Policy > Networking

Associated URIs:

API Description API Path

List ALBAnalyticsProfile for infra


Paginated list of all ALBAnalyticsProfile for infra.
GET /policy/api/v1/infra/alb-analytics-profiles

Delete ALBAnalyticsProfile and all the entities contained by this ALBAnalyticsProfile


Delete the ALBAnalyticsProfile along with all the entities contained
by this ALBAnalyticsProfile.
DELETE /policy/api/v1/infra/alb-analytics-profiles/<alb-analyticsprofile-id>

Read ALBAnalyticsProfile


Read a ALBAnalyticsProfile.
GET /policy/api/v1/infra/alb-analytics-profiles/<alb-analyticsprofile-id>

Create or update a ALBanalyticsprofile


If a ALBanalyticsprofile with the alb-analyticsprofile-id is not already present,
create a new ALBanalyticsprofile. If it already exists, update the
ALBanalyticsprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-analytics-profiles/<alb-analyticsprofile-id>

Create or update a ALBAnalyticsProfile


If a ALBAnalyticsProfile with the alb-AnalyticsProfile-id is not
already present, create a new ALBAnalyticsProfile. If it already exists,
update the ALBAnalyticsProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-analytics-profiles/<alb-analyticsprofile-id>

List ALBApplicationPersistenceProfile for infra


Paginated list of all ALBApplicationPersistenceProfile for infra.
GET /policy/api/v1/infra/alb-application-persistence-profiles

Delete ALBApplicationPersistenceProfile and all the entities contained by this ALBApplicationPersistenceProfile


Delete the ALBApplicationPersistenceProfile along with all the entities contained
by this ALBApplicationPersistenceProfile.
DELETE /policy/api/v1/infra/alb-application-persistence-profiles/<alb-applicationpersistenceprofile-id>

Read ALBApplicationPersistenceProfile


Read a ALBApplicationPersistenceProfile.
GET /policy/api/v1/infra/alb-application-persistence-profiles/<alb-applicationpersistenceprofile-id>

Create or update a ALBapplicationpersistenceprofile


If a ALBapplicationpersistenceprofile with the alb-applicationpersistenceprofile-id is not already present,
create a new ALBapplicationpersistenceprofile. If it already exists, update the
ALBapplicationpersistenceprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-application-persistence-profiles/<alb-applicationpersistenceprofile-id>

Create or update a ALBApplicationPersistenceProfile


If a ALBApplicationPersistenceProfile with the alb-ApplicationPersistenceProfile-id is not
already present, create a new ALBApplicationPersistenceProfile. If it already exists,
update the ALBApplicationPersistenceProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-application-persistence-profiles/<alb-applicationpersistenceprofile-id>

List ALBApplicationProfile for infra


Paginated list of all ALBApplicationProfile for infra.
GET /policy/api/v1/infra/alb-application-profiles

Delete ALBApplicationProfile and all the entities contained by this ALBApplicationProfile


Delete the ALBApplicationProfile along with all the entities contained
by this ALBApplicationProfile.
DELETE /policy/api/v1/infra/alb-application-profiles/<alb-applicationprofile-id>

Read ALBApplicationProfile


Read a ALBApplicationProfile.
GET /policy/api/v1/infra/alb-application-profiles/<alb-applicationprofile-id>

Create or update a ALBapplicationprofile


If a ALBapplicationprofile with the alb-applicationprofile-id is not already present,
create a new ALBapplicationprofile. If it already exists, update the
ALBapplicationprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-application-profiles/<alb-applicationprofile-id>

Create or update a ALBApplicationProfile


If a ALBApplicationProfile with the alb-ApplicationProfile-id is not
already present, create a new ALBApplicationProfile. If it already exists,
update the ALBApplicationProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-application-profiles/<alb-applicationprofile-id>

List ALBAuthProfile for infra


Paginated list of all ALBAuthProfile for infra.
GET /policy/api/v1/infra/alb-auth-profiles

Delete ALBAuthProfile and all the entities contained by this ALBAuthProfile


Delete the ALBAuthProfile along with all the entities contained
by this ALBAuthProfile.
DELETE /policy/api/v1/infra/alb-auth-profiles/<alb-authprofile-id>

Read ALBAuthProfile


Read a ALBAuthProfile.
GET /policy/api/v1/infra/alb-auth-profiles/<alb-authprofile-id>

Create or update a ALBauthprofile


If a ALBauthprofile with the alb-authprofile-id is not already present,
create a new ALBauthprofile. If it already exists, update the
ALBauthprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-auth-profiles/<alb-authprofile-id>

Create or update a ALBAuthProfile


If a ALBAuthProfile with the alb-AuthProfile-id is not
already present, create a new ALBAuthProfile. If it already exists,
update the ALBAuthProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-auth-profiles/<alb-authprofile-id>

Alb Auth Token API calls to Avi Controller.


Passthorugh API calls to Avi controller using the Auth of policy API
request send to this API will be passthrough to Avi controller and
Avi controller response will be embedded for this API.
PUT /policy/api/v1/infra/alb-auth-token

List ALBAutoScaleLaunchConfig for infra


Paginated list of all ALBAutoScaleLaunchConfig for infra.
GET /policy/api/v1/infra/alb-auto-scale-launch-configs

Delete ALBAutoScaleLaunchConfig and all the entities contained by this ALBAutoScaleLaunchConfig


Delete the ALBAutoScaleLaunchConfig along with all the entities contained
by this ALBAutoScaleLaunchConfig.
DELETE /policy/api/v1/infra/alb-auto-scale-launch-configs/<alb-autoscalelaunchconfig-id>

Read ALBAutoScaleLaunchConfig


Read a ALBAutoScaleLaunchConfig.
GET /policy/api/v1/infra/alb-auto-scale-launch-configs/<alb-autoscalelaunchconfig-id>

Create or update a ALBautoscalelaunchconfig


If a ALBautoscalelaunchconfig with the alb-autoscalelaunchconfig-id is not already present,
create a new ALBautoscalelaunchconfig. If it already exists, update the
ALBautoscalelaunchconfig. This is a full replace.
PATCH /policy/api/v1/infra/alb-auto-scale-launch-configs/<alb-autoscalelaunchconfig-id>

Create or update a ALBAutoScaleLaunchConfig


If a ALBAutoScaleLaunchConfig with the alb-AutoScaleLaunchConfig-id is not
already present, create a new ALBAutoScaleLaunchConfig. If it already exists,
update the ALBAutoScaleLaunchConfig. This is a full replace.
PUT /policy/api/v1/infra/alb-auto-scale-launch-configs/<alb-autoscalelaunchconfig-id>

Read an ALBControllerSupportedVersion


Read an ALBControllerSupportVersion.
GET /policy/api/v1/infra/alb-controller-version

List ALBDnsPolicy for infra


Paginated list of all ALBDnsPolicy for infra.
GET /policy/api/v1/infra/alb-dns-policies

Delete ALBDnsPolicy and all the entities contained by this ALBDnsPolicy


Delete the ALBDnsPolicy along with all the entities contained
by this ALBDnsPolicy.
DELETE /policy/api/v1/infra/alb-dns-policies/<alb-dnspolicy-id>

Read ALBDnsPolicy


Read a ALBDnsPolicy.
GET /policy/api/v1/infra/alb-dns-policies/<alb-dnspolicy-id>

Create or update a ALBdnspolicy


If a ALBdnspolicy with the alb-dnspolicy-id is not already present,
create a new ALBdnspolicy. If it already exists, update the
ALBdnspolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-dns-policies/<alb-dnspolicy-id>

Create or update a ALBDnsPolicy


If a ALBDnsPolicy with the alb-DnsPolicy-id is not
already present, create a new ALBDnsPolicy. If it already exists,
update the ALBDnsPolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-dns-policies/<alb-dnspolicy-id>

List ALBErrorPageBody for infra


Paginated list of all ALBErrorPageBody for infra.
GET /policy/api/v1/infra/alb-error-page-bodies

Delete ALBErrorPageBody and all the entities contained by this ALBErrorPageBody


Delete the ALBErrorPageBody along with all the entities contained
by this ALBErrorPageBody.
DELETE /policy/api/v1/infra/alb-error-page-bodies/<alb-errorpagebody-id>

Read ALBErrorPageBody


Read a ALBErrorPageBody.
GET /policy/api/v1/infra/alb-error-page-bodies/<alb-errorpagebody-id>

Create or update a ALBerrorpagebody


If a ALBerrorpagebody with the alb-errorpagebody-id is not already present,
create a new ALBerrorpagebody. If it already exists, update the
ALBerrorpagebody. This is a full replace.
PATCH /policy/api/v1/infra/alb-error-page-bodies/<alb-errorpagebody-id>

Create or update a ALBErrorPageBody


If a ALBErrorPageBody with the alb-ErrorPageBody-id is not
already present, create a new ALBErrorPageBody. If it already exists,
update the ALBErrorPageBody. This is a full replace.
PUT /policy/api/v1/infra/alb-error-page-bodies/<alb-errorpagebody-id>

List ALBErrorPageProfile for infra


Paginated list of all ALBErrorPageProfile for infra.
GET /policy/api/v1/infra/alb-error-page-profiles

Delete ALBErrorPageProfile and all the entities contained by this ALBErrorPageProfile


Delete the ALBErrorPageProfile along with all the entities contained
by this ALBErrorPageProfile.
DELETE /policy/api/v1/infra/alb-error-page-profiles/<alb-errorpageprofile-id>

Read ALBErrorPageProfile


Read a ALBErrorPageProfile.
GET /policy/api/v1/infra/alb-error-page-profiles/<alb-errorpageprofile-id>

Create or update a ALBerrorpageprofile


If a ALBerrorpageprofile with the alb-errorpageprofile-id is not already present,
create a new ALBerrorpageprofile. If it already exists, update the
ALBerrorpageprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-error-page-profiles/<alb-errorpageprofile-id>

Create or update a ALBErrorPageProfile


If a ALBErrorPageProfile with the alb-ErrorPageProfile-id is not
already present, create a new ALBErrorPageProfile. If it already exists,
update the ALBErrorPageProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-error-page-profiles/<alb-errorpageprofile-id>

List ALBHardwareSecurityModuleGroup for infra


Paginated list of all ALBHardwareSecurityModuleGroup for infra.
GET /policy/api/v1/infra/alb-hardware-security-module-groups

Delete ALBHardwareSecurityModuleGroup and all the entities contained by this ALBHardwareSecurityModuleGroup


Delete the ALBHardwareSecurityModuleGroup along with all the entities contained
by this ALBHardwareSecurityModuleGroup.
DELETE /policy/api/v1/infra/alb-hardware-security-module-groups/<alb-hardwaresecuritymodulegroup-id>

