Policy > Networking

Associated URIs:

API Description API Path

List BfdProfiles


Paginated list of all BfdProfiles.
GET /policy/api/v1/infra/bfd-profiles
GET /policy/api/v1/global-infra/bfd-profiles

Delete BFD Config and all the entities contained by this BfdProfile


Delete BFD Config and all the entities contained by this BfdProfile.
DELETE /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>

Read a BfdProfile


Read a BfdProfile.
GET /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>
GET /policy/api/v1/global-infra/bfd-profiles/<bfd-profile-id>

Create or update a BfdProfile


If a BfdProfile with the bfd-profile-id is not already present,
create a new BfdProfile. If it already exists, update the
BfdProfile. This operation will fully replace the object.
PATCH /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>

Create or update a BfdProfile


If a BfdProfile with the bfd-profile-id is not already present,
create a new BfdProfile. If it already exists, update the
BfdProfile. This operation will fully replace the object.
PUT /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>

List DHCP relay config instances


Paginated list of all DHCP relay config instances
GET /policy/api/v1/infra/dhcp-relay-configs
GET /policy/api/v1/global-infra/dhcp-relay-configs

Delete DHCP relay configuration


Delete DHCP relay configuration
DELETE /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>

Read DHCP relay configuration


Read DHCP relay configuration
GET /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>
GET /policy/api/v1/global-infra/dhcp-relay-configs/<dhcp-relay-config-id>

Create or update DHCP relay configuration


If DHCP relay config with the dhcp-relay-config-id is not already present, create a new DHCP relay config instance.
If it already exists, update the DHCP relay config instance with specified attributes.
PATCH /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>

Create or update DHCP relay configuration


If DHCP relay config with the dhcp-relay-config-id is not already present,
create a new DHCP relay config instance. If it already exists, replace
the DHCP relay config instance with this object.
PUT /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>

List DHCP server config instances


Paginated list of all DHCP server config instances
GET /policy/api/v1/infra/dhcp-server-configs
GET /policy/api/v1/global-infra/dhcp-server-configs

Read DHCP server leases


Read DHCP server leases
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/leases

Read DHCP server state


Read DHCP server state
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/state

Read DHCP server statistics


Read DHCP server statistics
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/stats

Read DHCP server status


Read DHCP server status
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/status

Delete DHCP server configuration


Delete DHCP server configuration
DELETE /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>

Read DHCP server configuration


Read DHCP server configuration
GET /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>
GET /policy/api/v1/global-infra/dhcp-server-configs/<dhcp-server-config-id>

Create or update DHCP server configuration


If DHCP server config with the dhcp-server-config-id is not already
present, create a new DHCP server config instance. If it already exists,
update the DHCP server config instance with specified attributes.

Realized entities of this API can be found using the path of Tier-0, Tier1,
or Segment where this config is applied on.

Modification of edge_cluster_path in DhcpServerConfig will lose all
existing DHCP leases.

If both the preferred_edge_paths in the DhcpServerConfig are changed
in a same PATCH API, e.g. change from [a,b] to [x,y], the current DHCP
server leases will be lost, which could cause network connectivity
issues. It is recommended to change only one member index in an update
call, e.g. from [a, b] to [a,y].

Clearing preferred_edge_paths will not reassign edge nodes from the
edge cluster. Instead, the previously-allocated edge nodes will be
retained to avoid loss of leases.
PATCH /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>

Create or update DHCP server configuration


If DHCP server config with the dhcp-server-config-id is not already
present, create a new DHCP server config instance. If it already exists,
replace the DHCP server config instance with this object.

Realized entities of this API can be found using the path of Tier-0, Tier1,
or Segment where this config is applied on.

Modification of edge_cluster_path in DhcpServerConfig will lose all
existing DHCP leases.

If both the preferred_edge_paths in the DhcpServerConfig are changed
in a same PUT API, e.g. change from [a,b] to [x,y], the current DHCP
server leases will be lost, which could cause network connectivity
issues. It is recommended to change only one member index in an update
call, e.g. from [a, b] to [a,y].

Clearing preferred_edge_paths will not reassign edge nodes from the
edge cluster. Instead, the previously-allocated edge nodes will be
retained to avoid loss of leases.
PUT /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>

List Dns Forwarder Zones


Paginated list of all Dns Forwarder Zones
GET /policy/api/v1/infra/dns-forwarder-zones
GET /policy/api/v1/global-infra/dns-forwarder-zones

Delete the DNS Forwarder Zone


Delete the DNS Forwarder Zone
DELETE /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

Read the DNS Forwarder Zone


Read the DNS Forwarder Zone
GET /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

Create or update the DNS Forwarder Zone


Create or update the DNS Forwarder Zone
PATCH /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

Create or update the DNS Forwarder Zone


Create or update the DNS Forwarder Zone
PUT /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

List forwarding policies for the given domain


List all forwarding policies for the given domain ordered by precedence.
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies

Delete forwarding policy


Delete forwarding policy.
DELETE /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

Read forwarding policy


Read forwarding policy.
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

Create or update forwarding policy


Create or update the forwarding policy.
PATCH /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

Create or update forwarding policy


Create or update the forwarding policy.
PUT /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

List rules


List rules
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules

Delete ForwardingRule


Delete ForwardingRule
DELETE /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Read rule


Read rule
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Update forwarding rule


Create a rule with the rule-id is not already present,
otherwise update the rule.
PATCH /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Update forwarding rule


Create a rule with the rule-id is not already present,
otherwise update the rule.
PUT /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

List all gateway QoS profiles


Paginated list of all gateway QoS profle instances
GET /policy/api/v1/infra/gateway-qos-profiles
GET /policy/api/v1/global-infra/gateway-qos-profiles

Delete gateway QoS profile


Delete QoS profile
DELETE /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>

Read gateway QoS profile


Read gateway QoS profile
GET /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>

Create or update Gateway QoS profile


If profile with the qos-profile-id is not already present,
create a new gateway QoS profile instance. If it already exists, update
the gateway QoS profile instance with specified attributes.
PATCH /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>

Create or update Gateway QoS profile


If profile with the qos-profile-id is not already present,
create a new gateway QoS profile instance. If it already exists, replace
the gateway QoS profile instance with this object.
PUT /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>

Read global configuration


Read global configuration
GET /policy/api/v1/infra/global-config

Update the global configuration


Update the global configuration
PATCH /policy/api/v1/infra/global-config

Update the global configuration


Update the global configuration
PUT /policy/api/v1/infra/global-config

List Igmp Profile


List all igmp profile.
GET /policy/api/v1/infra/igmp-profiles

Delete Igmp Profile


Delete Igmp Profile.
DELETE /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

Read Igmp Profile


Read Igmp Profile.
GET /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

Update igmp profile


Create a igmp profile with the igmp-profile-id is not already present,
otherwise update the igmp profile.
PATCH /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

Update igmp profile


Create or update igmp profile.
PUT /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

List IpAddressBlocks


Paginated list of IpAddressBlocks.
GET /policy/api/v1/infra/ip-blocks

Delete an IpAddressBlock


Delete the IpAddressBlock with the given id.
DELETE /policy/api/v1/infra/ip-blocks/<ip-block-id>

Read a IpAddressBlock


Read IpAddressBlock with given Id.
GET /policy/api/v1/infra/ip-blocks/<ip-block-id>

Create a new IPBlock


Creates a new IpAddressBlock with specified ID if not already present.
If IpAddressBlock of given ID is already present, then the instance is
updated with specified attributes.
PATCH /policy/api/v1/infra/ip-blocks/<ip-block-id>

Create or Replace IpAddressBlock


Create a new IpAddressBlock with given ID if it does not exist.
If IpAddressBlock with given ID already exists, it will update existing instance.
This is a full replace.
PUT /policy/api/v1/infra/ip-blocks/<ip-block-id>

List IP Discovery Profiles


API will list all IP Discovery Profiles active in current discovery profile id.
GET /policy/api/v1/infra/ip-discovery-profiles
GET /policy/api/v1/global-infra/ip-discovery-profiles

Delete IP Discovery Profile


API will delete IP Discovery profile.
DELETE /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

Get IP Discovery Profile


API will get IP Discovery profile.
GET /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>
GET /policy/api/v1/global-infra/ip-discovery-profiles/<ip-discovery-profile-id>

Create IP Discovery Profile


API will create IP Discovery profile.
PATCH /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

Update IP Discovery Profile


API will update IP Discovery profile.
PUT /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

List IpAddressPools


Paginated list of IpAddressPools.
GET /policy/api/v1/infra/ip-pools

Delete an IpAddressPool


Delete the IpAddressPool with the given id.
DELETE /policy/api/v1/infra/ip-pools/<ip-pool-id>

Read an IpAddressPool


Read IpAddressPool with given Id.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>

Create a new IP address pool


Creates a new IpAddressPool with specified ID if not already present.
If IpAddressPool of given ID is already present, then the instance is
updated. This is a full replace.
PATCH /policy/api/v1/infra/ip-pools/<ip-pool-id>

Create or Replace IpAddressPool


Create a new IpAddressPool with given ID if it does not exist.
If IpAddressPool with given ID already exists, it will update existing instance.
This is a full replace.
PUT /policy/api/v1/infra/ip-pools/<ip-pool-id>

List IpAddressPool Allocations


Returns information about which addresses have been allocated from a
specified IP address pool in policy.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations

Records intent to release an IP from an IpPool.


