:

Create custom internet key exchange (IKE) Profile

Create custom internet key exchange (IKE) Profile. IKE Profile is a reusable profile that captures IKE and phase one negotiation parameters. System will be pre provisioned with system owned non editable default IKE profile and suggested set of profiles that can be used for peering with popular remote peers like AWS VPN. User can create custom profiles as needed. Any change in profile affects all sessions consuming this profile. Request:
Method:
POST
URI Path(s):
/api/v1/vpn/ipsec/ike-profiles
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecVPNIKEProfile+

Example Request: POST https://<ip>/api/v1/vpn/ipsec/ike-profiles { "resource_type" : "IPSecVPNIKEProfile", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNIKEProfile+

Example Response: { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Required Permissions: crud Feature: vpn Additional Errors:

Delete custom IKE Profile

Delete custom IKE Profile. Profile can not be deleted if profile has references to it. Request:
Method:
DELETE
URI Path(s):
/api/v1/vpn/ipsec/ike-profiles/<ipsec-vpn-ike-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/ike-profiles/12a3a23e-c37b-11e7-abc4-cec278b6b50a Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: vpn Additional Errors:

Get IKE Profile

Get custom IKE Profile, given the particular id. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/ike-profiles/<ipsec-vpn-ike-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/ike-profiles/12a3a23e-c37b-11e7-abc4-cec278b6b50a Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNIKEProfile+

Example Response: { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_FLEX", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Required Permissions: read Feature: vpn Additional Errors:

Edit custom IKE Profile

Edit custom IKE Profile. System owned profiles are non editable. Request:
Method:
PUT
URI Path(s):
/api/v1/vpn/ipsec/ike-profiles/<ipsec-vpn-ike-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecVPNIKEProfile+

Example Request: PUT https://<ip>/api/v1/vpn/ipsec/ike-profiles/12a3a23e-c37b-11e7-abc4-cec278b6b50a { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_V1", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNIKEProfile+

Example Response: { "resource_type" : "IPSecVPNIKEProfile", "id" : "12a3a23e-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-ike-profile", "encryption_algorithms" : [ "AES_128" ], "ike_version" : "IKE_V1", "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 86400, "dh_groups" : [ "GROUP14" ] } Required Permissions: crud Feature: vpn Additional Errors:

VPN: IPSEC: Multi Path Groups

Associated URIs:

Get IPSec multipath group list result

Get paginated list of all IPSec multipath groups. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/multi-path-groups
Request Headers:
n/a
Query Parameters:
ListRequestParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/multi-path-groups Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecMultiPathGroupListResult+

Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } ] } Required Permissions: read Feature: vpn Additional Errors:

Create custom IPSec VPN multipath group

Create custom IPSec VPN multipath group. Request:
Method:
POST
URI Path(s):
/api/v1/vpn/ipsec/multi-path-groups
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecMultiPathGroup+

Example Request: POST https://<ip>/api/v1/vpn/ipsec/multi-path-groups { "resource_type" : "IPSecMultiPathGroup", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
IPSecMultiPathGroup+

Example Response: { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Required Permissions: crud Feature: vpn Additional Errors:

Delete custom IPSec multipath group

Delete custom IPSec multipath group. It cannot be deleted if it is referenced
by any IPSec sessions.
Request:
Method:
DELETE
URI Path(s):
/api/v1/vpn/ipsec/multi-path-groups/<ipsec-multi-path-group-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/multi-path-groups/514f0bef-52cc-4652-a886-03501a1cebb6 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: vpn Additional Errors:

Update custom IPSec multipath group

Update custom IPSec multipath group. Request:
Method:
PUT
URI Path(s):
/api/v1/vpn/ipsec/multi-path-groups/<ipsec-multi-path-group-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecMultiPathGroup+

Example Request: PUT https://<ip>/api/v1/vpn/ipsec/multi-path-groups/514f0bef-52cc-4652-a886-03501a1cebb6 { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : false, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecMultiPathGroup+

Example Response: { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : false, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Required Permissions: crud Feature: vpn Additional Errors:

Get IPSec multipath group

Get custom IPSec multipath group, given the particular id. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/multi-path-groups/<ipsec-multi-path-group-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/multi-path-groups/514f0bef-52cc-4652-a886-03501a1cebb6 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecMultiPathGroup+

Example Response: { "resource_type" : "IPSecMultiPathGroup", "id" : "514f0bef-52cc-4652-a886-03501a1cebb6", "display_name" : "ipsec-multi-path-group", "enabled" : true, "scheme": "THRESHOLD_BASED", "scheme_value": 80, "source_port_pool_size" : 7 } Required Permissions: read Feature: vpn Additional Errors:

VPN: IPSEC: Sessions

Associated URIs:

Create new VPN session

Create new VPN session. Request:
Method:
POST
URI Path(s):
/api/v1/vpn/ipsec/sessions
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
PolicyBasedIPSecVPNSession+
RouteBasedIPSecVPNSession+

Example Request: POST https://<ip>/api/v1/vpn/ipsec/sessions { "resource_type": "PolicyBasedIPSecVPNSession", "display_name": "PBS 12", "enabled": true, "policy_rules": [ { "sources": [ { "subnet": "1.1.2.0/24" } ], "destinations": [ { "subnet": "2.1.4.0/24" } ], "action": "PROTECT" } ], "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "peer_id": "4.4.4.1", "peer_address": "4.4.4.1", "psk": "TESTPSK", "connection_initiation_mode": "ON_DEMAND", "authentication_mode": "PSK" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
PolicyBasedIPSecVPNSession+
RouteBasedIPSecVPNSession+

Example Response: { "display_name": "PBS 12", "enabled": true, "id": "e23554c3-a4f7-4144-8bbc-1daf88106b7e", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } Required Permissions: crud Feature: vpn Additional Errors:

Get IPSec VPN session list result

Get paginated list of all IPSec VPN sessions. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/sessions
Request Headers:
n/a
Query Parameters:
IPSecVPNSessionListParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNSessionListResult+

Example Response: { "_schema": "IPSecVPNSessionListResult", "_self": { "href": "/api/v1/vpn/ipsec/sessions", "rel": "self" }, "result_count": 1, "results": [ { "display_name": "PBS 12", "enabled": true, "id": "df90e18a-08cc-418a-8c0f-259d9531c207", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } ] } Required Permissions: read Feature: vpn Additional Errors:

Edit IPSec VPN session

Edit IPSec VPN session. Request:
Method:
PUT
URI Path(s):
/api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
PolicyBasedIPSecVPNSession+
RouteBasedIPSecVPNSession+

Example Request: PUT https://<ip>/api/v1/vpn/ipsec/sessions/df90e18a-08cc-418a-8c0f-259d9531c207 { "resource_type": "RouteBasedIPSecVPNSession", "display_name": "Route Session", "enabled": true, "tunnel_ports": [ { "ip_subnets": [ { "ip_addresses": [ "192.168.50.1" ], "prefix_length": 24 } ] } ] "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "peer_id": "4.4.4.1", "peer_address": "4.4.4.1", "psk": "TESTPSK", "connection_initiation_mode": "RESPOND_ONLY", "authentication_mode": "PSK" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
PolicyBasedIPSecVPNSession+
RouteBasedIPSecVPNSession+

Example Response: { "resource_type": "RouteBasedIPSecVPNSession", "display_name": "Route Session", "enabled": true, "tunnel_ports": [ { "ip_subnets": [ { "ip_addresses": [ "192.168.50.1" ], "prefix_length": 24 } ], "tunnel_port_id": "57d1d8e8-edfe-40e0-a45c-44256546d787" } ] "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "peer_id": "4.4.4.1", "peer_address": "4.4.4.1", "psk": "TESTPSK", "connection_initiation_mode": "RESPOND_ONLY", "authentication_mode": "PSK" } Required Permissions: crud Feature: vpn Additional Errors:

Delete IPSec VPN session

Delete IPSec VPN session. Request:
Method:
DELETE
URI Path(s):
/api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/sessions/ee4f7777-f837-4dbb-9a03-eeb9beb52b09 Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: vpn Additional Errors:

Fetch IPSec VPN session

Fetch IPSec VPN session. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions/df90e18a-08cc-418a-8c0f-259d9531c207 Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
PolicyBasedIPSecVPNSession+
RouteBasedIPSecVPNSession+

Example Response: { "display_name": "PBS 12", "enabled": true, "id": "df90e18a-08cc-418a-8c0f-259d9531c207", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } Required Permissions: read Feature: vpn Additional Errors:

Fetch IPSec VPN session with PSK

Fetch IPSec VPN session with PSK. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/sessions/<ipsec-vpn-session-id>?action=show-sensitive-data
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions/df90e18a-08cc-418a-8c0f-259d9531c207?action=show-sensitive-data Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
PolicyBasedIPSecVPNSession+
RouteBasedIPSecVPNSession+

Example Response: { "display_name": "PBS 12", "enabled": true, "id": "df90e18a-08cc-418a-8c0f-259d9531c207", "local_endpoint": { "local_address": "2.2.2.2", "local_id": "2.2.2.2" }, "authentication_mode": "PSK", "connection_initiation_mode": "ON_DEMAND", "peer_address": "4.4.4.1", "peer_id": "4.4.4.1", "psk": "TESTPSK", "policy_rules": [ { "action": "PROTECT", "destinations": [ { "subnet": "2.1.4.0/24" } ], "id": "1026", "sources": [ { "subnet": "1.1.2.0/24" } ] } ], "resource_type": "PolicyBasedIPSecVPNSession" } Required Permissions: read Feature: vpn Additional Errors:

VPN: IPSEC: Statistics

Associated URIs:

Get IPSec VPN session statistics

Get statistics of a vpn session across all tunnels and IKE session. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/sessions/<session-id>/statistics
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/sessions/9ac3f2d8-9ba0-4e4e-8d34-2a5eb568f3e0/statistics Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNSessionStatistics+

Example Response: { "display_name": "IPSecVPN_PolicyBasesdSession_001", "policy_statistics": [ { "policy_id": "1026", "tunnel_statistics": [ { "packets_sent_other_error": 0, "packets_out": 0, "dropped_packets_out": 0, "integrity_failures": 0, "nomatching_policy_errors": 0, "sa_mismatch_errors_in": 0, "peer_subnet": "2.2.5.0/24", "replay_errors": 0, "bytes_in": 0, "local_subnet": "192.168.100.0/24", "dropped_packets_in": 0, "encryption_failures": 0, "decryption_failures": 0, "tunnel_down_reason": "", "packets_receive_other_error": 0, "bytes_out": 0, "sa_mismatch_errors_out": 0, "seq_number_overflow_error": 0, "packets_in": 0, "tunnel_status": "UP" } ], "aggregate_traffic_counters": { "packets_out": 0, "dropped_packets_out": 0, "bytes_out": 0, "dropped_packets_in": 0, "bytes_in": 0, "packets_in": 0 } } ], "partial_stats": false, "ike_status": { "fail_reason": "", "ike_session_state": "UP" }, "aggregate_traffic_counters": { "packets_out": 0, "dropped_packets_out": 0, "bytes_out": 0, "dropped_packets_in": 0, "bytes_in": 0, "packets_in": 0 }, "session_status": "UP", "failed_tunnels": 0, "negotiated_tunnels": 1, "total_tunnels": 1, "ipsec_vpn_session_id": "9ac3f2d8-9ba0-4e4e-8d34-2a5eb568f3e0" } Required Permissions: read Feature: vpn Additional Errors:

VPN: IPSEC: Tunnel Profiles

Associated URIs:

Get IPSecTunnelProfile List Result

Get paginated list of all IPSecTunnelProfiles. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/tunnel-profiles
Request Headers:
n/a
Query Parameters:
ListRequestParameters+
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/tunnel-profiles Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNTunnelProfileListResult+

Example Response: { "result_count" : 1, "results" : [ { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } ] } Required Permissions: read Feature: vpn Additional Errors:

Create custom IPSec tunnel profile

Create custom IPSec tunnel profile. IPSec tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. System will be provisioned with system owned non editable default IPSec tunnel profile. Any change in profile affects all sessions consuming this profile. Request:
Method:
POST
URI Path(s):
/api/v1/vpn/ipsec/tunnel-profiles
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecVPNTunnelProfile+

Example Request: POST https://<ip>/api/v1/vpn/ipsec/tunnel-profiles { "resource_type" : "IPSecVPNTunnelProfile", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Successful Response:
Response Code:
201 Created
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNTunnelProfile+

Example Response: { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Required Permissions: crud Feature: vpn Additional Errors:

Edit custom IPSecTunnelProfile

Edit custom IPSec Tunnel Profile. System owned profiles are non editable. Request:
Method:
PUT
URI Path(s):
/api/v1/vpn/ipsec/tunnel-profiles/<ipsec-vpn-tunnel-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
IPSecVPNTunnelProfile+

Example Request: PUT https://<ip>/api/v1/vpn/ipsec/tunnel-profiles/12a3a34c-c37b-11e7-abc4-cec278b6b50a { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNTunnelProfile+

Example Response: { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Required Permissions: crud Feature: vpn Additional Errors:

Get IPSec tunnel profile

Get custom IPSec Tunnel Profile. Request:
Method:
GET
URI Path(s):
/api/v1/vpn/ipsec/tunnel-profiles/<ipsec-vpn-tunnel-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: GET https://<ip>/api/v1/vpn/ipsec/tunnel-profiles/12a3a34c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
IPSecVPNTunnelProfile+

Example Response: { "resource_type" : "IPSecVPNTunnelProfile", "id" : "12a3a34c-c37b-11e7-abc4-cec278b6b50a", "display_name" : "nsx-default-tunnel-profile", "enable_perfect_forward_secrecy" : true, "encryption_algorithms" : [ "AES_128" ], "digest_algorithms" : [ "SHA2_256" ], "sa_life_time" : 3600, "dh_groups" : [ "GROUP14" ], "encapsulation_mode" : "TUNNEL_MODE", "transform_protocol" : "ESP", "df_policy" : "COPY" } Required Permissions: read Feature: vpn Additional Errors:

Delete custom IPSecTunnelProfile

Delete custom IPSec Tunnel Profile. Request:
Method:
DELETE
URI Path(s):
/api/v1/vpn/ipsec/tunnel-profiles/<ipsec-vpn-tunnel-profile-id>
Request Headers:
n/a
Query Parameters:
n/a
Request Body:
n/a

Example Request: DELETE https://<ip>/api/v1/vpn/ipsec/tunnel-profiles/12a3a34c-c37b-11e7-abc4-cec278b6b50a Successful Response:
Response Code:
200 OK
Response Headers:
n/a
Response Body:
n/a

Required Permissions: crud Feature: vpn Additional Errors:


API Types


ActionDescriptor (schema)

Name Description Type Notes
description A description of what the action does string Readonly
descriptor The URI of the REST routine provider that implements the action string Required
Readonly
name The name of the action string Required
Readonly
uri The URI to use to invoke the action string Required
Readonly

ApiCertificate (schema)

Name Description Type Notes
api_certificate API certificate string Required
api_key API private key string
ca_certificate CA certificate string Required

ApiCertificateReply (schema)

Name Description Type Notes
status API certificate replacement status string Required

ApplianceManagementSuppressRedirectQueryParameter (schema)

Name Description Type Notes
suppress_redirect Suppress redirect status if applicable

Do not return a redirect HTTP status.
boolean Default: "False"

ApplianceManagementTaskListResult (schema)

Appliance management task query results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Task property results array of ApplianceManagementTaskProperties Required

ApplianceManagementTaskProperties (schema)

Appliance management task properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
async_response_available True if response for asynchronous request is available boolean Readonly
cancelable True if this task can be canceled boolean Readonly
description Description of the task string Readonly
details Details about the task if known object Readonly
end_time The end time of the task in epoch milliseconds EpochMsTimestamp Readonly
id Identifier for this task string Readonly
Pattern: "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}_[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
message A message describing the disposition of the task string Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
progress Task progress if known, from 0 to 100 integer Readonly
Minimum: 0
Maximum: 100
request_method HTTP request method string Readonly
request_uri URI of the method invocation that spawned this task string Readonly
start_time The start time of the task in epoch milliseconds EpochMsTimestamp Readonly
status Current status of the task ApplianceManagementTaskStatus Readonly
user Name of the user who created this task string Readonly

ApplianceManagementTaskQueryParameters (schema)

Name Description Type Notes
fields Fields to include in query results

Comma-separated field names to include in query result
string
request_method Request method(s) to include in query result

Comma-separated request methods to include in query result
string Pattern: "^(=|!=|~|!~)?.+$"
request_path Request URI path(s) to include in query result

Comma-separated request paths to include in query result
string Pattern: "^(=|!=|~|!~)?.+$"
request_uri Request URI(s) to include in query result

Comma-separated request URIs to include in query result
string Pattern: "^(=|!=|~|!~)?.+$"
status Status(es) to include in query result

Comma-separated status values to include in query result
string Pattern: "^(=|!=|~|!~)?.+$"
user Names of users to include in query result

Comma-separated user names to include in query result
string Pattern: "^(=|!=|~|!~)?.+$"

ApplianceManagementTaskStatus (schema)

Current status of the appliance management task

Name Description Type Notes
ApplianceManagementTaskStatus Current status of the appliance management task string Enum: running, error, success, canceling, canceled, killed

AuthenticationPolicyProperties (schema)

Configuration of authentication policies for the NSX node

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
api_failed_auth_lockout_period Lockout period in seconds

Once a lockout occurs, the account remains locked out of the API for this time period. Only applies to NSX Manager nodes. Ignored on other node types.
integer Minimum: 0
Default: "900"
api_failed_auth_reset_period Period, in seconds, for authentication failures to trigger lockout

In order to trigger an account lockout, all authentication failures must occur in this time window. If the reset period expires, the failed login count is reset to zero. Only applies to NSX Manager nodes. Ignored on other node types.
integer Minimum: 0
Default: "900"
api_max_auth_failures Number of authentication failures that trigger API lockout

Only applies to NSX Manager nodes. Ignored on other node types.
integer Minimum: 0
Default: "5"
cli_failed_auth_lockout_period Lockout period in seconds

Once a lockout occurs, the account remains locked out of the CLI for this time period. While the lockout period is in effect, additional authentication attempts restart the lockout period, even if a valid password is specified.
integer Minimum: 0
Default: "900"
cli_max_auth_failures Number of authentication failures that trigger CLI lockout integer Minimum: 0
Default: "5"
minimum_password_length Minimum number of characters required in account passwords integer Minimum: 8
Default: "8"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

AuthenticationScheme (schema)

Name Description Type Notes
scheme_name Authentication scheme name string Required

AutonomousEdgeClusterConfig (schema)

Name Description Type Notes
nodes Nodes in the cluster array of TransportNodeInEdgeCluster Minimum items: 1
Maximum items: 2

BasicAuthenticationScheme (schema)

Name Description Type Notes
password Password to authenticate with string Required
scheme_name Authentication scheme name string Required
Enum: basic
username User name to authenticate with string Required
Pattern: "^.+$"

BlackholeAction (schema)

Action to be taken on matching packets for NULL routes. For action is DISCARD, matching packets are dropped rather than forwarded.

Name Description Type Notes
BlackholeAction Action to be taken on matching packets for NULL routes. For action is DISCARD, matching packets are dropped rather than forwarded. string Enum: DISCARD

Certificate (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
details list of X509Certificates array of X509Certificate Readonly
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
pem_encoded pem encoded certificate data string Required
resource_type Must be set to the value Certificate string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
used_by list of node IDs with services, that are using this certificate array of NodeIdServicesMap Readonly

CertificateList (schema)

Certificate queries result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Certificate list array of Certificate Required
Readonly

ConfigType (schema)

Config Type

Name Description Type Notes
ConfigType Config Type string Enum: nsxa-state, nsxa-edge-cluster, nsxa-lrouter, nsxa-service-router, nestdb, edge-agent, dataplane, nsd, manager, controller, core

CopyFromRemoteFileProperties (schema)

Name Description Type Notes
port Server port integer Minimum: 1
Maximum: 65535
protocol Protocol to use to copy file Protocol
(Abstract type: pass one of the following concrete types)
HttpProtocol
HttpsProtocol
ScpProtocol
SftpProtocol
Required
server Remote server hostname or IP address string Required
Pattern: "^[^/:]+$"
uri URI of file to copy string Required

CopyRemoteFileProperties (schema)

Name Description Type Notes
port Server port integer Minimum: 1
Maximum: 65535
server Remote server hostname or IP address string Required
Pattern: "^[^/:]+$"
uri URI of file to copy string Required

CopyToRemoteFileProperties (schema)

Name Description Type Notes
port Server port integer Minimum: 1
Maximum: 65535
protocol Protocol to use to copy file

Only scp and sftp may be used.
Protocol
(Abstract type: pass one of the following concrete types)
HttpProtocol
HttpsProtocol
ScpProtocol
SftpProtocol
Required
server Remote server hostname or IP address string Required
Pattern: "^[^/:]+$"
uri URI of file to copy string Required

CpuStats (schema)

Name Description Type Notes
core core id

CPU id
string Readonly
cpu_type cpu type

cpu type, one of datapath_core, controlpath_core and service_core
string Readonly
Enum: datapath_core, controlpath_core, service_core
Default: "controlpath_core"
crypto CPU crypto usage

CPU crypto usage(pps)
string Readonly
intercore CPU intercore usage

CPU intercore usage(pps)
string Readonly
kni CPU kni usage

CPU kni usage(pps)
string Readonly
packet_processing_usage Datapath CPU packet processing usage

Datapath CPU packet processing usage(%)
string Readonly
rx CPU rx usage

CPU rx usage(pps)
string Readonly
slowpath CPU slowpath usage

CPU slowpath usage(pps)
string Readonly
tx CPU tx usage

CPU tx usage(pps)
string Readonly
usage CPU usage

CPU usage(%)
string Readonly

CreateRemoteDirectoryProperties (schema)

Name Description Type Notes
port Server port integer Minimum: 1
Maximum: 65535
protocol Protocol to use to copy file SftpProtocol Required
server Remote server hostname or IP address string Required
Pattern: "^[^/:]+$"
uri URI of file to copy string Required

Crl (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
details details of the X509Crl object X509Crl Readonly
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
pem_encoded pem encoded crl data string Required
resource_type Must be set to the value Crl string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

CrlList (schema)

Crl queries result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results CRL list array of Crl Required
Readonly

CrlObjectData (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
pem_encoded pem encoded crl data string Required
resource_type Must be set to the value CrlObjectData string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

DHGroup (schema)

Diffie-Hellman groups

Diffie-Hellman groups represent algorithm used to derive shared
keys between IPSec VPN initiator and responder over an
unsecured network.
GROUP2 uses 1024-bit Modular Exponentiation (MODP) group.
GROUP5 uses 1536-bit MODP group.
GROUP14 uses 2048-bit MODP group.
GROUP15 uses 3072-bit MODP group.
GROUP16 uses 4096-bit MODP group.
GROUP19 uses 256-bit random Elliptic Curve (ECP) group.
GROUP20 uses 384-bit random ECP group.
GROUP21 uses 521-bit random ECP group.

Name Description Type Notes
DHGroup Diffie-Hellman groups

Diffie-Hellman groups represent algorithm used to derive shared
keys between IPSec VPN initiator and responder over an
unsecured network.
GROUP2 uses 1024-bit Modular Exponentiation (MODP) group.
GROUP5 uses 1536-bit MODP group.
GROUP14 uses 2048-bit MODP group.
GROUP15 uses 3072-bit MODP group.
GROUP16 uses 4096-bit MODP group.
GROUP19 uses 256-bit random Elliptic Curve (ECP) group.
GROUP20 uses 384-bit random ECP group.
GROUP21 uses 521-bit random ECP group.
string Enum: GROUP2, GROUP5, GROUP14, GROUP15, GROUP16, GROUP19, GROUP20, GROUP21

DatetimeUTC (schema)

Datetime string in UTC

Datetime string in UTC in the RFC3339 format 'yyyy-mm-ddThh:mm:ssZ'

Name Description Type Notes
DatetimeUTC Datetime string in UTC

Datetime string in UTC in the RFC3339 format 'yyyy-mm-ddThh:mm:ssZ'
string

EdgeConfigDiagnosis (schema)

Name Description Type Notes
failed Failed Config FailedOrWarningConfig Required
passed Passed Config array of ConfigType Required
warning Config Warning FailedOrWarningConfig Required

EdgeDataplaneCpuStats (schema)

Information about Edge Dataplane CPU Stats

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
cores Statistics of CPU cores

Statistics of CPU cores
array of CpuStats Maximum items: 64
datapath_cores_mode Datapath core mode

Mode of how the datapath cores get the packets from driver
string Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplaneCtrlPrioSetting (schema)

Information about Edge Dataplane control packet prioritization setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
ctrl_prio_enabled Control packet prioritization setting boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplaneDynamicCoreSetting (schema)

Information about Edge Dataplane control dynamic core setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
dynamic_core_enabled Edge Dataplane dynamic core setting boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplaneFlow (schema)

Edge dataplane flow record

Name Description Type Notes
dst_ip Destination IP

Destination IP of the flow
string
dst_port Destination port

Destination port of the flow
integer
proto Protocol

Protocol of the flow
integer
src_ip Source IP

Source IP of the flow
string
src_port Source port

Source port of the flow
integer
tunnel_dst_ip Tunnel destination IP

Tunnel destination IP of the flow
string
tunnel_src_ip Tunnel source IP

Tunnel source IP of the flow
string

EdgeDataplaneFlowCacheSetting (schema)

Information about Edge Dataplane Flow Cache mode.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
flow_cache_enabled Flow cache setting boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplaneFlowMonitorMessage (schema)

Edge dataplane flow monitor message

Name Description Type Notes
message Message

Edge dataplane flow monitor message
string

EdgeDataplaneFlowMonitorStartSetting (schema)

Information about Edge Dataplane flow monitor start setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
core_id Core id

Flow monitor core id
string
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
timeout Timeout for flow monitor in seconds, in the range of 1 - 600.

Flow monitor timeout in seconds
string Default: "15"

EdgeDataplaneFlowQueryParameters (schema)

Name Description Type Notes
fields Fields to include in query results

Comma-separated field names to include in query result
string
top_10 Collect top 10 flows when set to true

Collect top 10 flows when set to true, else collect all flows.
boolean Default: "False"

EdgeDataplaneGeneveCbitSetting (schema)

Information about Edge Dataplane geneve cbit setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
geneve_cbit_set geneve critical bit setting boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplaneIntrModeSetting (schema)

Information about Edge Dataplane interrupt mode setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
intr_mode_enabled interrupt mode setting boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplaneL2vpnPmtuSetting (schema)

Information about Edge Dataplane l2vpn pmtu message generation setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
l2vpn_pmtu_enabled l2vpn pmtu setting boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

EdgeDataplanePmtuLearningSetting (schema)

Information about Edge Dataplane pmtu learning setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
pmtu_learning_enabled l3vpn pmtu setting boolean

EdgeDataplaneQatAdminSetting (schema)

Information about Edge Dataplane QAT feature enabled setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
qat_admin_enabled QAT feature enabled setting boolean

EdgeDataplaneQatAdminSettingResponse (schema)

Information about Edge Dataplane QAT feature enabled setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
update_message Datapath QAT enable CLI message

Message to display after setting QAT feature
string Readonly

EdgeDataplaneQatStatus (schema)

Information about Edge Dataplane QAT status

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
admin_status QAT enabled

QAT device enabled
boolean Readonly
device_present QAT present

QAT device present
boolean Readonly
fips_compliant FIPS compliance

FIPS compliance of QAT feature
boolean Readonly
is_vm VM deployment

Edge is deployed in VM
boolean Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
operational_status QAT running

QAT device currently running
boolean Readonly

EdgeDataplaneQueueNumPerPortPerCoreSetting (schema)

Information about Edge Dataplane queue num per port per core setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
queue_num_per_port_per_core queue number per port per core integer Minimum: 1
Maximum: 16

EdgeDataplaneRingSize (schema)

Information about Edge physical port ring size.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
rx_ring_size rx ring size integer
tx_ring_size tx ring size integer

EdgeDataplaneRingSizeSetting (schema)

Information about Edge physical port ring size setting.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
ring_size ring size integer

EdgeDataplaneTopKFlowQueryParameters (schema)

Name Description Type Notes
core_id CPU core on which the flows are to be monitored

CPU core on which the flows are to be monitored
integer Minimum: 0
Maximum: 128
fields Fields to include in query results

Comma-separated field names to include in query result
string
timeout Timeout for flow monitor in seconds

Timeout for flow monitor in seconds
integer Minimum: 1
Maximum: 120
Default: "30"

EdgeDataplaneTopKFlows (schema)

Edge dataplane top-k flow dump

Name Description Type Notes
flow_count Count of flow records

Count of flow records in the result
integer
flows Array of flow records

Array of flow records
array of EdgeDataplaneFlow

EdgeDiagnosis (schema)

Name Description Type Notes
config Edge Config Diagnosis EdgeConfigDiagnosis Required
ha-state HA State string Required
Enum: disabled, offline, discover, statesync, inactive, active, unknown

EdgeDiagnosisInconsistency (schema)

NSX Edge inconsistency check

Name Description Type Notes
detail NSX Edge inconsistency check detail

NSX Edge inconsistency check detail
array of string
title NSX Edge inconsistency check type

NSX Edge inconsistency check type
string

EdgeDiagnosisInconsistencyResult (schema)

NSX Edge inconsistency check result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results NSX Edge inconsistency check result array of EdgeDiagnosisInconsistency

EdgeInconsistencyQueryParameters (schema)

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page)

A cursor points to a specific record in the inconsistency check result
integer Minimum: 0
page_size Maximum number of results to return in this page (server may return fewer)

The page size determines the number of records to be returned
integer Minimum: 1
Maximum: 100

EdgeNodeServiceLoggingProperties (schema)

Edge node service properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
service_name Service name string Required
service_properties

EmbeddedResource (schema)

Base class for resources that are embedded in other resources

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_owner Owner of this resource OwnerResourceLink Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Identifier of the resource string Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type The type of this resource. string

EpochMsTimestamp (schema)

Timestamp in milliseconds since epoch

Name Description Type Notes
EpochMsTimestamp Timestamp in milliseconds since epoch integer

ExitEdgeInterface (schema)

Exit interface for logical router port

Name Description Type Notes
ExitEdgeInterface Exit interface for logical router port string Enum: eth1, eth2, eth3, eth4, eth5, eth6, eth7, eth8

FailedOrWarningConfig (schema)

Failed or Warning Config

Name Description Type Notes
controller Controller Connection State string
core Core Names array of string
dataplane Dataplane State string
edge-agent Edge Agent State string
manager Manager Connection State string
nestdb NestDB State string
nsd Nsd State string
nsxa-edge-cluster Edge Cluster State string
nsxa-lrouter Logical Router State string
nsxa-service-router Service Router State string
nsxa-state NSXA State string

FileProperties (schema)

File properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
created_epoch_ms File creation time in epoch milliseconds integer Required
modified_epoch_ms File modification time in epoch milliseconds integer Required
name File name string Required
Pattern: "^[^/]+$"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
size Size of the file in bytes integer Required

FilePropertiesListResult (schema)

File properties query results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results File property results array of FileProperties Required

FileThumbprint (schema)

File thumbprint

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
name File name string Required
Pattern: "^[^/]+$"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
sha1 File's SHA1 thumbprint string Required
sha256 File's SHA256 thumbprint string Required

GetCertParameter (schema)

Name Description Type Notes
details whether to expand the pem data and show all its details boolean Default: "False"

GetSNMPParameters (schema)

Get SNMP request parameters

Get SNMP request parameters.

Name Description Type Notes
show_sensitive_data Show SNMP sensitive data or not

Whether to show SNMP service properties including community
strings if any applicable.
boolean Default: "False"

HANodeStatusProperties (schema)

Name Description Type Notes
admin_state Node Admin State NodeAdminState
high_availability_status Node High Availability Status NodeHAStatus
node_status Actual Node Status NodeStatus
vtep_state State of VTEP interfaces. All VTEPs share the same state. NodeVtepState

HaInfo (schema)

Name Description Type Notes
failover_mode Logical router failover mode

Logical router failover mode
string Readonly
Enum: PREEMPTIVE, NON-PREEMPTIVE
ha_mode Logical router HA mode

Logical router HA mode
string Readonly
Enum: ACTIVE-STANDBY, ACTIVE-ACTIVE
ha_state Logical router HA state

Logical router HA state DOWN - Logical router is not in good health SYNC - Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic
string Readonly
Enum: DOWN, SYNC, STANDBY, ACTIVE
rank Rank of logical router

Rank of logical router
integer Readonly
state-history Logical router high-availability history

Logical router high-availability history
LogicalRouterHaHistory Readonly

HostnameOrIPv4Address (schema)

Hostname or IPv4 address

Name Description Type Notes
HostnameOrIPv4Address Hostname or IPv4 address string Maximum length: 255
Pattern: "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\.?$"

HttpProtocol (schema)

Name Description Type Notes
authentication_scheme Scheme to authenticate if required BasicAuthenticationScheme
name Must be set to the value HttpProtocol string Required
Enum: http, https, scp, sftp

HttpsProtocol (schema)

Name Description Type Notes
authentication_scheme Scheme to authenticate if required BasicAuthenticationScheme
name Must be set to the value HttpsProtocol string Required
Enum: http, https, scp, sftp
sha256_thumbprint SSL thumbprint of server string Required

IKEDigestAlgorithm (schema)

Digest Algorithms used in IKE negotiations

The IKEDigestAlgorithms are used to verify message
integrity during IKE negotiation. SHA1 produces 160
bits hash and SHA2_XXX produces XXX bit hash.