Read ALBHardwareSecurityModuleGroup


Read a ALBHardwareSecurityModuleGroup.
GET /policy/api/v1/infra/alb-hardware-security-module-groups/<alb-hardwaresecuritymodulegroup-id>

Create or update a ALBhardwaresecuritymodulegroup


If a ALBhardwaresecuritymodulegroup with the alb-hardwaresecuritymodulegroup-id is not already present,
create a new ALBhardwaresecuritymodulegroup. If it already exists, update the
ALBhardwaresecuritymodulegroup. This is a full replace.
PATCH /policy/api/v1/infra/alb-hardware-security-module-groups/<alb-hardwaresecuritymodulegroup-id>

Create or update a ALBHardwareSecurityModuleGroup


If a ALBHardwareSecurityModuleGroup with the alb-HardwareSecurityModuleGroup-id is not
already present, create a new ALBHardwareSecurityModuleGroup. If it already exists,
update the ALBHardwareSecurityModuleGroup. This is a full replace.
PUT /policy/api/v1/infra/alb-hardware-security-module-groups/<alb-hardwaresecuritymodulegroup-id>

List ALBHealthMonitor for infra


Paginated list of all ALBHealthMonitor for infra.
GET /policy/api/v1/infra/alb-health-monitors

Delete ALBHealthMonitor and all the entities contained by this ALBHealthMonitor


Delete the ALBHealthMonitor along with all the entities contained
by this ALBHealthMonitor.
DELETE /policy/api/v1/infra/alb-health-monitors/<alb-healthmonitor-id>

Read ALBHealthMonitor


Read a ALBHealthMonitor.
GET /policy/api/v1/infra/alb-health-monitors/<alb-healthmonitor-id>

Create or update a ALBhealthmonitor


If a ALBhealthmonitor with the alb-healthmonitor-id is not already present,
create a new ALBhealthmonitor. If it already exists, update the
ALBhealthmonitor. This is a full replace.
PATCH /policy/api/v1/infra/alb-health-monitors/<alb-healthmonitor-id>

Create or update a ALBHealthMonitor


If a ALBHealthMonitor with the alb-HealthMonitor-id is not
already present, create a new ALBHealthMonitor. If it already exists,
update the ALBHealthMonitor. This is a full replace.
PUT /policy/api/v1/infra/alb-health-monitors/<alb-healthmonitor-id>

List ALBHTTPPolicySet for infra


Paginated list of all ALBHTTPPolicySet for infra.
GET /policy/api/v1/infra/alb-http-policy-sets

Delete ALBHTTPPolicySet and all the entities contained by this ALBHTTPPolicySet


Delete the ALBHTTPPolicySet along with all the entities contained
by this ALBHTTPPolicySet.
DELETE /policy/api/v1/infra/alb-http-policy-sets/<alb-httppolicyset-id>

Read ALBHTTPPolicySet


Read a ALBHTTPPolicySet.
GET /policy/api/v1/infra/alb-http-policy-sets/<alb-httppolicyset-id>

Create or update a ALBhttppolicyset


If a ALBhttppolicyset with the alb-httppolicyset-id is not already present,
create a new ALBhttppolicyset. If it already exists, update the
ALBhttppolicyset. This is a full replace.
PATCH /policy/api/v1/infra/alb-http-policy-sets/<alb-httppolicyset-id>

Create or update a ALBHTTPPolicySet


If a ALBHTTPPolicySet with the alb-HTTPPolicySet-id is not
already present, create a new ALBHTTPPolicySet. If it already exists,
update the ALBHTTPPolicySet. This is a full replace.
PUT /policy/api/v1/infra/alb-http-policy-sets/<alb-httppolicyset-id>

List ALBIpAddrGroup for infra


Paginated list of all ALBIpAddrGroup for infra.
GET /policy/api/v1/infra/alb-ip-addr-groups

Delete ALBIpAddrGroup and all the entities contained by this ALBIpAddrGroup


Delete the ALBIpAddrGroup along with all the entities contained
by this ALBIpAddrGroup.
DELETE /policy/api/v1/infra/alb-ip-addr-groups/<alb-ipaddrgroup-id>

Read ALBIpAddrGroup


Read a ALBIpAddrGroup.
GET /policy/api/v1/infra/alb-ip-addr-groups/<alb-ipaddrgroup-id>

Create or update a ALBipaddrgroup


If a ALBipaddrgroup with the alb-ipaddrgroup-id is not already present,
create a new ALBipaddrgroup. If it already exists, update the
ALBipaddrgroup. This is a full replace.
PATCH /policy/api/v1/infra/alb-ip-addr-groups/<alb-ipaddrgroup-id>

Create or update a ALBIpAddrGroup


If a ALBIpAddrGroup with the alb-IpAddrGroup-id is not
already present, create a new ALBIpAddrGroup. If it already exists,
update the ALBIpAddrGroup. This is a full replace.
PUT /policy/api/v1/infra/alb-ip-addr-groups/<alb-ipaddrgroup-id>

List ALBL4PolicySet for infra


Paginated list of all ALBL4PolicySet for infra.
GET /policy/api/v1/infra/alb-l4-policy-sets

Delete ALBL4PolicySet and all the entities contained by this ALBL4PolicySet


Delete the ALBL4PolicySet along with all the entities contained
by this ALBL4PolicySet.
DELETE /policy/api/v1/infra/alb-l4-policy-sets/<alb-l4policyset-id>

Read ALBL4PolicySet


Read a ALBL4PolicySet.
GET /policy/api/v1/infra/alb-l4-policy-sets/<alb-l4policyset-id>

Create or update a ALBl4policyset


If a ALBl4policyset with the alb-l4policyset-id is not already present,
create a new ALBl4policyset. If it already exists, update the
ALBl4policyset. This is a full replace.
PATCH /policy/api/v1/infra/alb-l4-policy-sets/<alb-l4policyset-id>

Create or update a ALBL4PolicySet


If a ALBL4PolicySet with the alb-L4PolicySet-id is not
already present, create a new ALBL4PolicySet. If it already exists,
update the ALBL4PolicySet. This is a full replace.
PUT /policy/api/v1/infra/alb-l4-policy-sets/<alb-l4policyset-id>

List ALBNetworkProfile for infra


Paginated list of all ALBNetworkProfile for infra.
GET /policy/api/v1/infra/alb-network-profiles

Delete ALBNetworkProfile and all the entities contained by this ALBNetworkProfile


Delete the ALBNetworkProfile along with all the entities contained
by this ALBNetworkProfile.
DELETE /policy/api/v1/infra/alb-network-profiles/<alb-networkprofile-id>

Read ALBNetworkProfile


Read a ALBNetworkProfile.
GET /policy/api/v1/infra/alb-network-profiles/<alb-networkprofile-id>

Create or update a ALBnetworkprofile


If a ALBnetworkprofile with the alb-networkprofile-id is not already present,
create a new ALBnetworkprofile. If it already exists, update the
ALBnetworkprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-network-profiles/<alb-networkprofile-id>

Create or update a ALBNetworkProfile


If a ALBNetworkProfile with the alb-NetworkProfile-id is not
already present, create a new ALBNetworkProfile. If it already exists,
update the ALBNetworkProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-network-profiles/<alb-networkprofile-id>

List ALBNetworkSecurityPolicy for infra


Paginated list of all ALBNetworkSecurityPolicy for infra.
GET /policy/api/v1/infra/alb-network-security-policies

Delete ALBNetworkSecurityPolicy and all the entities contained by this ALBNetworkSecurityPolicy


Delete the ALBNetworkSecurityPolicy along with all the entities contained
by this ALBNetworkSecurityPolicy.
DELETE /policy/api/v1/infra/alb-network-security-policies/<alb-networksecuritypolicy-id>

Read ALBNetworkSecurityPolicy


Read a ALBNetworkSecurityPolicy.
GET /policy/api/v1/infra/alb-network-security-policies/<alb-networksecuritypolicy-id>

Create or update a ALBnetworksecuritypolicy


If a ALBnetworksecuritypolicy with the alb-networksecuritypolicy-id is not already present,
create a new ALBnetworksecuritypolicy. If it already exists, update the
ALBnetworksecuritypolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-network-security-policies/<alb-networksecuritypolicy-id>

Create or update a ALBNetworkSecurityPolicy


If a ALBNetworkSecurityPolicy with the alb-NetworkSecurityPolicy-id is not
already present, create a new ALBNetworkSecurityPolicy. If it already exists,
update the ALBNetworkSecurityPolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-network-security-policies/<alb-networksecuritypolicy-id>

This is Post Controller Deployment Workflow. It will create role if not exist Create Service User Set System Configuration Create Enforcement Point Save Infra-Admin Creds to DB.


Set the post deployment cluster configuration for Advanced Load Balancer controller cluster.
PUT /policy/api/v1/infra/alb-onboarding-workflow

Delete EnforcementPoint and the Infra Admin credentials contained by this workflow


Delete the EnforcementPoint along with Infra Admin credentials.
DELETE /policy/api/v1/infra/alb-onboarding-workflow/<managed-by>

List ALBPKIProfile for infra


Paginated list of all ALBPKIProfile for infra.
GET /policy/api/v1/infra/alb-pki-profiles

Delete ALBPKIProfile and all the entities contained by this ALBPKIProfile


Delete the ALBPKIProfile along with all the entities contained
by this ALBPKIProfile.
DELETE /policy/api/v1/infra/alb-pki-profiles/<alb-pkiprofile-id>

Read ALBPKIProfile


Read a ALBPKIProfile.
GET /policy/api/v1/infra/alb-pki-profiles/<alb-pkiprofile-id>

Create or update a ALBpkiprofile


If a ALBpkiprofile with the alb-pkiprofile-id is not already present,
create a new ALBpkiprofile. If it already exists, update the
ALBpkiprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-pki-profiles/<alb-pkiprofile-id>

Create or update a ALBPKIProfile


If a ALBPKIProfile with the alb-PKIProfile-id is not
already present, create a new ALBPKIProfile. If it already exists,
update the ALBPKIProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-pki-profiles/<alb-pkiprofile-id>

List ALBPoolGroupDeploymentPolicy for infra


Paginated list of all ALBPoolGroupDeploymentPolicy for infra.
GET /policy/api/v1/infra/alb-pool-group-deployment-policies

Delete ALBPoolGroupDeploymentPolicy and all the entities contained by this ALBPoolGroupDeploymentPolicy


Delete the ALBPoolGroupDeploymentPolicy along with all the entities contained
by this ALBPoolGroupDeploymentPolicy.
DELETE /policy/api/v1/infra/alb-pool-group-deployment-policies/<alb-poolgroupdeploymentpolicy-id>