Releases the IP that was allocated for this allocation request
DELETE /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

Read policy IpPool allocation


Read a previously created allocation
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

Records intent to allocate an IP Address from an IP Pool


If allocation of the same ID is found, this is a no-op. If no allocation
of the specified ID is found, then a new allocation is created.
An allocation cannot be updated once created.
When an allocation is requested from an IpAddressPool, the IP could be
allocated from any subnet in the pool that has the available capacity.
Request to allocate an IP will fail if no subnet was previously created.
If specific IP was requested, the status of allocation is reflected in the
realized state.
If any IP is requested, the IP finally allocated is obtained by polling on
the realized state until the allocated IP is returned in the extended
attributes.
PATCH /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

Records intent to allocate an IP Address from an IP Pool


If allocation of the same ID is found, this is a no-op. If no allocation
of the specified ID is found, then a new allocation is created.
An allocation cannot be updated once created.
When an IP allocation is requested from an IpAddressPool, the IP could be
allocated from any subnet in the pool that has the available capacity.
Request to allocate an IP will fail if no subnet was previously created.
If specific IP was requested, the status of allocation is reflected in the
realized state.
If any IP is requested, the IP finally allocated is obtained by polling on
the realized state until the allocated IP is returned in the extended
attributes.
An allocation cannot be updated once created.
PUT /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

List IpAddressPoolSubnets


Paginated list of IpAddressPoolSubnets.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets

Delete an IpAddressPoolSubnet


Delete the IpAddressPoolSubnet with the given id.
DELETE /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

Read an IpAddressPoolSubnet


Read IpAddressPoolSubnet with given Id.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

Create a new IP Subnet


Creates a new IpAddressPoolSubnet with the specified ID if it does not
already exist. If a IpAddressPoolSubnet of the given ID already exists,
IpAddressPoolSubnet will be updated. This is a full replace.
PATCH /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

Create a new IP Subnet


Creates a new IpAddressPoolSubnet with the specified ID if it does not
already exist. If a IpAddressPoolSubnet of the given ID already exists,
IpAddressPoolSubnet will be updated. This is a full replace.
PUT /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

List DPD profiles


Get paginated list of all DPD Profiles.
GET /policy/api/v1/infra/ipsec-vpn-dpd-profiles

Delete custom dead peer detection (DPD) profile


Delete custom dead peer detection (DPD) profile. Profile can not be deleted if profile has references to it.
DELETE /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

Get dead peer detection (DPD) profile


Get custom dead peer detection (DPD) profile, given the particular id.
GET /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

Create or patch a custom DPD Profile


Create or patch dead peer detection (DPD) profile. Any change in profile affects all sessions consuming this profile. System will be provisioned with system owned editable default DPD profile. Any change in profile affects all sessions consuming this profile.
PATCH /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

Create or fully replace a custom IPSec tunnel Profile


Create or patch dead peer detection (DPD) profile. Any change in profile affects all sessions consuming this profile. System will be provisioned with system owned editable default DPD profile. Any change in profile affects all sessions consuming this profile. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

List IKE profiles


Get paginated list of all IKE Profiles.
GET /policy/api/v1/infra/ipsec-vpn-ike-profiles

Delete custom IKE Profile


Delete custom IKE Profile. Profile can not be deleted if profile has references to it.
DELETE /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

Get IKE Profile


Get custom IKE Profile, given the particular id.
GET /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

Create or patch a custom internet key exchange (IKE) Profile


Create or patch custom internet key exchange (IKE) Profile. IKE Profile is a reusable profile that captures IKE and phase one negotiation parameters. System will be pre provisioned with system owned editable default IKE profile and suggested set of profiles that can be used for peering with popular remote peers like AWS VPN. User can create custom profiles as needed. Any change in profile affects all sessions consuming this profile.
PATCH /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

Create or fully replace a custom internet key exchange (IKE) Profile


Create or fully replace custom internet key exchange (IKE) Profile. IKE Profile is a reusable profile that captures IKE and phase one negotiation parameters. System will be pre provisioned with system owned editable default IKE profile and suggested set of profiles that can be used for peering with popular remote peers like AWS VPN. User can create custom profiles as needed. Any change in profile affects all sessions consuming this profile. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

List IPSec tunnel profiles


Get paginated list of all IPSec tunnel Profiles.
GET /policy/api/v1/infra/ipsec-vpn-tunnel-profiles

Delete custom IPSec tunnel Profile


Delete custom IPSec tunnel Profile. Profile can not be deleted if profile has references to it.
DELETE /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

Get IPSec tunnel Profile


Get custom IPSec tunnel Profile, given the particular id.
GET /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

Create or patch a custom IPSec tunnel Profile


Create or patch custom IPSec tunnel profile. IPSec tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. System will be provisioned with system owned editable default IPSec tunnel profile. Any change in profile affects all sessions consuming this profile.
PATCH /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

Create or fully replace a custom IPSec tunnel Profile


Create or fully replace custom IPSec tunnel profile. IPSec tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. System will be provisioned with system owned editable default IPSec tunnel profile. Any change in profile affects all sessions consuming this profile. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

List all IPv6 DAD profiles


Paginated list of all IPv6 DAD profile instances
GET /policy/api/v1/infra/ipv6-dad-profiles
GET /policy/api/v1/global-infra/ipv6-dad-profiles

Delete IPv6 DAD profile


Delete IPv6 DAD profile
DELETE /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>

Read IPv6 DAD profile


Read IPv6 DAD profile
GET /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>
GET /policy/api/v1/global-infra/ipv6-dad-profiles/<dad-profile-id>

Create or update IPv6 DAD profile


If profile with the dad-profile-id is not already present,
create a new IPv6 DAD profile instance. If it already exists, update
the IPv6 DAD profile instance with specified attributes.
PATCH /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>

Create or update IPv6 DAD profile


If profile with the dad-profile-id is not already present,
create a new IPv6 DAD profile instance. If it already exists, replace
the IPv6 DAD profile instance with this object.
PUT /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>

List all IPv6 NDRA profiles


Paginated list of all IPv6 NDRA profile instances
GET /policy/api/v1/infra/ipv6-ndra-profiles
GET /policy/api/v1/global-infra/ipv6-ndra-profiles

Delete IPv6 NDRA profile


Delete IPv6 NDRA profile
DELETE /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>

Read IPv6 NDRA profile


Read IPv6 NDRA profile
GET /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>
GET /policy/api/v1/global-infra/ipv6-ndra-profiles/<ndra-profile-id>

Create or update IPv6 NDRA profile


If profile with the ndra-profile-id is not already present,
create a new IPv6 NDRA profile instance. If it already exists, update
the IPv6 NDRA profile instance with specified attributes.
PATCH /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>

Create or update IPv6 NDRA profile


If profile with the ndra-profile-id is not already present,
create a new IPv6 NDRA profile instance. If it already exists, replace
the IPv6 NDRA profile instance with this object.
PUT /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>

List LBAppProfiles


Paginated list of all LBAppProfiles.
GET /policy/api/v1/infra/lb-app-profiles

Delete LBAppProfile and all the entities contained by this LBAppProfile


Delete the LBAppProfile along with all the entities contained
by this LBAppProfile.
DELETE /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

Read LBAppProfile


Read a LBAppProfile.
GET /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

Create or update a LBAppProfile


If a LBAppProfile with the lb-app-profile-id is not already present, create
a new LBAppProfile. If it already exists, update the LBAppProfile. This
is a full replace.
PATCH /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

Create or update a LBAppProfile


If a LBAppProfile with the lb-app-profile-id is not already present, create
a new LBAppProfile. If it already exists, update the LBAppProfile. This
is a full replace.
PUT /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

List LBClientSslProfiles


Paginated list of all LBClientSslProfiles.
GET /policy/api/v1/infra/lb-client-ssl-profiles

Delete LBClientSslProfile and all the entities contained by this LBClientSslProfile


Delete the LBClientSslProfile along with all the entities contained
by this LBClientSslProfile.
DELETE /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id>

Read LBClientSslProfile


Read a LBClientSslProfile.
GET /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id>

Create or update a LBClientSslProfile


If a LBClientSslProfile with the lb-client-ssl-profile-id is not already
present, create a new LBClientSslProfile. If it already exists, update the
LBClientSslProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id>