Name Description Type Notes
IKEDigestAlgorithm Digest Algorithms used in IKE negotiations

The IKEDigestAlgorithms are used to verify message
integrity during IKE negotiation. SHA1 produces 160
bits hash and SHA2_XXX produces XXX bit hash.
string Enum: SHA1, SHA2_256, SHA2_384, SHA2_512

IKEEncryptionAlgorithm (schema)

Encryption algorithms used in IKE

IKEEncryption algorithms are used to ensure confidentiality of
the messages exchanged during IKE negotiations. AES stands for
Advanced Encryption Standards. AES_128 uses 128-bit keys whereas
AES_256 uses 256-bit keys for encryption and decryption.
AES_GCM stands for Advanced Encryption Standard(AES) in
Galois/Counter Mode(GCM) and is used to provide both
confidentiality and data origin authentication. AES_GCM composed
of two separate functions one for encryption(AES) and one for
authentication(GMAC). AES_GCM algorithms will be available with
IKE_V2 version only.
AES_GCM_128 uses 128-bit keys.
AES_GCM_192 uses 192-bit keys.
AES_GCM_256 uses 256-bit keys.

Name Description Type Notes
IKEEncryptionAlgorithm Encryption algorithms used in IKE

IKEEncryption algorithms are used to ensure confidentiality of
the messages exchanged during IKE negotiations. AES stands for
Advanced Encryption Standards. AES_128 uses 128-bit keys whereas
AES_256 uses 256-bit keys for encryption and decryption.
AES_GCM stands for Advanced Encryption Standard(AES) in
Galois/Counter Mode(GCM) and is used to provide both
confidentiality and data origin authentication. AES_GCM composed
of two separate functions one for encryption(AES) and one for
authentication(GMAC). AES_GCM algorithms will be available with
IKE_V2 version only.
AES_GCM_128 uses 128-bit keys.
AES_GCM_192 uses 192-bit keys.
AES_GCM_256 uses 256-bit keys.
string Enum: AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256

IPSecMultiPathGroup (schema)

IPSec VPN multipath group

Configuration to allow IPSec VPN traffic through multipaths.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enable IPSec VPN multipath group

If true, enable IPSec VPN multipath group.
boolean Default: "False"
id Unique identifier of this resource string Readonly
Sortable
ipsec_vpn_session_ids List of IPSec VPN session Ids that are using this multipath group

List of all IPSec VPN session Ids that are using this multipath group.
array of string Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value IPSecMultiPathGroup string
scheme The scheme specified to decide best paths

Specify a scheme to probe the quality of different paths for IPSec VPN
traffic and to select the best equally good paths.
THRESHOLD_BASED: The best paths are selected based on the threshold limit
configured.
Enum: THRESHOLD_BASED
Default: "THRESHOLD_BASED"
scheme_value The value specified for the scheme

If scheme is THRESHOLD_BASED, scheme_value represents margin above the average
path metric used for selecting the best paths. Paths below the specified
threshold are considered good while above the selected threshold are
considered bad quality. Threshold is a percentage value in the range of
[0-100]. If not specified, the default is 20.
integer
source_port_pool_size The size of the source port pool

The maximum number of best paths allowed for an IPSec VPN session.
For each path, a UDP source port number is assigned from an internal source port
pool for encapsulating the IPSec VPN traffic through the path.
integer Minimum: 2
Maximum: 7
Default: "7"
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

IPSecMultiPathGroupListResult (schema)

List of IPSec multipath groups

List all the IPSec multipath groups.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results IPSec multipath group list results array of IPSecMultiPathGroup Required

IPSecVPNDPDProfile (schema)

Dead peer detection (DPD) profile

Dead peer detection (DPD) is a method that allows detection of unreachable internet key excahnge (IKE) peers. Any changes affects all IPSec VPN sessions consuming this profile.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
dpd_probe_interval DPD probe interval defines an interval for DPD probes (in seconds)

When the DPD probe mode is periodic, this interval is the number
of seconds between DPD messages.
When the DPD probe mode is on-demand, this interval is the number
of seconds during which traffic is not received from the peer before
DPD retry messages are sent if there is IPSec traffic to send.
For PERIODIC Mode:
Minimum: 3
Maximum: 360
Default: 60
For ON_DEMAND Mode:
Minimum: 1
Maximum: 10
Default: 3
integer Minimum: 1
Maximum: 360
dpd_probe_mode DPD probe mode

DPD probe mode is used to query the liveliness of the peer. Two modes are possible -
PERIODIC - is used to query the liveliness of the peer at regular
intervals (dpd_probe_interval). It does not take into consideration
traffic coming from the peer. The benefit of this mode over the
on-demand mode is earlier detection of dead peers.
However, use of periodic DPD incurs extra overhead. When
communicating to large numbers of peers, please consider using on-demand DPD instead.
ON_DEMAND - is used to query the liveliness of the peer by
instructing the local endpoint to send DPD message to a peer if
there is traffic to send to the peer AND the peer was idle for
dpd_probe_interval seconds (i.e. there was no traffic from the
peer for dpd_probe_interval seconds)
string Enum: PERIODIC, ON_DEMAND
Default: "PERIODIC"
enabled Enable dead peer detection (DPD)

If true, enable dead peer detection.
boolean Default: "True"
id Unique identifier of this resource string Readonly
Sortable
is_default Default Profile

It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.
boolean Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value IPSecVPNDPDProfile string
retry_count Retry count

Maximum number of DPD messages retry attempts. This value is applicable for both dpd probe modes, periodic and on-demand.
integer Minimum: 1
Maximum: 100
Default: "5"
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

IPSecVPNDPDProfileListResult (schema)

List dead peer detection (DPD) profiles

List all the dead peer detection (DPD) profiles.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results IPSec DPD Profile list results array of IPSecVPNDPDProfile Required

IPSecVPNIKEProfile (schema)

Internet key exchange (IKE) profile

IKE Profile is a reusable profile that captures IKE phase one negotiation parameters. Any changes affects all IPSec VPN sessions consuming this profile.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
dh_groups DH group

Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
array of DHGroup
digest_algorithms Algorithm for message hash

Algorithm used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.
array of IKEDigestAlgorithm
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
encryption_algorithms Encryption algorithm for IKE

Encryption algorithm used during Internet Key Exchange(IKE) negotiation. Default is AES_128.
array of IKEEncryptionAlgorithm
id Unique identifier of this resource string Readonly
Sortable
ike_version IKE version

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.
string Enum: IKE_V1, IKE_V2, IKE_FLEX
Default: "IKE_V2"
is_default Default Profile

It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.
boolean Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value IPSecVPNIKEProfile string
sa_life_time Security association (SA) life time

Life time for security association. Default is 86400 seconds (1 day).
integer Minimum: 21600
Maximum: 31536000
Default: "86400"
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

IPSecVPNIKEProfileListResult (schema)

List IKE profiles

List all the IKE profiles.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results IKE Profile list results array of IPSecVPNIKEProfile Required

IPSecVPNIKESessionStatus (schema)

IKE session status

Status for IPSec VPN IKE session UP, DOWN, NEGOTIATING and fail reason if IKE session is down.

Name Description Type Notes
fail_reason Fail reason

Reason for failure.
string Readonly
ike_session_state IKE session state

IKE session service status UP, DOWN and NEGOTIATING.
string Readonly
Enum: UP, DOWN, NEGOTIATING

IPSecVPNLocalEndpoint (schema)

IPSec VPN Local Endpoint

Local endpoint represents a logical router on which tunnel needs to be terminated.

Name Description Type Notes
certificate_id Certificate Id

Site certificate identifier.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
local_address IPV4 Address for local endpoint

IPV4 Address for local endpoint.
IPv4Address Required
local_id Local identifier

Local identifier. Only one Local id is allowed for a local address.
string
trust_ca_ids Certificate authority (CA) identifiers

Certificate authority (CA) identifier list to verify peer certificates.
array of string
trust_crl_ids Certificate revocation list (CRL) Identifiers

Certificate revocation list (CRL) identifier list of peer certificates.
array of string

IPSecVPNPolicyRule (schema)

IPSec VPN policy rules

For policy-based IPsec VPNs, a security policy specifies as its action the VPN tunnel to be used for transit traffic that meets the policy's match criteria.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_owner Owner of this resource OwnerResourceLink Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
action Action to be applied

PROTECT - Protect rules are defined per policy based
IPSec VPN session.
string Readonly
Enum: PROTECT
Default: "PROTECT"
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
destinations Destination list

List of peer subnets.
array of IPSecVPNPolicySubnet Maximum items: 128
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enabled flag

A flag to enable/disable the policy rule.
boolean Default: "True"
id Unique policy id

Unique policy id.
string
logged Logging flag

A flag to enable/disable the logging for the policy rule.
boolean Default: "False"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value IPSecVPNPolicyRule string
sources Source list

List of local subnets.
array of IPSecVPNPolicySubnet Maximum items: 128

IPSecVPNPolicySubnet (schema)

Subnet for IPSec Policy based VPN

Used to specify the local/peer subnets in IPSec VPN Policy rule.

Name Description Type Notes
subnet Peer or local subnet

Subnet used in policy rule.
IPv4CIDRBlock Required

IPSecVPNPolicyTrafficStatistics (schema)

IPSec VPN policy traffic statistics

IPSec VPN policy traffic statistics

Name Description Type Notes
aggregate_traffic_counters Traffic summary

Aggregate traffic statistics across all ipsec tunnels.
IPSecVPNTrafficCounters Readonly
policy_id Policy Identifier

Policy Identifier.
string Readonly
tunnel_statistics Tunnel statistics

Tunnel statistics.
array of IPSecVPNTunnelTrafficStatistics Readonly

IPSecVPNSession (schema)

IPSec VPN session

VPN session defines connection between local and peer endpoint. Untill VPN session is defined configuration is not realized. This is an abstract type. Concrete child types:
PolicyBasedIPSecVPNSession
RouteBasedIPSecVPNSession

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
authentication_mode Authentication Mode

Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.
string Enum: PSK, CERTIFICATE
Default: "PSK"
connection_initiation_mode Connection initiation mode

Connection initiation mode used by local
endpoint to establish ike connection with peer endpoint.
INITIATOR - In this mode local endpoint initiates tunnel
setup and will also respond to incoming tunnel setup requests
from peer gateway.
RESPOND_ONLY - In this mode, local endpoint shall only
respond to incoming tunnel setup requests. It shall not
initiate the tunnel setup.
ON_DEMAND - In this mode local endpoint will initiate tunnel
creation once first packet matching the policy rule is
received and will also respond to incoming initiation request.
string Enum: INITIATOR, RESPOND_ONLY, ON_DEMAND
Default: "INITIATOR"
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
dpd_profile_id Dead peer detection (DPD) profile id

Dead peer detection (DPD) profile id. Default will be set according to system default policy.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
enabled Enable/Disable IPSec VPN session

Enable/Disable IPSec VPN session.
boolean Default: "True"
id Unique identifier of this resource string Readonly
Sortable
ike_profile_id Internet key exchange (IKE) profile id

IKE profile id to be used. Default will be set according to system default policy.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
ipsec_tunnel_profile_id IPSec tunnel profile id

Tunnel profile id to be used. By default it will point to system default profile.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
local_endpoint Local endpoint

Local endpoint.
IPSecVPNLocalEndpoint Required
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
peer_address IPV4 address of peer endpoint on remote site.

IPV4 address of peer endpoint on remote site.
string Required
peer_id Peer id

Peer identifier.
string Required
psk Pre-shared key

IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.
string Minimum: 1
Maximum: 128
resource_type Must be set to the value IPSecVPNSession IPSecVPNSessionResourceType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
tcp_mss_clamping TcpMssClamping

IPSecVPNSessionListParameters (schema)

List parameters for IPSec VPN Sessions

Parameters to get filtered list of IPSec VPN Sessions. The filter parameters are not mutually exclusive and can be used together.

Name Description Type Notes
session_type Type of the vpn session

All the IPSec VPN sessions of specified type will be included in the result.
IPSecVPNSessionResourceType

IPSecVPNSessionListResult (schema)

List IPSec VPN sessions

List all the IPSec VPN sessions.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results IPSec VPN sessions list result array of IPSecVPNSession
(Abstract type: pass one of the following concrete types)
PolicyBasedIPSecVPNSession
RouteBasedIPSecVPNSession
Required

IPSecVPNSessionResourceType (schema)

Resource types of IPsec VPN session

A Policy Based VPN requires to define protect rules that match
local and peer subnets. IPSec security associations is
negotiated for each pair of local and peer subnet.
A Route Based VPN is more flexible, more powerful and recommended over
policy based VPN. IP Tunnel port is created and all traffic routed via
tunnel port is protected. Routes can be configured statically
or can be learned through BGP. A route based VPN is must for establishing
redundant VPN session to remote site.

Name Description Type Notes
IPSecVPNSessionResourceType Resource types of IPsec VPN session

A Policy Based VPN requires to define protect rules that match
local and peer subnets. IPSec security associations is
negotiated for each pair of local and peer subnet.
A Route Based VPN is more flexible, more powerful and recommended over
policy based VPN. IP Tunnel port is created and all traffic routed via
tunnel port is protected. Routes can be configured statically
or can be learned through BGP. A route based VPN is must for establishing
redundant VPN session to remote site.
string Enum: PolicyBasedIPSecVPNSession, RouteBasedIPSecVPNSession

IPSecVPNSessionStatistics (schema)

IPSec VPN session statistics

Session statistics gives aggregated statistics of all policies for all the tunnels.

Name Description Type Notes
aggregate_traffic_counters Traffic summary

Aggregate traffic statistics across all ipsec tunnels.
IPSecVPNTrafficCounters Readonly
display_name Display name

Display name of vpn session.
string Readonly
failed_tunnels Failed tunnels

Number of failed tunnels.
integer Readonly
ike_status IKE status summary

Status for IPSec VPN IKE session UP/DOWN and fail reason if IKE session is down.
IPSecVPNIKESessionStatus Readonly
ipsec_vpn_session_id Session identifier

UUID of vpn session.
string Readonly
last_update_timestamp Last updated timestamp

Timestamp when the data was last updated.
EpochMsTimestamp Readonly
negotiated_tunnels Negotiated tunnels

Number of negotiated tunnels.
integer Readonly
partial_stats Partial Statistics

Partial statistics if true specifies that the statistics are only from active node.
boolean Readonly
policy_statistics IPSec policy statistics

Gives aggregate traffic statistics across all ipsec tunnels and individual tunnel statistics.
array of IPSecVPNPolicyTrafficStatistics Readonly
session_status Session status

Gives session status consolidated using IKE status and tunnel status. It can be UP, DOWN, DEGRADED. If IKE and all tunnels are UP status will be UP, if all down it will be DOWN, otherwise it will be DEGRADED.
string Readonly
Enum: UP, DOWN, DEGRADED
total_tunnels Total tunnels

Total number of tunnels.
integer Readonly

IPSecVPNTrafficCounters (schema)

IPSec VPN traffic counters

Traffic counters for IPSec VPN session.

Name Description Type Notes
bytes_in Bytes in

Total number of bytes recevied.
integer Readonly
bytes_out Bytes out

Total number of bytes sent.
integer Readonly
dropped_packets_in Dropped incoming packets

Total number of incoming packets dropped on inbound security association.
integer Readonly
dropped_packets_out Dropped outgoing packets

Total number of outgoing packets dropped on outbound security association.
integer Readonly
packets_in Packets in

Total number of packets received.
integer Readonly
packets_out Packets out

Total number of packets sent.
integer Readonly

IPSecVPNTunnelProfile (schema)

IPSec VPN tunnel profile

IPSec VPN tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. Any changes affects all IPSec VPN sessions consuming this profile.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
df_policy Policy for handling defragmentation bit

Defragmentation policy helps to handle defragmentation bit present in the inner packet. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet.
string Enum: COPY, CLEAR
Default: "COPY"
dh_groups DH group

Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
array of DHGroup
digest_algorithms Algorithm for message hash

Algorithm used for message digest. Default digest algorithm is implicitly covered by default encryption algorithm "AES_GCM_128".
array of TunnelDigestAlgorithm
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enable_perfect_forward_secrecy Enable perfect forward secrecy

If true, perfect forward secrecy (PFS) is enabled.
boolean Default: "True"
encapsulation_mode Encapsulation Mode

Encapsulation Mode to be used for encryption of packet. Tunnel mode protects internal routing information by encrypting IP header of original packet.
string Readonly
Enum: TUNNEL_MODE
Default: "TUNNEL_MODE"
encryption_algorithms Encryption algorithm to use in tunnel establishement

Encryption algorithm to encrypt/decrypt the messages exchanged between IPSec VPN initiator and responder during tunnel negotiation. Default is AES_GCM_128.
array of TunnelEncryptionAlgorithm
id Unique identifier of this resource string Readonly
Sortable
is_default Default Profile

It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.
boolean Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value IPSecVPNTunnelProfile string
sa_life_time Security association (SA) life time

SA life time specifies the expiry time of security
association. Default is 3600 seconds.
integer Minimum: 900
Maximum: 31536000
Default: "3600"
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
transform_protocol Tunnel protocol

IPSec transform specifies IPSec security protocol.
string Readonly
Enum: ESP
Default: "ESP"

IPSecVPNTunnelProfileListResult (schema)

List tunnel profiles

List all the tunnel profiles.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results IPSec Tunnel Profile list results array of IPSecVPNTunnelProfile Required

IPSecVPNTunnelTrafficStatistics (schema)

IPSec VPN tunnel traffic statistics

IPSec VPN tunnel traffic statistics.

Name Description Type Notes
bytes_in Bytes in

Total number of incoming bytes on inbound Security association (SA).
integer Readonly
bytes_out Bytes out

Total number of outgoing bytes on outbound Security association (SA).
integer Readonly
decryption_failures Decryption failures

Total number of packets dropped due to decryption failures.
integer Readonly
dropped_packets_in Dropped incoming packets

Total number of incoming packets dropped on inbound security association.
integer Readonly
dropped_packets_out Dropped outgoing packets

Total number of outgoing packets dropped on outbound security association.
integer Readonly
encryption_failures Encryption failures

Total number of packets dropped because of failure in encryption.
integer Readonly
integrity_failures Integrity failures

Total number of packets dropped due to integrity failures.
integer Readonly
local_subnet Local subnet

Local subnet to which a tunnel belongs.
string Readonly
nomatching_policy_errors Nomatching Policy errors

Number of packets dropped because of no matching policy is available.
integer Readonly
packets_in Packets in

Total number of incoming packets on inbound Security association (SA).
integer Readonly
packets_out Packets out

Total number of outgoing packets on outbound Security association (SA).
integer Readonly
packets_receive_other_error Packets receive other error

Total number of incoming packets dropped on inbound Security association (SA)(misc).
integer Readonly
packets_sent_other_error Packets sent other error

Total number of packets dropped while sending for any reason.
integer Readonly
peer_subnet Peer subnet

Peer subnet to which a tunnel belongs.
string Readonly
replay_errors Replay errors

Total number of packets dropped due to replay check on that Security association (SA).
integer Readonly
sa_mismatch_errors_in Security association (SA) mismatch errors on incoming packets

Totoal number of security association (SA) mismatch errors on incoming packets.
integer Readonly
sa_mismatch_errors_out Security association (SA) mismatch errors on outgoing packets

Totoal number of security association (SA) mismatch errors on outgoing packets.
integer Readonly
seq_number_overflow_error Sequence number overflow error

Total number of packets dropped while sending due to overflow in sequence number.
integer Readonly
tunnel_down_reason Tunnel down reason

Gives the detailed reason about the tunnel when it is down. If tunnel is UP tunnel down reason will be empty.
string Readonly
tunnel_status Tunnel Status

Specifies the status of tunnel. If all the SA (Security association) are negotiated then tunnels status will be UP. If negotiation fails for the SAs status will be DOWN, if SAs are in negotiating phase tunnels status will be NEGOTIATING.
string Readonly
Enum: UP, DOWN, NEGOTIATING

IPSubnet (schema)

Name Description Type Notes
ip_addresses IPv4 Addresses array of IPv4Address Required
Minimum items: 1
Maximum items: 1
prefix_length Subnet Prefix Length integer Required
Minimum: 1
Maximum: 32

IPv4Address (schema)

IPv4 address

Name Description Type Notes
IPv4Address IPv4 address string Maximum length: 255
Pattern: "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$"

IPv4AddressProperties (schema)

IPv4 address properties

Name Description Type Notes
ip_address Interface IPv4 address string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"
netmask Interface netmask string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"

IPv4CIDRBlock (schema)

IPv4 CIDR Block

Name Description Type Notes
IPv4CIDRBlock IPv4 CIDR Block string Maximum length: 255
Pattern: "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(3[0-2]|[1-2][0-9]|[0-9]))$"

IncludedFieldsParameters (schema)

A list of fields to include in query results

Name Description Type Notes
included_fields Comma separated list of fields that should be included in query result string

Interface (schema)

Interface properties

Interface properties.

Name Description Type Notes
address IPv4 CIDR block

IPv4 CIDR block.
IPv4CIDRBlock Required
interface_type Interface type

Interface type.
string Required
Enum: MANAGEMENT, TUNNEL
name Interface name

Interface name.
string Required

KnownHostParameter (schema)

Name Description Type Notes
host Known host hostname or IP address HostnameOrIPv4Address Required
port Known host port integer Minimum: 1
Maximum: 65535
Default: "22"

L2Extension (schema)

L2 Extension

Configuration for extending L2 domain with L2VPN.

Name Description Type Notes
l2vpn_session_id L2VPN session ID

L2VPN sessions identifier for L2 extension.
string Required
l2vpn_session_name Display name of the given l2vpn session

Display name of the given l2vpn session.
string
tunnel_id Tunnel ID

Tunnel ID to uniquely identify the L2 extension.
integer Required
Minimum: 1
Maximum: 4093

L2VPNSession (schema)

L2VPN Session

L2VPN Session represents meta data necessary to create
the L2VPN Session. For client, it is represented by an array
of peer code for each transport tunnel.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enable L2VPN session

Enable to extend all the associated logical switches.
boolean Default: "True"
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value L2VPNSession string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
transport_tunnels List of L2VPN Transport Tunnel

List of L2VPN transport tunnel.
array of TransportTunnel Required
Minimum items: 1
Maximum items: 4

L2VPNSessionListResult (schema)

List all L2VPN sessions

list all the L2VPN sessions

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results L2VPN sessions list result array of L2VPNSession Required

L2VPNSessionStatistics (schema)

L2VPN session statistics

L2VPN session statistics.

Name Description Type Notes
display_name Display name

Display name of L2VPN session.
string Readonly
l2vpn_session_id Session identifier

UUID of L2VPN session.
string Readonly
reference_count Number of references to L2VPN session

Number of logical ports that are referencing the L2VPN session.
integer Readonly
session_status L2VPN session status

L2VPN session status. It can be UP and DOWN.
string Readonly
Enum: UP, DOWN
traffic_counter Traffic counter

Traffic counter through the L2VPN session.
L2VPNTrafficStatistics Readonly
transport_tunnels List of transport tunnels

List of transport tunnels.
array of TransportTunnel Readonly

L2VPNTrafficStatistics (schema)

L2VPN traffic statistics

Traffic statistics for L2VPN.

Name Description Type Notes
bytes_in Bytes in

Total number of incoming bytes.
integer Readonly
bytes_out Bytes out

Total number of outgoing bytes.
integer Readonly
dropped_packets_in Dropped incoming packets

Total number of incoming packets dropped.
integer Readonly
dropped_packets_out Dropped outgoing packets

Total number of outgoing packets dropped.
integer Readonly
packets_in Packets in

Total number of incoming packets.
integer Readonly
packets_out Packets out

Total number of outgoing packets.
integer Readonly

ListCertParameter (schema)

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
details whether to expand the pem data and show all its details boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result string
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending boolean
sort_by Field by which records are sorted string
type Type of certificate to return

Provide this parameter to limit the list of returned certificates to those matching a particular usage.
Passing cluster_certificate will return the certificate used for the cluster wide API service.
string Enum: cluster_api_certificate

ListRequestParameters (schema)

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
included_fields Comma separated list of fields that should be included in query result string
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending boolean
sort_by Field by which records are sorted string

ListResult (schema)

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Result list array of Resource Required

ListResultQueryParameters (schema)

Name Description Type Notes
fields Fields to include in query results

Comma-separated field names to include in query result
string

LogicalPort (schema)

This is an abstract type. Concrete child types:
LogicalRouterIPTunnelPort
LogicalRouterLoopbackPort
LogicalRouterPort

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value LogicalPort LogicalPortResourceType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

LogicalPortListParameters (schema)

List parameters for logical port

Parameters to get filtered list of logical ports. The filter parameters are mutually exclusive.

Name Description Type Notes
l2_extension_id Id of a specified l2vpn session

List all of the logical ports that are extended via the specified l2vpn session id.
string
port_type Type of logical port

If routed, list all of the routed logical ports.
If extended, list all of the extended logial ports.
If none, list all pure l2 logical ports (not routed and extended).
string Enum: routed, extended, none

LogicalPortListResult (schema)

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Logical port list results array of LogicalPort
(Abstract type: pass one of the following concrete types)
LogicalRouterIPTunnelPort
LogicalRouterLoopbackPort
LogicalRouterPort
Required

LogicalPortResourceType (schema)

Resource types of logical port

LogicalRouterPort is the L3 Port attached to the router.
LogicalRouterIPTunnelPort is a IPSec VPN tunnel port created on
logical router when route based VPN session configured.
LogicalRouterLoopbackPort is a loopback port for the logical router.
LogicalRouterManagementPort is a management port on the logical router.

Name Description Type Notes
LogicalPortResourceType Resource types of logical port

LogicalRouterPort is the L3 Port attached to the router.
LogicalRouterIPTunnelPort is a IPSec VPN tunnel port created on
logical router when route based VPN session configured.
LogicalRouterLoopbackPort is a loopback port for the logical router.
LogicalRouterManagementPort is a management port on the logical router.
string Enum: LogicalRouterPort, LogicalRouterIPTunnelPort, LogicalRouterLoopbackPort, LogicalRouterManagementPort

LogicalRouterHaHistory (schema)

Name Description Type Notes
event Logical router HA event that triggered state change

Logical router HA event that triggered state change
string Readonly
event_timestamp Time in UTC when the last HA event occured

Time in UTC when the last HA event occured
EpochMsTimestamp Readonly
state Logical router HA state

Logical router HA state DOWN - Logical router is not in good health SYNC - Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic
string Readonly
Enum: DOWN, SYNC, STANDBY, ACTIVE

LogicalRouterIPTunnelPort (schema)

Logical router IP tunnel port

Logical router IP tunnel port.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
admin_state Admin state of port

Admin state of port.
string Readonly
Enum: UP, DOWN
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value LogicalRouterIPTunnelPort LogicalPortResourceType Required
subnets Tunnel port subnets

Tunnel port subnets.
array of IPSubnet Required
Readonly
Minimum items: 1
Maximum items: 1
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
vpn_session_id VPN session identifier

Associated VPN session identifier.
string Readonly

LogicalRouterLoopbackPort (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value LogicalRouterLoopbackPort LogicalPortResourceType Required
subnets Logical router loopback port subnets array of IPSubnet Maximum items: 1
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

LogicalRouterPort (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
dhcp_server_id DHCP server ID

Specify DHCP server for L2 domain to use. If not given, there is no DHCP service in the L2 domain.
string
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
exit_interface Exit interface from edge

Exit interface from edge
ExitEdgeInterface Required
id Unique identifier of this resource string Readonly
Sortable
l2_extensions L2 extensions

Configuration for extending L2 domain via L2VPN.
array of L2Extension Minimum items: 1
mac_address MAC address

MAC address
string Readonly
mtu Maximum transmission unit (MTU)

Maximum transmission unit specifies the size of the largest packet that a network protocol can transmit.
integer Minimum: 64
Maximum: 9000
Default: "1500"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value LogicalRouterPort LogicalPortResourceType Required
subnets Logical router port subnets array of IPSubnet Maximum items: 1
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
urpf_mode Unicast Reverse Path Forwarding mode UrpfMode Default: "STRICT"
vlan_id VLAN for the Logical Switch integer Required
Minimum: 0
Maximum: 4091

LogicalRouterPortCounters (schema)

Name Description Type Notes
dropped_packets Number of Dropped Packets integer Required
total_bytes Total Number of Bytes integer Required
total_packets Total Number of Packets integer Required

LogicalRouterPortStatistics (schema)

Name Description Type Notes
admin_state Administrative State

Configurable administrative state.
string Required
Enum: UP, DOWN
last_update_timestamp Timestamp in Milliseconds Since Epoch integer Required
logical_router_port_id Logical Router Port UUID string Required
operational_state Operational State

Operational state of the port. Takes into account the exit interface status.
string Required
Enum: UP, DOWN
rx Logical Router Port Receive Count LogicalRouterPortCounters Required
tx Logical Router Port Transmit Count LogicalRouterPortCounters Required

LogicalRouterRouteEntry (schema)

Name Description Type Notes
admin_distance Admin Distance integer Required
logical_router_port_id Logical Router Port ID string Required
network Network IPv4CIDRBlock Required
next_hop Next Hop IPv4Address
route_type Route Type RouteType Required

LogicalRouterRouteTable (schema)

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
last_update_timestamp Timestamp in Milliseconds Since Epoch integer Required
Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Logical Router Route Entry array of LogicalRouterRouteEntry Required

LogicalRouterType (schema)

Name Description Type Notes
fields Fields to include in query results

Comma-separated field names to include in query result
string
router_type Logical router type

Logical router type
string Enum: SERVICE_ROUTER_TIER0, VRF_SERVICE_ROUTER_TIER0, DISTRIBUTED_ROUTER_TIER0, VRF_DISTRIBUTED_ROUTER_TIER0, SERVICE_ROUTER_TIER1, VRF_SERVICE_ROUTER_TIER1, DISTRIBUTED_ROUTER_TIER1, VRF_DISTRIBUTED_ROUTER_TIER1, TUNNEL, RTEP_TUNNEL_VRF

LogicalRoutersInfo (schema)

Name Description Type Notes
ha_info Logical router high-availability information

Logical router high-availability information
HaInfo Readonly
logical_router_uuid Logical router UUID

Logical router UUID
string Readonly
mp_router_uuid MP logical router UUID

MP logical router UUID
string Readonly
name Name of the logical router

Name of the logical router
string Readonly
router_type Logical router type

Logical router type
string Readonly
Enum: SERVICE_ROUTER_TIER0, VRF_SERVICE_ROUTER_TIER0, DISTRIBUTED_ROUTER_TIER0, VRF_DISTRIBUTED_ROUTER_TIER0, SERVICE_ROUTER_TIER1, VRF_SERVICE_ROUTER_TIER1, DISTRIBUTED_ROUTER_TIER1, VRF_DISTRIBUTED_ROUTER_TIER1, TUNNEL, RTEP_TUNNEL_VRF

MaintenanceModePropertiesReply (schema)

Information about the Edge maintenance mode

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
maintenance_mode current maintenance mode string Readonly
Enum: enabled, disabled
Default: "disabled"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

MaintenanceModePropertiesRequest (schema)

Information about the Edge maintenance mode

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
maintenance_mode current maintenance mode boolean
notify_mpa send notification to MPA boolean Default: "True"

ManagedResource (schema)

Base type for resources that are managed by API clients

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type The type of this resource. string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

MandatoryAccessControlProperties (schema)

Information about mandatory access control

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
enabled Enabled can be True/False boolean
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
status current status of Mandatory Access Control string Readonly
Enum: ENABLED, DISABLED, ENABLED_PENDING_REBOOT

NodeAdminState (schema)

Node Admin State

Name Description Type Notes
NodeAdminState Node Admin State string Enum: UP, DOWN, UNKNOWN

NodeFileSystemProperties (schema)

File system properties

Name Description Type Notes
file_system File system id string Readonly
mount File system mount string Readonly
total File system size in kilobytes integer Readonly
type File system type string Readonly
used Amount of file system used in kilobytes integer Readonly