Read ALBPoolGroupDeploymentPolicy


Read a ALBPoolGroupDeploymentPolicy.
GET /policy/api/v1/infra/alb-pool-group-deployment-policies/<alb-poolgroupdeploymentpolicy-id>

Create or update a ALBpoolgroupdeploymentpolicy


If a ALBpoolgroupdeploymentpolicy with the alb-poolgroupdeploymentpolicy-id is not already present,
create a new ALBpoolgroupdeploymentpolicy. If it already exists, update the
ALBpoolgroupdeploymentpolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-pool-group-deployment-policies/<alb-poolgroupdeploymentpolicy-id>

Create or update a ALBPoolGroupDeploymentPolicy


If a ALBPoolGroupDeploymentPolicy with the alb-PoolGroupDeploymentPolicy-id is not
already present, create a new ALBPoolGroupDeploymentPolicy. If it already exists,
update the ALBPoolGroupDeploymentPolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-pool-group-deployment-policies/<alb-poolgroupdeploymentpolicy-id>

List ALBPoolGroup for infra


Paginated list of all ALBPoolGroup for infra.
GET /policy/api/v1/infra/alb-pool-groups

Delete ALBPoolGroup and all the entities contained by this ALBPoolGroup


Delete the ALBPoolGroup along with all the entities contained
by this ALBPoolGroup.
DELETE /policy/api/v1/infra/alb-pool-groups/<alb-poolgroup-id>

Read ALBPoolGroup


Read a ALBPoolGroup.
GET /policy/api/v1/infra/alb-pool-groups/<alb-poolgroup-id>

Create or update a ALBpoolgroup


If a ALBpoolgroup with the alb-poolgroup-id is not already present,
create a new ALBpoolgroup. If it already exists, update the
ALBpoolgroup. This is a full replace.
PATCH /policy/api/v1/infra/alb-pool-groups/<alb-poolgroup-id>

Create or update a ALBPoolGroup


If a ALBPoolGroup with the alb-PoolGroup-id is not
already present, create a new ALBPoolGroup. If it already exists,
update the ALBPoolGroup. This is a full replace.
PUT /policy/api/v1/infra/alb-pool-groups/<alb-poolgroup-id>

List ALBPool for infra


Paginated list of all ALBPool for infra.
GET /policy/api/v1/infra/alb-pools

Delete ALBPool and all the entities contained by this ALBPool


Delete the ALBPool along with all the entities contained
by this ALBPool.
DELETE /policy/api/v1/infra/alb-pools/<alb-pool-id>

Read ALBPool


Read a ALBPool.
GET /policy/api/v1/infra/alb-pools/<alb-pool-id>

Create or update a ALBpool


If a ALBpool with the alb-pool-id is not already present,
create a new ALBpool. If it already exists, update the
ALBpool. This is a full replace.
PATCH /policy/api/v1/infra/alb-pools/<alb-pool-id>

Create or update a ALBPool


If a ALBPool with the alb-Pool-id is not
already present, create a new ALBPool. If it already exists,
update the ALBPool. This is a full replace.
PUT /policy/api/v1/infra/alb-pools/<alb-pool-id>

List ALBPriorityLabels for infra


Paginated list of all ALBPriorityLabels for infra.
GET /policy/api/v1/infra/alb-priority-labels

Delete ALBPriorityLabels and all the entities contained by this ALBPriorityLabels


Delete the ALBPriorityLabels along with all the entities contained
by this ALBPriorityLabels.
DELETE /policy/api/v1/infra/alb-priority-labels/<alb-prioritylabels-id>

Read ALBPriorityLabels


Read a ALBPriorityLabels.
GET /policy/api/v1/infra/alb-priority-labels/<alb-prioritylabels-id>

Create or update a ALBprioritylabels


If a ALBprioritylabels with the alb-prioritylabels-id is not already present,
create a new ALBprioritylabels. If it already exists, update the
ALBprioritylabels. This is a full replace.
PATCH /policy/api/v1/infra/alb-priority-labels/<alb-prioritylabels-id>

Create or update a ALBPriorityLabels


If a ALBPriorityLabels with the alb-PriorityLabels-id is not
already present, create a new ALBPriorityLabels. If it already exists,
update the ALBPriorityLabels. This is a full replace.
PUT /policy/api/v1/infra/alb-priority-labels/<alb-prioritylabels-id>

List ALBProtocolParser for infra


Paginated list of all ALBProtocolParser for infra.
GET /policy/api/v1/infra/alb-protocol-parsers

Delete ALBProtocolParser and all the entities contained by this ALBProtocolParser


Delete the ALBProtocolParser along with all the entities contained
by this ALBProtocolParser.
DELETE /policy/api/v1/infra/alb-protocol-parsers/<alb-protocolparser-id>

Read ALBProtocolParser


Read a ALBProtocolParser.
GET /policy/api/v1/infra/alb-protocol-parsers/<alb-protocolparser-id>

Create or update a ALBprotocolparser


If a ALBprotocolparser with the alb-protocolparser-id is not already present,
create a new ALBprotocolparser. If it already exists, update the
ALBprotocolparser. This is a full replace.
PATCH /policy/api/v1/infra/alb-protocol-parsers/<alb-protocolparser-id>

Create or update a ALBProtocolParser


If a ALBProtocolParser with the alb-ProtocolParser-id is not
already present, create a new ALBProtocolParser. If it already exists,
update the ALBProtocolParser. This is a full replace.
PUT /policy/api/v1/infra/alb-protocol-parsers/<alb-protocolparser-id>

List ALBSecurityPolicy for infra


Paginated list of all ALBSecurityPolicy for infra.
GET /policy/api/v1/infra/alb-security-policies

Delete ALBSecurityPolicy and all the entities contained by this ALBSecurityPolicy


Delete the ALBSecurityPolicy along with all the entities contained
by this ALBSecurityPolicy.
DELETE /policy/api/v1/infra/alb-security-policies/<alb-securitypolicy-id>

Read ALBSecurityPolicy


Read a ALBSecurityPolicy.
GET /policy/api/v1/infra/alb-security-policies/<alb-securitypolicy-id>

Create or update a ALBsecuritypolicy


If a ALBsecuritypolicy with the alb-securitypolicy-id is not already present,
create a new ALBsecuritypolicy. If it already exists, update the
ALBsecuritypolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-security-policies/<alb-securitypolicy-id>

Create or update a ALBSecurityPolicy


If a ALBSecurityPolicy with the alb-SecurityPolicy-id is not
already present, create a new ALBSecurityPolicy. If it already exists,
update the ALBSecurityPolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-security-policies/<alb-securitypolicy-id>

List ALBServerAutoScalePolicy for infra


Paginated list of all ALBServerAutoScalePolicy for infra.
GET /policy/api/v1/infra/alb-server-auto-scale-policies

Delete ALBServerAutoScalePolicy and all the entities contained by this ALBServerAutoScalePolicy


Delete the ALBServerAutoScalePolicy along with all the entities contained
by this ALBServerAutoScalePolicy.
DELETE /policy/api/v1/infra/alb-server-auto-scale-policies/<alb-serverautoscalepolicy-id>

Read ALBServerAutoScalePolicy


Read a ALBServerAutoScalePolicy.
GET /policy/api/v1/infra/alb-server-auto-scale-policies/<alb-serverautoscalepolicy-id>

Create or update a ALBserverautoscalepolicy


If a ALBserverautoscalepolicy with the alb-serverautoscalepolicy-id is not already present,
create a new ALBserverautoscalepolicy. If it already exists, update the
ALBserverautoscalepolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-server-auto-scale-policies/<alb-serverautoscalepolicy-id>

Create or update a ALBServerAutoScalePolicy


If a ALBServerAutoScalePolicy with the alb-ServerAutoScalePolicy-id is not
already present, create a new ALBServerAutoScalePolicy. If it already exists,
update the ALBServerAutoScalePolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-server-auto-scale-policies/<alb-serverautoscalepolicy-id>

List ALBSSLKeyAndCertificate for infra


Paginated list of all ALBSSLKeyAndCertificate for infra.
GET /policy/api/v1/infra/alb-ssl-key-and-certificates

Delete ALBSSLKeyAndCertificate and all the entities contained by this ALBSSLKeyAndCertificate


Delete the ALBSSLKeyAndCertificate along with all the entities contained
by this ALBSSLKeyAndCertificate.
DELETE /policy/api/v1/infra/alb-ssl-key-and-certificates/<alb-sslkeyandcertificate-id>

Read ALBSSLKeyAndCertificate


Read a ALBSSLKeyAndCertificate.
GET /policy/api/v1/infra/alb-ssl-key-and-certificates/<alb-sslkeyandcertificate-id>

Create or update a ALBsslkeyandcertificate


If a ALBsslkeyandcertificate with the alb-sslkeyandcertificate-id is not already present,
create a new ALBsslkeyandcertificate. If it already exists, update the
ALBsslkeyandcertificate. This is a full replace.
PATCH /policy/api/v1/infra/alb-ssl-key-and-certificates/<alb-sslkeyandcertificate-id>

Create or update a ALBSSLKeyAndCertificate


If a ALBSSLKeyAndCertificate with the alb-SSLKeyAndCertificate-id is not
already present, create a new ALBSSLKeyAndCertificate. If it already exists,
update the ALBSSLKeyAndCertificate. This is a full replace.
PUT /policy/api/v1/infra/alb-ssl-key-and-certificates/<alb-sslkeyandcertificate-id>

List ALBSSLProfile for infra


Paginated list of all ALBSSLProfile for infra.
GET /policy/api/v1/infra/alb-ssl-profiles

Delete ALBSSLProfile and all the entities contained by this ALBSSLProfile


Delete the ALBSSLProfile along with all the entities contained
by this ALBSSLProfile.
DELETE /policy/api/v1/infra/alb-ssl-profiles/<alb-sslprofile-id>

Read ALBSSLProfile


Read a ALBSSLProfile.
GET /policy/api/v1/infra/alb-ssl-profiles/<alb-sslprofile-id>

Create or update a ALBsslprofile


If a ALBsslprofile with the alb-sslprofile-id is not already present,
create a new ALBsslprofile. If it already exists, update the
ALBsslprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-ssl-profiles/<alb-sslprofile-id>

Create or update a ALBSSLProfile


If a ALBSSLProfile with the alb-SSLProfile-id is not
already present, create a new ALBSSLProfile. If it already exists,
update the ALBSSLProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-ssl-profiles/<alb-sslprofile-id>