Create or update a LBClientSslProfile


If a LBClientSslProfile with the lb-client-ssl-profile-id is not already
present, create a new LBClientSslProfile. If it already exists, update the
LBClientSslProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id>

List LBMonitorProfiles for infra


Paginated list of all LBMonitorProfiles for infra.
GET /policy/api/v1/infra/lb-monitor-profiles

Delete LBMonitorProfile and all the entities contained by this LBMonitorProfile


Delete the LBMonitorProfile along with all the entities contained
by this LBMonitorProfile.
DELETE /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id>

Read LBMonitorProfile


Read a LBMonitorProfile.
GET /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id>

Create or update a LBMonitorProfile


If a LBMonitorProfile with the lb-monitor-profile-id is not
already present, create a new LBMonitorProfile. If it already exists,
update the LBMonitorProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id>

Create or update a LBMonitorProfile


If a LBMonitorProfile with the lb-monitor-profile-id is not
already present, create a new LBMonitorProfile. If it already exists,
update the LBMonitorProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id>

Read load balancer usage for the given node


API is used to retrieve node usage for load balancer which contains basic
information, LB entity usages and capacities for the given node.
Currently only edge node is supported.
The parameter ?node_path= is required. For example, ?node_path=
/infra/sites/default/enforcement-points/default/edge-clusters/
85175e0b-4d74-461d-83e1-f3b785adef9c/edge-nodes/
86e077c0-449f-11e9-87c8-02004eb37029.
GET /policy/api/v1/infra/lb-node-usage

Read load balancer node usage summary


The API is used to retrieve the load balancer node usage summary of all
nodes for every enforcement point.
- If the parameter ?include_usages=true exists, the property node_usages
are included in response. By default, the property node_usages is not
included in response.
- If parameter ?enforcement_point_path= exists,
only node usage summary from specific enforcement point is included
in response. If no enforcement point path is specified, information will
be aggregated from each enforcement point.
GET /policy/api/v1/infra/lb-node-usage-summary

List LBPersistenceProfiles for infra


Paginated list of all LBPersistenceProfiles for infra.
GET /policy/api/v1/infra/lb-persistence-profiles

Delete LBPersistenceProfile and all the entities contained by this LBPersistenceProfile


Delete the LBPersistenceProfile along with all the entities
contained by this LBPersistenceProfile.
DELETE /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

Read LBPersistenceProfile


Read a LBPersistenceProfile.
GET /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

Create or update a LBPersistenceProfile


If a LBPersistenceProfile with the lb-persistence-profile-id is not
already present, create a new LBPersistenceProfile. If it already exists,
update the LBPersistenceProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

Create or update a LBPersistenceProfile


If a LBPersistenceProfile with the lb-persistence-profile-id is not
already present, create a new LBPersistenceProfile. If it already exists,
update the LBPersistenceProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

List LBPools


Paginated list of all LBPools.
GET /policy/api/v1/infra/lb-pools

Delete LBPool and all the entities contained by this LBPool


Delete the LBPool along with all the entities contained
by this LBPool.
DELETE /policy/api/v1/infra/lb-pools/<lb-pool-id>

Read LBPool


Read a LBPool.
GET /policy/api/v1/infra/lb-pools/<lb-pool-id>

Create or update a LBPool


If a LBPool with the lb-pool-id is not already present,
create a new LBPool. If it already exists, update the
LBPool. This is a full replace.
PATCH /policy/api/v1/infra/lb-pools/<lb-pool-id>

Create or update a LBPool


If a LBPool with the lb-pool-id is not already present,
create a new LBPool. If it already exists, update the
LBPool. This is a full replace.
PUT /policy/api/v1/infra/lb-pools/<lb-pool-id>

List LBServerSslProfiles


Paginated list of all LBServerSslProfiles.
GET /policy/api/v1/infra/lb-server-ssl-profiles

Delete LBServerSslProfile and all the entities contained by this LBServerSslProfile


Delete the LBServerSslProfile along with all the entities contained
by this LBServerSslProfile.
DELETE /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id>

Read LBServerSslProfile


Read a LBServerSslProfile.
GET /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id>

Create or update a LBServerSslProfile


If a LBServerSslProfile with the lb-server-ssl-profile-id is not already
present, create a new LBServerSslProfile. If it already exists, update the
LBServerSslProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id>

Create or update a LBServerSslProfile


If a LBServerSslProfile with the lb-server-ssl-profile-id is not already
present, create a new LBServerSslProfile. If it already exists, update the
LBServerSslProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id>

Read load balancer service usage summary


API is used to retrieve the load balancer usage summary for
all load balancer services.
If the parameter ?include_usages=true exists, the property service-usages
is included in the response. By default, service-usages is not included
in the response.
GET /policy/api/v1/infra/lb-service-usage-summary

List LBService


Paginated list of all LBService.
GET /policy/api/v1/infra/lb-services

Delete LBService and all the entities contained by this LBService


Delete the LBService along with all the entities contained by
this LBService.
DELETE /policy/api/v1/infra/lb-services/<lb-service-id>

Read LBService


Read an LBService.
GET /policy/api/v1/infra/lb-services/<lb-service-id>

Create or update a LBVirtualServer


If a LBService with the lb-service-id is not already
present, create a new LBService. If it already exists, update the
LBService. This is a full replace.
PATCH /policy/api/v1/infra/lb-services/<lb-service-id>

Create or update a LBService


If a LBService with the lb-service-id is not already
present, create a new LBService. If it already exists, update the
LBService. This is a full replace.
PUT /policy/api/v1/infra/lb-services/<lb-service-id>

Get LBService status information


Get LBService detailed status information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/detailed-status

Get LBPool status information


Get LBPool detailed status information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-pools/<lb-pool-id>/detailed-status

Get LBPool statistics information


Get LBPoolStatistics information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-pools/<lb-pool-id>/statistics

Get LBVirtualServer status information


Get LBVirtualServer detailed status information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-virtual-servers/<lb-virtual-server-id>/detailed-status

Get LBVirtualServer statistics information


Get LBVirtualServerStatistics information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-virtual-servers/<lb-virtual-server-id>/statistics

Get LBService usage information


Get LBServiceUsage information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/service-usage

Get LBService statistics information


Get LBServiceStatistics information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/statistics

Retrieve a list of supported SSL ciphers and protocols


Retrieve a list of supported SSL ciphers and protocols.
GET /policy/api/v1/infra/lb-ssl-ciphers-and-protocols

List LBVirtualServers


Paginated list of all LBVirtualServers.
GET /policy/api/v1/infra/lb-virtual-servers

Delete LBVirtualServer and all the entities contained by this LBVirtualServer


Delete the LBVirtualServer along with all the entities contained by
this LBVirtualServer.
DELETE /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

Read LBVirtualServer


Read a LBVirtualServer.
GET /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

Create or update a LBVirtualServer


If a LBVirtualServer with the lb-virtual-server-id is not already
present, create a new LBVirtualServer. If it already exists, update the
LBVirtualServer. This is a full replace.
PATCH /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

Create or update a LBVirtualServer


If a LBVirtualServer with the lb-virtual-server-id is not already
present, create a new LBVirtualServer. If it already exists, update the
LBVirtualServer. This is a full replace.
PUT /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

List Mac Discovery Profiles


API will list all Mac Discovery Profiles active in current discovery profile id.
GET /policy/api/v1/infra/mac-discovery-profiles
GET /policy/api/v1/global-infra/mac-discovery-profiles

Delete Mac Discovery Profile


API will delete Mac Discovery profile.
DELETE /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>

Get Mac Discovery Profile


API will get Mac Discovery profile.
GET /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>
GET /policy/api/v1/global-infra/mac-discovery-profiles/<mac-discovery-profile-id>

Create Mac Discovery Profile


API will create Mac Discovery profile.
PATCH /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>

Update Mac Discovery Profile


API will update Mac Discovery profile.
PUT /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>

List Metadata Proxy Configurations


List all L2 Metadata Proxy Configurations
GET /policy/api/v1/infra/metadata-proxies

Delete Metadata Proxy Config


API will delete Metadata Proxy Config with ID profile-id
DELETE /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Get Metadata Proxy Config


API will read Metadata Proxy Config with ID profile-id
GET /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Create or update Metadata Proxy Config


API will create or update Metadata Proxy Config with ID profile-id
PATCH /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Create or update Metadata Proxy Config


API will create or update Metadata Proxy Config with ID profile-id
PUT /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

List Pim Profile


List all pim profile.
GET /policy/api/v1/infra/pim-profiles

Delete Pim Profile


Delete Pim Profile.
DELETE /policy/api/v1/infra/pim-profiles/<pim-profile-id>

Read Pim Profile


Read Pim Profile.
GET /policy/api/v1/infra/pim-profiles/<pim-profile-id>

Update pim profile


Create a pim profile with the pim-profile-id is not already present,
otherwise update the pim profile.
PATCH /policy/api/v1/infra/pim-profiles/<pim-profile-id>

Update pim profile


Create or update pim profile.
PUT /policy/api/v1/infra/pim-profiles/<pim-profile-id>

List QoS Profiles


API will list all QoS profiles.
GET /policy/api/v1/infra/qos-profiles
GET /policy/api/v1/global-infra/qos-profiles

Delete QoS profile


API will delete QoS profile.
DELETE /policy/api/v1/infra/qos-profiles/<qos-profile-id>

Details of QoS profile


API will return details of QoS profile.
GET /policy/api/v1/infra/qos-profiles/<qos-profile-id>
GET /policy/api/v1/global-infra/qos-profiles/<qos-profile-id>

Patch QoS profile.