NodeHAStatus (schema)

Node High Availability Status

Name Description Type Notes
NodeHAStatus Node High Availability Status string Enum: ACTIVE, INACTIVE, STATE_SYNC, DISCOVER, OFFLINE, DISABLED, UNKNOWN

NodeIdServicesMap (schema)

Name Description Type Notes
node_id NodeId string Required
Maximum length: 255
service_types list of ServiceTypes array of ServiceType Required

NodeInterfaceStatisticsProperties (schema)

Node network interface statistic properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
interface_id Interface ID string Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
rx_bytes Number of bytes received integer Readonly
rx_dropped Number of packets dropped integer Readonly
rx_errors Number of receive errors integer Readonly
rx_frame Number of framing errors integer Readonly
rx_packets Number of packets received integer Readonly
tx_bytes Number of bytes transmitted integer Readonly
tx_carrier Number of carrier losses detected integer Readonly
tx_colls Number of collisions detected integer Readonly
tx_dropped Number of packets dropped integer Readonly
tx_errors Number of transmit errors integer Readonly
tx_packets Number of packets transmitted integer Readonly

NodeLogProperties (schema)

Node log properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
last_modified_time Last modified time expressed in milliseconds since epoch EpochMsTimestamp Readonly
log_name Name of log file string Readonly
log_size Size of log file in bytes integer Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

NodeLogPropertiesListResult (schema)

Node log property query results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Node log property results array of NodeLogProperties Required

NodeNameServersProperties (schema)

Node network name servers properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
name_servers Name servers array of string Required
Maximum items: 3
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

NodeNetworkInterfaceProperties (schema)

Node network interface properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
admin_status Interface administration status string Readonly
Enum: up, down
bond_cur_active_slave Bond's currently active slave device string Readonly
bond_lacp_rate Bond's rate at which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode string Readonly
bond_mode Bond mode string Enum: ACTIVE_BACKUP, 802_3AD, ROUND_ROBIN, BROADCAST, XOR, TLB, ALB
bond_primary Bond's primary device name in active-backup bond mode string
bond_primary_slave Bond's primary device name in active-backup bond mode string Readonly
bond_slaves Bond's slave devices array of string
bond_xmit_hash_policy Bond's transmit hash policy for balance-xor and 802.3ad modes string Readonly
Enum: layer2, layer2+3, layer3+4, encap2+3, encap3+4
broadcast_address Interface broadcast address string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"
default_gateway Interface's default gateway string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"
interface_id Interface ID string Required
Readonly
ip_addresses Interface IP addresses array of IPv4AddressProperties Maximum items: 1
ip_configuration Interface configuration string Required
Enum: dhcp, static, not configured
is_kni Interface is a KNI boolean Readonly
link_status Interface administration status string Readonly
Enum: up, down
mtu Interface MTU integer
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
physical_address Interface MAC address string Readonly
Pattern: "^[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}$"
plane Interface plane string Enum: mgmt, debug, none
vlan VLAN Id integer Readonly
Minimum: 1
Maximum: 4094

NodeNetworkInterfacePropertiesListResult (schema)

Node network interface properties list results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Node network interface property results array of NodeNetworkInterfaceProperties Required

NodeNetworkProperties (schema)

Network configuration properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

NodeNtpServiceProperties (schema)

Node NTP service properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
service_name Service name string Required
service_properties NTP Service properties NtpServiceProperties

NodeProcessProperties (schema)

Node process properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
cpu_time CPU time (user and system) consumed by process in milliseconds integer Readonly
mem_resident Resident set size of process in bytes integer Readonly
mem_used Virtual memory used by process in bytes integer Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
pid Process id integer Readonly
ppid Parent process id integer Readonly
process_name Process name string Readonly
start_time Process start time expressed in milliseconds since epoch EpochMsTimestamp Readonly
uptime Milliseconds since process started integer Readonly

NodeProcessPropertiesListResult (schema)

Node process property query results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Node process property results array of NodeProcessProperties Required

NodeProperties (schema)

Node properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
cli_history_size NSX CLI command history limit, set to 0 to configure no history size limit integer Minimum: 0
cli_output_datetime NSX CLI display datetime stamp in command output boolean
cli_timeout NSX CLI inactivity timeout, set to 0 to configure no timeout integer Minimum: 0
export_type Export restrictions in effect, if any string Readonly
Enum: RESTRICTED, UNRESTRICTED
fully_qualified_domain_name Fully qualified domain name string Readonly
hostname Host name or fully qualified domain name of node SystemHostname
kernel_version Kernel version string Readonly
motd Message of the day to display when users login to node using the NSX CLI string or null
node_type Node type string Readonly
Enum: NSX Manager, NSX Global Manager, NSX Edge, NSX Autonomous Edge, NSX Cloud Service Manager, NSX Public Cloud Gateway
node_uuid Node Unique Identifier string Readonly
Maximum length: 36
node_version Node version string Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
product_version Product version string Readonly
system_datetime System date time in UTC DatetimeUTC
system_time Current time expressed in milliseconds since epoch EpochMsTimestamp Readonly
timezone Timezone string

NodeRouteProperties (schema)

Node network route properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
destination Destination covered by route string
from_address From address string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"
gateway Address of next hop string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"
interface_id Network interface id of route string
metric Metric value of route string
netmask Netmask of destination covered by route string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
proto Routing protocol identifier of route string Enum: unspec, redirect, kernel, boot, static, gated, ra, mrt, zebra, bird, dnrouted, xorp, ntk, dhcp
Default: "boot"
route_id Unique identifier for the route string Readonly
route_type Route type string Required
Enum: default, static, blackhole, prohibit, throw, unreachable
scope Scope of destinations covered by route string
src Source address to prefer when sending to destinations of route string Pattern: "^[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}$"

NodeRoutePropertiesListResult (schema)

Node network route properties list results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Node route property results array of NodeRouteProperties Required

NodeSearchDomainsProperties (schema)

Node network search domains properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
search_domains Search domains array of string Required

NodeServiceProperties (schema)

Node service properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
service_name Service name string Required

NodeServicePropertiesListResult (schema)

Node service property query results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Node service property results array of NodeServiceProperties Required

NodeServiceStatusProperties (schema)

Node service status properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
health Service health in addition to runtime_state string Readonly
Enum: STABLE, DEGRADED
monitor_pid Service monitor process id integer Readonly
monitor_runtime_state Service monitor runtime state string Readonly
Enum: running, stopped
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
pids Service process ids array of integer Readonly
reason Reason for service degradation string Readonly
runtime_state Service runtime state string Readonly
Enum: running, stopped

NodeSnmpServiceProperties (schema)

Node SNMP service properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
service_name Service name string Required
service_properties SNMP Service properties SnmpServiceProperties Required

NodeSnmpV3EngineID (schema)

SNMP V3 Engine Id

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
service_name Service name string Required
v3_engine_id SNMP v3 engine id string Required

NodeSshServiceProperties (schema)

Node SSH service properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
service_name Service name string Required
service_properties SSH Service properties SshServiceProperties

NodeStatus (schema)

Node Status

Name Description Type Notes
NodeStatus Node Status string Enum: DOWN, UP, UNREACHABLE, ADMIN_DOWN, UP_ROUTING_DOWN, INVALID, UNKNOWN

NodeStatusProperties (schema)

Node status properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
bootup_error Autonomous edge bootup error string Readonly
cpu_cores Number of CPU cores on the system integer Readonly
file_systems File systems configured on the system array of NodeFileSystemProperties Readonly
load_average One, five, and fifteen minute load averages for the system array of number Readonly
mem_available Amount of available RAM in the system, in kilobytes. The amount of reclaimable buffer/cache memory in use is taken into consideration here to provide a better idea of how much memory is really available in the system integer Readonly
mem_buffer Amount of RAM on the system used for temporary disk block storage, in kilobytes integer Readonly
mem_cache Amount of RAM on the system that can be flushed out to disk, in kilobytes integer Readonly
mem_free Amount of unused RAM in the system, in kilobytes integer Readonly
mem_slab Amount of RAM allocated to the kernel slab allocator, in kilobytes integer Readonly
mem_slab_reclaimable Amount of RAM allocated to the kernel slab allocator that is not currently in use, in kilobytes integer Readonly
mem_total Amount of RAM allocated to the system, in kilobytes integer Readonly
mem_used Amount of RAM in use on the system, in kilobytes. (This is mem_total - mem_available) integer Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
swap_total Amount of disk available for swap, in kilobytes integer Readonly
swap_used Amount of swap disk in use, in kilobytes integer Readonly
system_time Current time expressed in milliseconds since epoch EpochMsTimestamp Readonly
uptime Milliseconds since system start integer Readonly

NodeSyslogExporterProperties (schema)

Node syslog exporter properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
exporter_name Syslog exporter name string Required
facilities Facilities to export array of SyslogFacility
level Logging level to export string Required
Enum: EMERG, ALERT, CRIT, ERR, WARNING, NOTICE, INFO, DEBUG
msgids MSGIDs to export array of string
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
port Port to export to, defaults to 514 for TCP, TLS, UDP protocols or 9000 for LI, LI-TLS protocols integer Minimum: 1
Maximum: 65535
protocol Export protocol string Required
Enum: TCP, TLS, UDP, LI, LI-TLS
server IP address or hostname of server to export to HostnameOrIPv4Address Required
structured_data Structured data to export array of string
tls_ca_pem CA certificate PEM of TLS server to export to string
tls_cert_pem Certificate PEM of the rsyslog client string
tls_client_ca_pem CA certificate PEM of the rsyslog client string
tls_key_pem Private key PEM of the rsyslog client string

NodeSyslogExporterPropertiesListResult (schema)

Node syslog exporter list results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Node syslog exporter results array of NodeSyslogExporterProperties Required

NodeTime (schema)

Node system time in UTC

Node system time in UTC

Name Description Type Notes
system_datetime Datetime string in UTC DatetimeUTC Required

NodeUserProperties (schema)

Node user properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
full_name Full name for the user string
last_password_change Number of days since password was last changed integer Readonly
Minimum: 0
Maximum: 2147483647
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
old_password Old password for the user (required on PUT if password specified) string
password Password for the user (optionally specified on PUT, unspecified on GET) string
password_change_frequency Number of days password is valid before it must be changed

Number of days password is valid before it must be changed. This can be set to 0 to indicate no password change is required or a positive integer up to 9999. By default local user passwords must be changed every 90 days.
integer Minimum: 0
Maximum: 9999
password_reset_required Boolean value that states if a password reset is required boolean
status User status

Status of the user. This value can be ACTIVE indicating authentication attempts will be successful if the correct credentials are specified. The value can also be PASSWORD_EXPIRED indicating authentication attempts will fail because the user's password has expired and must be changed. Or, this value can be NOT_ACTIVATED indicating the user's password has not yet been set and must be set before the user can authenticate.
string Readonly
Enum: ACTIVE, PASSWORD_EXPIRED, NOT_ACTIVATED
userid Numeric id for the user integer Readonly
Minimum: 0
Maximum: 2147483647
username User login name (must be "root" if userid is 0) string Minimum length: 1
Maximum length: 32
Pattern: "^[a-zA-Z][a-zA-Z0-9@-_.\-]*$"

NodeUserPropertiesListResult (schema)

Node users list results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results List of node users array of NodeUserProperties Required

NodeVersion (schema)

Name Description Type Notes
node_version Node version string Readonly
product_version Product version string Readonly

NodeVtepState (schema)

VTEP interfaces State

Name Description Type Notes
NodeVtepState VTEP interfaces State string Enum: UP, DOWN, UNKNOWN

NtpServiceProperties (schema)

NTP Service properties

Name Description Type Notes
servers NTP servers array of HostnameOrIPv4Address Required
start_on_boot Start NTP service when system boots boolean Default: "True"

OwnerResourceLink (schema)

Link to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.

Name Description Type Notes
action Optional action string
href string Required
rel string Readonly
Enum: owner

PasswordAuthenticationScheme (schema)

Name Description Type Notes
password Password to authenticate with string Required
scheme_name Authentication scheme name string Required
Enum: password
username User name to authenticate with string Required
Pattern: "^.+$"

PolicyBasedIPSecVPNSession (schema)

Policy based VPN session

A Policy Based VPN requires to define protect rules that match local and peer subnets. IPSec security associations is negotiated for each pair of local and peer subnet.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
authentication_mode Authentication Mode

Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.
string Enum: PSK, CERTIFICATE
Default: "PSK"
connection_initiation_mode Connection initiation mode

Connection initiation mode used by local
endpoint to establish ike connection with peer endpoint.
INITIATOR - In this mode local endpoint initiates tunnel
setup and will also respond to incoming tunnel setup requests
from peer gateway.
RESPOND_ONLY - In this mode, local endpoint shall only
respond to incoming tunnel setup requests. It shall not
initiate the tunnel setup.
ON_DEMAND - In this mode local endpoint will initiate tunnel
creation once first packet matching the policy rule is
received and will also respond to incoming initiation request.
string Enum: INITIATOR, RESPOND_ONLY, ON_DEMAND
Default: "INITIATOR"
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
dpd_profile_id Dead peer detection (DPD) profile id

Dead peer detection (DPD) profile id. Default will be set according to system default policy.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
enabled Enable/Disable IPSec VPN session

Enable/Disable IPSec VPN session.
boolean Default: "True"
id Unique identifier of this resource string Readonly
Sortable
ike_profile_id Internet key exchange (IKE) profile id

IKE profile id to be used. Default will be set according to system default policy.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
ipsec_tunnel_profile_id IPSec tunnel profile id

Tunnel profile id to be used. By default it will point to system default profile.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
local_endpoint Local endpoint

Local endpoint.
IPSecVPNLocalEndpoint Required
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
peer_address IPV4 address of peer endpoint on remote site.

IPV4 address of peer endpoint on remote site.
string Required
peer_id Peer id

Peer identifier.
string Required
policy_rules Policy rules array of IPSecVPNPolicyRule Required
psk Pre-shared key

IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.
string Minimum: 1
Maximum: 128
resource_type Must be set to the value PolicyBasedIPSecVPNSession IPSecVPNSessionResourceType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
tcp_mss_clamping TcpMssClamping

Protocol (schema)

This is an abstract type. Concrete child types:
HttpProtocol
HttpsProtocol
ScpProtocol
SftpProtocol

Name Description Type Notes
name Protocol name string Required
Enum: http, https, scp, sftp

ReplicaAgentClientStatusProperties (schema)

Name Description Type Notes
last_fullsync_time Timestamp when replica-agent performed last fullsync of messages from primary node's Nestdb string
last_replication_time Timestamp when replica-agent performed last replication from primary node. string
last_rewrite_time Timestamp when replica-agent performed last rewriting of message in secondary node's Nestdb string
local_nestdb_connection_time Timestamp when replica-agent established connection to Nestdb local to the secondary node. string
node_api_server_role Node High Availability Mode string Enum: PRIMARY, SECONDARY
node_id Node UUID string
peer_nestdb_connection_time Timestamp when replica-agent established connection to the NestDB of primary node string

Resource (schema)

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

ResourceLink (schema)

Name Description Type Notes
action Optional action string
href string Required
rel Link relation type

Custom relation type (follows RFC 5988 where appropriate definitions exist)
string Required

ResourceReference (schema)

A weak reference to an NSX resource.

Name Description Type Notes
is_valid Target validity

Will be set to false if the referenced NSX resource has been deleted.
boolean Readonly
target_display_name Target display name

Display name of the NSX resource.
string Readonly
Maximum length: 255
target_id Target ID

Identifier of the NSX resource.
string Maximum length: 64
target_type Target type

Type of the NSX resource.
string Maximum length: 255

RevisionedResource (schema)

A base class for types that track revisions

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"

RouteBasedIPSecVPNSession (schema)

Route based VPN session

A Route Based VPN is more flexible, more powerful and recommended over policy based VPN. IP Tunnel port is created and all traffic routed via tunnel port is protected. Routes can be configured statically or can be learned through BGP. A route based VPN is must for establishing redundant VPN session to remote site.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
authentication_mode Authentication Mode

Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.
string Enum: PSK, CERTIFICATE
Default: "PSK"
connection_initiation_mode Connection initiation mode

Connection initiation mode used by local
endpoint to establish ike connection with peer endpoint.
INITIATOR - In this mode local endpoint initiates tunnel
setup and will also respond to incoming tunnel setup requests
from peer gateway.
RESPOND_ONLY - In this mode, local endpoint shall only
respond to incoming tunnel setup requests. It shall not
initiate the tunnel setup.
ON_DEMAND - In this mode local endpoint will initiate tunnel
creation once first packet matching the policy rule is
received and will also respond to incoming initiation request.
string Enum: INITIATOR, RESPOND_ONLY, ON_DEMAND
Default: "INITIATOR"
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
dpd_profile_id Dead peer detection (DPD) profile id

Dead peer detection (DPD) profile id. Default will be set according to system default policy.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
enabled Enable/Disable IPSec VPN session

Enable/Disable IPSec VPN session.
boolean Default: "True"
id Unique identifier of this resource string Readonly
Sortable
ike_profile_id Internet key exchange (IKE) profile id

IKE profile id to be used. Default will be set according to system default policy.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
ipsec_tunnel_profile_id IPSec tunnel profile id

Tunnel profile id to be used. By default it will point to system default profile.
string Pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$"
local_endpoint Local endpoint

Local endpoint.
IPSecVPNLocalEndpoint Required
multi_path_group_id IPSec VPN multiple path group identifier

Specify a multiple path group for the IPSec session to join for
utilizing multipath functionality.
string
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
peer_address IPV4 address of peer endpoint on remote site.

IPV4 address of peer endpoint on remote site.
string Required
peer_id Peer id

Peer identifier.
string Required
psk Pre-shared key

IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.
string Minimum: 1
Maximum: 128
resource_type Must be set to the value RouteBasedIPSecVPNSession IPSecVPNSessionResourceType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
tcp_mss_clamping TcpMssClamping
tunnel_ports IP Tunnel ports

IP Tunnel ports.
array of TunnelPortConfig Required
Minimum items: 1
Maximum items: 1

RouteType (schema)

Route Type

Name Description Type Notes
RouteType Route Type string Enum: route, neighbor, connected, blackhole, unknown

ScpProtocol (schema)

Name Description Type Notes
authentication_scheme Scheme to authenticate if required PasswordAuthenticationScheme Required
name Must be set to the value ScpProtocol string Required
Enum: http, https, scp, sftp
ssh_fingerprint SSH fingerprint of server string Required

SelfResourceLink (schema)

Link to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.

Name Description Type Notes
action Optional action string
href string Required
rel string Readonly
Enum: self

ServiceType (schema)

Supported service types, that are using certificates.

Name Description Type Notes
ServiceType Supported service types, that are using certificates. string Enum: MGMT_CLUSTER, MGMT_PLANE, API, NOTIFICATION_COLLECTOR, SYSLOG_SERVER, RSYSLOG_CLIENT

SftpProtocol (schema)

Name Description Type Notes
authentication_scheme Scheme to authenticate if required PasswordAuthenticationScheme Required
name Must be set to the value SftpProtocol string Required
Enum: http, https, scp, sftp
ssh_fingerprint SSH fingerprint of server string Required

SnmpCommunity (schema)

SNMP v1, v2c community

SNMP v1, v2c community.

Name Description Type Notes
access Type of access

Access permissions for this community.
string Enum: read_only
Default: "read_only"
community_string Community string at most 64 characters long

Community alias string at most 64 characters long.
string

SnmpServiceProperties (schema)

SNMP Service properties

Name Description Type Notes
communities SNMP v1, v2c community array of SnmpCommunity Maximum items: 10
start_on_boot Start when system boots boolean
v2_configured SNMP v2 is configured or not

Indicates whether the local SNMP agent is configured with community string(s).
boolean Readonly
v2_targets SNMP v2c targets information array of SnmpV2Target Maximum items: 3
v3_auth_protocol SNMP v3 auth protocol string Enum: SHA1
Default: "SHA1"
v3_configured SNMP v3 is configured or not

Indicates whether the local SNMP agent is configured with v3 user(s).
boolean Readonly
v3_priv_protocol SNMP v3 private protocol string Enum: AES128
Default: "AES128"
v3_targets SNMP v3 targets information array of SnmpV3Target Maximum items: 3
v3_users SNMP v3 users information array of SnmpV3User Maximum items: 5

SnmpV2Target (schema)

SNMP v2c targets information

SNMP v2c manager's reachability information.

Name Description Type Notes
community_string Community string

Community alias string at most 64 characters long.
string
port SNMP v2c manager port

SNMP v2c manager's port.
integer Minimum: 1
Maximum: 65535
Default: "162"
server SNMP v2c manager

SNMP v2c manager's IP or FQDN.
HostnameOrIPv4Address Required

SnmpV3Target (schema)

SNMP v3 targets information

SNMP v3 manager's reachability information.

Name Description Type Notes
port SNMP v2c manager port

SNMP v2c manager's port.
integer Minimum: 1
Maximum: 65535
Default: "162"
security_level Security level

SNMP v3 security level.
string Enum: AUTH_PRIV
Default: "AUTH_PRIV"
server FQDN or IP address of the SNMP Manager

Specify the fully qualified domain name, or ip address, of the server.
HostnameOrIPv4Address Required
user_id SNMP v3 user id

Specify the user name used to authenticate with the SNMP Manager.
string Required

SnmpV3User (schema)

Name Description Type Notes
access Type of access

Access permissions for this User.
string Readonly
Enum: READ_ONLY
Default: "READ_ONLY"
auth_password SNMP v3 user auth password string
priv_password SNMP v3 user private password string
security_level Security level

SNMP v3 security level.
string Readonly
Enum: AUTH_PRIV
Default: "AUTH_PRIV"
user_id SNMP v3 user id string Required

SshKeyBaseProperties (schema)

Name Description Type Notes
label SSH key label (used to identify the key) string Required
password Current password for user (required for users root and admin) string

SshKeyProperties (schema)

Name Description Type Notes
label SSH key label (used to identify the key) string Required
password Current password for user (required for users root and admin) string
type SSH key type string Required
Pattern: "^(ecdsa-sha2-nistp256|ecdsa-sha2-nistp384|ecdsa-sha2-nistp521|ssh-dss|ssh-ed25519|ssh-rsa)$"
value SSH key value string Required

SshKeyPropertiesListResult (schema)

SSH key properties query results

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results SSH key properties query results array of SshKeyProperties Required

SshServiceProperties (schema)

SSH Service properties

Name Description Type Notes
root_login Permit SSH Root login boolean
start_on_boot Start service when system boots boolean Required

StaticRoute (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
network CIDR IPv4CIDRBlock Required
next_hops Next Hops array of StaticRouteNextHop Required
Minimum items: 1
Maximum items: 8
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
resource_type Must be set to the value StaticRoute string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

StaticRouteListResult (schema)

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
page_cursor Opaque cursor for next page of results, (not set on last page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Paginated list of static routes array of StaticRoute Required

StaticRouteNextHop (schema)

Name Description Type Notes
administrative_distance Administrative Distance for the next hop IP integer Minimum: 1
Maximum: 255
Default: "1"
blackhole_action Action to be taken on matching packets for NULL routes. BlackholeAction Readonly
ip_address Next Hop IP IPv4Address
logical_router_port_id Reference of logical router port to be used for next hop ResourceReference

SupportBundleQueryParameters (schema)

Name Description Type Notes
all Include all files

Include all files including files that may have sensitive information like core files.
boolean Default: "False"

SyslogFacility (schema)

Syslog facility

Name Description Type Notes
SyslogFacility Syslog facility string Enum: KERN, USER, MAIL, DAEMON, AUTH, SYSLOG, LPR, NEWS, UUCP, AUTHPRIV, FTP, LOGALERT, CRON, LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7

SystemHostname (schema)

System host name

Name Description Type Notes
SystemHostname System host name string Maximum length: 255
Pattern: "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\.?$"

Tag (schema)

Arbitrary key-value pairs that may be attached to an entity

Name Description Type Notes
scope Tag scope

Tag searches may optionally be restricted by scope
string Maximum length: 128
Default: ""
tag Tag value

Identifier meaningful to user
string Maximum length: 256
Default: ""

TcpMssClamping (schema)

Tcp Mss Clamping Object

Tcp Mss Clamping Direction and value

Name Description Type Notes
direction MSS Clamping direction

Specifies the traffic direction for which to apply MSS Clamping.
string Enum: NONE, INBOUND_CONNECTION, OUTBOUND_CONNECTION, BOTH
Default: "NONE"
max_segment_size Maximum Segment Size value

It defines the maximum amount of data that a host is willing to accept in a single TCP segment. This field is set in TCP header during connection establishment. To avoid packet fragmentation, you can set this field depending on uplink MTU and VPN overhead. This is optional field and in case it is left unconfigured, best possible MSS value will be calculated based on effective mtu of uplink interface. Supported MSS range is 108 to 8902.
integer Minimum: 108
Maximum: 8902

TransportNodeInEdgeCluster (schema)

Transport node parameters

Transport node parameters.

Name Description Type Notes
interface Interface properties

Interface properties.
array of Interface Required
member_index Transport node index in the edge cluster

Transport node index in the edge cluster.
integer Required
node_id Transport node ID

Transport node ID
string Required
thumbprint Transport node thumbprint

Transport node thumbprint.
string Required

TransportTunnel (schema)

L2VPN Session Transport Tunnel

For client, L2VPN Session Transport Tunnel uses a peer code
which has all the information to create the transport tunnel.

Name Description Type Notes
display_name Name for transport tunnel

Name for transport tunnel.
string
ipsec_session_id Transport tunnel id

Transport tunnel id. When service is in client mode,
this is read only.
string
local_address IPv4 Address of local endpoint

IPv4 Address of local endpoint. This is required when service
is in client mode.
IPv4Address
peer_address IPv4 Address of Peer endpoint

IPv4 Address of Peer endpoint on remote site. This is required
when service is in client mode.
IPv4Address
peer_code Peer code for the transport tunnel

Peer code represents a base64 encoded string which has
all the configuration for tunnel. E.g. local/peer ids and
protocol, encryption algorithm, etc. Peer code also contains
PSK; be careful when sharing or storing it. This is required
when service is in client mode.
string

TrustObjectData (schema)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
integer Readonly
_schema Location of schema for this resource string Readonly
_self SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
actions Actions applicable to the resource at this time array of ActionDescriptor Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Readonly
Sortable
key_algo Key algorithm contained in this certificate string
notify_mpa send notification to MPA about this config change (applicable on edge node) boolean Default: "False"
passphrase Password for private key encryption string
pem_encoded pem encoded certificate data string Required
private_key private key data string
resource_type Must be set to the value TrustObjectData string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

TunnelDigestAlgorithm (schema)

Digest Algorithms used in tunnel establishment

The TunnelDigestAlgorithms are used to verify message
integrity during IPSec VPN tunnel establishment.
SHA1 produces 160 bits hash and SHA2_XXX produces
XXX bit hash.

Name Description Type Notes
TunnelDigestAlgorithm Digest Algorithms used in tunnel establishment

The TunnelDigestAlgorithms are used to verify message
integrity during IPSec VPN tunnel establishment.
SHA1 produces 160 bits hash and SHA2_XXX produces
XXX bit hash.
string Enum: SHA1, SHA2_256, SHA2_384, SHA2_512

TunnelEncryptionAlgorithm (schema)

Encryption algorithm used in tunnel

TunnelEncryption algorithms are used to ensure confidentiality
of the messages exchanged during Tunnel negotiations. AES
stands for Advanced Encryption Standards. AES_128 uses 128-bit
keys whereas AES_256 uses 256-bit keys for encryption and
decryption. AES_GCM stands for Advanced Encryption Standard(AES)
in Galois/Counter Mode (GCM) and is used to provide both
confidentiality and data origin authentication.
NO_ENCRYPTION_AUTH_AES_GMAC_* enables authentication on input
data without encyption. Digest algorithm should be empty for this
option.

Name Description Type Notes
TunnelEncryptionAlgorithm Encryption algorithm used in tunnel

TunnelEncryption algorithms are used to ensure confidentiality
of the messages exchanged during Tunnel negotiations. AES
stands for Advanced Encryption Standards. AES_128 uses 128-bit
keys whereas AES_256 uses 256-bit keys for encryption and
decryption. AES_GCM stands for Advanced Encryption Standard(AES)
in Galois/Counter Mode (GCM) and is used to provide both
confidentiality and data origin authentication.
NO_ENCRYPTION_AUTH_AES_GMAC_* enables authentication on input
data without encyption. Digest algorithm should be empty for this
option.
string Enum: AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256, NO_ENCRYPTION_AUTH_AES_GMAC_128, NO_ENCRYPTION_AUTH_AES_GMAC_192, NO_ENCRYPTION_AUTH_AES_GMAC_256, NO_ENCRYPTION

TunnelPortConfig (schema)

IP Tunnel port configuration

IP Tunnel port configuration.

Name Description Type Notes
ip_subnets IP Tunnel port subnet

IP Tunnel port (commonly referred as VTI) subnet.
array of IPSubnet Required
Minimum items: 1
Maximum items: 1
tunnel_port_id Logical route port identifier

Logical route port identifier.
string Readonly

UpgradeProgressStatus (schema)

Upgrade progress status

Name Description Type Notes
last_upgrade_step_status Status of last upgrade step object
upgrade_bundle_present True if upgrade bundle is present boolean
upgrade_metadata Meta info of upgrade object

UpgradeStatusSummary (schema)

Upgrade status summry

Name Description Type Notes
upgrade_bundle_present True if upgrade bundle is present boolean
upgrade_metadata Meta info of upgrade object
upgrade_steps List of all upgrade steps performed array of object

UpgradeTaskActionParameters (schema)

Name Description Type Notes
action Upgrade task

The upgrade task to perform.
string Pattern: "^[^/]+$"

UpgradeTaskProperties (schema)

Task properties

Name Description Type Notes
bundle_name Name of Bundle string Required
parameters Bundle arguments object Readonly
step Step name string

UpgradeTaskStatusQueryParameters (schema)

Name Description Type Notes
bundle_name Bundle Name

Provide a bundle name
string Pattern: "^[a-zA-Z0-9-.]+$"
upgrade_task_id Upgrade Task ID

Provide a task id
string Pattern: "^[a-z0-9-]+$"

UrpfMode (schema)

Unicast Reverse Path Forwarding mode

Name Description Type Notes
UrpfMode Unicast Reverse Path Forwarding mode string Enum: NONE, STRICT

X509Certificate (schema)

Name Description Type Notes
dsa_public_key_g One of the DSA cryptogaphic algorithm's strength parameters, base string Readonly
dsa_public_key_p One of the DSA cryptogaphic algorithm's strength parameters, prime string Readonly
dsa_public_key_q One of the DSA cryptogaphic algorithm's strength parameters, sub-prime string Readonly
dsa_public_key_y One of the DSA cryptogaphic algorithm's strength parameters string Readonly
ecdsa_curve_name ECDSA Curve Name

The Curve name for the ECDSA certificate.
string Readonly
ecdsa_ec_field ECDSA Elliptic Curve Finite Field

Represents an elliptic curve (EC) finite field in ECDSA.
string Readonly
Enum: F2M, FP
ecdsa_ec_field_f2mks ECDSA Elliptic Curve F2MKS

The order of the middle term(s) of the reduction polynomial in elliptic curve (EC) | characteristic 2 finite field.| Contents of this array are copied to protect against subsequent modification in ECDSA.
array of integer Readonly
ecdsa_ec_field_f2mm ECDSA Elliptic Curve F2MM

The first coefficient of this elliptic curve in elliptic curve (EC) | characteristic 2 finite field for ECDSA.
integer Readonly
ecdsa_ec_field_f2mrp ECDSA Elliptic Curve F2MRP

The value whose i-th bit corresponds to the i-th coefficient of the reduction polynomial | in elliptic curve (EC) characteristic 2 finite field for ECDSA.
string Readonly
ecdsa_ec_field_f2pp ECDSA Elliptic Curve F2PP

The specified prime for the elliptic curve prime finite field in ECDSA.
string Readonly
ecdsa_public_key_a ECDSA Elliptic Curve Public Key A

The first coefficient of this elliptic curve in ECDSA.
string Readonly
ecdsa_public_key_b ECDSA Elliptic Curve Public Key B

The second coefficient of this elliptic curve in ECDSA.
string Readonly
ecdsa_public_key_cofactor ECDSA Elliptic Curve Public Key Cofactor

The co-factor in ECDSA.
integer Readonly
ecdsa_public_key_generator_x ECDSA Elliptic Curve Public Key X

x co-ordinate of G (the generator which is also known as the base point) in ECDSA.
string Readonly
ecdsa_public_key_generator_y ECDSA Elliptic Curve Public Key Y

y co-ordinate of G (the generator which is also known as the base point) in ECDSA.
string Readonly
ecdsa_public_key_order ECDSA Elliptic Curve Public Key Order

The order of generator G in ECDSA.
string Readonly
ecdsa_public_key_seed ECDSA Elliptic Curve Public Key Seed

The bytes used during curve generation for later validation in ECDSA.| Contents of this array are copied to protect against subsequent modification.
array of string Readonly
is_ca True if this is a CA certificate. boolean Required
Readonly
is_valid True if this certificate is valid. boolean Required
Readonly
issuer the certificate issuers complete distinguished name string Required
Readonly
issuer_cn the certificate issuer's common name string Required
Readonly
not_after the time in epoch milliseconds at which the certificate becomes invalid EpochMsTimestamp Required
Readonly
not_before the time in epoch milliseconds at which the certificate becomes valid EpochMsTimestamp Required
Readonly
public_key_algo Public Key Algorithm

Cryptographic algorithm used by the public key for data encryption.
string Required
Readonly
Enum: RSA, DSA, ECDSA
public_key_length size measured in bits of the public/private keys used in a cryptographic algorithm integer Required
Readonly
rsa_public_key_exponent An RSA public key is made up of the modulus and the public exponent. Exponent is a power number string Readonly
rsa_public_key_modulus An RSA public key is made up of the modulus and the public exponent. Modulus is wrap around number string Readonly
serial_number certificate's serial number string Required
Readonly
signature the signature value(the raw signature bits) used for signing and validate the cert string Required
Readonly
signature_algorithm the algorithm used by the Certificate Authority to sign the certificate string Required
Readonly
subject the certificate owners complete distinguished name string Required
Readonly
subject_cn the certificate owner's common name string Required
Readonly
version Certificate version (default v1) string Required
Readonly

X509Crl (schema)

A CRL is a time-stamped list identifying revoked certificates.