List ALBSSOPolicy for infra


Paginated list of all ALBSSOPolicy for infra.
GET /policy/api/v1/infra/alb-sso-policies

Delete ALBSSOPolicy and all the entities contained by this ALBSSOPolicy


Delete the ALBSSOPolicy along with all the entities contained
by this ALBSSOPolicy.
DELETE /policy/api/v1/infra/alb-sso-policies/<alb-ssopolicy-id>

Read ALBSSOPolicy


Read a ALBSSOPolicy.
GET /policy/api/v1/infra/alb-sso-policies/<alb-ssopolicy-id>

Create or update a ALBssopolicy


If a ALBssopolicy with the alb-ssopolicy-id is not already present,
create a new ALBssopolicy. If it already exists, update the
ALBssopolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-sso-policies/<alb-ssopolicy-id>

Create or update a ALBSSOPolicy


If a ALBSSOPolicy with the alb-SSOPolicy-id is not
already present, create a new ALBSSOPolicy. If it already exists,
update the ALBSSOPolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-sso-policies/<alb-ssopolicy-id>

List ALBStringGroup for infra


Paginated list of all ALBStringGroup for infra.
GET /policy/api/v1/infra/alb-string-groups

Delete ALBStringGroup and all the entities contained by this ALBStringGroup


Delete the ALBStringGroup along with all the entities contained
by this ALBStringGroup.
DELETE /policy/api/v1/infra/alb-string-groups/<alb-stringgroup-id>

Read ALBStringGroup


Read a ALBStringGroup.
GET /policy/api/v1/infra/alb-string-groups/<alb-stringgroup-id>

Create or update a ALBstringgroup


If a ALBstringgroup with the alb-stringgroup-id is not already present,
create a new ALBstringgroup. If it already exists, update the
ALBstringgroup. This is a full replace.
PATCH /policy/api/v1/infra/alb-string-groups/<alb-stringgroup-id>

Create or update a ALBStringGroup


If a ALBStringGroup with the alb-StringGroup-id is not
already present, create a new ALBStringGroup. If it already exists,
update the ALBStringGroup. This is a full replace.
PUT /policy/api/v1/infra/alb-string-groups/<alb-stringgroup-id>

List ALBTrafficCloneProfile for infra


Paginated list of all ALBTrafficCloneProfile for infra.
GET /policy/api/v1/infra/alb-traffic-clone-profiles

Delete ALBTrafficCloneProfile and all the entities contained by this ALBTrafficCloneProfile


Delete the ALBTrafficCloneProfile along with all the entities contained
by this ALBTrafficCloneProfile.
DELETE /policy/api/v1/infra/alb-traffic-clone-profiles/<alb-trafficcloneprofile-id>

Read ALBTrafficCloneProfile


Read a ALBTrafficCloneProfile.
GET /policy/api/v1/infra/alb-traffic-clone-profiles/<alb-trafficcloneprofile-id>

Create or update a ALBtrafficcloneprofile


If a ALBtrafficcloneprofile with the alb-trafficcloneprofile-id is not already present,
create a new ALBtrafficcloneprofile. If it already exists, update the
ALBtrafficcloneprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-traffic-clone-profiles/<alb-trafficcloneprofile-id>

Create or update a ALBTrafficCloneProfile


If a ALBTrafficCloneProfile with the alb-TrafficCloneProfile-id is not
already present, create a new ALBTrafficCloneProfile. If it already exists,
update the ALBTrafficCloneProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-traffic-clone-profiles/<alb-trafficcloneprofile-id>

List ALBVirtualService for infra


Paginated list of all ALBVirtualService for infra.
GET /policy/api/v1/infra/alb-virtual-services

Delete ALBVirtualService and all the entities contained by this ALBVirtualService


Delete the ALBVirtualService along with all the entities contained
by this ALBVirtualService.
DELETE /policy/api/v1/infra/alb-virtual-services/<alb-virtualservice-id>

Read ALBVirtualService


Read a ALBVirtualService.
GET /policy/api/v1/infra/alb-virtual-services/<alb-virtualservice-id>

Create or update a ALBvirtualservice


If a ALBvirtualservice with the alb-virtualservice-id is not already present,
create a new ALBvirtualservice. If it already exists, update the
ALBvirtualservice. This is a full replace.
PATCH /policy/api/v1/infra/alb-virtual-services/<alb-virtualservice-id>

Create or update a ALBVirtualService


If a ALBVirtualService with the alb-VirtualService-id is not
already present, create a new ALBVirtualService. If it already exists,
update the ALBVirtualService. This is a full replace.
PUT /policy/api/v1/infra/alb-virtual-services/<alb-virtualservice-id>

List ALBVSDataScriptSet for infra


Paginated list of all ALBVSDataScriptSet for infra.
GET /policy/api/v1/infra/alb-vs-data-script-sets

Delete ALBVSDataScriptSet and all the entities contained by this ALBVSDataScriptSet


Delete the ALBVSDataScriptSet along with all the entities contained
by this ALBVSDataScriptSet.
DELETE /policy/api/v1/infra/alb-vs-data-script-sets/<alb-vsdatascriptset-id>

Read ALBVSDataScriptSet


Read a ALBVSDataScriptSet.
GET /policy/api/v1/infra/alb-vs-data-script-sets/<alb-vsdatascriptset-id>

Create or update a ALBvsdatascriptset


If a ALBvsdatascriptset with the alb-vsdatascriptset-id is not already present,
create a new ALBvsdatascriptset. If it already exists, update the
ALBvsdatascriptset. This is a full replace.
PATCH /policy/api/v1/infra/alb-vs-data-script-sets/<alb-vsdatascriptset-id>

Create or update a ALBVSDataScriptSet


If a ALBVSDataScriptSet with the alb-VSDataScriptSet-id is not
already present, create a new ALBVSDataScriptSet. If it already exists,
update the ALBVSDataScriptSet. This is a full replace.
PUT /policy/api/v1/infra/alb-vs-data-script-sets/<alb-vsdatascriptset-id>

List ALBVsVip for infra


Paginated list of all ALBVsVip for infra.
GET /policy/api/v1/infra/alb-vs-vips

Delete ALBVsVip and all the entities contained by this ALBVsVip


Delete the ALBVsVip along with all the entities contained
by this ALBVsVip.
DELETE /policy/api/v1/infra/alb-vs-vips/<alb-vsvip-id>

Read ALBVsVip


Read a ALBVsVip.
GET /policy/api/v1/infra/alb-vs-vips/<alb-vsvip-id>

Create or update a ALBvsvip


If a ALBvsvip with the alb-vsvip-id is not already present,
create a new ALBvsvip. If it already exists, update the
ALBvsvip. This is a full replace.
PATCH /policy/api/v1/infra/alb-vs-vips/<alb-vsvip-id>

Create or update a ALBVsVip


If a ALBVsVip with the alb-VsVip-id is not
already present, create a new ALBVsVip. If it already exists,
update the ALBVsVip. This is a full replace.
PUT /policy/api/v1/infra/alb-vs-vips/<alb-vsvip-id>

List ALBWafCRS for infra


Paginated list of all ALBWafCRS for infra.
GET /policy/api/v1/infra/alb-waf-crs

Delete ALBWafCRS and all the entities contained by this ALBWafCRS


Delete the ALBWafCRS along with all the entities contained
by this ALBWafCRS.
DELETE /policy/api/v1/infra/alb-waf-crs/<alb-wafcrs-id>

Read ALBWafCRS


Read a ALBWafCRS.
GET /policy/api/v1/infra/alb-waf-crs/<alb-wafcrs-id>

Create or update a ALBwafcrs


If a ALBwafcrs with the alb-wafcrs-id is not already present,
create a new ALBwafcrs. If it already exists, update the
ALBwafcrs. This is a full replace.
PATCH /policy/api/v1/infra/alb-waf-crs/<alb-wafcrs-id>

Create or update a ALBWafCRS


If a ALBWafCRS with the alb-WafCRS-id is not
already present, create a new ALBWafCRS. If it already exists,
update the ALBWafCRS. This is a full replace.
PUT /policy/api/v1/infra/alb-waf-crs/<alb-wafcrs-id>

List ALBWafPolicy for infra


Paginated list of all ALBWafPolicy for infra.
GET /policy/api/v1/infra/alb-waf-policies

Delete ALBWafPolicy and all the entities contained by this ALBWafPolicy


Delete the ALBWafPolicy along with all the entities contained
by this ALBWafPolicy.
DELETE /policy/api/v1/infra/alb-waf-policies/<alb-wafpolicy-id>

Read ALBWafPolicy


Read a ALBWafPolicy.
GET /policy/api/v1/infra/alb-waf-policies/<alb-wafpolicy-id>

Create or update a ALBwafpolicy


If a ALBwafpolicy with the alb-wafpolicy-id is not already present,
create a new ALBwafpolicy. If it already exists, update the
ALBwafpolicy. This is a full replace.
PATCH /policy/api/v1/infra/alb-waf-policies/<alb-wafpolicy-id>

Create or update a ALBWafPolicy


If a ALBWafPolicy with the alb-WafPolicy-id is not
already present, create a new ALBWafPolicy. If it already exists,
update the ALBWafPolicy. This is a full replace.
PUT /policy/api/v1/infra/alb-waf-policies/<alb-wafpolicy-id>

List ALBWafPolicyPSMGroup for infra


Paginated list of all ALBWafPolicyPSMGroup for infra.
GET /policy/api/v1/infra/alb-waf-policy-psm-groups

Delete ALBWafPolicyPSMGroup and all the entities contained by this ALBWafPolicyPSMGroup


Delete the ALBWafPolicyPSMGroup along with all the entities contained
by this ALBWafPolicyPSMGroup.
DELETE /policy/api/v1/infra/alb-waf-policy-psm-groups/<alb-wafpolicypsmgroup-id>

Read ALBWafPolicyPSMGroup


Read a ALBWafPolicyPSMGroup.
GET /policy/api/v1/infra/alb-waf-policy-psm-groups/<alb-wafpolicypsmgroup-id>

Create or update a ALBwafpolicypsmgroup


If a ALBwafpolicypsmgroup with the alb-wafpolicypsmgroup-id is not already present,
create a new ALBwafpolicypsmgroup. If it already exists, update the
ALBwafpolicypsmgroup. This is a full replace.
PATCH /policy/api/v1/infra/alb-waf-policy-psm-groups/<alb-wafpolicypsmgroup-id>

Create or update a ALBWafPolicyPSMGroup


If a ALBWafPolicyPSMGroup with the alb-WafPolicyPSMGroup-id is not
already present, create a new ALBWafPolicyPSMGroup. If it already exists,
update the ALBWafPolicyPSMGroup. This is a full replace.
PUT /policy/api/v1/infra/alb-waf-policy-psm-groups/<alb-wafpolicypsmgroup-id>