Create a new QoS profile if the QoS profile with
given id does not already exist. If the QoS profile with the
given id already exists, patch with the existing QoS profile.
PATCH /policy/api/v1/infra/qos-profiles/<qos-profile-id>

Create or Replace QoS profile.


Create or Replace QoS profile.
PUT /policy/api/v1/infra/qos-profiles/<qos-profile-id>

List segment security profiles


API will list all segment security profiles.
GET /policy/api/v1/infra/segment-security-profiles
GET /policy/api/v1/global-infra/segment-security-profiles

DELETE segment security profile


API will delete segment security profile with the given id.
DELETE /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

GET Segment security profile id


API will return details of the segment security profile with given id. If the
profile does not exist, it will return 404.
GET /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>
GET /policy/api/v1/global-infra/segment-security-profiles/<segment-security-profile-id>

PATCH segment security profile id


Create a new segment security profile if the segment security profile with given id does not
exist. Otherwise, PATCH the existing segment security profile
PATCH /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

PUT segment security profile id


Create or replace a segment security profile
PUT /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

List all segments under infra


Paginated list of all segments under infra.
GET /policy/api/v1/infra/segments
GET /policy/api/v1/global-infra/segments

List Infra Port Discovery Profile Binding Maps


API will list all Infra Port Discovery Profile Binding Maps in current port id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps

Delete Infra Port Discovery Profile Binding Profile


API will delete Infra Port Discovery Profile Binding Profile
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Get Infra Port Discovery Profile Binding Map


API will get Infra Port Discovery Profile Binding Map
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Create Infra Port Discovery Profile Binding Map


API will create Infra Port Discovery Profile Binding Map
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Update Infra Port Discovery Profile Binding Map


API will update Infra Port Discovery Profile Binding Map
PUT /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PUT /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

List Infra Port Monitoring Profile Binding Maps


API will list all Infra Port Monitoring Profile Binding Maps in current port id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps

Delete Infra Port Monitoring Profile Binding Profile


API will delete Infra Port Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Get Infra Port Monitoring Profile Binding Map


API will get Infra Port Monitoring Profile Binding Map.
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Create Infra Port Monitoring Profile Binding Map


API will create Infra Port Monitoring Profile Binding Map.
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Update Infra Port Monitoring Profile Binding Map


API will update Infra Port Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PUT /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

List Infra Segment Discovery Profile Binding Maps


API will list all Infra Segment Discovery Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps

Delete Segment Discovery Profile Binding Profile


API will delete Segment Discovery Profile Binding Profile
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Get Infra Segment Discovery Profile Binding Map


API will get Infra Segment Discovery Profile Binding Map
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Create Infra Segment Discovery Profile Binding Map


API will create Infra Segment Discovery Profile Binding Map
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Update Infra Segment Discovery Profile Binding Map


API will update Infra Segment Discovery Profile Binding Map
PUT /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

List Infra Segment Monitoring Profile Binding Maps


API will list all Infra Segment Monitoring Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps

Delete Infra Segment Monitoring Profile Binding Profile


API will delete Infra Segment Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Get Infra Segment Monitoring Profile Binding Map


API will get Infra Segment Monitoring Profile Binding Map.
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Create Infra Segment Monitoring Profile Binding Map


API will create infra segment monitoring profile binding map.
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Update Infra Segment Monitoring Profile Binding Map


API will update Infra Segment Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Delete infra segment


Delete infra segment
DELETE /policy/api/v1/infra/segments/<segment-id>

Force delete infra segment


Force delete bypasses validations during segment deletion. This may result in an inconsistent connectivity.
DELETE /policy/api/v1/infra/segments/<segment-id>?force=true

Read infra segment


Read infra segment
GET /policy/api/v1/infra/segments/<segment-id>
GET /policy/api/v1/global-infra/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, update the segment with specified attributes.
PATCH /policy/api/v1/infra/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, update the segment with specified attributes.

Force parameter is required when workload connectivity is indirectly impacted
with the current update.
PATCH /policy/api/v1/infra/segments/<segment-id>?force=true

Create or update a infra segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, replace the segment with this object.
PUT /policy/api/v1/infra/segments/<segment-id>

Create or update a infra segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, replace the segment with this object.

Force parameter is required when workload connectivity is indirectly impacted
with the current replacement.
PUT /policy/api/v1/infra/segments/<segment-id>?force=true

Get ARP table from segment interface (downlink)


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
interface (downlink) attaching segment to tier-0/tier-1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/segments/<segment-id>/arp-table

Get ARP table from segment interface (downlink) in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format for the
interface (downlink) attaching segment to tier-0/tier-1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/segments/<segment-id>/arp-table?format=csv

List all DHCP static bindings


Paginated list of all DHCP static binding instances
GET /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs
GET /policy/api/v1/global-infra/segments/<segment-id>/dhcp-static-binding-configs

Delete DHCP static binding


Delete DHCP static binding
DELETE /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding


Read DHCP static binding
GET /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with specified attributes.
PATCH /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with this object.
PUT /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding state


Read DHCP static binding state
GET /policy/api/v1/infra/segments/<segment-id>/dhcp-static-bindings/<binding-id>/state

List infra segment ports


List all the ports for an infra.
GET /policy/api/v1/infra/segments/<segment-id>/ports
GET /policy/api/v1/global-infra/segments/<segment-id>/ports

Delete an infra segment port


Delete an infra segment port by giving ID.
DELETE /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
DELETE /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Get infra segment port by ID


Get detail information on an infra segment port by giving ID.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Patch an infra segment port


Create an infra segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object fields which presents in the request body.
PATCH /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
PATCH /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Create or update an infra segment port


Create an infra segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object already exists.
PUT /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
PUT /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

List Port QoS Profile Binding Maps


API will list all Port QoS Profile Binding Maps in current port id.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps

Delete Port QoS Profile Binding Profile


API will delete Port QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Get Port QoS Profile Binding Map


API will get Port QoS Profile Binding Map.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Create Port QoS Profile Binding Map


API will create Port QoS Profile Binding Map.
PATCH /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Update Port QoS Profile Binding Map


API will update Port QoS Profile Binding Map.
PUT /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
PUT /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

List infra segment port security profile binding maps


API will list all port security profile binding maps.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps

Delete the infra segment port security profile binding map


API will delete the port security profile binding map.
DELETE /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Get infra segment port security profile binding map


API will return details of the port security profile binding map. If the
security profile binding map does not exist, it will return 404.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Patch infra segment port security profile binding map


Create a new port security profile binding map if the given security profile
binding map does not exist. Otherwise, patch the existing port security
profile binding map.
PATCH /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Create or replace the infra segment port security profile binding map


API will create or replace the port security profile binding map.
PUT /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PUT /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

List Segment QoS Profile Binding Maps


API will list all Segment QoS Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps

Delete Segment QoS Profile Binding Profile


API will delete Segment QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Get Segment QoS Profile Binding Map


API will get Segment QoS Profile Binding Map.
GET /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Create Segment QoS Profile Binding Map


API will create segment QoS profile binding map.
PATCH /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Update Segment QoS Profile Binding Map


API will update Segment QoS Profile Binding Map.
PUT /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

List infra segment security profile binding maps


API will list all segment security profile binding maps.
GET /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<segment-id>/segment-security-profile-binding-maps

Delete infra segment security profile binding map


API will delete segment security profile binding map.
DELETE /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Get infra segment security profile binding map


API will return details of the segment security profile binding map. If the
binding map does not exist, it will return 404.
GET /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Patch infra segment security profile binding map


Create a new segment security profile binding map if the given security
profile binding map does not exist. Otherwise, patch the existing segment
security profile binding map.
PATCH /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Create or replace infra segment security profile binding map


API will create or replace segment security profile binding map.
PUT /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Get infra segment port statistics information


Get infra segment port statistics information.
GET /policy/api/v1/infra/segments/<segments-id>/ports/<port-id>/statistics

Get infra segment state information


Get infra segment state information.
GET /policy/api/v1/infra/segments/<segments-id>/state