Name Description Type Notes
crl_entries list of X509CrlEntry array of X509CrlEntry Readonly
issuer Issuer's distinguished name(DN) string Readonly
next_update Next update time for the CRL string Readonly
version CRL's version number either 1 or 2 string Readonly

X509CrlEntry (schema)

Each revoked certificate is identified in a CRL by its certificate serial number.

Name Description Type Notes
revocation_date Revocation date string Readonly
serial_number the revoked certificate's serial number string Readonly



API Type Schemas

Request and response bodies for API Methods are specified using the proposed JSON Schema format (revision 03) documented at http://json-schema.org/ . All data returned by API methods references the schema being used through the an attribute of the top-level object named "_schema". These will refer to the schema definitions provided as described in the Embedded API Documentation methods of the API. The schemas make use of JSON referencing to reduce restatement of the same schema information in multiple places.

JsonSchema

As defined in http://tools.ietf.org/html/draft-zyp-json-schema-03.

ActionDescriptor (type)

{
  "additionalProperties": false, 
  "id": "ActionDescriptor", 
  "properties": {
    "description": {
      "readonly": true, 
      "title": "A description of what the action does", 
      "type": "string"
    }, 
    "descriptor": {
      "readonly": true, 
      "required": true, 
      "title": "The URI of the REST routine provider that implements the action", 
      "type": "string"
    }, 
    "name": {
      "readonly": true, 
      "required": true, 
      "title": "The name of the action", 
      "type": "string"
    }, 
    "uri": {
      "readonly": true, 
      "required": true, 
      "title": "The URI to use to invoke the action", 
      "type": "string"
    }
  }, 
  "type": "object"
}

ApiCertificate (type)

{
  "additionalProperties": false, 
  "id": "ApiCertificate", 
  "properties": {
    "api_certificate": {
      "description": "API certificate", 
      "required": true, 
      "type": "string"
    }, 
    "api_key": {
      "description": "API private key", 
      "required": false, 
      "sensitive": true, 
      "type": "string"
    }, 
    "ca_certificate": {
      "description": "CA certificate", 
      "required": true, 
      "type": "string"
    }
  }, 
  "type": "object"
}

ApiCertificateReply (type)

{
  "id": "ApiCertificateReply", 
  "properties": {
    "status": {
      "description": "API certificate replacement status", 
      "required": true, 
      "type": "string"
    }
  }, 
  "type": "object"
}

ApplianceManagementSuppressRedirectQueryParameter (type)

{
  "additionalProperties": false, 
  "id": "ApplianceManagementSuppressRedirectQueryParameter", 
  "properties": {
    "suppress_redirect": {
      "default": false, 
      "description": "Do not return a redirect HTTP status.", 
      "title": "Suppress redirect status if applicable", 
      "type": "boolean"
    }
  }, 
  "type": "object"
}

ApplianceManagementTaskListResult (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "ApplianceManagementTaskListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "ApplianceManagementTaskProperties
      }, 
      "required": true, 
      "title": "Task property results", 
      "type": "array"
    }
  }, 
  "title": "Appliance management task query results", 
  "type": "object"
}

ApplianceManagementTaskProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "ApplianceManagementTaskProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "async_response_available": {
      "readonly": true, 
      "title": "True if response for asynchronous request is available", 
      "type": "boolean"
    }, 
    "cancelable": {
      "readonly": true, 
      "title": "True if this task can be canceled", 
      "type": "boolean"
    }, 
    "description": {
      "readonly": true, 
      "title": "Description of the task", 
      "type": "string"
    }, 
    "details": {
      "readonly": true, 
      "title": "Details about the task if known", 
      "type": "object"
    }, 
    "end_time": {
      "$ref": "EpochMsTimestamp, 
      "readonly": true, 
      "title": "The end time of the task in epoch milliseconds"
    }, 
    "id": {
      "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}_[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$", 
      "readonly": true, 
      "title": "Identifier for this task", 
      "type": "string"
    }, 
    "message": {
      "readonly": true, 
      "title": "A message describing the disposition of the task", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "progress": {
      "maximum": 100, 
      "minimum": 0, 
      "readonly": true, 
      "title": "Task progress if known, from 0 to 100", 
      "type": "integer"
    }, 
    "request_method": {
      "readonly": true, 
      "title": "HTTP request method", 
      "type": "string"
    }, 
    "request_uri": {
      "readonly": true, 
      "title": "URI of the method invocation that spawned this task", 
      "type": "string"
    }, 
    "start_time": {
      "$ref": "EpochMsTimestamp, 
      "readonly": true, 
      "title": "The start time of the task in epoch milliseconds"
    }, 
    "status": {
      "$ref": "ApplianceManagementTaskStatus, 
      "readonly": true, 
      "title": "Current status of the task"
    }, 
    "user": {
      "readonly": true, 
      "title": "Name of the user who created this task", 
      "type": "string"
    }
  }, 
  "title": "Appliance management task properties", 
  "type": "object"
}

ApplianceManagementTaskQueryParameters (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResultQueryParameters
  }, 
  "id": "ApplianceManagementTaskQueryParameters", 
  "properties": {
    "fields": {
      "description": "Comma-separated field names to include in query result", 
      "title": "Fields to include in query results", 
      "type": "string"
    }, 
    "request_method": {
      "description": "Comma-separated request methods to include in query result", 
      "pattern": "^(=|!=|~|!~)?.+$", 
      "title": "Request method(s) to include in query result", 
      "type": "string"
    }, 
    "request_path": {
      "description": "Comma-separated request paths to include in query result", 
      "pattern": "^(=|!=|~|!~)?.+$", 
      "title": "Request URI path(s) to include in query result", 
      "type": "string"
    }, 
    "request_uri": {
      "description": "Comma-separated request URIs to include in query result", 
      "pattern": "^(=|!=|~|!~)?.+$", 
      "title": "Request URI(s) to include in query result", 
      "type": "string"
    }, 
    "status": {
      "description": "Comma-separated status values to include in query result", 
      "pattern": "^(=|!=|~|!~)?.+$", 
      "title": "Status(es) to include in query result", 
      "type": "string"
    }, 
    "user": {
      "description": "Comma-separated user names to include in query result", 
      "pattern": "^(=|!=|~|!~)?.+$", 
      "title": "Names of users to include in query result", 
      "type": "string"
    }
  }, 
  "type": "object"
}

ApplianceManagementTaskStatus (type)

{
  "enum": [
    "running", 
    "error", 
    "success", 
    "canceling", 
    "canceled", 
    "killed"
  ], 
  "id": "ApplianceManagementTaskStatus", 
  "title": "Current status of the appliance management task", 
  "type": "string"
}

AuthenticationPolicyProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "AuthenticationPolicyProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "api_failed_auth_lockout_period": {
      "default": 900, 
      "description": "Once a lockout occurs, the account remains locked out of the API for this time period. Only applies to NSX Manager nodes. Ignored on other node types.", 
      "minimum": 0, 
      "title": "Lockout period in seconds", 
      "type": "integer"
    }, 
    "api_failed_auth_reset_period": {
      "default": 900, 
      "description": "In order to trigger an account lockout, all authentication failures must occur in this time window. If the reset period expires, the failed login count is reset to zero. Only applies to NSX Manager nodes. Ignored on other node types.", 
      "minimum": 0, 
      "title": "Period, in seconds, for authentication failures to trigger lockout", 
      "type": "integer"
    }, 
    "api_max_auth_failures": {
      "default": 5, 
      "description": "Only applies to NSX Manager nodes. Ignored on other node types.", 
      "minimum": 0, 
      "title": "Number of authentication failures that trigger API lockout", 
      "type": "integer"
    }, 
    "cli_failed_auth_lockout_period": {
      "default": 900, 
      "description": "Once a lockout occurs, the account remains locked out of the CLI for this time period. While the lockout period is in effect, additional authentication attempts restart the lockout period, even if a valid password is specified.", 
      "minimum": 0, 
      "title": "Lockout period in seconds", 
      "type": "integer"
    }, 
    "cli_max_auth_failures": {
      "default": 5, 
      "minimum": 0, 
      "title": "Number of authentication failures that trigger CLI lockout", 
      "type": "integer"
    }, 
    "minimum_password_length": {
      "default": 8, 
      "minimum": 8, 
      "title": "Minimum number of characters required in account passwords", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Configuration of authentication policies for the NSX node", 
  "type": "object"
}

AuthenticationScheme (type)

{
  "additionalProperties": {}, 
  "id": "AuthenticationScheme", 
  "properties": {
    "scheme_name": {
      "required": true, 
      "title": "Authentication scheme name", 
      "type": "string"
    }
  }, 
  "type": "object"
}

AutonomousEdgeClusterConfig (type)

{
  "id": "AutonomousEdgeClusterConfig", 
  "properties": {
    "nodes": {
      "items": {
        "$ref": "TransportNodeInEdgeCluster
      }, 
      "maxItems": 2, 
      "minItems": 1, 
      "title": "Nodes in the cluster", 
      "type": "array"
    }
  }, 
  "type": "object"
}

BasicAuthenticationScheme (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "AuthenticationScheme
  }, 
  "id": "BasicAuthenticationScheme", 
  "properties": {
    "password": {
      "required": true, 
      "sensitive": true, 
      "title": "Password to authenticate with", 
      "type": "string"
    }, 
    "scheme_name": {
      "enum": [
        "basic"
      ], 
      "required": true, 
      "title": "Authentication scheme name", 
      "type": "string"
    }, 
    "username": {
      "pattern": "^.+$", 
      "required": true, 
      "title": "User name to authenticate with", 
      "type": "string"
    }
  }, 
  "type": "object"
}

BlackholeAction (type)

{
  "additionalProperties": false, 
  "enum": [
    "DISCARD"
  ], 
  "id": "BlackholeAction", 
  "title": "Action to be taken on matching packets for NULL routes. For action is DISCARD, matching packets are dropped rather than forwarded.", 
  "type": "string"
}

Certificate (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "Certificate", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "details": {
      "description": "list of X509Certificates", 
      "items": {
        "$ref": "X509Certificate
      }, 
      "readonly": true, 
      "required": false, 
      "type": "array"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "pem_encoded": {
      "description": "pem encoded certificate data", 
      "readonly": false, 
      "required": true, 
      "type": "string"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "used_by": {
      "description": "list of node IDs with services, that are using this certificate", 
      "items": {
        "$ref": "NodeIdServicesMap
      }, 
      "readonly": true, 
      "required": false, 
      "type": "array"
    }
  }, 
  "type": "object"
}

CertificateList (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "CertificateList", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "description": "Certificate list", 
      "items": {
        "$ref": "Certificate
      }, 
      "readonly": true, 
      "required": true, 
      "type": "array"
    }
  }, 
  "title": "Certificate queries result", 
  "type": "object"
}

ConfigType (type)

{
  "enum": [
    "nsxa-state", 
    "nsxa-edge-cluster", 
    "nsxa-lrouter", 
    "nsxa-service-router", 
    "nestdb", 
    "edge-agent", 
    "dataplane", 
    "nsd", 
    "manager", 
    "controller", 
    "core"
  ], 
  "id": "ConfigType", 
  "title": "Config Type", 
  "type": "string"
}

CopyFromRemoteFileProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "CopyRemoteFileProperties
  }, 
  "id": "CopyFromRemoteFileProperties", 
  "properties": {
    "port": {
      "maximum": 65535, 
      "minimum": 1, 
      "title": "Server port", 
      "type": "integer"
    }, 
    "protocol": {
      "$ref": "Protocol, 
      "required": true, 
      "title": "Protocol to use to copy file"
    }, 
    "server": {
      "pattern": "^[^/:]+$", 
      "required": true, 
      "title": "Remote server hostname or IP address", 
      "type": "string"
    }, 
    "uri": {
      "required": true, 
      "title": "URI of file to copy", 
      "type": "string"
    }
  }, 
  "type": "object"
}

CopyRemoteFileProperties (type)

{
  "additionalProperties": {}, 
  "id": "CopyRemoteFileProperties", 
  "properties": {
    "port": {
      "maximum": 65535, 
      "minimum": 1, 
      "title": "Server port", 
      "type": "integer"
    }, 
    "server": {
      "pattern": "^[^/:]+$", 
      "required": true, 
      "title": "Remote server hostname or IP address", 
      "type": "string"
    }, 
    "uri": {
      "required": true, 
      "title": "URI of file to copy", 
      "type": "string"
    }
  }, 
  "type": "object"
}

CopyToRemoteFileProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "CopyRemoteFileProperties
  }, 
  "id": "CopyToRemoteFileProperties", 
  "properties": {
    "port": {
      "maximum": 65535, 
      "minimum": 1, 
      "title": "Server port", 
      "type": "integer"
    }, 
    "protocol": {
      "$ref": "Protocol, 
      "description": "Only scp and sftp may be used.", 
      "required": true, 
      "title": "Protocol to use to copy file"
    }, 
    "server": {
      "pattern": "^[^/:]+$", 
      "required": true, 
      "title": "Remote server hostname or IP address", 
      "type": "string"
    }, 
    "uri": {
      "required": true, 
      "title": "URI of file to copy", 
      "type": "string"
    }
  }, 
  "type": "object"
}

CpuStats (type)

{
  "additionalProperties": false, 
  "id": "CpuStats", 
  "properties": {
    "core": {
      "description": "CPU id", 
      "readonly": true, 
      "title": "core id", 
      "type": "string"
    }, 
    "cpu_type": {
      "default": "controlpath_core", 
      "description": "cpu type, one of datapath_core, controlpath_core and service_core", 
      "enum": [
        "datapath_core", 
        "controlpath_core", 
        "service_core"
      ], 
      "readonly": true, 
      "title": "cpu type", 
      "type": "string"
    }, 
    "crypto": {
      "description": "CPU crypto usage(pps)", 
      "readonly": true, 
      "title": "CPU crypto usage", 
      "type": "string"
    }, 
    "intercore": {
      "description": "CPU intercore usage(pps)", 
      "readonly": true, 
      "title": "CPU intercore usage", 
      "type": "string"
    }, 
    "kni": {
      "description": "CPU kni usage(pps)", 
      "readonly": true, 
      "title": "CPU kni usage", 
      "type": "string"
    }, 
    "packet_processing_usage": {
      "description": "Datapath CPU packet processing usage(%)", 
      "readonly": true, 
      "title": "Datapath CPU packet processing usage", 
      "type": "string"
    }, 
    "rx": {
      "description": "CPU rx usage(pps)", 
      "readonly": true, 
      "title": "CPU rx usage", 
      "type": "string"
    }, 
    "slowpath": {
      "description": "CPU slowpath usage(pps)", 
      "readonly": true, 
      "title": "CPU slowpath usage", 
      "type": "string"
    }, 
    "tx": {
      "description": "CPU tx usage(pps)", 
      "readonly": true, 
      "title": "CPU tx usage", 
      "type": "string"
    }, 
    "usage": {
      "description": "CPU usage(%)", 
      "readonly": true, 
      "title": "CPU usage", 
      "type": "string"
    }
  }, 
  "type": "object"
}

CreateRemoteDirectoryProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "CopyRemoteFileProperties
  }, 
  "id": "CreateRemoteDirectoryProperties", 
  "properties": {
    "port": {
      "maximum": 65535, 
      "minimum": 1, 
      "title": "Server port", 
      "type": "integer"
    }, 
    "protocol": {
      "$ref": "SftpProtocol, 
      "required": true, 
      "title": "Protocol to use to copy file"
    }, 
    "server": {
      "pattern": "^[^/:]+$", 
      "required": true, 
      "title": "Remote server hostname or IP address", 
      "type": "string"
    }, 
    "uri": {
      "required": true, 
      "title": "URI of file to copy", 
      "type": "string"
    }
  }, 
  "type": "object"
}

Crl (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "Crl", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "details": {
      "$ref": "X509Crl, 
      "description": "details of the X509Crl object", 
      "readonly": true, 
      "required": false
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "pem_encoded": {
      "description": "pem encoded crl data", 
      "readonly": false, 
      "required": true, 
      "type": "string"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "type": "object"
}

CrlList (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "CrlList", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "description": "CRL list", 
      "items": {
        "$ref": "Crl
      }, 
      "readonly": true, 
      "required": true, 
      "type": "array"
    }
  }, 
  "title": "Crl queries result", 
  "type": "object"
}

CrlObjectData (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "CrlObjectData", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "pem_encoded": {
      "description": "pem encoded crl data", 
      "readonly": false, 
      "required": true, 
      "type": "string"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "type": "object"
}

DHGroup (type)

{
  "additionalProperties": false, 
  "description": "Diffie-Hellman groups represent algorithm used to derive shared keys between IPSec VPN initiator and responder over an unsecured network. GROUP2 uses 1024-bit Modular Exponentiation (MODP) group. GROUP5 uses 1536-bit MODP group. GROUP14 uses 2048-bit MODP group. GROUP15 uses 3072-bit MODP group. GROUP16 uses 4096-bit MODP group. GROUP19 uses 256-bit random Elliptic Curve (ECP) group. GROUP20 uses 384-bit random ECP group. GROUP21 uses 521-bit random ECP group.", 
  "enum": [
    "GROUP2", 
    "GROUP5", 
    "GROUP14", 
    "GROUP15", 
    "GROUP16", 
    "GROUP19", 
    "GROUP20", 
    "GROUP21"
  ], 
  "id": "DHGroup", 
  "title": "Diffie-Hellman groups", 
  "type": "string"
}

DatetimeUTC (type)

{
  "description": "Datetime string in UTC in the RFC3339 format 'yyyy-mm-ddThh:mm:ssZ'", 
  "id": "DatetimeUTC", 
  "title": "Datetime string in UTC", 
  "type": "string"
}

EdgeConfigDiagnosis (type)

{
  "additionalProperties": false, 
  "id": "EdgeConfigDiagnosis", 
  "properties": {
    "failed": {
      "$ref": "FailedOrWarningConfig, 
      "required": true, 
      "title": "Failed Config", 
      "type": "object"
    }, 
    "passed": {
      "items": {
        "$ref": "ConfigType
      }, 
      "required": true, 
      "title": "Passed Config", 
      "type": "array"
    }, 
    "warning": {
      "$ref": "FailedOrWarningConfig, 
      "required": true, 
      "title": "Config Warning", 
      "type": "object"
    }
  }, 
  "type": "object"
}

EdgeDataplaneCpuStats (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneCpuStats", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "cores": {
      "description": "Statistics of CPU cores", 
      "items": {
        "$ref": "CpuStats
      }, 
      "maxItems": 64, 
      "title": "Statistics of CPU cores", 
      "type": "array"
    }, 
    "datapath_cores_mode": {
      "description": "Mode of how the datapath cores get the packets from driver", 
      "readonly": true, 
      "title": "Datapath core mode", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane CPU Stats", 
  "type": "object"
}

EdgeDataplaneCtrlPrioSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneCtrlPrioSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "ctrl_prio_enabled": {
      "description": "Control packet prioritization setting", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane control packet prioritization setting.", 
  "type": "object"
}

EdgeDataplaneDynamicCoreSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneDynamicCoreSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "dynamic_core_enabled": {
      "description": "Edge Dataplane dynamic core setting", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane control dynamic core setting.", 
  "type": "object"
}

EdgeDataplaneFlow (type)

{
  "additionalProperties": false, 
  "id": "EdgeDataplaneFlow", 
  "properties": {
    "dst_ip": {
      "description": "Destination IP of the flow", 
      "title": "Destination IP", 
      "type": "string"
    }, 
    "dst_port": {
      "description": "Destination port of the flow", 
      "title": "Destination port", 
      "type": "integer"
    }, 
    "proto": {
      "description": "Protocol of the flow", 
      "title": "Protocol", 
      "type": "integer"
    }, 
    "src_ip": {
      "description": "Source IP of the flow", 
      "title": "Source IP", 
      "type": "string"
    }, 
    "src_port": {
      "description": "Source port of the flow", 
      "title": "Source port", 
      "type": "integer"
    }, 
    "tunnel_dst_ip": {
      "description": "Tunnel destination IP of the flow", 
      "title": "Tunnel destination IP", 
      "type": "string"
    }, 
    "tunnel_src_ip": {
      "description": "Tunnel source IP of the flow", 
      "title": "Tunnel source IP", 
      "type": "string"
    }
  }, 
  "title": "Edge dataplane flow record", 
  "type": "object"
}

EdgeDataplaneFlowCacheSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneFlowCacheSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "flow_cache_enabled": {
      "description": "Flow cache setting", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane Flow Cache mode.", 
  "type": "object"
}

EdgeDataplaneFlowMonitorMessage (type)

{
  "additionalProperties": false, 
  "id": "EdgeDataplaneFlowMonitorMessage", 
  "properties": {
    "message": {
      "description": "Edge dataplane flow monitor message", 
      "title": "Message", 
      "type": "string"
    }
  }, 
  "title": "Edge dataplane flow monitor message", 
  "type": "object"
}

EdgeDataplaneFlowMonitorStartSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneFlowMonitorStartSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "core_id": {
      "description": "Flow monitor core id", 
      "title": "Core id", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "timeout": {
      "default": "15", 
      "description": "Flow monitor timeout in seconds", 
      "title": "Timeout for flow monitor in seconds, in the range of 1 - 600.", 
      "type": "string"
    }
  }, 
  "title": "Information about Edge Dataplane flow monitor start setting.", 
  "type": "object"
}

EdgeDataplaneFlowQueryParameters (type)

{
  "extends": {
    "$ref": "ListResultQueryParameters
  }, 
  "id": "EdgeDataplaneFlowQueryParameters", 
  "properties": {
    "fields": {
      "description": "Comma-separated field names to include in query result", 
      "title": "Fields to include in query results", 
      "type": "string"
    }, 
    "top_10": {
      "default": false, 
      "description": "Collect top 10 flows when set to true, else collect all flows.", 
      "title": "Collect top 10 flows when set to true", 
      "type": "boolean"
    }
  }, 
  "type": "object"
}

EdgeDataplaneGeneveCbitSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneGeneveCbitSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "geneve_cbit_set": {
      "description": "geneve critical bit setting", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane geneve cbit setting.", 
  "type": "object"
}

EdgeDataplaneIntrModeSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneIntrModeSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "intr_mode_enabled": {
      "description": "interrupt mode setting", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane interrupt mode setting.", 
  "type": "object"
}

EdgeDataplaneL2vpnPmtuSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneL2vpnPmtuSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "l2vpn_pmtu_enabled": {
      "description": "l2vpn pmtu setting", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane l2vpn pmtu message generation setting.", 
  "type": "object"
}

EdgeDataplanePmtuLearningSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplanePmtuLearningSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "pmtu_learning_enabled": {
      "description": "l3vpn pmtu setting", 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane pmtu learning setting.", 
  "type": "object"
}

EdgeDataplaneQatAdminSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneQatAdminSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "qat_admin_enabled": {
      "description": "QAT feature enabled setting", 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane QAT feature enabled setting.", 
  "type": "object"
}

EdgeDataplaneQatAdminSettingResponse (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneQatAdminSettingResponse", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "update_message": {
      "description": "Message to display after setting QAT feature", 
      "readonly": true, 
      "title": "Datapath QAT enable CLI message", 
      "type": "string"
    }
  }, 
  "title": "Information about Edge Dataplane QAT feature enabled setting.", 
  "type": "object"
}

EdgeDataplaneQatStatus (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneQatStatus", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "admin_status": {
      "description": "QAT device enabled", 
      "readonly": true, 
      "title": "QAT enabled", 
      "type": "boolean"
    }, 
    "device_present": {
      "description": "QAT device present", 
      "readonly": true, 
      "title": "QAT present", 
      "type": "boolean"
    }, 
    "fips_compliant": {
      "description": "FIPS compliance of QAT feature", 
      "readonly": true, 
      "title": "FIPS compliance", 
      "type": "boolean"
    }, 
    "is_vm": {
      "description": "Edge is deployed in VM", 
      "readonly": true, 
      "title": "VM deployment", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "operational_status": {
      "description": "QAT device currently running", 
      "readonly": true, 
      "title": "QAT running", 
      "type": "boolean"
    }
  }, 
  "title": "Information about Edge Dataplane QAT status", 
  "type": "object"
}

EdgeDataplaneQueueNumPerPortPerCoreSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneQueueNumPerPortPerCoreSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "queue_num_per_port_per_core": {
      "description": "queue number per port per core", 
      "maximum": 16, 
      "minimum": 1, 
      "type": "integer"
    }
  }, 
  "title": "Information about Edge Dataplane queue num per port per core setting.", 
  "type": "object"
}

EdgeDataplaneRingSize (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneRingSize", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "rx_ring_size": {
      "description": "rx ring size", 
      "type": "integer"
    }, 
    "tx_ring_size": {
      "description": "tx ring size", 
      "type": "integer"
    }
  }, 
  "title": "Information about Edge physical port ring size.", 
  "type": "object"
}

EdgeDataplaneRingSizeSetting (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "EdgeDataplaneRingSizeSetting", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "ring_size": {
      "description": "ring size", 
      "type": "integer"
    }
  }, 
  "title": "Information about Edge physical port ring size setting.", 
  "type": "object"
}

EdgeDataplaneTopKFlowQueryParameters (type)

{
  "extends": {
    "$ref": "ListResultQueryParameters
  }, 
  "id": "EdgeDataplaneTopKFlowQueryParameters", 
  "properties": {
    "core_id": {
      "description": "CPU core on which the flows are to be monitored", 
      "maximum": 128, 
      "minimum": 0, 
      "title": "CPU core on which the flows are to be monitored", 
      "type": "integer"
    }, 
    "fields": {
      "description": "Comma-separated field names to include in query result", 
      "title": "Fields to include in query results", 
      "type": "string"
    }, 
    "timeout": {
      "default": 30, 
      "description": "Timeout for flow monitor in seconds", 
      "maximum": 120, 
      "minimum": 1, 
      "title": "Timeout for flow monitor in seconds", 
      "type": "integer"
    }
  }, 
  "type": "object"
}

EdgeDataplaneTopKFlows (type)

{
  "id": "EdgeDataplaneTopKFlows", 
  "properties": {
    "flow_count": {
      "description": "Count of flow records in the result", 
      "title": "Count of flow records", 
      "type": "integer"
    }, 
    "flows": {
      "description": "Array of flow records", 
      "items": {
        "$ref": "EdgeDataplaneFlow
      }, 
      "title": "Array of flow records", 
      "type": "array"
    }
  }, 
  "title": "Edge dataplane top-k flow dump", 
  "type": "object"
}

EdgeDiagnosis (type)

{
  "additionalProperties": false, 
  "id": "EdgeDiagnosis", 
  "properties": {
    "config": {
      "$ref": "EdgeConfigDiagnosis, 
      "required": true, 
      "title": "Edge Config Diagnosis", 
      "type": "object"
    }, 
    "ha-state": {
      "enum": [
        "disabled", 
        "offline", 
        "discover", 
        "statesync", 
        "inactive", 
        "active", 
        "unknown"
      ], 
      "required": true, 
      "title": "HA State", 
      "type": "string"
    }
  }, 
  "type": "object"
}

EdgeDiagnosisInconsistency (type)

{
  "id": "EdgeDiagnosisInconsistency", 
  "properties": {
    "detail": {
      "description": "NSX Edge inconsistency check detail", 
      "items": {
        "type": "string"
      }, 
      "title": "NSX Edge inconsistency check detail", 
      "type": "array"
    }, 
    "title": {
      "description": "NSX Edge inconsistency check type", 
      "title": "NSX Edge inconsistency check type", 
      "type": "string"
    }
  }, 
  "title": "NSX Edge inconsistency check", 
  "type": "object"
}

EdgeDiagnosisInconsistencyResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "EdgeDiagnosisInconsistencyResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "EdgeDiagnosisInconsistency
      }, 
      "title": "NSX Edge inconsistency check result", 
      "type": "array"
    }
  }, 
  "title": "NSX Edge inconsistency check result", 
  "type": "object"
}

EdgeInconsistencyQueryParameters (type)

{
  "additionalProperties": false, 
  "id": "EdgeInconsistencyQueryParameters", 
  "properties": {
    "cursor": {
      "description": "A cursor points to a specific record in the inconsistency check result", 
      "minimum": 0, 
      "required": false, 
      "title": "Opaque cursor to be used for getting next page of records (supplied by current result page)", 
      "type": "integer"
    }, 
    "page_size": {
      "description": "The page size determines the number of records to be returned", 
      "maximum": 100, 
      "minimum": 1, 
      "required": false, 
      "title": "Maximum number of results to return in this page (server may return fewer)", 
      "type": "integer"
    }
  }, 
  "type": "object"
}

EdgeNodeServiceLoggingProperties (type)

{
  "extends": {
    "$ref": "NodeServiceProperties
  }, 
  "id": "EdgeNodeServiceLoggingProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "service_name": {
      "required": true, 
      "title": "Service name", 
      "type": "string"
    }, 
    "service_properties": {
      "logging_level": {
        "enum": [
          "OFF", 
          "FATAL", 
          "ERROR", 
          "WARN", 
          "INFO", 
          "DEBUG", 
          "TRACE"
        ], 
        "required": true, 
        "title": "Service logging level", 
        "type": "string"
      }
    }
  }, 
  "title": "Edge node service properties", 
  "type": "object"
}

EmbeddedResource (type)

{
  "abstract": true, 
  "extends": {
    "$ref": "RevisionedResource
  }, 
  "id": "EmbeddedResource", 
  "polymorphic-type-descriptor": {
    "property-name": "resource_type"
  }, 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_owner": {
      "$ref": "OwnerResourceLink, 
      "readonly": true, 
      "title": "Owner of this resource"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "description": "Identifier of the resource", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }
  }, 
  "title": "Base class for resources that are embedded in other resources", 
  "type": "object"
}

EpochMsTimestamp (type)

{
  "id": "EpochMsTimestamp", 
  "title": "Timestamp in milliseconds since epoch", 
  "type": "integer"
}

ExitEdgeInterface (type)

{
  "enum": [
    "eth1", 
    "eth2", 
    "eth3", 
    "eth4", 
    "eth5", 
    "eth6", 
    "eth7", 
    "eth8"
  ], 
  "id": "ExitEdgeInterface", 
  "title": "Exit interface for logical router port", 
  "type": "string"
}

FailedOrWarningConfig (type)

{
  "additionalProperties": false, 
  "id": "FailedOrWarningConfig", 
  "properties": {
    "controller": {
      "title": "Controller Connection State", 
      "type": "string"
    }, 
    "core": {
      "items": {
        "type": "string"
      }, 
      "title": "Core Names", 
      "type": "array"
    }, 
    "dataplane": {
      "title": "Dataplane State", 
      "type": "string"
    }, 
    "edge-agent": {
      "title": "Edge Agent State", 
      "type": "string"
    }, 
    "manager": {
      "title": "Manager Connection State", 
      "type": "string"
    }, 
    "nestdb": {
      "title": "NestDB State", 
      "type": "string"
    }, 
    "nsd": {
      "title": "Nsd State", 
      "type": "string"
    }, 
    "nsxa-edge-cluster": {
      "title": "Edge Cluster State", 
      "type": "string"
    }, 
    "nsxa-lrouter": {
      "title": "Logical Router State", 
      "type": "string"
    }, 
    "nsxa-service-router": {
      "title": "Service Router State", 
      "type": "string"
    }, 
    "nsxa-state": {
      "title": "NSXA State", 
      "type": "string"
    }
  }, 
  "title": "Failed or Warning Config", 
  "type": "object"
}

FileProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "FileProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "created_epoch_ms": {
      "required": true, 
      "title": "File creation time in epoch milliseconds", 
      "type": "integer"
    }, 
    "modified_epoch_ms": {
      "required": true, 
      "title": "File modification time in epoch milliseconds", 
      "type": "integer"
    }, 
    "name": {
      "pattern": "^[^/]+$", 
      "required": true, 
      "title": "File name", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "size": {
      "required": true, 
      "title": "Size of the file in bytes", 
      "type": "integer"
    }
  }, 
  "title": "File properties", 
  "type": "object"
}

FilePropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "FilePropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "FileProperties
      }, 
      "required": true, 
      "title": "File property results", 
      "type": "array"
    }
  }, 
  "title": "File properties query results", 
  "type": "object"
}

FileThumbprint (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "FileThumbprint", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "name": {
      "pattern": "^[^/]+$", 
      "required": true, 
      "title": "File name", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "sha1": {
      "required": true, 
      "title": "File's SHA1 thumbprint", 
      "type": "string"
    }, 
    "sha256": {
      "required": true, 
      "title": "File's SHA256 thumbprint", 
      "type": "string"
    }
  }, 
  "title": "File thumbprint", 
  "type": "object"
}

GetCertParameter (type)

{
  "additionalProperties": false, 
  "id": "GetCertParameter", 
  "properties": {
    "details": {
      "default": false, 
      "required": false, 
      "title": "whether to expand the pem data and show all its details", 
      "type": "boolean"
    }
  }, 
  "type": "object"
}

GetSNMPParameters (type)

{
  "additionalProperties": false, 
  "description": "Get SNMP request parameters.", 
  "id": "GetSNMPParameters", 
  "properties": {
    "show_sensitive_data": {
      "default": false, 
      "description": "Whether to show SNMP service properties including community strings if any applicable.", 
      "required": false, 
      "title": "Show SNMP sensitive data or not", 
      "type": "boolean"
    }
  }, 
  "title": "Get SNMP request parameters", 
  "type": "object"
}

HANodeStatusProperties (type)

{
  "id": "HANodeStatusProperties", 
  "properties": {
    "admin_state": {
      "$ref": "NodeAdminState, 
      "title": "Node Admin State"
    }, 
    "high_availability_status": {
      "$ref": "NodeHAStatus, 
      "title": "Node High Availability Status"
    }, 
    "node_status": {
      "$ref": "NodeStatus, 
      "title": "Actual Node Status"
    }, 
    "vtep_state": {
      "$ref": "NodeVtepState, 
      "description": "State of VTEP interfaces. All VTEPs share the same state."
    }
  }, 
  "type": "object"
}

HaInfo (type)

{
  "id": "HaInfo", 
  "properties": {
    "failover_mode": {
      "description": "Logical router failover mode", 
      "enum": [
        "PREEMPTIVE", 
        "NON-PREEMPTIVE"
      ], 
      "readonly": true, 
      "title": "Logical router failover mode", 
      "type": "string"
    }, 
    "ha_mode": {
      "description": "Logical router HA mode", 
      "enum": [
        "ACTIVE-STANDBY", 
        "ACTIVE-ACTIVE"
      ], 
      "readonly": true, 
      "title": "Logical router HA mode", 
      "type": "string"
    }, 
    "ha_state": {
      "description": "Logical router HA state DOWN - Logical router is not in good health SYNC -  Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic", 
      "enum": [
        "DOWN", 
        "SYNC", 
        "STANDBY", 
        "ACTIVE"
      ], 
      "readonly": true, 
      "title": "Logical router HA state", 
      "type": "string"
    }, 
    "rank": {
      "description": "Rank of logical router", 
      "readonly": true, 
      "title": "Rank of logical router", 
      "type": "integer"
    }, 
    "state-history": {
      "$ref": "LogicalRouterHaHistory, 
      "description": "Logical router high-availability history", 
      "readonly": true, 
      "title": "Logical router high-availability history"
    }
  }, 
  "type": "object"
}

HostnameOrIPv4Address (type)

{
  "id": "HostnameOrIPv4Address", 
  "maxLength": 255, 
  "pattern": "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?$", 
  "title": "Hostname or IPv4 address", 
  "type": "string"
}

HttpProtocol (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Protocol
  }, 
  "id": "HttpProtocol", 
  "polymorphic-type-descriptor": {
    "type-identifier": "http"
  }, 
  "properties": {
    "authentication_scheme": {
      "$ref": "BasicAuthenticationScheme, 
      "title": "Scheme to authenticate if required"
    }, 
    "name": {
      "enum": [
        "http", 
        "https", 
        "scp", 
        "sftp"
      ], 
      "required": true, 
      "title": "Protocol name", 
      "type": "string"
    }
  }, 
  "type": "object"
}

HttpsProtocol (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Protocol
  }, 
  "id": "HttpsProtocol", 
  "polymorphic-type-descriptor": {
    "type-identifier": "https"
  }, 
  "properties": {
    "authentication_scheme": {
      "$ref": "BasicAuthenticationScheme, 
      "title": "Scheme to authenticate if required"
    }, 
    "name": {
      "enum": [
        "http", 
        "https", 
        "scp", 
        "sftp"
      ], 
      "required": true, 
      "title": "Protocol name", 
      "type": "string"
    }, 
    "sha256_thumbprint": {
      "required": true, 
      "title": "SSL thumbprint of server", 
      "type": "string"
    }
  }, 
  "type": "object"
}

IKEDigestAlgorithm (type)

{
  "additionalProperties": false, 
  "description": "The IKEDigestAlgorithms are used to verify message integrity during IKE negotiation. SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.", 
  "enum": [
    "SHA1", 
    "SHA2_256", 
    "SHA2_384", 
    "SHA2_512"
  ], 
  "id": "IKEDigestAlgorithm", 
  "title": "Digest Algorithms used in IKE negotiations", 
  "type": "string"
}

IKEEncryptionAlgorithm (type)

{
  "additionalProperties": false, 
  "description": "IKEEncryption algorithms are used to ensure confidentiality of the messages exchanged during IKE negotiations. AES stands for Advanced Encryption Standards. AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_GCM stands for Advanced Encryption Standard(AES) in Galois/Counter Mode(GCM) and is used to provide both confidentiality and data origin authentication. AES_GCM composed of two separate functions one for encryption(AES) and one for authentication(GMAC). AES_GCM algorithms will be available with IKE_V2 version only. AES_GCM_128 uses 128-bit keys. AES_GCM_192 uses 192-bit keys. AES_GCM_256 uses 256-bit keys.", 
  "enum": [
    "AES_128", 
    "AES_256", 
    "AES_GCM_128", 
    "AES_GCM_192", 
    "AES_GCM_256"
  ], 
  "id": "IKEEncryptionAlgorithm", 
  "title": "Encryption algorithms used in IKE", 
  "type": "string"
}

IPSecMultiPathGroup (type)

{
  "additionalProperties": false, 
  "description": "Configuration to allow IPSec VPN traffic through multipaths.", 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "IPSecMultiPathGroup", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "enabled": {
      "default": false, 
      "description": "If true, enable IPSec VPN  multipath group.", 
      "title": "Enable IPSec VPN multipath group", 
      "type": "boolean"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "ipsec_vpn_session_ids": {
      "description": "List of all IPSec VPN session Ids that are using this multipath group.", 
      "items": {
        "type": "string"
      }, 
      "readonly": true, 
      "title": "List of IPSec VPN session Ids that are using this multipath group", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "scheme": {
      "default": "THRESHOLD_BASED", 
      "description": "Specify a scheme to probe the quality of different paths for IPSec VPN traffic and to select the best equally good paths. THRESHOLD_BASED: The best paths are selected based on the threshold limit configured.", 
      "enum": [
        "THRESHOLD_BASED"
      ], 
      "title": "The scheme specified to decide best paths"
    }, 
    "scheme_value": {
      "description": "If scheme is THRESHOLD_BASED, scheme_value represents margin above the average path metric used for selecting the best paths. Paths below the specified threshold are considered good while above the selected threshold are considered bad quality. Threshold is a percentage value in the range of [0-100]. If not specified, the default is 20.", 
      "title": "The value specified for the scheme", 
      "type": "integer"
    }, 
    "source_port_pool_size": {
      "default": 7, 
      "description": "The maximum number of best paths allowed for an IPSec VPN session. For each path, a UDP source port number is assigned from an internal source port pool for encapsulating the IPSec VPN traffic through the path.", 
      "maximum": 7, 
      "minimum": 2, 
      "title": "The size of the source port pool", 
      "type": "integer"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "title": "IPSec VPN multipath group", 
  "type": "object"
}

IPSecMultiPathGroupListResult (type)

{
  "additionalProperties": false, 
  "description": "List all the IPSec multipath groups.", 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "IPSecMultiPathGroupListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "IPSecMultiPathGroup
      }, 
      "required": true, 
      "title": "IPSec multipath group list results", 
      "type": "array"
    }
  }, 
  "title": "List of IPSec multipath groups", 
  "type": "object"
}

IPSecVPNDPDProfile (type)

{
  "additionalProperties": false, 
  "description": "Dead peer detection (DPD) is a method that allows detection of unreachable internet key excahnge (IKE) peers. Any changes affects all IPSec VPN sessions consuming this profile.", 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "IPSecVPNDPDProfile", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "dpd_probe_interval": {
      "description": "When the DPD probe mode is periodic, this interval is the number of seconds between DPD messages. When the DPD probe mode is on-demand, this interval is the number of seconds during which traffic is not received from the peer before DPD retry messages are sent if there is IPSec traffic to send. For PERIODIC Mode:    Minimum: 3    Maximum: 360    Default: 60 For ON_DEMAND Mode:    Minimum: 1    Maximum: 10    Default: 3", 
      "maximum": 360, 
      "minimum": 1, 
      "required": false, 
      "title": "DPD probe interval defines an interval for DPD probes (in seconds)", 
      "type": "integer"
    }, 
    "dpd_probe_mode": {
      "default": "PERIODIC", 
      "description": "DPD probe mode is used to query the liveliness of the peer. Two modes are possible - PERIODIC - is used to query the liveliness of the peer at regular intervals (dpd_probe_interval). It does not take into consideration traffic coming from the peer. The benefit of this mode over the on-demand mode is earlier detection of dead peers. However, use of periodic DPD incurs extra overhead. When communicating to large numbers of peers, please consider using on-demand DPD instead. ON_DEMAND - is used to query the liveliness of the peer by instructing the local endpoint to send DPD message to a peer if there is traffic to send to the peer AND the peer was idle for dpd_probe_interval seconds (i.e. there was no traffic from the peer for dpd_probe_interval seconds)", 
      "enum": [
        "PERIODIC", 
        "ON_DEMAND"
      ], 
      "title": "DPD probe mode", 
      "type": "string"
    }, 
    "enabled": {
      "default": true, 
      "description": "If true, enable dead peer detection.", 
      "title": "Enable dead peer detection (DPD)", 
      "type": "boolean"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "is_default": {
      "description": "It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.", 
      "readonly": true, 
      "required": false, 
      "title": "Default Profile", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "retry_count": {
      "default": 5, 
      "description": "Maximum number of DPD messages retry attempts. This value is applicable for both dpd probe modes, periodic and on-demand.", 
      "maximum": 100, 
      "minimum": 1, 
      "title": "Retry count", 
      "type": "integer"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "title": "Dead peer detection (DPD) profile", 
  "type": "object"
}

IPSecVPNDPDProfileListResult (type)

{
  "additionalProperties": false, 
  "description": "List all the dead peer detection (DPD) profiles.", 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "IPSecVPNDPDProfileListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "IPSecVPNDPDProfile
      }, 
      "required": true, 
      "title": "IPSec DPD Profile list results", 
      "type": "array"
    }
  }, 
  "title": "List dead peer detection (DPD) profiles", 
  "type": "object"
}

IPSecVPNIKEProfile (type)

{
  "additionalProperties": false, 
  "description": "IKE Profile is a reusable profile that captures IKE phase one negotiation parameters. Any changes affects all IPSec VPN sessions consuming this profile.", 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "IPSecVPNIKEProfile", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "dh_groups": {
      "description": "Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.", 
      "items": {
        "$ref": "DHGroup
      }, 
      "required": false, 
      "title": "DH group", 
      "type": "array"
    }, 
    "digest_algorithms": {
      "description": "Algorithm used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.", 
      "items": {
        "$ref": "IKEDigestAlgorithm
      }, 
      "required": false, 
      "title": "Algorithm for message hash", 
      "type": "array"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "encryption_algorithms": {
      "description": "Encryption algorithm used during Internet Key Exchange(IKE) negotiation. Default is AES_128.", 
      "items": {
        "$ref": "IKEEncryptionAlgorithm
      }, 
      "required": false, 
      "title": "Encryption algorithm for IKE", 
      "type": "array"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "ike_version": {
      "default": "IKE_V2", 
      "description": "IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.", 
      "enum": [
        "IKE_V1", 
        "IKE_V2", 
        "IKE_FLEX"
      ], 
      "title": "IKE version", 
      "type": "string"
    }, 
    "is_default": {
      "description": "It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.", 
      "readonly": true, 
      "required": false, 
      "title": "Default Profile", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "sa_life_time": {
      "default": 86400, 
      "description": "Life time for security association. Default is 86400 seconds (1 day).", 
      "maximum": 31536000, 
      "minimum": 21600, 
      "title": "Security association (SA) life time", 
      "type": "integer"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "title": "Internet key exchange (IKE) profile", 
  "type": "object"
}

IPSecVPNIKEProfileListResult (type)

{
  "additionalProperties": false, 
  "description": "List all the IKE profiles.", 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "IPSecVPNIKEProfileListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "IPSecVPNIKEProfile
      }, 
      "required": true, 
      "title": "IKE Profile list results", 
      "type": "array"
    }
  }, 
  "title": "List IKE profiles", 
  "type": "object"
}

IPSecVPNIKESessionStatus (type)

{
  "additionalProperties": false, 
  "description": "Status for IPSec VPN IKE session UP, DOWN, NEGOTIATING and fail reason if IKE session is down.", 
  "id": "IPSecVPNIKESessionStatus", 
  "properties": {
    "fail_reason": {
      "description": "Reason for failure.", 
      "readonly": true, 
      "title": "Fail reason", 
      "type": "string"
    }, 
    "ike_session_state": {
      "description": "IKE session service status UP, DOWN and NEGOTIATING.", 
      "enum": [
        "UP", 
        "DOWN", 
        "NEGOTIATING"
      ], 
      "readonly": true, 
      "title": "IKE session state", 
      "type": "string"
    }
  }, 
  "title": "IKE session status", 
  "type": "object"
}

IPSecVPNLocalEndpoint (type)

{
  "additionalProperties": false, 
  "description": "Local endpoint represents a logical router on which tunnel needs to be terminated.", 
  "id": "IPSecVPNLocalEndpoint", 
  "properties": {
    "certificate_id": {
      "description": "Site certificate identifier.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "required": false, 
      "title": "Certificate Id", 
      "type": "string"
    }, 
    "local_address": {
      "$ref": "IPv4Address, 
      "description": "IPV4 Address for local endpoint.", 
      "required": true, 
      "title": "IPV4 Address for local endpoint"
    }, 
    "local_id": {
      "description": "Local identifier. Only one Local id is allowed for a local address.", 
      "title": "Local identifier", 
      "type": "string"
    }, 
    "trust_ca_ids": {
      "description": "Certificate authority (CA) identifier list to verify peer certificates.", 
      "items": {
        "type": "string"
      }, 
      "required": false, 
      "title": "Certificate authority (CA) identifiers", 
      "type": "array"
    }, 
    "trust_crl_ids": {
      "description": "Certificate revocation list (CRL) identifier list of peer certificates.", 
      "items": {
        "type": "string"
      }, 
      "required": false, 
      "title": "Certificate revocation list (CRL) Identifiers", 
      "type": "array"
    }
  }, 
  "title": "IPSec VPN Local Endpoint", 
  "type": "object"
}

IPSecVPNPolicyRule (type)

{
  "additionalProperties": false, 
  "description": "For policy-based IPsec VPNs, a security policy specifies as its action the VPN tunnel to be used for transit traffic that meets the policy's match criteria.", 
  "extends": {
    "$ref": "EmbeddedResource
  }, 
  "id": "IPSecVPNPolicyRule", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_owner": {
      "$ref": "OwnerResourceLink, 
      "readonly": true, 
      "title": "Owner of this resource"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "action": {
      "default": "PROTECT", 
      "description": "PROTECT - Protect rules are defined per policy based IPSec VPN session.", 
      "enum": [
        "PROTECT"
      ], 
      "readonly": true, 
      "title": "Action to be applied", 
      "type": "string"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "destinations": {
      "description": "List of peer subnets.", 
      "items": {
        "$ref": "IPSecVPNPolicySubnet
      }, 
      "maxItems": 128, 
      "required": false, 
      "title": "Destination list", 
      "type": "array"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "enabled": {
      "default": true, 
      "description": "A flag to enable/disable the policy rule.", 
      "title": "Enabled flag", 
      "type": "boolean"
    }, 
    "id": {
      "description": "Unique policy id.", 
      "title": "Unique policy id", 
      "type": "string"
    }, 
    "logged": {
      "default": false, 
      "description": "A flag to enable/disable the logging for the policy rule.", 
      "title": "Logging flag", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "sources": {
      "description": "List of local subnets.", 
      "items": {
        "$ref": "IPSecVPNPolicySubnet
      }, 
      "maxItems": 128, 
      "required": false, 
      "title": "Source list", 
      "type": "array"
    }
  }, 
  "title": "IPSec VPN policy rules", 
  "type": "object"
}

IPSecVPNPolicySubnet (type)

{
  "additionalProperties": false, 
  "description": "Used to specify the local/peer subnets in IPSec VPN Policy rule.", 
  "id": "IPSecVPNPolicySubnet", 
  "properties": {
    "subnet": {
      "$ref": "IPv4CIDRBlock, 
      "description": "Subnet used in policy rule.", 
      "required": true, 
      "title": "Peer or local subnet"
    }
  }, 
  "title": "Subnet for IPSec Policy based VPN", 
  "type": "object"
}

IPSecVPNPolicyTrafficStatistics (type)

{
  "additionalProperties": false, 
  "description": "IPSec VPN policy traffic statistics", 
  "id": "IPSecVPNPolicyTrafficStatistics", 
  "properties": {
    "aggregate_traffic_counters": {
      "$ref": "IPSecVPNTrafficCounters, 
      "description": "Aggregate traffic statistics across all ipsec tunnels.", 
      "readonly": true, 
      "title": "Traffic summary"
    }, 
    "policy_id": {
      "description": "Policy Identifier.", 
      "readonly": true, 
      "title": "Policy Identifier", 
      "type": "string"
    }, 
    "tunnel_statistics": {
      "description": "Tunnel statistics.", 
      "items": {
        "$ref": "IPSecVPNTunnelTrafficStatistics
      }, 
      "readonly": true, 
      "title": "Tunnel statistics", 
      "type": "array"
    }
  }, 
  "title": "IPSec VPN policy traffic statistics", 
  "type": "object"
}

IPSecVPNSession (type)

{
  "abstract": true, 
  "description": "VPN session defines connection between local and peer endpoint. Untill VPN session is defined configuration is not realized.", 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "IPSecVPNSession", 
  "polymorphic-type-descriptor": {
    "mode": "enabled"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "authentication_mode": {
      "default": "PSK", 
      "description": "Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.", 
      "enum": [
        "PSK", 
        "CERTIFICATE"
      ], 
      "title": "Authentication Mode", 
      "type": "string"
    }, 
    "connection_initiation_mode": {
      "default": "INITIATOR", 
      "description": "Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request.", 
      "enum": [
        "INITIATOR", 
        "RESPOND_ONLY", 
        "ON_DEMAND"
      ], 
      "title": "Connection initiation mode", 
      "type": "string"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "dpd_profile_id": {
      "description": "Dead peer detection (DPD) profile id. Default will be set according to system default policy.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "Dead peer detection (DPD) profile id", 
      "type": "string"
    }, 
    "enabled": {
      "default": true, 
      "description": "Enable/Disable IPSec VPN session.", 
      "title": "Enable/Disable IPSec VPN session", 
      "type": "boolean"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "ike_profile_id": {
      "description": "IKE profile id to be used. Default will be set according to system default policy.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "Internet key exchange (IKE) profile id", 
      "type": "string"
    }, 
    "ipsec_tunnel_profile_id": {
      "description": "Tunnel profile id to be used. By default it will point to system default profile.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "IPSec tunnel profile id", 
      "type": "string"
    }, 
    "local_endpoint": {
      "$ref": "IPSecVPNLocalEndpoint, 
      "description": "Local endpoint.", 
      "required": true, 
      "title": "Local endpoint"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "peer_address": {
      "description": "IPV4 address of peer endpoint on remote site.", 
      "required": true, 
      "title": "IPV4 address of peer endpoint on remote site.", 
      "type": "string"
    }, 
    "peer_id": {
      "description": "Peer identifier.", 
      "required": true, 
      "title": "Peer id", 
      "type": "string"
    }, 
    "psk": {
      "description": "IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.", 
      "maximum": 128, 
      "minimum": 1, 
      "required": false, 
      "sensitive": true, 
      "title": "Pre-shared key", 
      "type": "string"
    }, 
    "resource_type": {
      "$ref": "IPSecVPNSessionResourceType, 
      "required": true
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "tcp_mss_clamping": {
      "$ref": "TcpMssClamping, 
      "required": false
    }
  }, 
  "title": "IPSec VPN session", 
  "type": "object"
}

IPSecVPNSessionListParameters (type)

{
  "additionalProperties": false, 
  "description": "Parameters to get filtered list of IPSec VPN Sessions. The filter parameters are not mutually exclusive and can be used together.", 
  "id": "IPSecVPNSessionListParameters", 
  "properties": {
    "session_type": {
      "$ref": "IPSecVPNSessionResourceType, 
      "description": "All the IPSec VPN sessions of specified type will be included in the result.", 
      "required": false, 
      "title": "Type of the vpn session"
    }
  }, 
  "title": "List parameters for IPSec VPN Sessions", 
  "type": "object"
}

IPSecVPNSessionListResult (type)

{
  "additionalProperties": false, 
  "description": "List all the IPSec VPN sessions.", 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "IPSecVPNSessionListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "IPSecVPNSession
      }, 
      "required": true, 
      "title": "IPSec VPN sessions list result", 
      "type": "array"
    }
  }, 
  "title": "List IPSec VPN sessions", 
  "type": "object"
}

IPSecVPNSessionResourceType (type)

{
  "additionalProperties": false, 
  "description": "A Policy Based VPN requires to define protect rules that match   local and peer subnets. IPSec security associations is   negotiated for each pair of local and peer subnet. A Route Based VPN is more flexible, more powerful and recommended over   policy based VPN. IP Tunnel port is created and all traffic routed via   tunnel port is protected. Routes can be configured statically   or can be learned through BGP. A route based VPN is must for establishing   redundant VPN session to remote site.", 
  "enum": [
    "PolicyBasedIPSecVPNSession", 
    "RouteBasedIPSecVPNSession"
  ], 
  "id": "IPSecVPNSessionResourceType", 
  "title": "Resource types of IPsec VPN session", 
  "type": "string"
}

IPSecVPNSessionStatistics (type)

{
  "additionalProperties": false, 
  "description": "Session statistics gives aggregated statistics of all policies for all the tunnels.", 
  "id": "IPSecVPNSessionStatistics", 
  "properties": {
    "aggregate_traffic_counters": {
      "$ref": "IPSecVPNTrafficCounters, 
      "description": "Aggregate traffic statistics across all ipsec tunnels.", 
      "readonly": true, 
      "title": "Traffic summary"
    }, 
    "display_name": {
      "description": "Display name of vpn session.", 
      "readonly": true, 
      "title": "Display name", 
      "type": "string"
    }, 
    "failed_tunnels": {
      "description": "Number of failed tunnels.", 
      "readonly": true, 
      "title": "Failed tunnels", 
      "type": "integer"
    }, 
    "ike_status": {
      "$ref": "IPSecVPNIKESessionStatus, 
      "description": "Status for IPSec VPN IKE session UP/DOWN and fail reason if IKE session is down.", 
      "readonly": true, 
      "title": "IKE status summary"
    }, 
    "ipsec_vpn_session_id": {
      "description": "UUID of vpn session.", 
      "readonly": true, 
      "title": "Session identifier", 
      "type": "string"
    }, 
    "last_update_timestamp": {
      "$ref": "EpochMsTimestamp, 
      "description": "Timestamp when the data was last updated.", 
      "readonly": true, 
      "title": "Last updated timestamp"
    }, 
    "negotiated_tunnels": {
      "description": "Number of negotiated tunnels.", 
      "readonly": true, 
      "title": "Negotiated tunnels", 
      "type": "integer"
    }, 
    "partial_stats": {
      "description": "Partial statistics if true specifies that the statistics are only from active node.", 
      "readonly": true, 
      "title": "Partial Statistics", 
      "type": "boolean"
    }, 
    "policy_statistics": {
      "description": "Gives aggregate traffic statistics across all ipsec tunnels and individual tunnel statistics.", 
      "items": {
        "$ref": "IPSecVPNPolicyTrafficStatistics
      }, 
      "readonly": true, 
      "title": "IPSec policy statistics", 
      "type": "array"
    }, 
    "session_status": {
      "description": "Gives session status consolidated using IKE status and tunnel status. It can be UP, DOWN, DEGRADED. If IKE and all tunnels are UP status will be UP, if all down it will be DOWN, otherwise it will be DEGRADED.", 
      "enum": [
        "UP", 
        "DOWN", 
        "DEGRADED"
      ], 
      "readonly": true, 
      "title": "Session status", 
      "type": "string"
    }, 
    "total_tunnels": {
      "description": "Total number of tunnels.", 
      "readonly": true, 
      "title": "Total tunnels", 
      "type": "integer"
    }
  }, 
  "title": "IPSec VPN session statistics", 
  "type": "object"
}

IPSecVPNTrafficCounters (type)

{
  "additionalProperties": false, 
  "description": "Traffic counters for IPSec VPN session.", 
  "id": "IPSecVPNTrafficCounters", 
  "properties": {
    "bytes_in": {
      "description": "Total number of bytes recevied.", 
      "readonly": true, 
      "title": "Bytes in", 
      "type": "integer"
    }, 
    "bytes_out": {
      "description": "Total number of bytes sent.", 
      "readonly": true, 
      "title": "Bytes out", 
      "type": "integer"
    }, 
    "dropped_packets_in": {
      "description": "Total number of incoming packets dropped on inbound security association.", 
      "readonly": true, 
      "title": "Dropped incoming packets", 
      "type": "integer"
    }, 
    "dropped_packets_out": {
      "description": "Total number of outgoing packets dropped on outbound security association.", 
      "readonly": true, 
      "title": "Dropped outgoing packets", 
      "type": "integer"
    }, 
    "packets_in": {
      "description": "Total number of packets received.", 
      "readonly": true, 
      "title": "Packets in", 
      "type": "integer"
    }, 
    "packets_out": {
      "description": "Total number of packets sent.", 
      "readonly": true, 
      "title": "Packets out", 
      "type": "integer"
    }
  }, 
  "title": "IPSec VPN traffic counters", 
  "type": "object"
}

IPSecVPNTunnelProfile (type)

{
  "additionalProperties": false, 
  "description": "IPSec VPN tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. Any changes affects all IPSec VPN sessions consuming this profile.", 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "IPSecVPNTunnelProfile", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "df_policy": {
      "default": "COPY", 
      "description": "Defragmentation policy helps to handle defragmentation bit present in the inner packet. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet.", 
      "enum": [
        "COPY", 
        "CLEAR"
      ], 
      "title": "Policy for handling defragmentation bit", 
      "type": "string"
    }, 
    "dh_groups": {
      "description": "Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.", 
      "items": {
        "$ref": "DHGroup
      }, 
      "required": false, 
      "title": "DH group", 
      "type": "array"
    }, 
    "digest_algorithms": {
      "description": "Algorithm used for message digest. Default digest algorithm is implicitly covered by default encryption algorithm \"AES_GCM_128\".", 
      "items": {
        "$ref": "TunnelDigestAlgorithm
      }, 
      "required": false, 
      "title": "Algorithm for message hash", 
      "type": "array"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "enable_perfect_forward_secrecy": {
      "default": true, 
      "description": "If true, perfect forward secrecy (PFS) is enabled.", 
      "title": "Enable perfect forward secrecy", 
      "type": "boolean"
    }, 
    "encapsulation_mode": {
      "default": "TUNNEL_MODE", 
      "description": "Encapsulation Mode to be used for encryption of packet. Tunnel mode protects internal routing information by encrypting IP header of original packet.", 
      "enum": [
        "TUNNEL_MODE"
      ], 
      "readonly": true, 
      "title": "Encapsulation Mode", 
      "type": "string"
    }, 
    "encryption_algorithms": {
      "description": "Encryption algorithm to encrypt/decrypt the messages exchanged between IPSec VPN initiator and responder during tunnel negotiation. Default is AES_GCM_128.", 
      "items": {
        "$ref": "TunnelEncryptionAlgorithm
      }, 
      "required": false, 
      "title": "Encryption algorithm to use in tunnel establishement", 
      "type": "array"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "is_default": {
      "description": "It is a boolean flag which reflects whether a profile is created and owned by system or not. If the session creation/update does not define a profile, this default profile will be used. Default profiles cannot be edited or deleted. If the sessions needs different settings, please create a new profile.", 
      "readonly": true, 
      "required": false, 
      "title": "Default Profile", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "sa_life_time": {
      "default": 3600, 
      "description": "SA life time specifies the expiry time of security association. Default is 3600 seconds.", 
      "maximum": 31536000, 
      "minimum": 900, 
      "title": "Security association (SA) life time", 
      "type": "integer"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "transform_protocol": {
      "default": "ESP", 
      "description": "IPSec transform specifies IPSec security protocol.", 
      "enum": [
        "ESP"
      ], 
      "readonly": true, 
      "title": "Tunnel protocol", 
      "type": "string"
    }
  }, 
  "title": "IPSec VPN tunnel profile", 
  "type": "object"
}

IPSecVPNTunnelProfileListResult (type)

{
  "additionalProperties": false, 
  "description": "List all the tunnel profiles.", 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "IPSecVPNTunnelProfileListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "IPSecVPNTunnelProfile
      }, 
      "required": true, 
      "title": "IPSec Tunnel Profile list results", 
      "type": "array"
    }
  }, 
  "title": "List tunnel profiles", 
  "type": "object"
}

IPSecVPNTunnelTrafficStatistics (type)