List ALBWafProfile for infra


Paginated list of all ALBWafProfile for infra.
GET /policy/api/v1/infra/alb-waf-profiles

Delete ALBWafProfile and all the entities contained by this ALBWafProfile


Delete the ALBWafProfile along with all the entities contained
by this ALBWafProfile.
DELETE /policy/api/v1/infra/alb-waf-profiles/<alb-wafprofile-id>

Read ALBWafProfile


Read a ALBWafProfile.
GET /policy/api/v1/infra/alb-waf-profiles/<alb-wafprofile-id>

Create or update a ALBwafprofile


If a ALBwafprofile with the alb-wafprofile-id is not already present,
create a new ALBwafprofile. If it already exists, update the
ALBwafprofile. This is a full replace.
PATCH /policy/api/v1/infra/alb-waf-profiles/<alb-wafprofile-id>

Create or update a ALBWafProfile


If a ALBWafProfile with the alb-WafProfile-id is not
already present, create a new ALBWafProfile. If it already exists,
update the ALBWafProfile. This is a full replace.
PUT /policy/api/v1/infra/alb-waf-profiles/<alb-wafprofile-id>

List ALBWebhook for infra


Paginated list of all ALBWebhook for infra.
GET /policy/api/v1/infra/alb-webhooks

Delete ALBWebhook and all the entities contained by this ALBWebhook


Delete the ALBWebhook along with all the entities contained
by this ALBWebhook.
DELETE /policy/api/v1/infra/alb-webhooks/<alb-webhook-id>

Read ALBWebhook


Read a ALBWebhook.
GET /policy/api/v1/infra/alb-webhooks/<alb-webhook-id>

Create or update a ALBwebhook


If a ALBwebhook with the alb-webhook-id is not already present,
create a new ALBwebhook. If it already exists, update the
ALBwebhook. This is a full replace.
PATCH /policy/api/v1/infra/alb-webhooks/<alb-webhook-id>

Create or update a ALBWebhook


If a ALBWebhook with the alb-Webhook-id is not
already present, create a new ALBWebhook. If it already exists,
update the ALBWebhook. This is a full replace.
PUT /policy/api/v1/infra/alb-webhooks/<alb-webhook-id>

List BfdProfiles


Paginated list of all BfdProfiles.
GET /policy/api/v1/infra/bfd-profiles
GET /policy/api/v1/global-infra/bfd-profiles

Delete BFD Config and all the entities contained by this BfdProfile


Delete BFD Config and all the entities contained by this BfdProfile.
DELETE /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>
DELETE /policy/api/v1/global-infra/bfd-profiles/<bfd-profile-id>

Read a BfdProfile


Read a BfdProfile.
GET /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>
GET /policy/api/v1/global-infra/bfd-profiles/<bfd-profile-id>

Create or update a BfdProfile


If a BfdProfile with the bfd-profile-id is not already present,
create a new BfdProfile. If it already exists, update the
BfdProfile. This operation will fully replace the object.
PATCH /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>
PATCH /policy/api/v1/global-infra/bfd-profiles/<bfd-profile-id>

Create or update a BfdProfile


If a BfdProfile with the bfd-profile-id is not already present,
create a new BfdProfile. If it already exists, update the
BfdProfile. This operation will fully replace the object.
PUT /policy/api/v1/infra/bfd-profiles/<bfd-profile-id>
PUT /policy/api/v1/global-infra/bfd-profiles/<bfd-profile-id>

Read the connectivity global configuration


Read the connectivity global configuration
GET /policy/api/v1/infra/connectivity-global-config

Update the connectivity global configuration


Update the connectivity global configuration
PATCH /policy/api/v1/infra/connectivity-global-config

Update the connectivity global configuration


Update the connectivity global configuration
PUT /policy/api/v1/infra/connectivity-global-config

List DHCP relay config instances


Paginated list of all DHCP relay config instances
GET /policy/api/v1/global-infra/dhcp-relay-configs
GET /policy/api/v1/infra/dhcp-relay-configs

Delete DHCP relay configuration


Delete DHCP relay configuration
DELETE /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>

Read DHCP relay configuration


Read DHCP relay configuration
GET /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>
GET /policy/api/v1/global-infra/dhcp-relay-configs/<dhcp-relay-config-id>

Create or update DHCP relay configuration


If DHCP relay config with the dhcp-relay-config-id is not already present, create a new DHCP relay config instance.
If it already exists, update the DHCP relay config instance with specified attributes.
PATCH /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>

Create or update DHCP relay configuration


If DHCP relay config with the dhcp-relay-config-id is not already present,
create a new DHCP relay config instance. If it already exists, replace
the DHCP relay config instance with this object.
PUT /policy/api/v1/infra/dhcp-relay-configs/<dhcp-relay-config-id>

List DHCP server config instances


Paginated list of all DHCP server config instances
GET /policy/api/v1/infra/dhcp-server-configs
GET /policy/api/v1/global-infra/dhcp-server-configs

Read DHCP server leases


Read DHCP server leases
GET /policy/api/v1/global-infra/dhcp-server-configs/<config-id>/leases
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/leases

Read DHCP server state


Read DHCP server state
GET /policy/api/v1/global-infra/dhcp-server-configs/<config-id>/state
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/state

Read DHCP server statistics


Read DHCP server statistics
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/stats
GET /policy/api/v1/global-infra/dhcp-server-configs/<config-id>/stats

Read DHCP server status


Read DHCP server status
GET /policy/api/v1/infra/dhcp-server-configs/<config-id>/status
GET /policy/api/v1/global-infra/dhcp-server-configs/<config-id>/status

Delete DHCP server configuration


Delete DHCP server configuration
DELETE /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>

Read DHCP server configuration


Read DHCP server configuration
GET /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>
GET /policy/api/v1/global-infra/dhcp-server-configs/<dhcp-server-config-id>

Create or update DHCP server configuration


If DHCP server config with the dhcp-server-config-id is not already
present, create a new DHCP server config instance. If it already exists,
update the DHCP server config instance with specified attributes.

Realized entities of this API can be found using the path of Tier-0, Tier1,
or Segment where this config is applied on.

Modification of edge_cluster_path in DhcpServerConfig will lose all
existing DHCP leases.

If both the preferred_edge_paths in the DhcpServerConfig are changed
in a same PATCH API, e.g. change from [a,b] to [x,y], the current DHCP
server leases will be lost, which could cause network connectivity
issues. It is recommended to change only one member index in an update
call, e.g. from [a, b] to [a,y].

Clearing preferred_edge_paths will not reassign edge nodes from the
edge cluster. Instead, the previously-allocated edge nodes will be
retained to avoid loss of leases.
PATCH /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>

Create or update DHCP server configuration


If DHCP server config with the dhcp-server-config-id is not already
present, create a new DHCP server config instance. If it already exists,
replace the DHCP server config instance with this object.

Realized entities of this API can be found using the path of Tier-0, Tier1,
or Segment where this config is applied on.

Modification of edge_cluster_path in DhcpServerConfig will lose all
existing DHCP leases.

If both the preferred_edge_paths in the DhcpServerConfig are changed
in a same PUT API, e.g. change from [a,b] to [x,y], the current DHCP
server leases will be lost, which could cause network connectivity
issues. It is recommended to change only one member index in an update
call, e.g. from [a, b] to [a,y].

Clearing preferred_edge_paths will not reassign edge nodes from the
edge cluster. Instead, the previously-allocated edge nodes will be
retained to avoid loss of leases.
PUT /policy/api/v1/infra/dhcp-server-configs/<dhcp-server-config-id>

List Dns Forwarder Zones


Paginated list of all Dns Forwarder Zones
GET /policy/api/v1/global-infra/dns-forwarder-zones
GET /policy/api/v1/infra/dns-forwarder-zones

Delete the DNS Forwarder Zone


Delete the DNS Forwarder Zone
DELETE /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

Read the DNS Forwarder Zone


Read the DNS Forwarder Zone
GET /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>
GET /policy/api/v1/global-infra/dns-forwarder-zones/<dns-forwarder-zone-id>

Create or update the DNS Forwarder Zone


Create or update the DNS Forwarder Zone
PATCH /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

Create or update the DNS Forwarder Zone


Create or update the DNS Forwarder Zone
PUT /policy/api/v1/infra/dns-forwarder-zones/<dns-forwarder-zone-id>

List forwarding policies for the given domain


List all forwarding policies for the given domain ordered by precedence.
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies

Delete forwarding policy


Delete forwarding policy.
DELETE /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

Read forwarding policy


Read forwarding policy.
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

Create or update forwarding policy


Create or update the forwarding policy.
Performance Note: If you want to edit several rules in a forwarding policy
use this API. It will perform better than several individual rule APIs.
Just pass all the rules which you wish to edit as embedded rules to it.
PATCH /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

Create or update forwarding policy


Create or update the forwarding policy.
Performance Note: If you want to edit several rules in a forwarding policy
use this API. It will perform better than several individual rule APIs.
Just pass all the rules which you wish to edit as embedded rules to it.
PUT /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>

List rules


List rules
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules

Get forwarding rule statistics.


Get aggregated statistics of Forwarding Policy Rule.
Stats include total number of packets and total number of bytes for the rule.
- no enforcement point path specified: Stats will be evaluated on each enforcement
point.
- {enforcement_point_path}: Stats are evaluated only on the given enforcement point
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<forwarding-rule-id>/statistics

Delete ForwardingRule


Delete ForwardingRule
DELETE /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Read rule


Read rule
GET /policy/api/v1/global-infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Update forwarding rule


Create a rule with the rule-id is not already present,
otherwise update the rule.
Performance Note: If you want to edit several rules in a forwarding policy,
prefer below mentioned API for optimal performance.
Pass all the rules which you wish to edit as embedded rules to it.
Use this API - PATCH (or PUT)
/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>
PATCH /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Update forwarding rule


Create a rule with the rule-id is not already present,
otherwise update the rule.
Performance Note: If you want to edit several rules in a forwarding policy,
prefer below mentioned API for optimal performance.
Pass all the rules which you wish to edit as embedded rules to it.
Use this API - PATCH (or PUT)
/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>
PUT /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/rules/<rule-id>

Get forwarding policy statistics.