Get infra segment statistics information


Get infra segment statistics information.
GET /policy/api/v1/infra/segments/<segments-id>/statistics

List Service Segments


Paginated list of all Service Segments
GET /policy/api/v1/infra/segments/service-segments

Delete Service Segment


Delete Service Segment with given ID
DELETE /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Read Service Segment


Read a Service Segment with the given id
GET /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Create a service segment


A service segment with the service-segment-id is created.
Modification of service segment is not supported.
PATCH /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Create service segment


A service segment with the service-segment-id is created.
Modification of service segment is not supported.
PUT /policy/api/v1/infra/segments/service-segments/<service-segment-id>

List L2 Bridge Endpoint Profiles


List all L2 bridge profiles
GET /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles

Delete L2 Bridge Endpoint Profile


API will delete L2 bridge profile with ID profile-id
DELETE /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

Get L2 Bridge Endpoint Profile


Read L2 bridge profile with ID profile-id
GET /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

Create or update L2 Bridge Endpoint Profile


API will create or update L2 bridge profile with ID profile-id.
L2 Bridge profile is only allowed under an enforcement-point with path
/infra/sites/default/enforcement-points/default.
PATCH /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

Create or update L2 Bridge Endpoint Profile


API will create or update L2 bridge profile with ID profile-id.
L2 Bridge profile is only allowed under an enforcement-point with path
/infra/sites/default/enforcement-points/default.
PUT /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

List SpoofGuard profiles


API will list all SpoofGuard profiles.
GET /policy/api/v1/infra/spoofguard-profiles
GET /policy/api/v1/global-infra/spoofguard-profiles

Delete SpoofGuard profile


API will delete SpoofGuard profile with the given id.
DELETE /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>

Get SpoofGuard profile


API will return details of the SpoofGuard profile with given id. If the
profile does not exist, it will return 404.
GET /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>
GET /policy/api/v1/global-infra/spoofguard-profiles/<spoofguard-profile-id>

Patch SpoofGuard profile


Create a new SpoofGuard profile if the SpoofGuard profile with the given id
does not exist. Otherwise, patch with the existing SpoofGuard profile.
PATCH /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>

Create or replace SpoofGuard profile


API will create or replace SpoofGuard profile.
PUT /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>

List Tier-0s


Paginated list of all Tier-0s
GET /policy/api/v1/infra/tier-0s
GET /policy/api/v1/global-infra/tier-0s

Delete Tier-0


Delete Tier-0
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>

Read Tier-0


Read Tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>

Create or update a Tier-0


If a Tier-0 with the tier-0-id is not already present, create a new
Tier-0. If it already exists, update the Tier-0 for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>

Reprocess Tier0 gateway configuration and publish updates to NSX controller


Reprocess Tier0 gateway configuration and configuration of related entities like Tier0 interfaces
and static routes, etc. Any missing Updates are published to NSX controller.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>?action=reprocess

Create or update a Tier-0


If a Tier-0 with the tier-0-id is not already present, create a new
Tier-0. If it already exists, replace the Tier-0 instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>

List BGP community lists


Paginated list of all community lists under a tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/community-lists

Delete a BGP community list


Delete a BGP community list
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Read a BGP community list


Read a BGP community list
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Create or update a BGP community list


If a community list with the community-list-id is not already present,
create a new community list. If it already exists, update the community
list for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Create or update a BGP community list


If a community list with the community-list-id is not already present,
create a new community list. If it already exists, replace the community
list instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Delete DNS configuration for tier-0 instance


Delete DNS configuration for tier-0 instance
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Read the DNS Forwarder for the given tier-0 instance


Read the DNS Forwarder for the given tier-0 instance
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder

Update the DNS Forwarder


Update the DNS Forwarder
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Perform the specified DNS forwarder action


Perform the specified action for Tier0 DNS forwarder on specified enforcement point.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Update the DNS Forwarder


Update the DNS Forwarder
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Resolve a given address via the dns forwarder at Tier0


Query the nameserver for an ip-address or a FQDN of the given an address optionally using
an specified DNS server. If the address is a fqdn, nslookup will resolve ip-address with it.
If the address is an ip-address, do a reverse lookup and answer fqdn(s).
If enforcement point is specified, then DNS forwarder nslookup answer will get fetched from
specified enforcement point. Otherwise from all enforcement points.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder/nslookup
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder/nslookup

Get tier-0 DNS forwarder statistics


Get statistics of tier-0 DNS forwarder.
- no enforcement point path specified: Statistics will be evaluated on each enforcement
point.
- {enforcement_point_path}: Statistics are evaluated only on the given enforcement point.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder/statistics
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder/statistics

Get current status of tier-0 DNS forwarder


Get current status of tier-0 DNS forwarder.
- no enforcement point path specified: Status will be evaluated on each enforcement
point.
- {enforcement_point_path}: Status will be evaluated only on the given enforcement
point.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder/status
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder/status

Read Evpn Configuration


Read Evpn Configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/evpn

Create or Update evpn configuration


Create a evpn configuration if it is not already present,
otherwise update the evpn configuration.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/evpn

Create or Update evpn configuration


Create or update evpn configuration.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/evpn

Get forwarding table from tier-0


Get forwarding table from tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/forwarding-table

Get forwarding table from tier-0 in CSV format


Get forwarding table from tier-0 gateway in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/forwarding-table?format=csv

List Tier-0 locale-services


Paginated list of all Tier-0 locale-services
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services

Read BGP routing config


Read BGP routing config
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

Create or update BGP routing config


If an BGP routing config not present, create BGP routing config.
If it already exists, update the routing config.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

Create or update a BGP routing config


If BGP routing config is not already present, create BGP routing config.
If it already exists, replace the BGP routing config with this object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

List BGP neighbor configurations


Paginated list of all BGP neighbor configurations
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors

Delete BGP neighbor config


Delete BGP neighbor config
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Read BGP neighbor config


Read BGP neighbor config
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Create or update a BGP neighbor config


If BGP neighbor config with the neighbor-id is not already present, create a new
neighbor config. If it already exists, replace the BGP neighbor config with this object.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Create or update a BGP neighbor config


If BGP neighbor config with the neighbor-id is not already present, create a new
neighbor config. If it already exists, replace the BGP neighbor config with this object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Get BGP neighbor advertised routes


Returns routes advertised by BGP neighbor from all edge transport nodes on which
this neighbor is currently enabled.
The query parameter "source=cached" is not supported.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/advertised-routes

Get BGP neighbor advertised routes in CSV format


Returns routes advertised by BGP neighbor from all edge transport nodes on which
this neighbor is currently enabled in CSV format. Routes from all enforcement points are returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/advertised-routes?format=csv

Get routes learned by BGP neighbor in CSV format


Returns routes learned by BGP neighbor from all edge nodes on which
this neighbor is currently enabled. Routes from all enforcement points are returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/routes?format=csv

Get routes learned by BGP neighbor


Returns routes learned by BGP neighbor from all edge nodes on which
this neighbor is currently enabled.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/routes

Get BGP neighbor status for the Tier0


Returns the status of all the BGP neighbors for the given Tier0.
To get BGP neighbor status for a particular enforcement point,
parameter "enforcement_point_path=" needs to be specified.
If an enforcement_point is unspecified, then bgp neighbor status for all enforcement points is fetched.
To get BGP neighbors status for the logical router from particular edge node,
parameter "edge_path=" needs to be specified.
If an edge_path is unspecified, then bgp neighbor status for all edges is fetched.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/status

List Tier-0 Interfaces


Paginated list of all Tier-0 Interfaces
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces

Delete Tier-0 interface


Delete Tier-0 interface
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Read Tier-0 interface


Read Tier-0 interface
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Create or update a Tier-0 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, update the interface for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Create or update a Tier-0 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, replace the interface with this object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Get ARP table from tier-0 interface in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format
for the tier-0 interface, on a edge node if a query parameter
"edge_path=" is given. The edge_path
parameter is mandatory if the interface type is not EXTERNAL.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table?format=csv

Get ARP table from tier-0 interface


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
tier-0 interface, on a edge node if a query parameter
"edge_path=" is given. The edge_path
parameter is mandatory if the interface type is not EXTERNAL.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table

Get DAD status by interface


Get tier-0 interface DAD state information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/dad-state

Get tier-0 interface statistics information


Get tier-0 interface statistics information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics

Get tier-0 interface statistics summary information


Get tier-0 interface statistics summary information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics/summary

Get IPSec VPN service list result


Get paginated list of all IPSec VPN services
for given locale service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services

Delete IPSec VPN service


Delete IPSec VPN service for given locale
service under Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN service


Get IPSec VPN service for given locale
service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Create or patch IPSec VPN service


Create or patch IPSec VPN service for given locale
service under Tier-0.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Create or fully replace IPSec VPN service


Create or fully replace IPSec VPN service for given
locale service under Tier-0.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN local endpoint list result