{
  "additionalProperties": false, 
  "description": "IPSec VPN tunnel traffic statistics.", 
  "id": "IPSecVPNTunnelTrafficStatistics", 
  "properties": {
    "bytes_in": {
      "description": "Total number of incoming bytes on inbound Security association (SA).", 
      "readonly": true, 
      "title": "Bytes in", 
      "type": "integer"
    }, 
    "bytes_out": {
      "description": "Total number of outgoing bytes on outbound Security association (SA).", 
      "readonly": true, 
      "title": "Bytes out", 
      "type": "integer"
    }, 
    "decryption_failures": {
      "description": "Total number of packets dropped due to decryption failures.", 
      "readonly": true, 
      "title": "Decryption failures", 
      "type": "integer"
    }, 
    "dropped_packets_in": {
      "description": "Total number of incoming packets dropped on inbound security association.", 
      "readonly": true, 
      "title": "Dropped incoming packets", 
      "type": "integer"
    }, 
    "dropped_packets_out": {
      "description": "Total number of outgoing packets dropped on outbound security association.", 
      "readonly": true, 
      "title": "Dropped outgoing packets", 
      "type": "integer"
    }, 
    "encryption_failures": {
      "description": "Total number of packets dropped because of failure in encryption.", 
      "readonly": true, 
      "title": "Encryption failures", 
      "type": "integer"
    }, 
    "integrity_failures": {
      "description": "Total number of packets dropped due to integrity failures.", 
      "readonly": true, 
      "title": "Integrity failures", 
      "type": "integer"
    }, 
    "local_subnet": {
      "description": "Local subnet to which a tunnel belongs.", 
      "readonly": true, 
      "title": "Local subnet", 
      "type": "string"
    }, 
    "nomatching_policy_errors": {
      "description": "Number of packets dropped because of no matching policy is available.", 
      "readonly": true, 
      "title": "Nomatching Policy errors", 
      "type": "integer"
    }, 
    "packets_in": {
      "description": "Total number of incoming packets on inbound Security association (SA).", 
      "readonly": true, 
      "title": "Packets in", 
      "type": "integer"
    }, 
    "packets_out": {
      "description": "Total number of outgoing packets on outbound Security association (SA).", 
      "readonly": true, 
      "title": "Packets out", 
      "type": "integer"
    }, 
    "packets_receive_other_error": {
      "description": "Total number of incoming packets dropped on inbound Security association (SA)(misc).", 
      "readonly": true, 
      "title": "Packets receive other error", 
      "type": "integer"
    }, 
    "packets_sent_other_error": {
      "description": "Total number of packets dropped while sending for any reason.", 
      "readonly": true, 
      "title": "Packets sent other error", 
      "type": "integer"
    }, 
    "peer_subnet": {
      "description": "Peer subnet to which a tunnel belongs.", 
      "readonly": true, 
      "title": "Peer subnet", 
      "type": "string"
    }, 
    "replay_errors": {
      "description": "Total number of packets dropped due to replay check on that Security association (SA).", 
      "readonly": true, 
      "title": "Replay errors", 
      "type": "integer"
    }, 
    "sa_mismatch_errors_in": {
      "description": "Totoal number of security association (SA) mismatch errors on incoming packets.", 
      "readonly": true, 
      "title": "Security association (SA) mismatch errors on incoming packets", 
      "type": "integer"
    }, 
    "sa_mismatch_errors_out": {
      "description": "Totoal number of security association (SA) mismatch errors on outgoing packets.", 
      "readonly": true, 
      "title": "Security association (SA) mismatch errors on outgoing packets", 
      "type": "integer"
    }, 
    "seq_number_overflow_error": {
      "description": "Total number of packets dropped while sending due to overflow in sequence number.", 
      "readonly": true, 
      "title": "Sequence number overflow error", 
      "type": "integer"
    }, 
    "tunnel_down_reason": {
      "description": "Gives the detailed reason about the tunnel when it is down. If tunnel is UP tunnel down reason will be empty.", 
      "readonly": true, 
      "title": "Tunnel down reason", 
      "type": "string"
    }, 
    "tunnel_status": {
      "description": "Specifies the status of tunnel. If all the SA (Security association) are negotiated then tunnels status will be UP. If negotiation fails for the SAs status will be DOWN, if SAs are in negotiating phase tunnels status will be NEGOTIATING.", 
      "enum": [
        "UP", 
        "DOWN", 
        "NEGOTIATING"
      ], 
      "readonly": true, 
      "title": "Tunnel Status", 
      "type": "string"
    }
  }, 
  "title": "IPSec VPN tunnel traffic statistics", 
  "type": "object"
}

IPSubnet (type)

{
  "additionalProperties": false, 
  "id": "IPSubnet", 
  "properties": {
    "ip_addresses": {
      "items": {
        "$ref": "IPv4Address
      }, 
      "maxItems": 1, 
      "minItems": 1, 
      "required": true, 
      "title": "IPv4 Addresses", 
      "type": "array"
    }, 
    "prefix_length": {
      "maximum": 32, 
      "minimum": 1, 
      "required": true, 
      "title": "Subnet Prefix Length", 
      "type": "integer"
    }
  }, 
  "type": "object"
}

IPv4Address (type)

{
  "id": "IPv4Address", 
  "maxLength": 255, 
  "pattern": "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$", 
  "title": "IPv4 address", 
  "type": "string"
}

IPv4AddressProperties (type)

{
  "additionalProperties": false, 
  "id": "IPv4AddressProperties", 
  "properties": {
    "ip_address": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Interface IPv4 address", 
      "type": "string"
    }, 
    "netmask": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Interface netmask", 
      "type": "string"
    }
  }, 
  "title": "IPv4 address properties", 
  "type": "object"
}

IPv4CIDRBlock (type)

{
  "id": "IPv4CIDRBlock", 
  "maxLength": 255, 
  "pattern": "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\\/(3[0-2]|[1-2][0-9]|[0-9]))$", 
  "title": "IPv4 CIDR Block", 
  "type": "string"
}

IncludedFieldsParameters (type)

{
  "additionalProperties": false, 
  "id": "IncludedFieldsParameters", 
  "properties": {
    "included_fields": {
      "title": "Comma separated list of fields that should be included in query result", 
      "type": "string"
    }
  }, 
  "title": "A list of fields to include in query results", 
  "type": "object"
}

Interface (type)

{
  "additionalProperties": false, 
  "description": "Interface properties.", 
  "id": "Interface", 
  "properties": {
    "address": {
      "$ref": "IPv4CIDRBlock, 
      "description": "IPv4 CIDR block.", 
      "required": true, 
      "title": "IPv4 CIDR block", 
      "type": "string"
    }, 
    "interface_type": {
      "description": "Interface type.", 
      "enum": [
        "MANAGEMENT", 
        "TUNNEL"
      ], 
      "required": true, 
      "title": "Interface type", 
      "type": "string"
    }, 
    "name": {
      "description": "Interface name.", 
      "required": true, 
      "title": "Interface name", 
      "type": "string"
    }
  }, 
  "title": "Interface properties", 
  "type": "object"
}

KnownHostParameter (type)

{
  "additionalProperties": false, 
  "id": "KnownHostParameter", 
  "properties": {
    "host": {
      "$ref": "HostnameOrIPv4Address, 
      "required": true, 
      "title": "Known host hostname or IP address"
    }, 
    "port": {
      "default": 22, 
      "maximum": 65535, 
      "minimum": 1, 
      "title": "Known host port", 
      "type": "integer"
    }
  }, 
  "type": "object"
}

L2Extension (type)

{
  "description": "Configuration for extending L2 domain with L2VPN.", 
  "id": "L2Extension", 
  "properties": {
    "l2vpn_session_id": {
      "description": "L2VPN sessions identifier for L2 extension.", 
      "required": true, 
      "title": "L2VPN session ID", 
      "type": "string"
    }, 
    "l2vpn_session_name": {
      "description": "Display name of the given l2vpn session.", 
      "readOnly": true, 
      "required": false, 
      "title": "Display name of the given l2vpn session", 
      "type": "string"
    }, 
    "tunnel_id": {
      "description": "Tunnel ID to uniquely identify the L2 extension.", 
      "maximum": 4093, 
      "minimum": 1, 
      "required": true, 
      "title": "Tunnel ID", 
      "type": "integer"
    }
  }, 
  "title": "L2 Extension", 
  "type": "object"
}

L2VPNSession (type)

{
  "additionalProperties": false, 
  "description": "L2VPN Session represents meta data necessary to create the L2VPN Session. For client, it is represented by an array of peer code for each transport tunnel.", 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "L2VPNSession", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "enabled": {
      "default": true, 
      "description": "Enable to extend all the associated logical switches.", 
      "required": false, 
      "title": "Enable L2VPN session", 
      "type": "boolean"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "transport_tunnels": {
      "description": "List of L2VPN transport tunnel.", 
      "items": {
        "$ref": "TransportTunnel
      }, 
      "maxItems": 4, 
      "minItems": 1, 
      "required": true, 
      "title": "List of L2VPN Transport Tunnel", 
      "type": "array"
    }
  }, 
  "title": "L2VPN Session", 
  "type": "object"
}

L2VPNSessionListResult (type)

{
  "additionalProperties": false, 
  "description": "list all the L2VPN sessions", 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "L2VPNSessionListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "L2VPNSession
      }, 
      "required": true, 
      "title": "L2VPN sessions list result", 
      "type": "array"
    }
  }, 
  "title": "List all L2VPN sessions", 
  "type": "object"
}

L2VPNSessionStatistics (type)

{
  "description": "L2VPN session statistics.", 
  "id": "L2VPNSessionStatistics", 
  "properties": {
    "display_name": {
      "description": "Display name of L2VPN session.", 
      "readonly": true, 
      "title": "Display name", 
      "type": "string"
    }, 
    "l2vpn_session_id": {
      "description": "UUID of L2VPN session.", 
      "readonly": true, 
      "title": "Session identifier", 
      "type": "string"
    }, 
    "reference_count": {
      "description": "Number of logical ports that are referencing the L2VPN session.", 
      "readonly": true, 
      "title": "Number of references to L2VPN session", 
      "type": "integer"
    }, 
    "session_status": {
      "description": "L2VPN session status. It can be UP and DOWN.", 
      "enum": [
        "UP", 
        "DOWN"
      ], 
      "readonly": true, 
      "title": "L2VPN session status", 
      "type": "string"
    }, 
    "traffic_counter": {
      "$ref": "L2VPNTrafficStatistics, 
      "description": "Traffic counter through the L2VPN session.", 
      "readonly": true, 
      "title": "Traffic counter"
    }, 
    "transport_tunnels": {
      "description": "List of transport tunnels.", 
      "items": {
        "$ref": "TransportTunnel
      }, 
      "readonly": true, 
      "title": "List of transport tunnels", 
      "type": "array"
    }
  }, 
  "title": "L2VPN session statistics", 
  "type": "object"
}

L2VPNTrafficStatistics (type)

{
  "additionalProperties": false, 
  "description": "Traffic statistics for L2VPN.", 
  "id": "L2VPNTrafficStatistics", 
  "properties": {
    "bytes_in": {
      "description": "Total number of incoming bytes.", 
      "readonly": true, 
      "title": "Bytes in", 
      "type": "integer"
    }, 
    "bytes_out": {
      "description": "Total number of outgoing bytes.", 
      "readonly": true, 
      "title": "Bytes out", 
      "type": "integer"
    }, 
    "dropped_packets_in": {
      "description": "Total number of incoming packets dropped.", 
      "readonly": true, 
      "title": "Dropped incoming packets", 
      "type": "integer"
    }, 
    "dropped_packets_out": {
      "description": "Total number of outgoing packets dropped.", 
      "readonly": true, 
      "title": "Dropped outgoing packets", 
      "type": "integer"
    }, 
    "packets_in": {
      "description": "Total number of incoming packets.", 
      "readonly": true, 
      "title": "Packets in", 
      "type": "integer"
    }, 
    "packets_out": {
      "description": "Total number of outgoing packets.", 
      "readonly": true, 
      "title": "Packets out", 
      "type": "integer"
    }
  }, 
  "title": "L2VPN traffic statistics", 
  "type": "object"
}

ListCertParameter (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListRequestParameters
  }, 
  "id": "ListCertParameter", 
  "properties": {
    "cursor": {
      "readonly": false, 
      "title": "Opaque cursor to be used for getting next page of records (supplied by current result page)", 
      "type": "string"
    }, 
    "details": {
      "default": false, 
      "required": false, 
      "title": "whether to expand the pem data and show all its details", 
      "type": "boolean"
    }, 
    "included_fields": {
      "title": "Comma separated list of fields that should be included in query result", 
      "type": "string"
    }, 
    "page_size": {
      "default": 1000, 
      "maximum": 1000, 
      "minimum": 0, 
      "title": "Maximum number of results to return in this page (server may return fewer)", 
      "type": "integer"
    }, 
    "sort_ascending": {
      "type": "boolean"
    }, 
    "sort_by": {
      "title": "Field by which records are sorted", 
      "type": "string"
    }, 
    "type": {
      "description": "Provide this parameter to limit the list of returned certificates to those matching a particular usage. Passing cluster_certificate will return the certificate used for the cluster wide API service.", 
      "enum": [
        "cluster_api_certificate"
      ], 
      "required": false, 
      "title": "Type of certificate to return", 
      "type": "string"
    }
  }, 
  "type": "object"
}

ListRequestParameters (type)

{
  "additionalProperties": {}, 
  "extends": {
    "$ref": "IncludedFieldsParameters
  }, 
  "id": "ListRequestParameters", 
  "properties": {
    "cursor": {
      "readonly": false, 
      "title": "Opaque cursor to be used for getting next page of records (supplied by current result page)", 
      "type": "string"
    }, 
    "included_fields": {
      "title": "Comma separated list of fields that should be included in query result", 
      "type": "string"
    }, 
    "page_size": {
      "default": 1000, 
      "maximum": 1000, 
      "minimum": 0, 
      "title": "Maximum number of results to return in this page (server may return fewer)", 
      "type": "integer"
    }, 
    "sort_ascending": {
      "type": "boolean"
    }, 
    "sort_by": {
      "title": "Field by which records are sorted", 
      "type": "string"
    }
  }, 
  "type": "object"
}

ListResult (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "ListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "Resource
      }, 
      "required": true, 
      "title": "Result list", 
      "type": "array"
    }
  }, 
  "type": "object"
}

ListResultQueryParameters (type)

{
  "id": "ListResultQueryParameters", 
  "properties": {
    "fields": {
      "description": "Comma-separated field names to include in query result", 
      "title": "Fields to include in query results", 
      "type": "string"
    }
  }, 
  "type": "object"
}

LogicalPort (type)

{
  "abstract": true, 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "LogicalPort", 
  "polymorphic-type-descriptor": {
    "mode": "enabled"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "$ref": "LogicalPortResourceType, 
      "required": true
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "type": "object"
}

LogicalPortListParameters (type)

{
  "additionalProperties": false, 
  "description": "Parameters to get filtered list of logical ports. The filter parameters are mutually exclusive.", 
  "id": "LogicalPortListParameters", 
  "properties": {
    "l2_extension_id": {
      "description": "List all of the logical ports that are extended via the specified l2vpn session id.", 
      "title": "Id of a specified l2vpn session", 
      "type": "string"
    }, 
    "port_type": {
      "description": "If routed, list all of the routed logical ports. If extended, list all of the extended logial ports. If none, list all pure l2 logical ports (not routed and extended).", 
      "enum": [
        "routed", 
        "extended", 
        "none"
      ], 
      "required": false, 
      "title": "Type of logical port", 
      "type": "string"
    }
  }, 
  "title": "List parameters for logical port", 
  "type": "object"
}

LogicalPortListResult (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "LogicalPortListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "LogicalPort
      }, 
      "required": true, 
      "title": "Logical port list results", 
      "type": "array"
    }
  }, 
  "type": "object"
}

LogicalPortResourceType (type)

{
  "additionalProperties": false, 
  "description": "LogicalRouterPort is the L3 Port attached to the router. LogicalRouterIPTunnelPort is a IPSec VPN tunnel port created on   logical router when route based VPN session configured. LogicalRouterLoopbackPort is a loopback port for the logical router. LogicalRouterManagementPort is a management port on the logical router.", 
  "enum": [
    "LogicalRouterPort", 
    "LogicalRouterIPTunnelPort", 
    "LogicalRouterLoopbackPort", 
    "LogicalRouterManagementPort"
  ], 
  "id": "LogicalPortResourceType", 
  "title": "Resource types of logical port", 
  "type": "string"
}

LogicalRouterHaHistory (type)

{
  "id": "LogicalRouterHaHistory", 
  "properties": {
    "event": {
      "description": "Logical router HA event that triggered state change", 
      "readonly": true, 
      "title": "Logical router HA event that triggered state change", 
      "type": "string"
    }, 
    "event_timestamp": {
      "$ref": "EpochMsTimestamp, 
      "description": "Time in UTC when the last HA event occured", 
      "readonly": true, 
      "title": "Time in UTC when the last HA event occured"
    }, 
    "state": {
      "description": "Logical router HA state DOWN - Logical router is not in good health SYNC -  Logical router is synchronizing data from peer logical router STANDBY - Logical router is available to go Active ACTIVE - Logical router is forwarding traffic", 
      "enum": [
        "DOWN", 
        "SYNC", 
        "STANDBY", 
        "ACTIVE"
      ], 
      "readonly": true, 
      "title": "Logical router HA state", 
      "type": "string"
    }
  }, 
  "type": "object"
}

LogicalRouterIPTunnelPort (type)

{
  "additionalProperties": false, 
  "description": "Logical router IP tunnel port.", 
  "extends": {
    "$ref": "LogicalPort
  }, 
  "id": "LogicalRouterIPTunnelPort", 
  "polymorphic-type-descriptor": {
    "type-identifier": "LogicalRouterIPTunnelPort"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "admin_state": {
      "description": "Admin state of port.", 
      "enum": [
        "UP", 
        "DOWN"
      ], 
      "readonly": true, 
      "title": "Admin state of port", 
      "type": "string"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "$ref": "LogicalPortResourceType, 
      "required": true
    }, 
    "subnets": {
      "description": "Tunnel port subnets.", 
      "items": {
        "$ref": "IPSubnet
      }, 
      "maxItems": 1, 
      "minItems": 1, 
      "readonly": true, 
      "required": true, 
      "title": "Tunnel port subnets", 
      "type": "array"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "vpn_session_id": {
      "description": "Associated VPN session identifier.", 
      "readonly": true, 
      "title": "VPN session identifier", 
      "type": "string"
    }
  }, 
  "title": "Logical router IP tunnel port", 
  "type": "object"
}

LogicalRouterLoopbackPort (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "LogicalPort
  }, 
  "id": "LogicalRouterLoopbackPort", 
  "polymorphic-type-descriptor": {
    "type-identifier": "LogicalRouterLoopbackPort"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "$ref": "LogicalPortResourceType, 
      "required": true
    }, 
    "subnets": {
      "items": {
        "$ref": "IPSubnet
      }, 
      "maxItems": 1, 
      "required": false, 
      "title": "Logical router loopback port subnets", 
      "type": "array"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "type": "object"
}

LogicalRouterPort (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "LogicalPort
  }, 
  "id": "LogicalRouterPort", 
  "polymorphic-type-descriptor": {
    "type-identifier": "LogicalRouterPort"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "dhcp_server_id": {
      "description": "Specify DHCP server for L2 domain to use. If not given, there is no DHCP service in the L2 domain.", 
      "required": false, 
      "title": "DHCP server ID", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "exit_interface": {
      "$ref": "ExitEdgeInterface, 
      "description": "Exit interface from edge", 
      "readonly": false, 
      "required": true, 
      "title": "Exit interface from edge"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "l2_extensions": {
      "description": "Configuration for extending L2 domain via L2VPN.", 
      "items": {
        "$ref": "L2Extension
      }, 
      "minItems": 1, 
      "required": false, 
      "title": "L2 extensions", 
      "type": "array"
    }, 
    "mac_address": {
      "description": "MAC address", 
      "readonly": true, 
      "required": false, 
      "title": "MAC address", 
      "type": "string"
    }, 
    "mtu": {
      "default": 1500, 
      "description": "Maximum transmission unit specifies the size of the largest packet that a network protocol can transmit.", 
      "maximum": 9000, 
      "minimum": 64, 
      "title": "Maximum transmission unit (MTU)", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "$ref": "LogicalPortResourceType, 
      "required": true
    }, 
    "subnets": {
      "items": {
        "$ref": "IPSubnet
      }, 
      "maxItems": 1, 
      "required": false, 
      "title": "Logical router port subnets", 
      "type": "array"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "urpf_mode": {
      "$ref": "UrpfMode, 
      "default": "STRICT", 
      "required": false, 
      "title": "Unicast Reverse Path Forwarding mode"
    }, 
    "vlan_id": {
      "maximum": 4091, 
      "minimum": 0, 
      "required": true, 
      "title": "VLAN for the Logical Switch", 
      "type": "integer"
    }
  }, 
  "type": "object"
}

LogicalRouterPortCounters (type)

{
  "additionalProperties": false, 
  "id": "LogicalRouterPortCounters", 
  "properties": {
    "dropped_packets": {
      "required": true, 
      "title": "Number of Dropped Packets", 
      "type": "integer"
    }, 
    "total_bytes": {
      "required": true, 
      "title": "Total Number of Bytes", 
      "type": "integer"
    }, 
    "total_packets": {
      "required": true, 
      "title": "Total Number of Packets", 
      "type": "integer"
    }
  }, 
  "type": "object"
}

LogicalRouterPortStatistics (type)

{
  "additionalProperties": false, 
  "id": "LogicalRouterPortStatistics", 
  "properties": {
    "admin_state": {
      "description": "Configurable administrative state.", 
      "enum": [
        "UP", 
        "DOWN"
      ], 
      "required": true, 
      "title": "Administrative State", 
      "type": "string"
    }, 
    "last_update_timestamp": {
      "required": true, 
      "title": "Timestamp in Milliseconds Since Epoch", 
      "type": "integer"
    }, 
    "logical_router_port_id": {
      "required": true, 
      "title": "Logical Router Port UUID", 
      "type": "string"
    }, 
    "operational_state": {
      "description": "Operational state of the port. Takes into account the exit interface status.", 
      "enum": [
        "UP", 
        "DOWN"
      ], 
      "required": true, 
      "title": "Operational State", 
      "type": "string"
    }, 
    "rx": {
      "$ref": "LogicalRouterPortCounters, 
      "required": true, 
      "title": "Logical Router Port Receive Count", 
      "type": "object"
    }, 
    "tx": {
      "$ref": "LogicalRouterPortCounters, 
      "required": true, 
      "title": "Logical Router Port Transmit Count", 
      "type": "object"
    }
  }, 
  "type": "object"
}

LogicalRouterRouteEntry (type)

{
  "additionalProperties": false, 
  "id": "LogicalRouterRouteEntry", 
  "properties": {
    "admin_distance": {
      "required": true, 
      "title": "Admin Distance", 
      "type": "integer"
    }, 
    "logical_router_port_id": {
      "required": true, 
      "title": "Logical Router Port ID", 
      "type": "string"
    }, 
    "network": {
      "$ref": "IPv4CIDRBlock, 
      "required": true, 
      "title": "Network"
    }, 
    "next_hop": {
      "$ref": "IPv4Address, 
      "required": false, 
      "title": "Next Hop"
    }, 
    "route_type": {
      "$ref": "RouteType, 
      "required": true, 
      "title": "Route Type"
    }
  }, 
  "type": "object"
}

LogicalRouterRouteTable (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "LogicalRouterRouteTable", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "last_update_timestamp": {
      "readonly": true, 
      "required": true, 
      "title": "Timestamp in Milliseconds Since Epoch", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "LogicalRouterRouteEntry
      }, 
      "required": true, 
      "title": "Logical Router Route Entry", 
      "type": "array"
    }
  }, 
  "type": "object"
}

LogicalRouterType (type)

{
  "extends": {
    "$ref": "ListResultQueryParameters
  }, 
  "id": "LogicalRouterType", 
  "properties": {
    "fields": {
      "description": "Comma-separated field names to include in query result", 
      "title": "Fields to include in query results", 
      "type": "string"
    }, 
    "router_type": {
      "description": "Logical router type", 
      "enum": [
        "SERVICE_ROUTER_TIER0", 
        "VRF_SERVICE_ROUTER_TIER0", 
        "DISTRIBUTED_ROUTER_TIER0", 
        "VRF_DISTRIBUTED_ROUTER_TIER0", 
        "SERVICE_ROUTER_TIER1", 
        "VRF_SERVICE_ROUTER_TIER1", 
        "DISTRIBUTED_ROUTER_TIER1", 
        "VRF_DISTRIBUTED_ROUTER_TIER1", 
        "TUNNEL", 
        "RTEP_TUNNEL_VRF"
      ], 
      "title": "Logical router type", 
      "type": "string"
    }
  }, 
  "type": "object"
}

LogicalRoutersInfo (type)

{
  "id": "LogicalRoutersInfo", 
  "properties": {
    "ha_info": {
      "$ref": "HaInfo, 
      "description": "Logical router high-availability information", 
      "readonly": true, 
      "title": "Logical router high-availability information"
    }, 
    "logical_router_uuid": {
      "description": "Logical router UUID", 
      "readonly": true, 
      "title": "Logical router UUID", 
      "type": "string"
    }, 
    "mp_router_uuid": {
      "description": "MP logical router UUID", 
      "readonly": true, 
      "title": "MP logical router UUID", 
      "type": "string"
    }, 
    "name": {
      "description": "Name of the logical router", 
      "readonly": true, 
      "title": "Name of the logical router", 
      "type": "string"
    }, 
    "router_type": {
      "description": "Logical router type", 
      "enum": [
        "SERVICE_ROUTER_TIER0", 
        "VRF_SERVICE_ROUTER_TIER0", 
        "DISTRIBUTED_ROUTER_TIER0", 
        "VRF_DISTRIBUTED_ROUTER_TIER0", 
        "SERVICE_ROUTER_TIER1", 
        "VRF_SERVICE_ROUTER_TIER1", 
        "DISTRIBUTED_ROUTER_TIER1", 
        "VRF_DISTRIBUTED_ROUTER_TIER1", 
        "TUNNEL", 
        "RTEP_TUNNEL_VRF"
      ], 
      "readonly": true, 
      "title": "Logical router type", 
      "type": "string"
    }
  }, 
  "type": "object"
}

MaintenanceModePropertiesReply (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "MaintenanceModePropertiesReply", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "maintenance_mode": {
      "default": "disabled", 
      "description": "current maintenance mode", 
      "enum": [
        "enabled", 
        "disabled"
      ], 
      "readonly": true, 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about the Edge maintenance mode", 
  "type": "object"
}

MaintenanceModePropertiesRequest (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "MaintenanceModePropertiesRequest", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "maintenance_mode": {
      "description": "current maintenance mode", 
      "readonly": false, 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": true, 
      "description": "send notification to MPA", 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Information about the Edge maintenance mode", 
  "type": "object"
}

ManagedResource (type)

{
  "abstract": true, 
  "extends": {
    "$ref": "RevisionedResource
  }, 
  "id": "ManagedResource", 
  "polymorphic-type-descriptor": {
    "property-name": "resource_type"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "title": "Base type for resources that are managed by API clients", 
  "type": "object"
}

MandatoryAccessControlProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "MandatoryAccessControlProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "enabled": {
      "description": "Enabled can be True/False", 
      "type": "boolean"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "status": {
      "description": "current status of Mandatory Access Control", 
      "enum": [
        "ENABLED", 
        "DISABLED", 
        "ENABLED_PENDING_REBOOT"
      ], 
      "readonly": true, 
      "type": "string"
    }
  }, 
  "title": "Information about mandatory access control", 
  "type": "object"
}

NodeAdminState (type)

{
  "enum": [
    "UP", 
    "DOWN", 
    "UNKNOWN"
  ], 
  "id": "NodeAdminState", 
  "title": "Node Admin State", 
  "type": "string"
}

NodeFileSystemProperties (type)

{
  "additionalProperties": false, 
  "id": "NodeFileSystemProperties", 
  "properties": {
    "file_system": {
      "readonly": true, 
      "title": "File system id", 
      "type": "string"
    }, 
    "mount": {
      "readonly": true, 
      "title": "File system mount", 
      "type": "string"
    }, 
    "total": {
      "readonly": true, 
      "title": "File system size in kilobytes", 
      "type": "integer"
    }, 
    "type": {
      "readonly": true, 
      "title": "File system type", 
      "type": "string"
    }, 
    "used": {
      "readonly": true, 
      "title": "Amount of file system used in kilobytes", 
      "type": "integer"
    }
  }, 
  "title": "File system properties", 
  "type": "object"
}

NodeHAStatus (type)

{
  "enum": [
    "ACTIVE", 
    "INACTIVE", 
    "STATE_SYNC", 
    "DISCOVER", 
    "OFFLINE", 
    "DISABLED", 
    "UNKNOWN"
  ], 
  "id": "NodeHAStatus", 
  "title": "Node High Availability Status", 
  "type": "string"
}

NodeIdServicesMap (type)

{
  "additionalProperties": false, 
  "id": "NodeIdServicesMap", 
  "properties": {
    "node_id": {
      "maxLength": 255, 
      "readonly": false, 
      "required": true, 
      "title": "NodeId", 
      "type": "string"
    }, 
    "service_types": {
      "description": "list of ServiceTypes", 
      "items": {
        "$ref": "ServiceType
      }, 
      "readonly": false, 
      "required": true, 
      "type": "array"
    }
  }, 
  "type": "object"
}

NodeInterfaceStatisticsProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeInterfaceStatisticsProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "interface_id": {
      "readonly": true, 
      "title": "Interface ID", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "rx_bytes": {
      "readonly": true, 
      "title": "Number of bytes received", 
      "type": "integer"
    }, 
    "rx_dropped": {
      "readonly": true, 
      "title": "Number of packets dropped", 
      "type": "integer"
    }, 
    "rx_errors": {
      "readonly": true, 
      "title": "Number of receive errors", 
      "type": "integer"
    }, 
    "rx_frame": {
      "readonly": true, 
      "title": "Number of framing errors", 
      "type": "integer"
    }, 
    "rx_packets": {
      "readonly": true, 
      "title": "Number of packets received", 
      "type": "integer"
    }, 
    "tx_bytes": {
      "readonly": true, 
      "title": "Number of bytes transmitted", 
      "type": "integer"
    }, 
    "tx_carrier": {
      "readonly": true, 
      "title": "Number of carrier losses detected", 
      "type": "integer"
    }, 
    "tx_colls": {
      "readonly": true, 
      "title": "Number of collisions detected", 
      "type": "integer"
    }, 
    "tx_dropped": {
      "readonly": true, 
      "title": "Number of packets dropped", 
      "type": "integer"
    }, 
    "tx_errors": {
      "readonly": true, 
      "title": "Number of transmit errors", 
      "type": "integer"
    }, 
    "tx_packets": {
      "readonly": true, 
      "title": "Number of packets transmitted", 
      "type": "integer"
    }
  }, 
  "title": "Node network interface statistic properties", 
  "type": "object"
}

NodeLogProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeLogProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "readonly": true, 
      "title": "Last modified time expressed in milliseconds since epoch"
    }, 
    "log_name": {
      "readonly": true, 
      "title": "Name of log file", 
      "type": "string"
    }, 
    "log_size": {
      "readonly": true, 
      "title": "Size of log file in bytes", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Node log properties", 
  "type": "object"
}

NodeLogPropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeLogPropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeLogProperties
      }, 
      "required": true, 
      "title": "Node log property results", 
      "type": "array"
    }
  }, 
  "title": "Node log property query results", 
  "type": "object"
}

NodeNameServersProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeNameServersProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "name_servers": {
      "items": {
        "type": "string"
      }, 
      "maxItems": 3, 
      "required": true, 
      "title": "Name servers", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Node network name servers properties", 
  "type": "object"
}

NodeNetworkInterfaceProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeNetworkInterfaceProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "admin_status": {
      "enum": [
        "up", 
        "down"
      ], 
      "readonly": true, 
      "title": "Interface administration status", 
      "type": "string"
    }, 
    "bond_cur_active_slave": {
      "readonly": true, 
      "title": "Bond's currently active slave device", 
      "type": "string"
    }, 
    "bond_lacp_rate": {
      "readonly": true, 
      "title": "Bond's rate at which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode", 
      "type": "string"
    }, 
    "bond_mode": {
      "enum": [
        "ACTIVE_BACKUP", 
        "802_3AD", 
        "ROUND_ROBIN", 
        "BROADCAST", 
        "XOR", 
        "TLB", 
        "ALB"
      ], 
      "title": "Bond mode", 
      "type": "string"
    }, 
    "bond_primary": {
      "title": "Bond's primary device name in active-backup bond mode", 
      "type": "string"
    }, 
    "bond_primary_slave": {
      "readonly": true, 
      "title": "Bond's primary device name in active-backup bond mode", 
      "type": "string"
    }, 
    "bond_slaves": {
      "items": {
        "type": "string"
      }, 
      "title": "Bond's slave devices", 
      "type": "array"
    }, 
    "bond_xmit_hash_policy": {
      "enum": [
        "layer2", 
        "layer2+3", 
        "layer3+4", 
        "encap2+3", 
        "encap3+4"
      ], 
      "readonly": true, 
      "title": "Bond's transmit hash policy for balance-xor and 802.3ad modes", 
      "type": "string"
    }, 
    "broadcast_address": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Interface broadcast address", 
      "type": "string"
    }, 
    "default_gateway": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Interface's default gateway", 
      "type": "string"
    }, 
    "interface_id": {
      "readonly": true, 
      "required": true, 
      "title": "Interface ID", 
      "type": "string"
    }, 
    "ip_addresses": {
      "items": {
        "$ref": "IPv4AddressProperties
      }, 
      "maxItems": 1, 
      "title": "Interface IP addresses", 
      "type": "array"
    }, 
    "ip_configuration": {
      "enum": [
        "dhcp", 
        "static", 
        "not configured"
      ], 
      "required": true, 
      "title": "Interface configuration", 
      "type": "string"
    }, 
    "is_kni": {
      "readonly": true, 
      "title": "Interface is a KNI", 
      "type": "boolean"
    }, 
    "link_status": {
      "enum": [
        "up", 
        "down"
      ], 
      "readonly": true, 
      "title": "Interface administration status", 
      "type": "string"
    }, 
    "mtu": {
      "title": "Interface MTU", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "physical_address": {
      "pattern": "^[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}:[0-9A-Fa-f]{2}$", 
      "readonly": true, 
      "title": "Interface MAC address", 
      "type": "string"
    }, 
    "plane": {
      "enum": [
        "mgmt", 
        "debug", 
        "none"
      ], 
      "title": "Interface plane", 
      "type": "string"
    }, 
    "vlan": {
      "maximum": 4094, 
      "minimum": 1, 
      "readonly": true, 
      "title": "VLAN Id", 
      "type": "integer"
    }
  }, 
  "title": "Node network interface properties", 
  "type": "object"
}

NodeNetworkInterfacePropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeNetworkInterfacePropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeNetworkInterfaceProperties
      }, 
      "required": true, 
      "title": "Node network interface property results", 
      "type": "array"
    }
  }, 
  "title": "Node network interface properties list results", 
  "type": "object"
}

NodeNetworkProperties (type)

{
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeNetworkProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "Network configuration properties", 
  "type": "object"
}

NodeNtpServiceProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "NodeServiceProperties
  }, 
  "id": "NodeNtpServiceProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "service_name": {
      "required": true, 
      "title": "Service name", 
      "type": "string"
    }, 
    "service_properties": {
      "$ref": "NtpServiceProperties, 
      "title": "NTP Service properties"
    }
  }, 
  "title": "Node NTP service properties", 
  "type": "object"
}

NodeProcessProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeProcessProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "cpu_time": {
      "readonly": true, 
      "title": "CPU time (user and system) consumed by process in milliseconds", 
      "type": "integer"
    }, 
    "mem_resident": {
      "readonly": true, 
      "title": "Resident set size of process in bytes", 
      "type": "integer"
    }, 
    "mem_used": {
      "readonly": true, 
      "title": "Virtual memory used by process in bytes", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "pid": {
      "readonly": true, 
      "title": "Process id", 
      "type": "integer"
    }, 
    "ppid": {
      "readonly": true, 
      "title": "Parent process id", 
      "type": "integer"
    }, 
    "process_name": {
      "readonly": true, 
      "title": "Process name", 
      "type": "string"
    }, 
    "start_time": {
      "$ref": "EpochMsTimestamp, 
      "readonly": true, 
      "title": "Process start time expressed in milliseconds since epoch"
    }, 
    "uptime": {
      "readonly": true, 
      "title": "Milliseconds since process started", 
      "type": "integer"
    }
  }, 
  "title": "Node process properties", 
  "type": "object"
}

NodeProcessPropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeProcessPropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeProcessProperties
      }, 
      "required": true, 
      "title": "Node process property results", 
      "type": "array"
    }
  }, 
  "title": "Node process property query results", 
  "type": "object"
}

NodeProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "cli_history_size": {
      "minimum": 0, 
      "title": "NSX CLI command history limit, set to 0 to configure no history size limit", 
      "type": "integer"
    }, 
    "cli_output_datetime": {
      "title": "NSX CLI display datetime stamp in command output", 
      "type": "boolean"
    }, 
    "cli_timeout": {
      "minimum": 0, 
      "title": "NSX CLI inactivity timeout, set to 0 to configure no timeout", 
      "type": "integer"
    }, 
    "export_type": {
      "enum": [
        "RESTRICTED", 
        "UNRESTRICTED"
      ], 
      "readonly": true, 
      "title": "Export restrictions in effect, if any", 
      "type": "string"
    }, 
    "fully_qualified_domain_name": {
      "readonly": true, 
      "title": "Fully qualified domain name", 
      "type": "string"
    }, 
    "hostname": {
      "$ref": "SystemHostname, 
      "title": "Host name or fully qualified domain name of node", 
      "type": "string"
    }, 
    "kernel_version": {
      "readonly": true, 
      "title": "Kernel version", 
      "type": "string"
    }, 
    "motd": {
      "title": "Message of the day to display when users login to node using the NSX CLI", 
      "type": [
        "string", 
        "null"
      ]
    }, 
    "node_type": {
      "enum": [
        "NSX Manager", 
        "NSX Global Manager", 
        "NSX Edge", 
        "NSX Autonomous Edge", 
        "NSX Cloud Service Manager", 
        "NSX Public Cloud Gateway"
      ], 
      "readonly": true, 
      "title": "Node type", 
      "type": "string"
    }, 
    "node_uuid": {
      "maxLength": 36, 
      "readonly": true, 
      "title": "Node Unique Identifier", 
      "type": "string"
    }, 
    "node_version": {
      "readonly": true, 
      "title": "Node version", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "product_version": {
      "readonly": true, 
      "title": "Product version", 
      "type": "string"
    }, 
    "system_datetime": {
      "$ref": "DatetimeUTC, 
      "title": "System date time in UTC"
    }, 
    "system_time": {
      "$ref": "EpochMsTimestamp, 
      "readonly": true, 
      "title": "Current time expressed in milliseconds since epoch"
    }, 
    "timezone": {
      "title": "Timezone", 
      "type": "string"
    }
  }, 
  "title": "Node properties", 
  "type": "object"
}

NodeRouteProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeRouteProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "destination": {
      "title": "Destination covered by route", 
      "type": "string"
    }, 
    "from_address": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "From address", 
      "type": "string"
    }, 
    "gateway": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Address of next hop", 
      "type": "string"
    }, 
    "interface_id": {
      "title": "Network interface id of route", 
      "type": "string"
    }, 
    "metric": {
      "title": "Metric value of route", 
      "type": "string"
    }, 
    "netmask": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Netmask of destination covered by route", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "proto": {
      "default": "boot", 
      "enum": [
        "unspec", 
        "redirect", 
        "kernel", 
        "boot", 
        "static", 
        "gated", 
        "ra", 
        "mrt", 
        "zebra", 
        "bird", 
        "dnrouted", 
        "xorp", 
        "ntk", 
        "dhcp"
      ], 
      "title": "Routing protocol identifier of route", 
      "type": "string"
    }, 
    "route_id": {
      "readonly": true, 
      "title": "Unique identifier for the route", 
      "type": "string"
    }, 
    "route_type": {
      "enum": [
        "default", 
        "static", 
        "blackhole", 
        "prohibit", 
        "throw", 
        "unreachable"
      ], 
      "required": true, 
      "title": "Route type", 
      "type": "string"
    }, 
    "scope": {
      "title": "Scope of destinations covered by route", 
      "type": "string"
    }, 
    "src": {
      "pattern": "^[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}\\.[\\d]{1,3}$", 
      "title": "Source address to prefer when sending to destinations of route", 
      "type": "string"
    }
  }, 
  "title": "Node network route properties", 
  "type": "object"
}

NodeRoutePropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeRoutePropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeRouteProperties
      }, 
      "required": true, 
      "title": "Node route property results", 
      "type": "array"
    }
  }, 
  "title": "Node network route properties list results", 
  "type": "object"
}

NodeSearchDomainsProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeSearchDomainsProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "search_domains": {
      "items": {
        "type": "string"
      }, 
      "required": true, 
      "title": "Search domains", 
      "type": "array"
    }
  }, 
  "title": "Node network search domains properties", 
  "type": "object"
}

NodeServiceProperties (type)

{
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeServiceProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "service_name": {
      "required": true, 
      "title": "Service name", 
      "type": "string"
    }
  }, 
  "title": "Node service properties", 
  "type": "object"
}

NodeServicePropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeServicePropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeServiceProperties
      }, 
      "required": true, 
      "title": "Node service property results", 
      "type": "array"
    }
  }, 
  "title": "Node service property query results", 
  "type": "object"
}

NodeServiceStatusProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeServiceStatusProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "health": {
      "enum": [
        "STABLE", 
        "DEGRADED"
      ], 
      "readonly": true, 
      "required": false, 
      "title": "Service health in addition to runtime_state", 
      "type": "string"
    }, 
    "monitor_pid": {
      "readonly": true, 
      "title": "Service monitor process id", 
      "type": "integer"
    }, 
    "monitor_runtime_state": {
      "enum": [
        "running", 
        "stopped"
      ], 
      "readonly": true, 
      "title": "Service monitor runtime state", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "pids": {
      "items": {
        "type": "integer"
      }, 
      "readonly": true, 
      "title": "Service process ids", 
      "type": "array"
    }, 
    "reason": {
      "readonly": true, 
      "required": false, 
      "title": "Reason for service degradation", 
      "type": "string"
    }, 
    "runtime_state": {
      "enum": [
        "running", 
        "stopped"
      ], 
      "readonly": true, 
      "title": "Service runtime state", 
      "type": "string"
    }
  }, 
  "title": "Node service status properties", 
  "type": "object"
}

NodeSnmpServiceProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "NodeServiceProperties
  }, 
  "id": "NodeSnmpServiceProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "service_name": {
      "required": true, 
      "title": "Service name", 
      "type": "string"
    }, 
    "service_properties": {
      "$ref": "SnmpServiceProperties, 
      "required": true, 
      "title": "SNMP Service properties"
    }
  }, 
  "title": "Node SNMP service properties", 
  "type": "object"
}

NodeSnmpV3EngineID (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "NodeServiceProperties
  }, 
  "id": "NodeSnmpV3EngineID", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "service_name": {
      "required": true, 
      "title": "Service name", 
      "type": "string"
    }, 
    "v3_engine_id": {
      "required": true, 
      "title": "SNMP v3 engine id", 
      "type": "string"
    }
  }, 
  "title": "SNMP V3 Engine Id", 
  "type": "object"
}

NodeSshServiceProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "NodeServiceProperties
  }, 
  "id": "NodeSshServiceProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "service_name": {
      "required": true, 
      "title": "Service name", 
      "type": "string"
    }, 
    "service_properties": {
      "$ref": "SshServiceProperties, 
      "title": "SSH Service properties"
    }
  }, 
  "title": "Node SSH service properties", 
  "type": "object"
}

NodeStatus (type)

{
  "enum": [
    "DOWN", 
    "UP", 
    "UNREACHABLE", 
    "ADMIN_DOWN", 
    "UP_ROUTING_DOWN", 
    "INVALID", 
    "UNKNOWN"
  ], 
  "id": "NodeStatus", 
  "title": "Node Status", 
  "type": "string"
}

NodeStatusProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeStatusProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "bootup_error": {
      "readonly": true, 
      "title": "Autonomous edge bootup error", 
      "type": "string"
    }, 
    "cpu_cores": {
      "readonly": true, 
      "title": "Number of CPU cores on the system", 
      "type": "integer"
    }, 
    "file_systems": {
      "items": {
        "$ref": "NodeFileSystemProperties
      }, 
      "readonly": true, 
      "title": "File systems configured on the system", 
      "type": "array"
    }, 
    "load_average": {
      "items": {
        "type": "number"
      }, 
      "readonly": true, 
      "title": "One, five, and fifteen minute load averages for the system", 
      "type": "array"
    }, 
    "mem_available": {
      "readonly": true, 
      "title": "Amount of available RAM in the system, in kilobytes. The amount of reclaimable buffer/cache memory in use is taken into consideration here to provide a better idea of how much memory is really available in the system", 
      "type": "integer"
    }, 
    "mem_buffer": {
      "readonly": true, 
      "title": "Amount of RAM on the system used for temporary disk block storage, in kilobytes", 
      "type": "integer"
    }, 
    "mem_cache": {
      "readonly": true, 
      "title": "Amount of RAM on the system that can be flushed out to disk, in kilobytes", 
      "type": "integer"
    }, 
    "mem_free": {
      "readonly": true, 
      "title": "Amount of unused RAM in the system, in kilobytes", 
      "type": "integer"
    }, 
    "mem_slab": {
      "readonly": true, 
      "title": "Amount of RAM allocated to the kernel slab allocator, in kilobytes", 
      "type": "integer"
    }, 
    "mem_slab_reclaimable": {
      "readonly": true, 
      "title": "Amount of RAM allocated to the kernel slab allocator that is not currently in use, in kilobytes", 
      "type": "integer"
    }, 
    "mem_total": {
      "readonly": true, 
      "title": "Amount of RAM allocated to the system, in kilobytes", 
      "type": "integer"
    }, 
    "mem_used": {
      "readonly": true, 
      "title": "Amount of RAM in use on the system, in kilobytes. (This is mem_total - mem_available)", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "swap_total": {
      "readonly": true, 
      "title": "Amount of disk available for swap, in kilobytes", 
      "type": "integer"
    }, 
    "swap_used": {
      "readonly": true, 
      "title": "Amount of swap disk in use, in kilobytes", 
      "type": "integer"
    }, 
    "system_time": {
      "$ref": "EpochMsTimestamp, 
      "readonly": true, 
      "title": "Current time expressed in milliseconds since epoch"
    }, 
    "uptime": {
      "readonly": true, 
      "title": "Milliseconds since system start", 
      "type": "integer"
    }
  }, 
  "title": "Node status properties", 
  "type": "object"
}

NodeSyslogExporterProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeSyslogExporterProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "exporter_name": {
      "required": true, 
      "title": "Syslog exporter name", 
      "type": "string"
    }, 
    "facilities": {
      "items": {
        "$ref": "SyslogFacility
      }, 
      "title": "Facilities to export", 
      "type": "array"
    }, 
    "level": {
      "enum": [
        "EMERG", 
        "ALERT", 
        "CRIT", 
        "ERR", 
        "WARNING", 
        "NOTICE", 
        "INFO", 
        "DEBUG"
      ], 
      "required": true, 
      "title": "Logging level to export", 
      "type": "string"
    }, 
    "msgids": {
      "items": {
        "pattern": "^.+$", 
        "type": "string"
      }, 
      "title": "MSGIDs to export", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "port": {
      "maximum": 65535, 
      "minimum": 1, 
      "title": "Port to export to, defaults to 514 for TCP, TLS, UDP protocols or 9000 for LI, LI-TLS protocols", 
      "type": "integer"
    }, 
    "protocol": {
      "enum": [
        "TCP", 
        "TLS", 
        "UDP", 
        "LI", 
        "LI-TLS"
      ], 
      "required": true, 
      "title": "Export protocol", 
      "type": "string"
    }, 
    "server": {
      "$ref": "HostnameOrIPv4Address, 
      "required": true, 
      "title": "IP address or hostname of server to export to", 
      "type": "string"
    }, 
    "structured_data": {
      "items": {
        "pattern": "^(alarmId|alarmState|audit|comp|entId|eReqId|errorCode|eventFeatureName|eventId|eventSev|eventState|eventType|euser|level|nodeId|security|subcomp|s2comp|splitId|splitIndex|tenantId|tid|tname|update|username)=.+$", 
        "type": "string"
      }, 
      "title": "Structured data to export", 
      "type": "array"
    }, 
    "tls_ca_pem": {
      "title": "CA certificate PEM of TLS server to export to", 
      "type": "string"
    }, 
    "tls_cert_pem": {
      "title": "Certificate PEM of the rsyslog client", 
      "type": "string"
    }, 
    "tls_client_ca_pem": {
      "title": "CA certificate PEM of the rsyslog client", 
      "type": "string"
    }, 
    "tls_key_pem": {
      "sensitive": true, 
      "title": "Private key PEM of the rsyslog client", 
      "type": "string"
    }
  }, 
  "title": "Node syslog exporter properties", 
  "type": "object"
}

NodeSyslogExporterPropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeSyslogExporterPropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeSyslogExporterProperties
      }, 
      "required": true, 
      "title": "Node syslog exporter results", 
      "type": "array"
    }
  }, 
  "title": "Node syslog exporter list results", 
  "type": "object"
}

NodeTime (type)

{
  "additionalProperties": false, 
  "description": "Node system time in UTC", 
  "id": "NodeTime", 
  "properties": {
    "system_datetime": {
      "$ref": "DatetimeUTC, 
      "required": true, 
      "title": "Datetime string in UTC"
    }
  }, 
  "title": "Node system time in UTC", 
  "type": "object"
}

NodeUserProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "NodeUserProperties", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "full_name": {
      "title": "Full name for the user", 
      "type": "string"
    }, 
    "last_password_change": {
      "maximum": 2147483647, 
      "minimum": 0, 
      "readonly": true, 
      "title": "Number of days since password was last changed", 
      "type": "integer"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "old_password": {
      "sensitive": true, 
      "title": "Old password for the user (required on PUT if password specified)", 
      "type": "string"
    }, 
    "password": {
      "sensitive": true, 
      "title": "Password for the user (optionally specified on PUT, unspecified on GET)", 
      "type": "string"
    }, 
    "password_change_frequency": {
      "description": "Number of days password is valid before it must be changed. This can be set to 0 to indicate no password change is required or a positive integer up to 9999. By default local user passwords must be changed every 90 days.", 
      "maximum": 9999, 
      "minimum": 0, 
      "title": "Number of days password is valid before it must be changed", 
      "type": "integer"
    }, 
    "password_reset_required": {
      "title": "Boolean value that states if a password reset is required", 
      "type": "boolean"
    }, 
    "status": {
      "description": "Status of the user. This value can be ACTIVE indicating authentication attempts will be successful if the correct credentials are specified. The value can also be PASSWORD_EXPIRED indicating authentication attempts will fail because the user's password has expired and must be changed. Or, this value can be NOT_ACTIVATED indicating the user's password has not yet been set and must be set before the user can authenticate.", 
      "enum": [
        "ACTIVE", 
        "PASSWORD_EXPIRED", 
        "NOT_ACTIVATED"
      ], 
      "readonly": true, 
      "title": "User status", 
      "type": "string"
    }, 
    "userid": {
      "maximum": 2147483647, 
      "minimum": 0, 
      "readonly": true, 
      "title": "Numeric id for the user", 
      "type": "integer"
    }, 
    "username": {
      "maxLength": 32, 
      "minLength": 1, 
      "pattern": "^[a-zA-Z][a-zA-Z0-9@-_.\\-]*$", 
      "title": "User login name (must be \"root\" if userid is 0)", 
      "type": "string"
    }
  }, 
  "title": "Node user properties", 
  "type": "object"
}

NodeUserPropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "NodeUserPropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "NodeUserProperties
      }, 
      "required": true, 
      "title": "List of node users", 
      "type": "array"
    }
  }, 
  "title": "Node users list results", 
  "type": "object"
}

NodeVersion (type)

{
  "additionalProperties": false, 
  "id": "NodeVersion", 
  "properties": {
    "node_version": {
      "readonly": true, 
      "title": "Node version", 
      "type": "string"
    }, 
    "product_version": {
      "readonly": true, 
      "title": "Product version", 
      "type": "string"
    }
  }, 
  "type": "object"
}

NodeVtepState (type)

{
  "enum": [
    "UP", 
    "DOWN", 
    "UNKNOWN"
  ], 
  "id": "NodeVtepState", 
  "title": "VTEP interfaces State", 
  "type": "string"
}

NtpServiceProperties (type)

{
  "additionalProperties": false, 
  "id": "NtpServiceProperties", 
  "properties": {
    "servers": {
      "items": {
        "$ref": "HostnameOrIPv4Address
      }, 
      "required": true, 
      "title": "NTP servers", 
      "type": "array"
    }, 
    "start_on_boot": {
      "default": true, 
      "required": false, 
      "title": "Start NTP service when system boots", 
      "type": "boolean"
    }
  }, 
  "title": "NTP Service properties", 
  "type": "object"
}

OwnerResourceLink (type)

{
  "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
  "extends": {
    "$ref": "ResourceLink
  }, 
  "id": "OwnerResourceLink", 
  "properties": {
    "action": {
      "title": "Optional action", 
      "type": "string"
    }, 
    "href": {
      "required": true, 
      "type": "string"
    }, 
    "rel": {
      "enum": [
        "owner"
      ], 
      "readonly": true, 
      "type": "string"
    }
  }, 
  "title": "Link to this resource", 
  "type": "object"
}

PasswordAuthenticationScheme (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "AuthenticationScheme
  }, 
  "id": "PasswordAuthenticationScheme", 
  "properties": {
    "password": {
      "required": true, 
      "sensitive": true, 
      "title": "Password to authenticate with", 
      "type": "string"
    }, 
    "scheme_name": {
      "enum": [
        "password"
      ], 
      "required": true, 
      "title": "Authentication scheme name", 
      "type": "string"
    }, 
    "username": {
      "pattern": "^.+$", 
      "required": true, 
      "title": "User name to authenticate with", 
      "type": "string"
    }
  }, 
  "type": "object"
}

PolicyBasedIPSecVPNSession (type)

{
  "additionalProperties": false, 
  "description": "A Policy Based VPN requires to define protect rules that match local and peer subnets. IPSec security associations is negotiated for each pair of local and peer subnet.", 
  "extends": {
    "$ref": "IPSecVPNSession
  }, 
  "id": "PolicyBasedIPSecVPNSession", 
  "polymorphic-type-descriptor": {
    "type-identifier": "PolicyBasedIPSecVPNSession"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "authentication_mode": {
      "default": "PSK", 
      "description": "Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.", 
      "enum": [
        "PSK", 
        "CERTIFICATE"
      ], 
      "title": "Authentication Mode", 
      "type": "string"
    }, 
    "connection_initiation_mode": {
      "default": "INITIATOR", 
      "description": "Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request.", 
      "enum": [
        "INITIATOR", 
        "RESPOND_ONLY", 
        "ON_DEMAND"
      ], 
      "title": "Connection initiation mode", 
      "type": "string"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "dpd_profile_id": {
      "description": "Dead peer detection (DPD) profile id. Default will be set according to system default policy.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "Dead peer detection (DPD) profile id", 
      "type": "string"
    }, 
    "enabled": {
      "default": true, 
      "description": "Enable/Disable IPSec VPN session.", 
      "title": "Enable/Disable IPSec VPN session", 
      "type": "boolean"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "ike_profile_id": {
      "description": "IKE profile id to be used. Default will be set according to system default policy.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "Internet key exchange (IKE) profile id", 
      "type": "string"
    }, 
    "ipsec_tunnel_profile_id": {
      "description": "Tunnel profile id to be used. By default it will point to system default profile.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "IPSec tunnel profile id", 
      "type": "string"
    }, 
    "local_endpoint": {
      "$ref": "IPSecVPNLocalEndpoint, 
      "description": "Local endpoint.", 
      "required": true, 
      "title": "Local endpoint"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "peer_address": {
      "description": "IPV4 address of peer endpoint on remote site.", 
      "required": true, 
      "title": "IPV4 address of peer endpoint on remote site.", 
      "type": "string"
    }, 
    "peer_id": {
      "description": "Peer identifier.", 
      "required": true, 
      "title": "Peer id", 
      "type": "string"
    }, 
    "policy_rules": {
      "items": {
        "$ref": "IPSecVPNPolicyRule
      }, 
      "required": true, 
      "title": "Policy rules", 
      "type": "array"
    }, 
    "psk": {
      "description": "IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.", 
      "maximum": 128, 
      "minimum": 1, 
      "required": false, 
      "sensitive": true, 
      "title": "Pre-shared key", 
      "type": "string"
    }, 
    "resource_type": {
      "$ref": "IPSecVPNSessionResourceType, 
      "required": true
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "tcp_mss_clamping": {
      "$ref": "TcpMssClamping, 
      "required": false
    }
  }, 
  "title": "Policy based VPN session", 
  "type": "object"
}

Protocol (type)

{
  "abstract": true, 
  "additionalProperties": {}, 
  "id": "Protocol", 
  "polymorphic-type-descriptor": {
    "mode": "enabled", 
    "property-name": "name"
  }, 
  "properties": {
    "name": {
      "enum": [
        "http", 
        "https", 
        "scp", 
        "sftp"
      ], 
      "required": true, 
      "title": "Protocol name", 
      "type": "string"
    }
  }, 
  "type": "object"
}

ReplicaAgentClientStatusProperties (type)

{
  "additionalProperties": false, 
  "id": "ReplicaAgentClientStatusProperties", 
  "properties": {
    "last_fullsync_time": {
      "title": "Timestamp when replica-agent performed last fullsync of messages from primary node's Nestdb", 
      "type": "string"
    }, 
    "last_replication_time": {
      "title": "Timestamp when replica-agent performed last replication from primary node.", 
      "type": "string"
    }, 
    "last_rewrite_time": {
      "title": "Timestamp when replica-agent performed last rewriting of message in secondary node's Nestdb", 
      "type": "string"
    }, 
    "local_nestdb_connection_time": {
      "title": "Timestamp when replica-agent established connection to Nestdb local to the secondary node.", 
      "type": "string"
    }, 
    "node_api_server_role": {
      "enum": [
        "PRIMARY", 
        "SECONDARY"
      ], 
      "title": "Node High Availability Mode", 
      "type": "string"
    }, 
    "node_id": {
      "title": "Node UUID", 
      "type": "string"
    }, 
    "peer_nestdb_connection_time": {
      "title": "Timestamp when replica-agent established connection to the NestDB of primary node", 
      "type": "string"
    }
  }, 
  "type": "object"
}

Resource (type)

{
  "id": "Resource", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "type": "object"
}

ResourceLink (type)

{
  "additionalProperties": false, 
  "id": "ResourceLink", 
  "properties": {
    "action": {
      "title": "Optional action", 
      "type": "string"
    }, 
    "href": {
      "required": true, 
      "type": "string"
    }, 
    "rel": {
      "description": "Custom relation type (follows RFC 5988 where appropriate definitions exist)", 
      "required": true, 
      "title": "Link relation type", 
      "type": "string"
    }
  }, 
  "type": "object"
}

ResourceReference (type)

{
  "description": "A weak reference to an NSX resource.", 
  "id": "ResourceReference", 
  "properties": {
    "is_valid": {
      "description": "Will be set to false if the referenced NSX resource has been deleted.", 
      "readonly": true, 
      "required": false, 
      "title": "Target validity", 
      "type": "boolean"
    }, 
    "target_display_name": {
      "description": "Display name of the NSX resource.", 
      "maxLength": 255, 
      "readonly": true, 
      "required": false, 
      "title": "Target display name", 
      "type": "string"
    }, 
    "target_id": {
      "description": "Identifier of the NSX resource.", 
      "maxLength": 64, 
      "readonly": false, 
      "required": false, 
      "title": "Target ID", 
      "type": "string"
    }, 
    "target_type": {
      "description": "Type of the NSX resource.", 
      "maxLength": 255, 
      "readonly": false, 
      "required": false, 
      "title": "Target type", 
      "type": "string"
    }
  }, 
  "type": "object"
}

RevisionedResource (type)

{
  "abstract": true, 
  "extends": {
    "$ref": "Resource
  }, 
  "id": "RevisionedResource", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }
  }, 
  "title": "A base class for types that track revisions", 
  "type": "object"
}

RouteBasedIPSecVPNSession (type)

{
  "additionalProperties": false, 
  "description": "A Route Based VPN is more flexible, more powerful and recommended over policy based VPN. IP Tunnel port is created and all traffic routed via tunnel port is protected. Routes can be configured statically or can be learned through BGP. A route based VPN is must for establishing redundant VPN session to remote site.", 
  "extends": {
    "$ref": "IPSecVPNSession
  }, 
  "id": "RouteBasedIPSecVPNSession", 
  "polymorphic-type-descriptor": {
    "type-identifier": "RouteBasedIPSecVPNSession"
  }, 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "authentication_mode": {
      "default": "PSK", 
      "description": "Authentication mode used for the peer authentication. For PSK (Pre Shared Key) authentication mode, 'psk' property is mandatory and for the CERTIFICATE authentication mode, 'peer_id' property is mandatory.", 
      "enum": [
        "PSK", 
        "CERTIFICATE"
      ], 
      "title": "Authentication Mode", 
      "type": "string"
    }, 
    "connection_initiation_mode": {
      "default": "INITIATOR", 
      "description": "Connection initiation mode used by local endpoint to establish ike connection with peer endpoint. INITIATOR - In this mode local endpoint initiates tunnel setup and will also respond to incoming tunnel setup requests from peer gateway. RESPOND_ONLY - In this mode, local endpoint shall only respond to incoming tunnel setup requests. It shall not initiate the tunnel setup. ON_DEMAND - In this mode local endpoint will initiate tunnel creation once first packet matching the policy rule is received and will also respond to incoming initiation request.", 
      "enum": [
        "INITIATOR", 
        "RESPOND_ONLY", 
        "ON_DEMAND"
      ], 
      "title": "Connection initiation mode", 
      "type": "string"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "dpd_profile_id": {
      "description": "Dead peer detection (DPD) profile id. Default will be set according to system default policy.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "Dead peer detection (DPD) profile id", 
      "type": "string"
    }, 
    "enabled": {
      "default": true, 
      "description": "Enable/Disable IPSec VPN session.", 
      "title": "Enable/Disable IPSec VPN session", 
      "type": "boolean"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "ike_profile_id": {
      "description": "IKE profile id to be used. Default will be set according to system default policy.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "Internet key exchange (IKE) profile id", 
      "type": "string"
    }, 
    "ipsec_tunnel_profile_id": {
      "description": "Tunnel profile id to be used. By default it will point to system default profile.", 
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", 
      "title": "IPSec tunnel profile id", 
      "type": "string"
    }, 
    "local_endpoint": {
      "$ref": "IPSecVPNLocalEndpoint, 
      "description": "Local endpoint.", 
      "required": true, 
      "title": "Local endpoint"
    }, 
    "multi_path_group_id": {
      "description": "Specify a multiple path group for the IPSec session to join for utilizing multipath functionality.", 
      "title": "IPSec VPN multiple path group identifier", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "peer_address": {
      "description": "IPV4 address of peer endpoint on remote site.", 
      "required": true, 
      "title": "IPV4 address of peer endpoint on remote site.", 
      "type": "string"
    }, 
    "peer_id": {
      "description": "Peer identifier.", 
      "required": true, 
      "title": "Peer id", 
      "type": "string"
    }, 
    "psk": {
      "description": "IPSec Pre-shared key. Maximum length of this field is 128 characters. Its required input in PSK authentication mode.", 
      "maximum": 128, 
      "minimum": 1, 
      "required": false, 
      "sensitive": true, 
      "title": "Pre-shared key", 
      "type": "string"
    }, 
    "resource_type": {
      "$ref": "IPSecVPNSessionResourceType, 
      "required": true
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }, 
    "tcp_mss_clamping": {
      "$ref": "TcpMssClamping, 
      "required": false
    }, 
    "tunnel_ports": {
      "description": "IP Tunnel ports.", 
      "items": {
        "$ref": "TunnelPortConfig
      }, 
      "maxItems": 1, 
      "minItems": 1, 
      "required": true, 
      "title": "IP Tunnel ports", 
      "type": "array"
    }
  }, 
  "title": "Route based VPN session", 
  "type": "object"
}

RouteType (type)

{
  "enum": [
    "route", 
    "neighbor", 
    "connected", 
    "blackhole", 
    "unknown"
  ], 
  "id": "RouteType", 
  "title": "Route Type", 
  "type": "string"
}

ScpProtocol (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Protocol
  }, 
  "id": "ScpProtocol", 
  "polymorphic-type-descriptor": {
    "type-identifier": "scp"
  }, 
  "properties": {
    "authentication_scheme": {
      "$ref": "PasswordAuthenticationScheme, 
      "required": true, 
      "title": "Scheme to authenticate if required"
    }, 
    "name": {
      "enum": [
        "http", 
        "https", 
        "scp", 
        "sftp"
      ], 
      "required": true, 
      "title": "Protocol name", 
      "type": "string"
    }, 
    "ssh_fingerprint": {
      "required": true, 
      "title": "SSH fingerprint of server", 
      "type": "string"
    }
  }, 
  "type": "object"
}

SelfResourceLink (type)

{
  "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
  "extends": {
    "$ref": "ResourceLink
  }, 
  "id": "SelfResourceLink", 
  "properties": {
    "action": {
      "title": "Optional action", 
      "type": "string"
    }, 
    "href": {
      "required": true, 
      "type": "string"
    }, 
    "rel": {
      "enum": [
        "self"
      ], 
      "readonly": true, 
      "type": "string"
    }
  }, 
  "title": "Link to this resource", 
  "type": "object"
}

ServiceType (type)

{
  "enum": [
    "MGMT_CLUSTER", 
    "MGMT_PLANE", 
    "API", 
    "NOTIFICATION_COLLECTOR", 
    "SYSLOG_SERVER", 
    "RSYSLOG_CLIENT"
  ], 
  "id": "ServiceType", 
  "title": "Supported service types, that are using certificates.", 
  "type": "string"
}

SftpProtocol (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "Protocol
  }, 
  "id": "SftpProtocol", 
  "polymorphic-type-descriptor": {
    "type-identifier": "sftp"
  }, 
  "properties": {
    "authentication_scheme": {
      "$ref": "PasswordAuthenticationScheme, 
      "required": true, 
      "title": "Scheme to authenticate if required"
    }, 
    "name": {
      "enum": [
        "http", 
        "https", 
        "scp", 
        "sftp"
      ], 
      "required": true, 
      "title": "Protocol name", 
      "type": "string"
    }, 
    "ssh_fingerprint": {
      "required": true, 
      "title": "SSH fingerprint of server", 
      "type": "string"
    }
  }, 
  "type": "object"
}