Get aggregated stattistics of Forwarding Policy.
Stats include total number of packets and total number of bytes for all
Forwarding rules in a given Forwarding Policy.
- no enforcement point path specified: Stats will be evaluated on each enforcement
point.
- {enforcement_point_path}: Stats are evaluated only on the given enforcement point.
GET /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/<forwarding-policy-id>/statistics

Reset Forwarding rule statistics


Sets Forwarding Policy rule statistics counter to zero.
- no enforcement point path specified: Reset of stats will be executed for
each enforcement point.
- {enforcement_point_path}: Reset of stats will be executed only for the given
enforcement point.
POST /policy/api/v1/infra/domains/<domain-id>/forwarding-policies/stats?action=reset

Get Group discovery profile binding map


API will get Group discovery profile binding map
GET /policy/api/v1/global-infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps
GET /policy/api/v1/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps

Delete Group discovery profile binding map


API will delete Group discovery profile binding map
DELETE /policy/api/v1/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps/<discovery-profile-binding-map-id>

Get Group discovery profile binding map


API will get Group discovery profile binding map
GET /policy/api/v1/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps/<discovery-profile-binding-map-id>
GET /policy/api/v1/global-infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps/<discovery-profile-binding-map-id>

Create or update Group discovery profile binding map


API will create or update Group discovery profile binding map
PATCH /policy/api/v1/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps/<discovery-profile-binding-map-id>

Update Group discovery profile binding map


API will update Group discovery profile binding map
PUT /policy/api/v1/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps/<discovery-profile-binding-map-id>

Get mirror stack status for Group Monitoring Profile Binding Map.


API will get mirror stack status by Group Monitoring Profile Binding Map
GET /policy/api/v1/global-infra/domains/<domain-id>/groups/<group-id>/group-monitoring-profile-binding-maps/<group-monitoring-profile-binding-map-id>/mirror-stack-status
GET /policy/api/v1/infra/domains/<domain-id>/groups/<group-id>/group-monitoring-profile-binding-maps/<group-monitoring-profile-binding-map-id>/mirror-stack-status

List Evpn Tenant Configuration


List all evpn tunnel endpoint configuration.
GET /policy/api/v1/infra/evpn-tenant-configs

Delete evpn tunnel endpoint configuration


Delete evpn tunnel endpoint configuration.
DELETE /policy/api/v1/infra/evpn-tenant-configs/<config-id>

Read Evpn Tenant Configuration


Read Evpn Tenant Configuration.
GET /policy/api/v1/infra/evpn-tenant-configs/<config-id>

Create or Update Evpn Tenant Configuration


Create a global evpn tenant configuration if it is not already present,
otherwise update the evpn tenant configuration.
PATCH /policy/api/v1/infra/evpn-tenant-configs/<config-id>

Create or Update Evpn Tenant Configuration


Create or update Evpn Tenant configuration.
PUT /policy/api/v1/infra/evpn-tenant-configs/<config-id>

List all gateway QoS profiles


Paginated list of all gateway QoS profle instances
GET /policy/api/v1/global-infra/gateway-qos-profiles
GET /policy/api/v1/infra/gateway-qos-profiles

Delete gateway QoS profile


Delete QoS profile
DELETE /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>
DELETE /policy/api/v1/global-infra/gateway-qos-profiles/<qos-profile-id>

Read gateway QoS profile


Read gateway QoS profile
GET /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>
GET /policy/api/v1/global-infra/gateway-qos-profiles/<qos-profile-id>

Create or update Gateway QoS profile


If profile with the qos-profile-id is not already present,
create a new gateway QoS profile instance. If it already exists, update
the gateway QoS profile instance with specified attributes.
PATCH /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>
PATCH /policy/api/v1/global-infra/gateway-qos-profiles/<qos-profile-id>

Create or update Gateway QoS profile


If profile with the qos-profile-id is not already present,
create a new gateway QoS profile instance. If it already exists, replace
the gateway QoS profile instance with this object.
PUT /policy/api/v1/infra/gateway-qos-profiles/<qos-profile-id>
PUT /policy/api/v1/global-infra/gateway-qos-profiles/<qos-profile-id>

Read global configuration


This rest routine is deprecated. Use /infra/connectivity-global-config for Connectivity global config and
/infra/ops-global-config for Operations global config.
Read global configuration.
GET /policy/api/v1/infra/global-config

Update the global configuration


This rest routine is deprecated. Use /infra/connectivity-global-config for Connectivity global config and
/infra/ops-global-config for Operations global config.
Update the global configuration.
PATCH /policy/api/v1/infra/global-config (Deprecated)

Update the global configuration


This rest routine is deprecated. Use /infra/connectivity-global-config for Connectivity global config and
/infra/ops-global-config for Operations global config.
Update the global configuration.
PUT /policy/api/v1/infra/global-config

List Igmp Profile


List all igmp profile.
GET /policy/api/v1/infra/igmp-profiles

Delete Igmp Profile


Delete Igmp Profile.
DELETE /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

Read Igmp Profile


Read Igmp Profile.
GET /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

Update igmp profile


Create a igmp profile with the igmp-profile-id is not already present,
otherwise update the igmp profile.
PATCH /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

Update igmp profile


Create or update igmp profile.
PUT /policy/api/v1/infra/igmp-profiles/<igmp-profile-id>

List IpAddressBlocks


Paginated list of IpAddressBlocks.
GET /policy/api/v1/infra/ip-blocks

Delete an IpAddressBlock


Delete the IpAddressBlock with the given id.
DELETE /policy/api/v1/infra/ip-blocks/<ip-block-id>

Read a IpAddressBlock


Read IpAddressBlock with given Id.
GET /policy/api/v1/infra/ip-blocks/<ip-block-id>

Create a new IPBlock


Creates a new IpAddressBlock with specified ID if not already present.
If IpAddressBlock of given ID is already present, then the instance is
updated with specified attributes.
PATCH /policy/api/v1/infra/ip-blocks/<ip-block-id>

Create or Replace IpAddressBlock


Create a new IpAddressBlock with given ID if it does not exist.
If IpAddressBlock with given ID already exists, it will update existing instance.
This is a full replace.
PUT /policy/api/v1/infra/ip-blocks/<ip-block-id>

List IP Discovery Profiles


API will list all IP Discovery Profiles active in current discovery profile id.
GET /policy/api/v1/global-infra/ip-discovery-profiles
GET /policy/api/v1/infra/ip-discovery-profiles

Delete IP Discovery Profile


API will delete IP Discovery profile.
DELETE /policy/api/v1/global-infra/ip-discovery-profiles/<ip-discovery-profile-id>
DELETE /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

Get IP Discovery Profile


API will get IP Discovery profile.
GET /policy/api/v1/global-infra/ip-discovery-profiles/<ip-discovery-profile-id>
GET /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

Create IP Discovery Profile


API will create IP Discovery profile.
PATCH /policy/api/v1/global-infra/ip-discovery-profiles/<ip-discovery-profile-id>
PATCH /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

Update IP Discovery Profile


API will update IP Discovery profile.
PUT /policy/api/v1/global-infra/ip-discovery-profiles/<ip-discovery-profile-id>
PUT /policy/api/v1/infra/ip-discovery-profiles/<ip-discovery-profile-id>

List IpAddressPools


Paginated list of IpAddressPools.
GET /policy/api/v1/infra/ip-pools

Delete an IpAddressPool


Delete the IpAddressPool with the given id.
DELETE /policy/api/v1/infra/ip-pools/<ip-pool-id>

Read an IpAddressPool


Read IpAddressPool with given Id.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>

Create a new IP address pool


Creates a new IpAddressPool with specified ID if not already present.
If IpAddressPool of given ID is already present, then the instance is
updated. This is a full replace.
PATCH /policy/api/v1/infra/ip-pools/<ip-pool-id>

Create or Replace IpAddressPool


Create a new IpAddressPool with given ID if it does not exist.
If IpAddressPool with given ID already exists, it will update existing instance.
This is a full replace.
PUT /policy/api/v1/infra/ip-pools/<ip-pool-id>

List IpAddressPool Allocations


Returns information about which addresses have been allocated from a
specified IP address pool in policy.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations

Records intent to release an IP from an IpPool.


Releases the IP that was allocated for this allocation request
DELETE /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

Read policy IpPool allocation


Read a previously created allocation
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

Records intent to allocate an IP Address from an IP Pool


If allocation of the same ID is found, this is a no-op. If no allocation
of the specified ID is found, then a new allocation is created.
An allocation cannot be updated once created.
When an allocation is requested from an IpAddressPool, the IP could be
allocated from any subnet in the pool that has the available capacity.
Request to allocate an IP will fail if no subnet was previously created.
If specific IP was requested, the status of allocation is reflected in the
realized state.
If any IP is requested, the IP finally allocated is obtained by polling on
the realized state until the allocated IP is returned in the extended
attributes.
PATCH /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

Records intent to allocate an IP Address from an IP Pool


If allocation of the same ID is found, this is a no-op. If no allocation
of the specified ID is found, then a new allocation is created.
An allocation cannot be updated once created.
When an IP allocation is requested from an IpAddressPool, the IP could be
allocated from any subnet in the pool that has the available capacity.
Request to allocate an IP will fail if no subnet was previously created.
If specific IP was requested, the status of allocation is reflected in the
realized state.
If any IP is requested, the IP finally allocated is obtained by polling on
the realized state until the allocated IP is returned in the extended
attributes.
An allocation cannot be updated once created.
PUT /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-allocations/<ip-allocation-id>

List IpAddressPoolSubnets


Paginated list of IpAddressPoolSubnets.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets

Delete an IpAddressPoolSubnet


Delete the IpAddressPoolSubnet with the given id.
DELETE /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

Read an IpAddressPoolSubnet


Read IpAddressPoolSubnet with given Id.
GET /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

Create a new IP Subnet


Creates a new IpAddressPoolSubnet with the specified ID if it does not
already exist. If a IpAddressPoolSubnet of the given ID already exists,
IpAddressPoolSubnet will be updated. This is a full replace.
PATCH /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

Create a new IP Subnet


Creates a new IpAddressPoolSubnet with the specified ID if it does not
already exist. If a IpAddressPoolSubnet of the given ID already exists,
IpAddressPoolSubnet will be updated. This is a full replace.
PUT /policy/api/v1/infra/ip-pools/<ip-pool-id>/ip-subnets/<ip-subnet-id>

List DPD profiles


Get paginated list of all DPD Profiles.
GET /policy/api/v1/infra/ipsec-vpn-dpd-profiles

Delete custom dead peer detection (DPD) profile


Delete custom dead peer detection (DPD) profile. Profile can not be deleted if profile has references to it.
DELETE /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

Get dead peer detection (DPD) profile


Get custom dead peer detection (DPD) profile, given the particular id.
GET /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

Create or patch a custom DPD Profile


Create or patch dead peer detection (DPD) profile. Any change in profile affects all sessions consuming this profile. System will be provisioned with system owned editable default DPD profile. Any change in profile affects all sessions consuming this profile.
PATCH /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