Get paginated list of all IPSec VPN local endpoints
for a given locale service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints

Delete IPSec VPN local endpoint


Delete IPSec VPN local endpoint for a given locale
service under Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN local endpoint


Get IPSec VPN local endpoint for a given locale
service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or patch a custom IPSec VPN local endpoint


Create or patch a custom IPSec VPN local endpoint
for a given locale service under Tier-0.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or fully replace IPSec VPN local endpoint


Create or fully replace IPSec VPN local endpoint
for a given locale service under Tier-0.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN sessions list result


Get paginated list of all IPSec VPN sessions
for a given locale service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions

Delete IPSec VPN session


Delete IPSec VPN session for a given locale
service under Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN Session


Get IPSec VPN session with senstive data for
a given locale service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data

Get IPSec VPN Session


Get IPSec VPN session without sensitive data
for a given locale service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or patch an IPSec VPN session


Create or patch an IPSec VPN session for
a given locale service under Tier-0.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or fully replace IPSec VPN session


Create or fully replace IPSec VPN session for a given
locale service under Tier-0.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN session detailed status under Tier-0


- no enforcement point path specified: detailed status is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed status is fetched realtime from the enforcement point.
- source=cached: cached detailed status from enforcement point is returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get IPSec VPN configuration for the peer site


Download IPSec VPN configuration for the peer site. Peer config also
contains PSK; be careful when sharing or storing it.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config

Get IPSec VPN session statistics under Tier-0


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from enforcement point are returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Reset the statistics of the given VPN session


Resets the statistics of the given VPN session.
Since source of data is enforcement point, data is
reset there.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Get L2VPN service list result under Tier-0


Get paginated list of all L2VPN services under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services

Delete L2VPN service under Tier-0


Delete L2VPN service for given Tier-0 locale service.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Get L2VPN service under Tier-0


Get L2VPN service for given Tier-0 locale service.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Create or patch L2VPN service under Tier-0


Create or patch L2VPN service for given Tier-0 locale service.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Create or fully replace L2VPN service under Tier-0


Create or fully replace L2VPN service for given Tier-0 locale service. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Get L2VPN sessions list result under Tier-0


Get paginated list of all L2VPN sessions under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions

Delete L2VPN session under Tier-0


Delete L2VPN session under Tier-0. When L2VPN Service is in CLIENT Mode, the L2VPN Session is deleted along with its transpot tunnels and related resources.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN Session under Tier-0


Get L2VPN session under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-0


Create or patch an L2VPN session under Tier-0. API supported
only when L2VPN Service is in Server Mode.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-0 from Peer Codes


Create or patch an L2VPN session under Tier-0 from Peer Codes.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. IPSec VPN Service and Local Endpoint are created only
when required, i.e., an IPSec VPN Service does not already exist,
or an IPSec VPN Local Endpoint with same local address does not
already exist.
Updating the L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the different resources associated with it is
not allowed, except for IPSec VPN Service and Local Endpoint,
resources that are not system owned.
API supported only when L2VPN Service is in Client Mode.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code

Create or fully replace L2VPN session under Tier-0


Create or fully replace L2VPN session under Tier-0. API supported
only when L2VPN Service is in Server Mode.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN session detailed status under Tier-0


- no enforcement point path specified: detailed tatus is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed tatus is fetched realtime from the enforcement point.
- source=cached: cached detailed status is returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get Tier-0 L2VPN session configuration for the peer site


Get peer config for the Tier-0 L2VPN session to configure the remote
side of the tunnel.
- no enforcement point path specified: L2VPN Session Peer Codes
will be evaluated on each enforcement point.
- enforcement point paths specified: L2VPN Session Peer Codes
are evaluated only on the given enforcement points.
API supported only when L2VPN Service is in Server Mode.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/peer-config

Get L2Vpn session remote mac for logical switch


Returns L2Vpn session remote macs for a logical switch.
Data is fetched from enforcement point.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac

Get L2VPN session statistics under Tier-0


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from the enforcement point are returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/statistics

List Service Interfaces


Paginated list of all Service Interfaces
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces

Delete service interface


Delete service interface
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Read service interface


Read service interface
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Create or update a Tier-0 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, update the interface for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Create a service interface


If an interface with the interface-id is not already present, create a new
interface. Modification of service interface is not allowed.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

List Tier-0 Deployment maps


Paginated list of all Tier-0 Deployment Entries.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps

Delete Tier-0 Deployment Map


Delete Tier-0 Deployment Map
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Read a Tier-0 Deployment Map


Read a Tier-0 Deployment Map
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Patch a Tier-0 Deployment Map under Tier-0


If the passed Tier-0 Deployment Map does not already exist, create a new Tier-0 Deployment Map.
If it already exists, patch it.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Create a new Tier-0 Deployment Map under Tier-0


If the passed Tier-0 Deployment Map does not already exist, create a new Tier-0 Deployment Map.
If it already exists, replace it.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Delete Tier-0 locale-services


Delete Tier-0 locale-services
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

Read Tier-0 locale-services


Read Tier-0 locale-services
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

Create or update a tier-0 locale-services


If a Tier-0 locale-services with the locale-services-id is not already
present, create a new locale-services. If it already exists, update
Tier-0 locale-services with specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

Create or update a Tier-0 locale-services


If a Tier-0 locale-services with the locale-services-id is not already
present, create a new locale-services. If it already exists, replace the
Tier-0 locale-services instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

List evpn tunnel endpoint configuration


List all evpn tunnel endpoint configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints

Delete evpn tunnel endpoint configuration


Delete evpn tunnel endpoint configuration.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Read evpn tunnel endpoint configuration


Read evpn tunnel endpoint configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Create or Update evpn tunnel endpoint configuration


Create a evpn tunnel endpoint config if the tunnel-endpoint-id is not already present,
otherwise update the tunnel endpoint configuration.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Create or Update evpn tunnel endpoint configuration


Create or update evpn tunnel endpoint configuration.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Read Multicast Configuration


Read Multicast Configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast

Create or update multicast configuration


Create or update a Tier-0 multicast configuration defining the multicast replication range,
the IGMP or a PIM profile. It will update the configuration if there is already one in place.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast

Create or update multicast configuration


Create or update a Tier-0 multicast configuration defining the multicast replication range,
the IGMP or a PIM profile. It will update the configuration if there is already one in place.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast

Get Multicast Forwarding In Csv Format


Get Multicast Forwarding In CSV Format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/forwarding?format=csv

Get Multicast Forwarding


Get Multicast Forwarding.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/forwarding

Get IGMP Memberships


Get Igmp Memberships.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/igmp-memberships

Get IGMP Memberships in CSV format


Get Igmp Memberships in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/igmp-memberships?format=csv

Get PIM Rendezvous Point Mappings In CSV Format


Get PIM Rendezvous Point Mappings In CSV Format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/pim-rp-mappings?format=csv

Get PIM Rendezvous Point Mappings


Get PIM Rendezvous Point Mappings.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/pim-rp-mappings

Get Multicast Routes in Csv Format


Get Multicast Routes in CSV Format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/routes?format=csv

Get Multicast Routes


Get Multicast Routes.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/routes

List NAT Rules


List NAT Rules from Tier-0 denoted by Tier-0 ID, under NAT section denoted by <nat-id>. Under tier-0 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules

Delete NAT Rule


Delete NAT Rule from Tier-0 denoted by Tier-0 ID, under NAT section denoted by <nat-id>. Under tier-0 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule


Get NAT Rule from Tier-0 denoted by Tier-0 ID, under NAT section
denoted by <nat-id>.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Create or update a NAT Rule on tier-0


If a NAT Rule is not already present on Tier-0 denoted by Tier-0 ID,
under NAT section denoted by <nat-id>, create a new NAT Rule.
If it already exists, update the NAT Rule.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Update NAT Rule


Update NAT Rule on Tier-0 denoted by Tier-0 ID, under NAT section denoted by <nat-id>. Under tier-0 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule Statistics


Get NAT Rule Statistics from Tier-0 denoted by Tier-0 ID, under NAT section
denoted by <nat-id>.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics

List NAT Rules Statistics


List NAT Rules Statistics from Tier-0 denoted by Tier-0 ID.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/statistics
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/statistics

List prefix lists


Paginated list of all prefix lists
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/prefix-lists

Delete a prefix list


Delete a prefix list
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

Read a prefix list


Read a prefix list
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

Create or update a prefix list


If prefix list for prefix-list-id is not already present, create
a prefix list. If it already exists, update prefix list for prefix-list-id.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

Create or update a prefix list


If prefix list for prefix-list-id is not already present, create
a prefix list. If it already exists, replace the prefix list for
prefix-list-id.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

List route maps


Paginated list of all route maps under a tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/route-maps

Delete a route map


Delete a route map
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Read a route map


Read a route map
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Create or update a route map


If a route map with the route-map-id is not already present, create a new
route map. If it already exists, update the route map for specified
attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Create or update a route map


If a route map with the route-map-id is not already present,
create a new route map. If it already exists, replace the
route map instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Get routing table from tier-0


Get routing table from tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/routing-table

Get routing table from tier-0 in CSV format


Get routing table from tier-0 gateway in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/routing-table?format=csv

Get Tier0 state


Returns
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/state

List Tier-0 Static Routes


Paginated list of all Tier-0 Static Routes
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes

Delete Tier-0 static routes


Delete Tier-0 static routes
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>

Read Tier-0 static routes


Read Tier-0 static routes
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/<route-id>

Create or update a Tier-0 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, update static routes for route-id.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>

Create or update a Tier-0 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, replace the static routes for route-id.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>
PUT /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/<route-id>

List StaticRouteBfdPeers


Paginated list of all StaticRouteBfdPeers.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/bfd-peers

Delete this StaticRouteBfdPeer and all the entities contained by it.