SnmpCommunity (type)

{
  "additionalProperties": false, 
  "description": "SNMP v1, v2c community.", 
  "id": "SnmpCommunity", 
  "properties": {
    "access": {
      "default": "read_only", 
      "description": "Access permissions for this community.", 
      "enum": [
        "read_only"
      ], 
      "title": "Type of access", 
      "type": "string"
    }, 
    "community_string": {
      "description": "Community alias string at most 64 characters long.", 
      "required": false, 
      "sensitive": true, 
      "title": "Community string at most 64 characters long", 
      "type": "string"
    }
  }, 
  "title": "SNMP v1, v2c community", 
  "type": "object"
}

SnmpServiceProperties (type)

{
  "additionalProperties": false, 
  "id": "SnmpServiceProperties", 
  "properties": {
    "communities": {
      "items": {
        "$ref": "SnmpCommunity
      }, 
      "maxItems": 10, 
      "required": false, 
      "title": "SNMP v1, v2c community", 
      "type": "array"
    }, 
    "start_on_boot": {
      "required": false, 
      "title": "Start when system boots", 
      "type": "boolean"
    }, 
    "v2_configured": {
      "description": "Indicates whether the local SNMP agent is configured with community string(s).", 
      "readonly": true, 
      "title": "SNMP v2 is configured or not", 
      "type": "boolean"
    }, 
    "v2_targets": {
      "items": {
        "$ref": "SnmpV2Target
      }, 
      "maxItems": 3, 
      "required": false, 
      "title": "SNMP v2c targets information", 
      "type": "array"
    }, 
    "v3_auth_protocol": {
      "default": "SHA1", 
      "enum": [
        "SHA1"
      ], 
      "required": false, 
      "title": "SNMP v3 auth protocol", 
      "type": "string"
    }, 
    "v3_configured": {
      "description": "Indicates whether the local SNMP agent is configured with v3 user(s).", 
      "readonly": true, 
      "title": "SNMP v3 is configured or not", 
      "type": "boolean"
    }, 
    "v3_priv_protocol": {
      "default": "AES128", 
      "enum": [
        "AES128"
      ], 
      "required": false, 
      "title": "SNMP v3 private protocol", 
      "type": "string"
    }, 
    "v3_targets": {
      "items": {
        "$ref": "SnmpV3Target
      }, 
      "maxItems": 3, 
      "required": false, 
      "title": "SNMP v3 targets information", 
      "type": "array"
    }, 
    "v3_users": {
      "items": {
        "$ref": "SnmpV3User
      }, 
      "maxItems": 5, 
      "required": false, 
      "title": "SNMP v3 users information", 
      "type": "array"
    }
  }, 
  "title": "SNMP Service properties", 
  "type": "object"
}

SnmpV2Target (type)

{
  "description": "SNMP v2c manager's reachability information.", 
  "id": "SnmpV2Target", 
  "properties": {
    "community_string": {
      "description": "Community alias string at most 64 characters long.", 
      "required": false, 
      "sensitive": true, 
      "title": "Community string", 
      "type": "string"
    }, 
    "port": {
      "default": 162, 
      "description": "SNMP v2c manager's port.", 
      "maximum": 65535, 
      "minimum": 1, 
      "required": false, 
      "title": "SNMP v2c manager port", 
      "type": "integer"
    }, 
    "server": {
      "$ref": "HostnameOrIPv4Address, 
      "description": "SNMP v2c manager's IP or FQDN.", 
      "required": true, 
      "title": "SNMP v2c manager", 
      "type": "string"
    }
  }, 
  "title": "SNMP v2c targets information", 
  "type": "object"
}

SnmpV3Target (type)

{
  "description": "SNMP v3 manager's reachability information.", 
  "id": "SnmpV3Target", 
  "properties": {
    "port": {
      "default": 162, 
      "description": "SNMP v2c manager's port.", 
      "maximum": 65535, 
      "minimum": 1, 
      "required": false, 
      "title": "SNMP v2c manager port", 
      "type": "integer"
    }, 
    "security_level": {
      "default": "AUTH_PRIV", 
      "description": "SNMP v3 security level.", 
      "enum": [
        "AUTH_PRIV"
      ], 
      "title": "Security level", 
      "type": "string"
    }, 
    "server": {
      "$ref": "HostnameOrIPv4Address, 
      "description": "Specify the fully qualified domain name, or ip address, of the server.", 
      "required": true, 
      "title": "FQDN or IP address of the SNMP Manager", 
      "type": "string"
    }, 
    "user_id": {
      "description": "Specify the user name used to authenticate with the SNMP Manager.", 
      "required": true, 
      "title": "SNMP v3 user id", 
      "type": "string"
    }
  }, 
  "title": "SNMP v3 targets information", 
  "type": "object"
}

SnmpV3User (type)

{
  "id": "SnmpV3User", 
  "properties": {
    "access": {
      "default": "READ_ONLY", 
      "description": "Access permissions for this User.", 
      "enum": [
        "READ_ONLY"
      ], 
      "readonly": true, 
      "title": "Type of access", 
      "type": "string"
    }, 
    "auth_password": {
      "required": false, 
      "sensitive": true, 
      "title": "SNMP v3 user auth password", 
      "type": "string"
    }, 
    "priv_password": {
      "required": false, 
      "sensitive": true, 
      "title": "SNMP v3 user private password", 
      "type": "string"
    }, 
    "security_level": {
      "default": "AUTH_PRIV", 
      "description": "SNMP v3 security level.", 
      "enum": [
        "AUTH_PRIV"
      ], 
      "readonly": true, 
      "title": "Security level", 
      "type": "string"
    }, 
    "user_id": {
      "required": true, 
      "title": "SNMP v3 user id", 
      "type": "string"
    }
  }, 
  "type": "object"
}

SshKeyBaseProperties (type)

{
  "additionalProperties": {}, 
  "id": "SshKeyBaseProperties", 
  "properties": {
    "label": {
      "required": true, 
      "title": "SSH key label (used to identify the key)", 
      "type": "string"
    }, 
    "password": {
      "required": false, 
      "sensitive": true, 
      "title": "Current password for user (required for users root and admin)", 
      "type": "string"
    }
  }, 
  "type": "object"
}

SshKeyProperties (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "SshKeyBaseProperties
  }, 
  "id": "SshKeyProperties", 
  "properties": {
    "label": {
      "required": true, 
      "title": "SSH key label (used to identify the key)", 
      "type": "string"
    }, 
    "password": {
      "required": false, 
      "sensitive": true, 
      "title": "Current password for user (required for users root and admin)", 
      "type": "string"
    }, 
    "type": {
      "pattern": "^(ecdsa-sha2-nistp256|ecdsa-sha2-nistp384|ecdsa-sha2-nistp521|ssh-dss|ssh-ed25519|ssh-rsa)$", 
      "required": true, 
      "title": "SSH key type", 
      "type": "string"
    }, 
    "value": {
      "required": true, 
      "title": "SSH key value", 
      "type": "string"
    }
  }, 
  "type": "object"
}

SshKeyPropertiesListResult (type)

{
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "SshKeyPropertiesListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "SshKeyProperties
      }, 
      "required": true, 
      "title": "SSH key properties query results", 
      "type": "array"
    }
  }, 
  "title": "SSH key properties query results", 
  "type": "object"
}

SshServiceProperties (type)

{
  "additionalProperties": false, 
  "id": "SshServiceProperties", 
  "properties": {
    "root_login": {
      "title": "Permit SSH Root login", 
      "type": "boolean"
    }, 
    "start_on_boot": {
      "required": true, 
      "title": "Start service when system boots", 
      "type": "boolean"
    }
  }, 
  "title": "SSH Service properties", 
  "type": "object"
}

StaticRoute (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "StaticRoute", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "network": {
      "$ref": "IPv4CIDRBlock, 
      "required": true, 
      "title": "CIDR"
    }, 
    "next_hops": {
      "items": {
        "$ref": "StaticRouteNextHop
      }, 
      "maxItems": 8, 
      "minItems": 1, 
      "required": true, 
      "title": "Next Hops", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "type": "object"
}

StaticRouteListResult (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ListResult
  }, 
  "id": "StaticRouteListResult", 
  "properties": {
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "page_cursor": {
      "readonly": true, 
      "title": "Opaque cursor for next page of results, (not set on last page)", 
      "type": "string"
    }, 
    "result_count": {
      "readonly": true, 
      "title": "Count of results found (across all pages), set only on first page", 
      "type": "integer"
    }, 
    "results": {
      "items": {
        "$ref": "StaticRoute
      }, 
      "required": true, 
      "title": "Paginated list of static routes", 
      "type": "array"
    }
  }, 
  "type": "object"
}

StaticRouteNextHop (type)

{
  "additionalProperties": false, 
  "id": "StaticRouteNextHop", 
  "properties": {
    "administrative_distance": {
      "default": 1, 
      "maximum": 255, 
      "minimum": 1, 
      "required": false, 
      "title": "Administrative Distance for the next hop IP", 
      "type": "integer"
    }, 
    "blackhole_action": {
      "$ref": "BlackholeAction, 
      "readonly": true, 
      "required": false, 
      "title": "Action to be taken on matching packets for NULL routes."
    }, 
    "ip_address": {
      "$ref": "IPv4Address, 
      "required": false, 
      "title": "Next Hop IP"
    }, 
    "logical_router_port_id": {
      "$ref": "ResourceReference, 
      "required": false, 
      "title": "Reference of logical router port to be used for next hop"
    }
  }, 
  "type": "object"
}

SupportBundleQueryParameters (type)

{
  "additionalProperties": false, 
  "id": "SupportBundleQueryParameters", 
  "properties": {
    "all": {
      "default": false, 
      "description": "Include all files including files that may have sensitive information like core files.", 
      "title": "Include all files", 
      "type": "boolean"
    }
  }, 
  "type": "object"
}

SyslogFacility (type)

{
  "enum": [
    "KERN", 
    "USER", 
    "MAIL", 
    "DAEMON", 
    "AUTH", 
    "SYSLOG", 
    "LPR", 
    "NEWS", 
    "UUCP", 
    "AUTHPRIV", 
    "FTP", 
    "LOGALERT", 
    "CRON", 
    "LOCAL0", 
    "LOCAL1", 
    "LOCAL2", 
    "LOCAL3", 
    "LOCAL4", 
    "LOCAL5", 
    "LOCAL6", 
    "LOCAL7"
  ], 
  "id": "SyslogFacility", 
  "title": "Syslog facility", 
  "type": "string"
}

SystemHostname (type)

{
  "id": "SystemHostname", 
  "maxLength": 255, 
  "pattern": "^(?=.{1,255}$)[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?$", 
  "title": "System host name", 
  "type": "string"
}

Tag (type)

{
  "id": "Tag", 
  "properties": {
    "scope": {
      "default": "", 
      "description": "Tag searches may optionally be restricted by scope", 
      "display": {
        "order": 1
      }, 
      "maxLength": 128, 
      "readonly": false, 
      "title": "Tag scope", 
      "type": "string"
    }, 
    "tag": {
      "default": "", 
      "description": "Identifier meaningful to user", 
      "display": {
        "order": 2
      }, 
      "maxLength": 256, 
      "readonly": false, 
      "title": "Tag value", 
      "type": "string"
    }
  }, 
  "title": "Arbitrary key-value pairs that may be attached to an entity", 
  "type": "object"
}

TcpMssClamping (type)

{
  "additionalProperties": false, 
  "description": "Tcp Mss Clamping Direction and value", 
  "id": "TcpMssClamping", 
  "properties": {
    "direction": {
      "default": "NONE", 
      "description": "Specifies the traffic direction for which to apply MSS Clamping.", 
      "enum": [
        "NONE", 
        "INBOUND_CONNECTION", 
        "OUTBOUND_CONNECTION", 
        "BOTH"
      ], 
      "required": false, 
      "title": "MSS Clamping direction", 
      "type": "string"
    }, 
    "max_segment_size": {
      "description": "It defines the maximum amount of data that a host is willing to accept in a single TCP segment. This field is set in TCP header during connection establishment. To avoid packet fragmentation, you can set this field depending on uplink MTU and VPN overhead. This is optional field and in case it is left unconfigured, best possible MSS value will be calculated based on effective mtu of uplink interface. Supported MSS range is 108 to 8902.", 
      "maximum": 8902, 
      "minimum": 108, 
      "required": false, 
      "title": "Maximum Segment Size value", 
      "type": "integer"
    }
  }, 
  "title": "Tcp Mss Clamping Object", 
  "type": "object"
}

TransportNodeInEdgeCluster (type)

{
  "additionalProperties": false, 
  "description": "Transport node parameters.", 
  "id": "TransportNodeInEdgeCluster", 
  "properties": {
    "interface": {
      "description": "Interface properties.", 
      "items": {
        "$ref": "Interface
      }, 
      "required": true, 
      "title": "Interface properties", 
      "type": "array"
    }, 
    "member_index": {
      "description": "Transport node index in the edge cluster.", 
      "required": true, 
      "title": "Transport node index in the edge cluster", 
      "type": "integer"
    }, 
    "node_id": {
      "description": "Transport node ID", 
      "required": true, 
      "title": "Transport node ID", 
      "type": "string"
    }, 
    "thumbprint": {
      "description": "Transport node thumbprint.", 
      "required": true, 
      "title": "Transport node thumbprint", 
      "type": "string"
    }
  }, 
  "title": "Transport node parameters", 
  "type": "object"
}

TransportTunnel (type)

{
  "additionalProperties": false, 
  "description": "For client, L2VPN Session Transport Tunnel uses a peer code which has all the information to create the transport tunnel.", 
  "id": "TransportTunnel", 
  "properties": {
    "display_name": {
      "description": "Name for transport tunnel.", 
      "required": false, 
      "title": "Name for transport tunnel", 
      "type": "string"
    }, 
    "ipsec_session_id": {
      "description": "Transport tunnel id. When service is in client mode, this is read only.", 
      "required": false, 
      "title": "Transport tunnel id", 
      "type": "string"
    }, 
    "local_address": {
      "$ref": "IPv4Address, 
      "description": "IPv4 Address of local endpoint. This is required when service is in client mode.", 
      "required": false, 
      "title": "IPv4 Address of local endpoint"
    }, 
    "peer_address": {
      "$ref": "IPv4Address, 
      "description": "IPv4 Address of Peer endpoint on remote site. This is required when service is in client mode.", 
      "required": false, 
      "title": "IPv4 Address of Peer endpoint"
    }, 
    "peer_code": {
      "description": "Peer code represents a base64 encoded string which has all the configuration for tunnel. E.g. local/peer ids and protocol, encryption algorithm, etc. Peer code also contains PSK; be careful when sharing or storing it. This is required when service is in client mode.", 
      "required": false, 
      "sensitive": true, 
      "title": "Peer code for the transport tunnel", 
      "type": "string"
    }
  }, 
  "title": "L2VPN Session Transport Tunnel", 
  "type": "object"
}

TrustObjectData (type)

{
  "additionalProperties": false, 
  "extends": {
    "$ref": "ManagedResource
  }, 
  "id": "TrustObjectData", 
  "properties": {
    "_create_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of resource creation", 
      "readonly": true
    }, 
    "_create_user": {
      "description": "ID of the user who created this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_last_modified_time": {
      "$ref": "EpochMsTimestamp, 
      "can_sort": true, 
      "description": "Timestamp of last modification", 
      "readonly": true
    }, 
    "_last_modified_user": {
      "description": "ID of the user who last modified this resource", 
      "readonly": true, 
      "type": "string"
    }, 
    "_links": {
      "description": "The server will populate this field when returing the resource. Ignored on PUT and POST.", 
      "items": {
        "$ref": "ResourceLink
      }, 
      "readonly": true, 
      "title": "References related to this resource", 
      "type": "array"
    }, 
    "_protection": {
      "description": "Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed             to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed                 to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super                    user and can modify it, but only when providing                    the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this           entity.", 
      "readonly": true, 
      "title": "Indicates protection status of this resource", 
      "type": "string"
    }, 
    "_revision": {
      "description": "The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.", 
      "readonly": true, 
      "title": "Generation of this resource config", 
      "type": "integer"
    }, 
    "_schema": {
      "display": {
        "hidden": true
      }, 
      "readonly": true, 
      "title": "Location of schema for this resource", 
      "type": "string"
    }, 
    "_self": {
      "$ref": "SelfResourceLink, 
      "readonly": true
    }, 
    "_system_owned": {
      "description": "Indicates system owned resource", 
      "readonly": true, 
      "type": "boolean"
    }, 
    "actions": {
      "items": {
        "$ref": "ActionDescriptor
      }, 
      "readonly": true, 
      "title": "Actions applicable to the resource at this time", 
      "type": "array"
    }, 
    "description": {
      "can_sort": true, 
      "maxLength": 1024, 
      "title": "Description of this resource", 
      "type": "string"
    }, 
    "display_name": {
      "can_sort": true, 
      "description": "Defaults to ID if not set", 
      "maxLength": 255, 
      "title": "Identifier to use when displaying entity in logs or GUI", 
      "type": "string"
    }, 
    "id": {
      "can_sort": true, 
      "readonly": true, 
      "title": "Unique identifier of this resource", 
      "type": "string"
    }, 
    "key_algo": {
      "description": "Key algorithm contained in this certificate", 
      "type": "string"
    }, 
    "notify_mpa": {
      "default": false, 
      "description": "send notification to MPA about this config change (applicable on edge node)", 
      "display": {
        "hidden": true
      }, 
      "readonly": false, 
      "type": "boolean"
    }, 
    "passphrase": {
      "description": "Password for private key encryption", 
      "readonly": false, 
      "required": false, 
      "sensitive": true, 
      "type": "string"
    }, 
    "pem_encoded": {
      "description": "pem encoded certificate data", 
      "readonly": false, 
      "required": true, 
      "type": "string"
    }, 
    "private_key": {
      "description": "private key data", 
      "readonly": false, 
      "required": false, 
      "sensitive": true, 
      "type": "string"
    }, 
    "resource_type": {
      "description": "The type of this resource.", 
      "readonly": false, 
      "type": "string"
    }, 
    "tags": {
      "items": {
        "$ref": "Tag
      }, 
      "maxItems": 30, 
      "title": "Opaque identifiers meaningful to the API user", 
      "type": "array"
    }
  }, 
  "type": "object"
}

TunnelDigestAlgorithm (type)

{
  "additionalProperties": false, 
  "description": "The TunnelDigestAlgorithms are used to verify message integrity during IPSec VPN tunnel establishment. SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.", 
  "enum": [
    "SHA1", 
    "SHA2_256", 
    "SHA2_384", 
    "SHA2_512"
  ], 
  "id": "TunnelDigestAlgorithm", 
  "title": "Digest Algorithms used in tunnel establishment", 
  "type": "string"
}

TunnelEncryptionAlgorithm (type)

{
  "additionalProperties": false, 
  "description": "TunnelEncryption algorithms are used to ensure confidentiality of the messages exchanged during Tunnel negotiations. AES stands for Advanced Encryption Standards. AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_GCM stands for Advanced Encryption Standard(AES) in Galois/Counter Mode (GCM) and is used to provide both confidentiality and data origin authentication. NO_ENCRYPTION_AUTH_AES_GMAC_* enables authentication on input data without encyption. Digest algorithm should be empty for this option.", 
  "enum": [
    "AES_128", 
    "AES_256", 
    "AES_GCM_128", 
    "AES_GCM_192", 
    "AES_GCM_256", 
    "NO_ENCRYPTION_AUTH_AES_GMAC_128", 
    "NO_ENCRYPTION_AUTH_AES_GMAC_192", 
    "NO_ENCRYPTION_AUTH_AES_GMAC_256", 
    "NO_ENCRYPTION"
  ], 
  "id": "TunnelEncryptionAlgorithm", 
  "title": "Encryption algorithm used in tunnel", 
  "type": "string"
}

TunnelPortConfig (type)

{
  "additionalProperties": false, 
  "description": "IP Tunnel port configuration.", 
  "id": "TunnelPortConfig", 
  "properties": {
    "ip_subnets": {
      "description": "IP Tunnel port  (commonly referred as VTI) subnet.", 
      "items": {
        "$ref": "IPSubnet
      }, 
      "maxItems": 1, 
      "minItems": 1, 
      "required": true, 
      "title": "IP Tunnel port subnet", 
      "type": "array"
    }, 
    "tunnel_port_id": {
      "description": "Logical route port identifier.", 
      "readonly": true, 
      "title": "Logical route port identifier", 
      "type": "string"
    }
  }, 
  "title": "IP Tunnel port configuration", 
  "type": "object"
}

UpgradeProgressStatus (type)

{
  "id": "UpgradeProgressStatus", 
  "properties": {
    "last_upgrade_step_status": {
      "title": "Status of last upgrade step", 
      "type": "object"
    }, 
    "upgrade_bundle_present": {
      "title": "True if upgrade bundle is present", 
      "type": "boolean"
    }, 
    "upgrade_metadata": {
      "title": "Meta info of upgrade", 
      "type": "object"
    }
  }, 
  "title": "Upgrade progress status", 
  "type": "object"
}

UpgradeStatusSummary (type)

{
  "id": "UpgradeStatusSummary", 
  "properties": {
    "upgrade_bundle_present": {
      "title": "True if upgrade bundle is present", 
      "type": "boolean"
    }, 
    "upgrade_metadata": {
      "title": "Meta info of upgrade", 
      "type": "object"
    }, 
    "upgrade_steps": {
      "items": {
        "type": "object"
      }, 
      "title": "List of all upgrade steps performed", 
      "type": "array"
    }
  }, 
  "title": "Upgrade status summry", 
  "type": "object"
}

UpgradeTaskActionParameters (type)

{
  "id": "UpgradeTaskActionParameters", 
  "properties": {
    "action": {
      "description": "The upgrade task to perform.", 
      "pattern": "^[^/]+$", 
      "title": "Upgrade task", 
      "type": "string"
    }
  }, 
  "type": "object"
}

UpgradeTaskProperties (type)

{
  "additionalProperties": false, 
  "id": "UpgradeTaskProperties", 
  "properties": {
    "bundle_name": {
      "required": true, 
      "title": "Name of Bundle", 
      "type": "string"
    }, 
    "parameters": {
      "readonly": true, 
      "required": false, 
      "title": "Bundle arguments", 
      "type": "object"
    }, 
    "step": {
      "required": false, 
      "title": "Step name", 
      "type": "string"
    }
  }, 
  "title": "Task properties", 
  "type": "object"
}

UpgradeTaskStatusQueryParameters (type)

{
  "id": "UpgradeTaskStatusQueryParameters", 
  "properties": {
    "bundle_name": {
      "description": "Provide a bundle name", 
      "pattern": "^[a-zA-Z0-9-.]+$", 
      "title": "Bundle Name", 
      "type": "string"
    }, 
    "upgrade_task_id": {
      "description": "Provide a task id", 
      "pattern": "^[a-z0-9-]+$", 
      "title": "Upgrade Task ID", 
      "type": "string"
    }
  }, 
  "type": "object"
}

UrpfMode (type)

{
  "enum": [
    "NONE", 
    "STRICT"
  ], 
  "id": "UrpfMode", 
  "title": "Unicast Reverse Path Forwarding mode", 
  "type": "string"
}

X509Certificate (type)

{
  "additionalProperties": false, 
  "id": "X509Certificate", 
  "properties": {
    "dsa_public_key_g": {
      "description": "One of the DSA cryptogaphic algorithm's strength parameters, base", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "dsa_public_key_p": {
      "description": "One of the DSA cryptogaphic algorithm's strength parameters, prime", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "dsa_public_key_q": {
      "description": "One of the DSA cryptogaphic algorithm's strength parameters, sub-prime", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "dsa_public_key_y": {
      "description": "One of the DSA cryptogaphic algorithm's strength parameters", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "ecdsa_curve_name": {
      "description": "The Curve name for the ECDSA certificate.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Curve Name", 
      "type": "string"
    }, 
    "ecdsa_ec_field": {
      "description": "Represents an elliptic curve (EC) finite field in ECDSA.", 
      "enum": [
        "F2M", 
        "FP"
      ], 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Finite Field", 
      "type": "string"
    }, 
    "ecdsa_ec_field_f2mks": {
      "description": "The order of the middle term(s) of the reduction polynomial in elliptic curve (EC) | characteristic 2 finite field.| Contents of this array are copied to protect against subsequent modification in ECDSA.", 
      "items": {
        "type": "integer"
      }, 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve F2MKS", 
      "type": "array"
    }, 
    "ecdsa_ec_field_f2mm": {
      "description": "The first coefficient of this elliptic curve in elliptic curve (EC) | characteristic 2 finite field for ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve F2MM", 
      "type": "integer"
    }, 
    "ecdsa_ec_field_f2mrp": {
      "description": "The value whose i-th bit corresponds to the i-th coefficient of the reduction polynomial | in elliptic curve (EC) characteristic 2 finite field for ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve F2MRP", 
      "type": "string"
    }, 
    "ecdsa_ec_field_f2pp": {
      "description": "The specified prime for the elliptic curve prime finite field in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve F2PP", 
      "type": "string"
    }, 
    "ecdsa_public_key_a": {
      "description": "The first coefficient of this elliptic curve in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key A", 
      "type": "string"
    }, 
    "ecdsa_public_key_b": {
      "description": "The second coefficient of this elliptic curve in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key B", 
      "type": "string"
    }, 
    "ecdsa_public_key_cofactor": {
      "description": "The co-factor in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key Cofactor", 
      "type": "integer"
    }, 
    "ecdsa_public_key_generator_x": {
      "description": "x co-ordinate of G (the generator which is also known as the base point) in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key X", 
      "type": "string"
    }, 
    "ecdsa_public_key_generator_y": {
      "description": "y co-ordinate of G (the generator which is also known as the base point) in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key Y", 
      "type": "string"
    }, 
    "ecdsa_public_key_order": {
      "description": "The order of generator G in ECDSA.", 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key Order", 
      "type": "string"
    }, 
    "ecdsa_public_key_seed": {
      "description": "The bytes used during curve generation for later validation in ECDSA.| Contents of this array are copied to protect against subsequent modification.", 
      "items": {
        "type": "string"
      }, 
      "readonly": true, 
      "required": false, 
      "title": "ECDSA Elliptic Curve Public Key Seed", 
      "type": "array"
    }, 
    "is_ca": {
      "description": "True if this is a CA certificate.", 
      "readonly": true, 
      "required": true, 
      "type": "boolean"
    }, 
    "is_valid": {
      "description": "True if this certificate is valid.", 
      "readonly": true, 
      "required": true, 
      "type": "boolean"
    }, 
    "issuer": {
      "description": "the certificate issuers complete distinguished name", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "issuer_cn": {
      "description": "the certificate issuer's common name", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "not_after": {
      "$ref": "EpochMsTimestamp, 
      "description": "the time in epoch milliseconds at which the certificate becomes invalid", 
      "readonly": true, 
      "required": true
    }, 
    "not_before": {
      "$ref": "EpochMsTimestamp, 
      "description": "the time in epoch milliseconds at which the certificate becomes valid", 
      "readonly": true, 
      "required": true
    }, 
    "public_key_algo": {
      "description": "Cryptographic algorithm used by the public key for data encryption.", 
      "enum": [
        "RSA", 
        "DSA", 
        "ECDSA"
      ], 
      "readonly": true, 
      "required": true, 
      "title": "Public Key Algorithm", 
      "type": "string"
    }, 
    "public_key_length": {
      "description": "size measured in bits of the public/private keys used in a cryptographic algorithm", 
      "readonly": true, 
      "required": true, 
      "type": "integer"
    }, 
    "rsa_public_key_exponent": {
      "description": "An RSA public key is made up of the modulus and the public exponent. Exponent is a power number", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "rsa_public_key_modulus": {
      "description": "An RSA public key is made up of the modulus and the public exponent. Modulus is wrap around number", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "serial_number": {
      "description": "certificate's serial number", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "signature": {
      "description": "the signature value(the raw signature bits) used for signing and validate the cert", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "signature_algorithm": {
      "description": "the algorithm used by the Certificate Authority to sign the certificate", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "subject": {
      "description": "the certificate owners complete distinguished name", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "subject_cn": {
      "description": "the certificate owner's common name", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }, 
    "version": {
      "description": "Certificate version (default v1)", 
      "readonly": true, 
      "required": true, 
      "type": "string"
    }
  }, 
  "type": "object"
}

X509Crl (type)

{
  "additionalProperties": false, 
  "id": "X509Crl", 
  "properties": {
    "crl_entries": {
      "description": "list of X509CrlEntry", 
      "items": {
        "$ref": "X509CrlEntry
      }, 
      "readonly": true, 
      "required": false, 
      "type": "array"
    }, 
    "issuer": {
      "description": "Issuer's distinguished name(DN)", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "next_update": {
      "description": "Next update time for the CRL", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "version": {
      "description": "CRL's version number either 1 or 2", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }
  }, 
  "title": "A CRL is a time-stamped list identifying revoked certificates.", 
  "type": "object"
}

X509CrlEntry (type)

{
  "additionalProperties": false, 
  "id": "X509CrlEntry", 
  "properties": {
    "revocation_date": {
      "description": "Revocation date", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }, 
    "serial_number": {
      "description": "the revoked certificate's serial number", 
      "readonly": true, 
      "required": false, 
      "type": "string"
    }
  }, 
  "title": "Each revoked certificate is identified in a CRL by its certificate serial number.", 
  "type": "object"
}


API Errors

301 - Moved Permanently

Request must be reissued to a different controller node.

The controller node has been replaced by a new node that should be used for this and all future requests.

Response Code 301 Moved Permanently
Response Headers Content-Type: text/plain
Location: <URI for new request>
Response Body Additional information about the error, if available.

303 - See Other

The response to the request can be found under a different URI identified by the Location response header.

Response Code 303 See Other
Response Headers Content-Type: text/plain
Location: <URI for new request>
Response Body Additional information about the error, if available.

307 - Temporary Redirect

Request should be reissued to a different controller node.

The controller node is requesting the client make further requests against the controller node specified in the Location header. Clients should continue to use the new server until directed otherwise by the new controller node.

Response Code 307 Temporary Redirect
Response Headers Content-Type: text/plain
Location: <URI for new request>
Response Body Additional information about the error, if available.

400 - Bad Request

Request was improperly formatted or contained an invalid parameter.

Response Code 400 Bad Request
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

403 - Forbidden

The client does not have sufficient privileges to execute the request.

The API is likely in read-only mode, or a request was made to modify a read-only property.

Response Code 403 Forbidden
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

404 - Not Found

An entity referenced in the request does not exist.

Create the referenced resource first, then reissue the request.

Response Code 404 Not Found
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

409 - Conflict

The request can not be performed because it conflicts with configuration on a different entity, or because another client modified the same entity.

If the conflict arose because of a conflict with a different entity, modify the conflicting configuration. If the problem is due to a concurrent update, re-fetch the resource, apply the desired update, and reissue the request.

Response Code 409 Conflict
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

410 - Gone

Response Code 410 Gone
Response Headers
Response Body Additional information about the error, if available.

412 - Precondition Failed

The request can not be performed because a precondition check failed. Usually, this means that the client sent a PUT or PATCH request with an out-of-date _revision property, probably because some other client has modified the entity since it was retrieved. The client should re-fetch the entry, apply any desired changes, and re-submit the operation.

Response Code 412 Precondition Failed
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

500 - Internal Server Error

An internal error occurred while executing the request. If the problem persists, perform diagnostic system tests, or contact your support representative.

Response Code 500 Internal Server Error
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

502 - Bad Gateway

Response Code 502 Bad Gateway
Response Headers
Response Body Additional information about the error, if available.

503 - Service Unavailable

The request can not be performed because the associatedresource could not be reached or is temporarily busy. Verify theassociated resource is connected, then reissue the request.

Response Code 503 Service Unavailable
Response Headers Content-Type: text/plain
Response Body Additional information about the error, if available.

504 - Gateway Timeout

Response Code 504 Gateway Timeout
Response Headers
Response Body Additional information about the error, if available.


Deprecated Types and Methods

** Deprecated Type Definitions



** Deprecated Property Definitions



** Deprecated APIs

ReadPmtuLearningSettingDepreciated (GET /node/services/dataplane/l3vpn-pmtu):
    Depreciated. Please use /node/services/dataplane/pmtu-learning
UpdatePmtuLearningSettingDepreciated (PUT /node/services/dataplane/l3vpn-pmtu):
    Depreciated. Please use /node/services/dataplane/pmtu-learning
GetUpgradeTaskStatus (GET /node/upgrade):
    Get upgrade task status for the given task of the given bundle. Both
    bundle_name and task_id must be provided, otherwise you will receive a 404
    NOT FOUND response. This api is deprecated. Please use API GET /node/upgrade
    /status-summary to get upgrade status when upgrade is in progress.