Create or fully replace a custom IPSec tunnel Profile


Create or patch dead peer detection (DPD) profile. Any change in profile affects all sessions consuming this profile. System will be provisioned with system owned editable default DPD profile. Any change in profile affects all sessions consuming this profile. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/ipsec-vpn-dpd-profiles/<dpd-profile-id>

List IKE profiles


Get paginated list of all IKE Profiles.
GET /policy/api/v1/infra/ipsec-vpn-ike-profiles

Delete custom IKE Profile


Delete custom IKE Profile. Profile can not be deleted if profile has references to it.
DELETE /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

Get IKE Profile


Get custom IKE Profile, given the particular id.
GET /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

Create or patch a custom internet key exchange (IKE) Profile


Create or patch custom internet key exchange (IKE) Profile. IKE Profile is a reusable profile that captures IKE and phase one negotiation parameters. System will be pre provisioned with system owned editable default IKE profile and suggested set of profiles that can be used for peering with popular remote peers like AWS VPN. User can create custom profiles as needed. Any change in profile affects all sessions consuming this profile.
PATCH /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

Create or fully replace a custom internet key exchange (IKE) Profile


Create or fully replace custom internet key exchange (IKE) Profile. IKE Profile is a reusable profile that captures IKE and phase one negotiation parameters. System will be pre provisioned with system owned editable default IKE profile and suggested set of profiles that can be used for peering with popular remote peers like AWS VPN. User can create custom profiles as needed. Any change in profile affects all sessions consuming this profile. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/ipsec-vpn-ike-profiles/<ike-profile-id>

List IPSec tunnel profiles


Get paginated list of all IPSec tunnel Profiles.
GET /policy/api/v1/infra/ipsec-vpn-tunnel-profiles

Delete custom IPSec tunnel Profile


Delete custom IPSec tunnel Profile. Profile can not be deleted if profile has references to it.
DELETE /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

Get IPSec tunnel Profile


Get custom IPSec tunnel Profile, given the particular id.
GET /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

Create or patch a custom IPSec tunnel Profile


Create or patch custom IPSec tunnel profile. IPSec tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. System will be provisioned with system owned editable default IPSec tunnel profile. Any change in profile affects all sessions consuming this profile.
PATCH /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

Create or fully replace a custom IPSec tunnel Profile


Create or fully replace custom IPSec tunnel profile. IPSec tunnel profile is a reusable profile that captures phase two negotiation parameters and tunnel properties. System will be provisioned with system owned editable default IPSec tunnel profile. Any change in profile affects all sessions consuming this profile. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/ipsec-vpn-tunnel-profiles/<tunnel-profile-id>

List all IPv6 DAD profiles


Paginated list of all IPv6 DAD profile instances
GET /policy/api/v1/infra/ipv6-dad-profiles
GET /policy/api/v1/global-infra/ipv6-dad-profiles

Delete IPv6 DAD profile


Delete IPv6 DAD profile
DELETE /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>
DELETE /policy/api/v1/global-infra/ipv6-dad-profiles/<dad-profile-id>

Read IPv6 DAD profile


Read IPv6 DAD profile
GET /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>
GET /policy/api/v1/global-infra/ipv6-dad-profiles/<dad-profile-id>

Create or update IPv6 DAD profile


If profile with the dad-profile-id is not already present,
create a new IPv6 DAD profile instance. If it already exists, update
the IPv6 DAD profile instance with specified attributes.
PATCH /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>
PATCH /policy/api/v1/global-infra/ipv6-dad-profiles/<dad-profile-id>

Create or update IPv6 DAD profile


If profile with the dad-profile-id is not already present,
create a new IPv6 DAD profile instance. If it already exists, replace
the IPv6 DAD profile instance with this object.
PUT /policy/api/v1/infra/ipv6-dad-profiles/<dad-profile-id>
PUT /policy/api/v1/global-infra/ipv6-dad-profiles/<dad-profile-id>

List all IPv6 NDRA profiles


Paginated list of all IPv6 NDRA profile instances
GET /policy/api/v1/infra/ipv6-ndra-profiles
GET /policy/api/v1/global-infra/ipv6-ndra-profiles

Delete IPv6 NDRA profile


Delete IPv6 NDRA profile
DELETE /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>
DELETE /policy/api/v1/global-infra/ipv6-ndra-profiles/<ndra-profile-id>

Read IPv6 NDRA profile


Read IPv6 NDRA profile
GET /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>
GET /policy/api/v1/global-infra/ipv6-ndra-profiles/<ndra-profile-id>

Create or update IPv6 NDRA profile


If profile with the ndra-profile-id is not already present,
create a new IPv6 NDRA profile instance. If it already exists, update
the IPv6 NDRA profile instance with specified attributes.
PATCH /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>
PATCH /policy/api/v1/global-infra/ipv6-ndra-profiles/<ndra-profile-id>

Create or update IPv6 NDRA profile


If profile with the ndra-profile-id is not already present,
create a new IPv6 NDRA profile instance. If it already exists, replace
the IPv6 NDRA profile instance with this object.
PUT /policy/api/v1/infra/ipv6-ndra-profiles/<ndra-profile-id>
PUT /policy/api/v1/global-infra/ipv6-ndra-profiles/<ndra-profile-id>

List LBAppProfiles


Paginated list of all LBAppProfiles.
GET /policy/api/v1/infra/lb-app-profiles

Delete LBAppProfile and all the entities contained by this LBAppProfile


Delete the LBAppProfile along with all the entities contained
by this LBAppProfile.
DELETE /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

Read LBAppProfile


Read a LBAppProfile.
GET /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

Create or update a LBAppProfile


If a LBAppProfile with the lb-app-profile-id is not already present, create
a new LBAppProfile. If it already exists, update the LBAppProfile. This
is a full replace.
PATCH /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

Create or update a LBAppProfile


If a LBAppProfile with the lb-app-profile-id is not already present, create
a new LBAppProfile. If it already exists, update the LBAppProfile. This
is a full replace.
PUT /policy/api/v1/infra/lb-app-profiles/<lb-app-profile-id>

List LBClientSslProfiles


Paginated list of all LBClientSslProfiles.
GET /policy/api/v1/infra/lb-client-ssl-profiles (Deprecated)

Delete LBClientSslProfile and all the entities contained by this LBClientSslProfile


Delete the LBClientSslProfile along with all the entities contained
by this LBClientSslProfile.
DELETE /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id> (Deprecated)

Read LBClientSslProfile


Read a LBClientSslProfile.
GET /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id> (Deprecated)

Create or update a LBClientSslProfile


If a LBClientSslProfile with the lb-client-ssl-profile-id is not already
present, create a new LBClientSslProfile. If it already exists, update the
LBClientSslProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id> (Deprecated)

Create or update a LBClientSslProfile


If a LBClientSslProfile with the lb-client-ssl-profile-id is not already
present, create a new LBClientSslProfile. If it already exists, update the
LBClientSslProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-client-ssl-profiles/<lb-client-ssl-profile-id> (Deprecated)

List LBMonitorProfiles for infra


Paginated list of all LBMonitorProfiles for infra.
GET /policy/api/v1/infra/lb-monitor-profiles (Deprecated)

Delete LBMonitorProfile and all the entities contained by this LBMonitorProfile


Delete the LBMonitorProfile along with all the entities contained
by this LBMonitorProfile.
DELETE /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id> (Deprecated)

Read LBMonitorProfile


Read a LBMonitorProfile.
GET /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id> (Deprecated)

Create or update a LBMonitorProfile


If a LBMonitorProfile with the lb-monitor-profile-id is not
already present, create a new LBMonitorProfile. If it already exists,
update the LBMonitorProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id> (Deprecated)

Create or update a LBMonitorProfile


If a LBMonitorProfile with the lb-monitor-profile-id is not
already present, create a new LBMonitorProfile. If it already exists,
update the LBMonitorProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-monitor-profiles/<lb-monitor-profile-id> (Deprecated)

Read load balancer usage for the given node


API is used to retrieve node usage for load balancer which contains basic
information, LB entity usages and capacities for the given node.
Currently only edge node is supported.
The parameter ?node_path=<node-path> is required. For example, ?node_path=
/infra/sites/default/enforcement-points/default/edge-clusters/
85175e0b-4d74-461d-83e1-f3b785adef9c/edge-nodes/
86e077c0-449f-11e9-87c8-02004eb37029.
GET /policy/api/v1/infra/lb-node-usage (Deprecated)

Read load balancer node usage summary


The API is used to retrieve the load balancer node usage summary of all
nodes for every enforcement point.
- If the parameter ?include_usages=true exists, the property node_usages
are included in response. By default, the property node_usages is not
included in response.
- If parameter ?enforcement_point_path=<enforcement-point-path> exists,
only node usage summary from specific enforcement point is included
in response. If no enforcement point path is specified, information will
be aggregated from each enforcement point.
GET /policy/api/v1/infra/lb-node-usage-summary (Deprecated)

List LBPersistenceProfiles for infra


Paginated list of all LBPersistenceProfiles for infra.
GET /policy/api/v1/infra/lb-persistence-profiles

Delete LBPersistenceProfile and all the entities contained by this LBPersistenceProfile


Delete the LBPersistenceProfile along with all the entities
contained by this LBPersistenceProfile.
DELETE /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

Read LBPersistenceProfile


Read a LBPersistenceProfile.
GET /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

Create or update a LBPersistenceProfile


If a LBPersistenceProfile with the lb-persistence-profile-id is not
already present, create a new LBPersistenceProfile. If it already exists,
update the LBPersistenceProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

Create or update a LBPersistenceProfile


If a LBPersistenceProfile with the lb-persistence-profile-id is not
already present, create a new LBPersistenceProfile. If it already exists,
update the LBPersistenceProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-persistence-profiles/<lb-persistence-profile-id>

List LBPools


Paginated list of all LBPools.
GET /policy/api/v1/infra/lb-pools

Delete LBPool and all the entities contained by this LBPool


Delete the LBPool along with all the entities contained
by this LBPool.
DELETE /policy/api/v1/infra/lb-pools/<lb-pool-id>

Read LBPool


Read a LBPool.
GET /policy/api/v1/infra/lb-pools/<lb-pool-id>

Create or update a LBPool


If a LBPool with the lb-pool-id is not already present,
create a new LBPool. If it already exists, update the
LBPool. This is a full replace.
PATCH /policy/api/v1/infra/lb-pools/<lb-pool-id>

Create or update a LBPool


If a LBPool with the lb-pool-id is not already present,
create a new LBPool. If it already exists, update the
LBPool. This is a full replace.
PUT /policy/api/v1/infra/lb-pools/<lb-pool-id>