Delete this StaticRouteBfdPeer and all the entities contained by it.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Read a StaticRouteBfdPeer


Read a StaticRouteBfdPeer with the bfd-peer-id.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Create or update a StaticRouteBfdPeer


If a StaticRouteBfdPeer with the bfd-peer-id is not already present,
create a new StaticRouteBfdPeer. If it already exists, update the
StaticRouteBfdPeer. This is a full replace.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Create or update a StaticRouteBfdPeer


If a StaticRouteBfdPeer with the bfd-peer-id is not already present,
create a new StaticRouteBfdPeer. If it already exists, update the
StaticRouteBfdPeer. This operation will fully replace the object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

List Tier-1 instances


Paginated list of all Tier-1 instances
GET /policy/api/v1/infra/tier-1s
GET /policy/api/v1/global-infra/tier-1s

Delete Tier-1 configuration


Delete Tier-1 configuration
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>

Read Tier-1 configuration


Read Tier-1 configuration
GET /policy/api/v1/infra/tier-1s/<tier-1-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>

Create or update Tier-1 configuration


If Tier-1 with the tier-1-id is not already present, create a new Tier-1 instance.
If it already exists, update the tier-1 instance with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>

Reprocess Tier1 gateway configuration and publish updates to NSX controller


Reprocess Tier1 gateway configuration and configuration of related entities like Tier1 interfaces
and static routes, etc. Any missing Updates are published to NSX controller.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>?action=reprocess

Create or update tier-1 configuration


If Tier-1 with the tier-1-id is not already present, create a new Tier-1 instance.
If it already exists, replace the Tier-1 instance with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>

Delete DNS configuration for tier-1 instance


Delete DNS configuration for tier-1 instance
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Read the DNS Forwarder for the given tier-1 instance


Read the DNS Forwarder for the given tier-1 instance
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder

Create or update the DNS Forwarder


Create or update the DNS Forwarder
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Perform the specified DNS forwarder action


Perform the specified action for Tier0 DNS forwarder on specified enforcement point.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Create or update the DNS Forwarder


Create or update the DNS Forwarder
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Resolve a given address via the dns forwarder at Tier1


Query the nameserver for an ip-address or a FQDN of the given an address optionally using
an specified DNS server. If the address is a fqdn, nslookup will resolve ip-address with it.
If the address is an ip-address, do a reverse lookup and answer fqdn(s).
If enforcement point is specified, then DNS forwarder nslookup answer will get fetched from
specified enforcement point. Otherwise from all enforcement points.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder/nslookup
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder/nslookup

Get tier-1 DNS forwarder statistics


Get statistics of tier-1 DNS forwarder.
- no enforcement point path specified: Statistics will be evaluated on each enforcement
point.
- {enforcement_point_path}: Statistics are evaluated only on the given enforcement point.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder/statistics

Get current status of tier-1 DNS forwarder


Get current status of tier-1 DNS forwarder.
- no enforcement point path specified: Status will be evaluated on each enforcement
point.
- {enforcement_point_path}: Status will be evaluated only on the given enforcement
point.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder/status
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder/status

Get forwarding table from tier-1 in CSV format


Get forwarding table from tier-1 gateway in CSV format.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/forwarding-table?format=csv

Get forwarding table from tier-1


Get forwarding table from tier-1
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/forwarding-table

List Tier-1 locale-services


Paginated list of all Tier-1 locale-services
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services

Get ARP table from tier-1 interface


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
tier-1 interface, on a edge node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table

Get ARP table from tier-1 interface in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format
for the tier-1 interface, on a edge node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table?format=csv

Get DAD status by interface


Get tier-1 interface DAD state information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/dad-state

Get tier-1 interface statistics information


Get tier-1 interface statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics

Get tier-1 interface statistics summary information


Get tier-1 interface statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics/summary

Get IPSec VPN service list result


Get paginated list of all IPSec VPN services
for a given locale service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services

Delete IPSec VPN service


Delete IPSec VPN service for a given locale service under Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN service


Get IPSec VPN service for a given locale
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Create or patch IPSec VPN service


Create or patch IPSec VPN service for a given locale
service under Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Create or fully replace IPSec VPN service


Create or fully replace IPSec VPN service
for a given locale service under Tier-1.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN local endpoint list result


Get paginated list of all IPSec VPN local endpoints
for a given locale service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints

Delete IPSec VPN local endpoint


Delete IPSec VPN local endpoint for a given locale
service under Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN local endpoint


Get IPSec VPN local endpoint for a given locale
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or patch a custom IPSec VPN local endpoint


Create or patch a custom IPSec VPN local endpoint for a given locale service under Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or fully replace IPSec VPN local endpoint


Create or fully replace IPSec VPN local endpoint
for a given locale service under Tier-1.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN sessions list result


Get paginated list of all IPSec VPN sessions for a given locale
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions

Delete IPSec VPN session


Delete IPSec VPN session for a given locale service under Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN Session


Get IPSec VPN session with senstive data for a given locale
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data

Get IPSec VPN Session


Get IPSec VPN session without sensitive data for a given locale
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or patch an IPSec VPN session


Create or patch an IPSec VPN session for a given locale
service under Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or fully replace IPSec VPN session


Create or fully replace IPSec VPN session for a given locale
service under Tier-1.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN session detailed status under Tier-1


- no enforcement point path specified: detailed status is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed status is fetched realtime from the enforcement point.
- source=cached: cached detailed status from enforcement point is returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get IPSec VPN configuration for the peer site


Download IPSec VPN configuration for the peer site. Peer config also
contains PSK; be careful when sharing or storing it.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config

Get IPSec VPN session statistics under Tier-1


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from enforcement point are returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Reset the statistics of the given VPN session


Resets the statistics of the given VPN session.
Since source of data is enforcement point, data is
reset there.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Get L2VPN service list result under Tier-1


Get paginated list of all L2VPN services under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services

Delete L2VPN service under Tier-1


Delete L2VPN service for given Tier-1 locale service.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Get L2VPN service under Tier-1


Get L2VPN service for given Tier-1 locale service.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Create or patch L2VPN service under Tier-1


Create or patch L2VPN service for given Tier-1 locale service.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Create or fully replace L2VPN service under Tier-1


Create or fully replace L2VPN service for given Tier-1 locale service. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>

Get L2VPN sessions list result under Tier-1


Get paginated list of all L2VPN sessions under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions

Delete L2VPN session under Tier-1


Delete L2VPN session under Tier-1. When L2VPN Service is in CLIENT Mode, the L2VPN Session is deleted along with its transpot tunnels and related resources.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN Session under Tier-1


Get L2VPN session under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-1


Create or patch an L2VPN session under Tier-1. API supported
only when L2VPN Service is in Server Mode.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-1 from Peer Codes


Create or patch an L2VPN session under Tier-1 from Peer Codes.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. IPSec VPN Service and Local Endpoint are created only
when required, i.e., an IPSec VPN Service does not already exist,
or an IPSec VPN Local Endpoint with same local address does not
already exist.
Updating the L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the different resources associated with it is
not allowed, except for IPSec VPN Service and Local Endpoint,
resources that are not system owned.
API supported only when L2VPN Service is in Client Mode.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code

Create or fully replace L2VPN session under Tier-1


Create or fully replace L2VPN session under Tier-1. API supported
only when L2VPN Service is in Server Mode.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN session detailed status under Tier-1


- no enforcement point path specified: detailed tatus is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed tatus is fetched realtime from the enforcement point.
- source=cached: cached detailed status is returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get Tier-1 L2VPN session configuration for the peer site


Get peer config for the Tier-1 L2VPN session to configure the remote
side of the tunnel.
- no enforcement point path specified: L2VPN Session Peer Codes
will be evaluated on each enforcement point.
- enforcement point paths specified: L2VPN Session Peer Codes
are evaluated only on the given enforcement points.
API supported only when L2VPN Service is in Server Mode.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/peer-config

Get L2Vpn session remote mac for logical switch


Returns L2Vpn session remote macs for a logical switch.
Data is fetched from enforcement point.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac

Get L2VPN session statistics under Tier-1


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from the enforcement point are returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/statistics

Delete Tier-1 locale-services


Delete Tier-1 locale-services
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

Read Tier-1 locale-services


Read Tier-1 locale-services
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

Create or update a Tier-1 locale-services


If a Tier-1 locale services with the locale-services-id is not already
present, create a new locale services. If it already exists, update
Tier-1 locale services with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

Create or update a Tier-1 locale-services


If a Tier-1 locale services with the locale-services-id is not already
present, create a new locale-services. If it already exists, replace the
Tier-1 locale services instance with the new object.

Modifying edge cluster re-allocates NSX service routers of TIER1 to a different edge
cluster. You can also place edge nodes manually and provide maximum two indices
for HA mode ACTIVE_STANDBY. To re-allocating edge cluster is a disruptive operation
and all existing statistics of Tier1 gateway will be removed.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

List Tier-1 interfaces


Paginated list of all Tier-1 interfaces
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces

Delete Tier-1 interface


Delete Tier-1 interface
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Read Tier-1 interface


Read Tier-1 interface
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Create or update a Tier-1 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, update the interface for specified
attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Create or update a tier-1 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, replace the interface with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

List NAT Rules


List NAT Rules from Tier-1 denoted by Tier-1 ID, under NAT section denoted by <nat-id>. Under tier-1 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules

Delete NAT Rule


Delete NAT Rule from Tier-1 denoted by Tier-1 ID, under NAT section denoted by <nat-id>. Under tier-1 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule


Get NAT Rule from Tier-1 denoted by Tier-1 ID, under NAT section
denoted by <nat-id>.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Create or update a Nat Rule


If a NAT Rule is not already present on Tier-1 denoted by Tier-1 ID,
under NAT section denoted by <nat-id>, create a new NAT Rule.
If it already exists, update the NAT Rule.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Update NAT Rule


Update NAT Rule on Tier-1 denoted by Tier-1 ID, under NAT section denoted by <nat-id>. Under tier-1 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule Statistics


Get NAT Rule Statistics from Tier-1 denoted by Tier-1 ID, under NAT section
denoted by <nat-id>.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics

List NAT Rules Statistics


List NAT Rules Statistics from Tier-1 denoted by Tier-1 ID.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/statistics

List all segments under tier-1 instance


Paginated list of all segments under Tier-1 instance
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments

Delete segment


Delete segment
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Force delete segment


Force delete bypasses validations during segment deletion. This may result in an inconsistent connectivity.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>?force=true

Read segment


Read segment
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, update the segment with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, replace the segment with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Get ARP table from segment interface (downlink) in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format for the
interface (downlink) attaching segment to tier1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table?format=csv

Get ARP table from segment interface (downlink)


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
interface (downlink) attaching segment to tier-1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table

List all DHCP static bindings


Paginated list of all DHCP static binding instances
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs

Delete DHCP static binding


Delete DHCP static binding
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding


Read DHCP static binding
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding state


Read DHCP static binding state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-bindings/<binding-id>/state

List Tier-1 segment ports


List all the ports for a Tier-1 segment.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports

Delete a Tier-1 segment port


Delete a Tier-1 segment port by giving ID.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Get Tier-1 segment port by ID


Get detail information on a Tier-1 segment port by giving ID.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Patch a Tier-1 segment port


Create a Tier-1 segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object fields which presents in the request body.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Create or update a Tier-1 segment port


Create a Tier-1 segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object already exists.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

List Port Discovery Profile Binding Maps


API will list all Port Discovery Profile Binding Maps in current port id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps

Delete Port Discovery Profile Binding Profile


API will delete Port Discovery Profile Binding Profile
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Get Port Discovery Profile Binding Map


API will get Port Discovery Profile Binding Map
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Create Port Discovery Profile Binding Map


API will create Port Discovery Profile Binding Map
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Update Port Discovery Profile Binding Map


API will update Port Discovery Profile Binding Map
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

List Port Monitoring Profile Binding Maps


API will list all Port Monitoring Profile Binding Maps in current port id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps

Delete Port Monitoring Profile Binding Profile


API will delete Port Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Get Port Monitoring Profile Binding Map


API will get Port Monitoring Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Create Port Monitoring Profile Binding Map


API will create Port Monitoring Profile Binding Map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Update Port Monitoring Profile Binding Map


API will update Port Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

List Port QoS Profile Binding Maps


API will list all Port QoS Profile Binding Maps in current port id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps

Delete Port QoS Profile Binding Profile


API will delete Port QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Get Port QoS Profile Binding Map


API will get Port QoS Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Create Port QoS Profile Binding Map


API will create Port QoS Profile Binding Map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Update Port QoS Profile Binding Map


API will update Port QoS Profile Binding Map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

List port security profile binding maps


API will list all port security profile binding maps.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps

Delete the port security profile binding map


API will delete the port security profile binding map.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Get port security profile binding map


API will return details of the port security profile binding map. If the
security profile binding map does not exist, it will return 404.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Patch port security profile binding map


Create a new port security profile binding map if the given security profile
binding map does not exist. Otherwise, patch the existing port security
profile binding map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Create or replace the port security profile binding map


API will create or replace the port security profile binding map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

List Segment Discovery Profile Binding Maps


API will list all Segment Discovery Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps

Delete Segment Discovery Profile Binding Profile


API will delete Segment Discovery Profile Binding Profile
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Get Segment Discovery Profile Binding Map


API will get Segment Discovery Profile Binding Map
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Create Segment Discovery Profile Binding Map


API will create Segment Discovery Profile Binding Map
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Update Segment Discovery Profile Binding Map


API will update Segment Discovery Profile Binding Map
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

List Segment Monitoring Profile Binding Maps


API will list all Segment Monitoring Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps

Delete Segment Monitoring Profile Binding Profile


API will delete Segment Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Get Segment Monitoring Profile Binding Map


API will get Segment Monitoring Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Create Segment Monitoring Profile Binding Map


API will create segment monitoring profile binding map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Update Segment Monitoring Profile Binding Map


API will update Segment Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

List Segment QoS Profile Binding Maps


API will list all Segment QoS Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps

Delete Segment QoS Profile Binding Profile


API will delete Segment QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Get Segment QoS Profile Binding Map


API will get Segment QoS Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Create Segment QoS Profile Binding Map


API will create segment QoS profile binding map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Update Segment QoS Profile Binding Map


API will update Segment QoS Profile Binding Map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

List segment security profile binding maps


API will list all segment security profile binding maps.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps

Delete segment security profile binding map


API will delete segment security profile binding map.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Get segment security profile binding map


API will return details of the segment security profile binding map. If the
binding map does not exist, it will return 404.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Patch segment security profile binding map


Create a new segment security profile binding map if the given security
profile binding map does not exist. Otherwise, patch the existing segment
security profile binding map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Create or replace segment security profile binding map


API will create or replace segment security profile binding map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Delete static ARP config


Delete static ARP config
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Read static ARP config


Read static ARP config
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Create or update a static ARP config


Create static ARP config with Tier-1 and segment IDs provided if it doesn't exist,
update with provided config if it's already created.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Create or update a static ARP config


Create static ARP config with Tier-1 and segment IDs provided if it doesn't exist,
update with provided config if it's already created.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Get tier-1 segment port statistics information


Get tier-1 segment port statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/ports/<port-id>/statistics

Get segment state information


Get tier1 segment state information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/state

Get segment statistics information


Get tier1 segment statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/statistics

Get Tier1 state


Returns
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/state

List Tier-1 Static Routes


Paginated list of all Tier-1 Static Routes
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/static-routes

Delete Tier-1 static routes


Delete Tier-1 static routes
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Read Tier-1 static routes


Read Tier-1 static routes
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Create or update a Tier-1 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, update static routes for route-id.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Create or update a Tier-1 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, replace the static routes for route-id.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

List Vni Pool Configuration


List all Vni Pool configuration.
GET /policy/api/v1/infra/vni-pools

Delete Vni Pool Configuration


Delete Vni Pool Configuration.
DELETE /policy/api/v1/infra/vni-pools/<vni-pool-id>

Read Vni Pool Configuration


Read Vni Pool Configuration.
GET /policy/api/v1/infra/vni-pools/<vni-pool-id>

Create or Update Vni Pool Configuration


Create a Vni Pool config if it is not already present,
otherwise update the Vni Pool configuration.
PATCH /policy/api/v1/infra/vni-pools/<vni-pool-id>

Create or Update Vni Pool Configuration


Create or update VniPool configuration.
PUT /policy/api/v1/infra/vni-pools/<vni-pool-id>