List LBServerSslProfiles


Paginated list of all LBServerSslProfiles.
GET /policy/api/v1/infra/lb-server-ssl-profiles (Deprecated)

Delete LBServerSslProfile and all the entities contained by this LBServerSslProfile


Delete the LBServerSslProfile along with all the entities contained
by this LBServerSslProfile.
DELETE /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id> (Deprecated)

Read LBServerSslProfile


Read a LBServerSslProfile.
GET /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id> (Deprecated)

Create or update a LBServerSslProfile


If a LBServerSslProfile with the lb-server-ssl-profile-id is not already
present, create a new LBServerSslProfile. If it already exists, update the
LBServerSslProfile. This is a full replace.
PATCH /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id> (Deprecated)

Create or update a LBServerSslProfile


If a LBServerSslProfile with the lb-server-ssl-profile-id is not already
present, create a new LBServerSslProfile. If it already exists, update the
LBServerSslProfile. This is a full replace.
PUT /policy/api/v1/infra/lb-server-ssl-profiles/<lb-server-ssl-profile-id> (Deprecated)

Read load balancer service usage summary


API is used to retrieve the load balancer usage summary for
all load balancer services.
If the parameter ?include_usages=true exists, the property service-usages
is included in the response. By default, service-usages is not included
in the response.
GET /policy/api/v1/infra/lb-service-usage-summary

List LBService


Paginated list of all LBService.
GET /policy/api/v1/infra/lb-services

Delete LBService and all the entities contained by this LBService


Delete the LBService along with all the entities contained by
this LBService.
DELETE /policy/api/v1/infra/lb-services/<lb-service-id>

Read LBService


Read an LBService.
GET /policy/api/v1/infra/lb-services/<lb-service-id>

Create or update a LBVirtualServer


If a LBService with the lb-service-id is not already
present, create a new LBService. If it already exists, update the
LBService. This is a full replace.
PATCH /policy/api/v1/infra/lb-services/<lb-service-id>

Create or update a LBService


If a LBService with the lb-service-id is not already
present, create a new LBService. If it already exists, update the
LBService. This is a full replace.
PUT /policy/api/v1/infra/lb-services/<lb-service-id>

Get LBService status information


Get LBService detailed status information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/detailed-status

Get LBPool status information


Get LBPool detailed status information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-pools/<lb-pool-id>/detailed-status

Get LBPool statistics information


Get LBPoolStatistics information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-pools/<lb-pool-id>/statistics

Get LBVirtualServer status information


Get LBVirtualServer detailed status information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-virtual-servers/<lb-virtual-server-id>/detailed-status

Get LBVirtualServer statistics information


Get LBVirtualServerStatistics information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/lb-virtual-servers/<lb-virtual-server-id>/statistics

Get LBService usage information


Get LBServiceUsage information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/service-usage

Get LBService statistics information


Get LBServiceStatistics information.
- no enforcement point path specified: Information will be aggregated from
each enforcement point.
- {enforcement_point_path}: Information will be retrieved only from the
given enforcement point.
GET /policy/api/v1/infra/lb-services/<lb-service-id>/statistics

Retrieve a list of supported SSL ciphers and protocols


Retrieve a list of supported SSL ciphers and protocols.
GET /policy/api/v1/infra/lb-ssl-ciphers-and-protocols (Deprecated)

List LBVirtualServers


Paginated list of all LBVirtualServers.
GET /policy/api/v1/infra/lb-virtual-servers

Delete LBVirtualServer and all the entities contained by this LBVirtualServer


Delete the LBVirtualServer along with all the entities contained by
this LBVirtualServer.
DELETE /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

Read LBVirtualServer


Read a LBVirtualServer.
GET /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

Create or update a LBVirtualServer


If a LBVirtualServer with the lb-virtual-server-id is not already
present, create a new LBVirtualServer. If it already exists, update the
LBVirtualServer. This is a full replace.
PATCH /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

Create or update a LBVirtualServer


If a LBVirtualServer with the lb-virtual-server-id is not already
present, create a new LBVirtualServer. If it already exists, update the
LBVirtualServer. This is a full replace.
PUT /policy/api/v1/infra/lb-virtual-servers/<lb-virtual-server-id>

List Mac Discovery Profiles


API will list all Mac Discovery Profiles active in current discovery profile id.
GET /policy/api/v1/global-infra/mac-discovery-profiles
GET /policy/api/v1/infra/mac-discovery-profiles

Delete Mac Discovery Profile


API will delete Mac Discovery profile.
DELETE /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>
DELETE /policy/api/v1/global-infra/mac-discovery-profiles/<mac-discovery-profile-id>

Get Mac Discovery Profile


API will get Mac Discovery profile.
GET /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>
GET /policy/api/v1/global-infra/mac-discovery-profiles/<mac-discovery-profile-id>

Create Mac Discovery Profile


API will create Mac Discovery profile.
PATCH /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>
PATCH /policy/api/v1/global-infra/mac-discovery-profiles/<mac-discovery-profile-id>

Update Mac Discovery Profile


API will update Mac Discovery profile.
PUT /policy/api/v1/infra/mac-discovery-profiles/<mac-discovery-profile-id>
PUT /policy/api/v1/global-infra/mac-discovery-profiles/<mac-discovery-profile-id>

List Manager Ip Pools


Paginated list of Manager Ip Pools.
GET /policy/api/v1/infra/manager-ip-pools

Read a Manager Ip Pool


Read Manager Ip Pool with given Id.
GET /policy/api/v1/infra/manager-ip-pools/<manager-ip-pool-id>

List Metadata Proxy Configurations


List all L2 Metadata Proxy Configurations
GET /policy/api/v1/infra/metadata-proxies

Delete Metadata Proxy Config


API will delete Metadata Proxy Config with ID profile-id
DELETE /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Get Metadata Proxy Config


API will read Metadata Proxy Config with ID profile-id
GET /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Create or update Metadata Proxy Config


API will create or update Metadata Proxy Config with ID profile-id.
Maximum 10 Metadata Proxy Configurations are supported.
PATCH /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Create or update Metadata Proxy Config


API will create or update Metadata Proxy Config with ID profile-id
PUT /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>

Get metadata proxy status


GET /policy/api/v1/global-infra/metadata-proxies/<metadata-proxy-id>/statistics
GET /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>/statistics

Get metadata proxy status


GET /policy/api/v1/infra/metadata-proxies/<metadata-proxy-id>/status
GET /policy/api/v1/global-infra/metadata-proxies/<metadata-proxy-id>/status

Read global Operations Configuration


Read global Operations Configuration
GET /policy/api/v1/infra/ops-global-config

Update the global Operationconfiguration


Update the global Operationconfiguration
PATCH /policy/api/v1/infra/ops-global-config

Update the global Operations Configuration


Update the global Operations Configuration
PUT /policy/api/v1/infra/ops-global-config

List Pim Profile


List all pim profile.
GET /policy/api/v1/infra/pim-profiles

Delete Pim Profile


Delete Pim Profile.
DELETE /policy/api/v1/infra/pim-profiles/<pim-profile-id>

Read Pim Profile


Read Pim Profile.
GET /policy/api/v1/infra/pim-profiles/<pim-profile-id>

Update pim profile


Create a pim profile with the pim-profile-id is not already present,
otherwise update the pim profile.
PATCH /policy/api/v1/infra/pim-profiles/<pim-profile-id>

Update pim profile


Create or update pim profile.
PUT /policy/api/v1/infra/pim-profiles/<pim-profile-id>

List QoS Profiles


API will list all QoS profiles.
GET /policy/api/v1/infra/qos-profiles
GET /policy/api/v1/global-infra/qos-profiles

Delete QoS profile


API will delete QoS profile.
DELETE /policy/api/v1/infra/qos-profiles/<qos-profile-id>
DELETE /policy/api/v1/global-infra/qos-profiles/<qos-profile-id>

Details of QoS profile


API will return details of QoS profile.
GET /policy/api/v1/infra/qos-profiles/<qos-profile-id>
GET /policy/api/v1/global-infra/qos-profiles/<qos-profile-id>

Patch QoS profile.


Create a new QoS profile if the QoS profile with
given id does not already exist. If the QoS profile with the
given id already exists, patch with the existing QoS profile.
PATCH /policy/api/v1/infra/qos-profiles/<qos-profile-id>
PATCH /policy/api/v1/global-infra/qos-profiles/<qos-profile-id>

Create or Replace QoS profile.


Create or Replace QoS profile.
PUT /policy/api/v1/infra/qos-profiles/<qos-profile-id>
PUT /policy/api/v1/global-infra/qos-profiles/<qos-profile-id>

List segment security profiles


API will list all segment security profiles.
GET /policy/api/v1/global-infra/segment-security-profiles
GET /policy/api/v1/infra/segment-security-profiles

DELETE segment security profile


API will delete segment security profile with the given id.
DELETE /policy/api/v1/global-infra/segment-security-profiles/<segment-security-profile-id>
DELETE /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

GET Segment security profile id


API will return details of the segment security profile with given id. If the
profile does not exist, it will return 404.
GET /policy/api/v1/global-infra/segment-security-profiles/<segment-security-profile-id>
GET /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

PATCH segment security profile id


Create a new segment security profile if the segment security profile with given id does not
exist. Otherwise, PATCH the existing segment security profile
PATCH /policy/api/v1/global-infra/segment-security-profiles/<segment-security-profile-id>
PATCH /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

PUT segment security profile id


Create or replace a segment security profile
PUT /policy/api/v1/global-infra/segment-security-profiles/<segment-security-profile-id>
PUT /policy/api/v1/infra/segment-security-profiles/<segment-security-profile-id>

List all segments under infra


Paginated list of all segments under infra.
GET /policy/api/v1/infra/segments
GET /policy/api/v1/global-infra/segments

List Infra Port Discovery Profile Binding Maps


API will list all Infra Port Discovery Profile Binding Maps in current port id.
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps

Delete Infra Port Discovery Profile Binding Profile


API will delete Infra Port Discovery Profile Binding Profile
DELETE /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Get Infra Port Discovery Profile Binding Map


API will get Infra Port Discovery Profile Binding Map
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Create Infra Port Discovery Profile Binding Map


API will create Infra Port Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Update Infra Port Discovery Profile Binding Map


API will update Infra Port Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PUT /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

List Infra Port Monitoring Profile Binding Maps


API will list all Infra Port Monitoring Profile Binding Maps in current port id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps

Delete Infra Port Monitoring Profile Binding Profile


API will delete Infra Port Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Get Infra Port Monitoring Profile Binding Map


API will get Infra Port Monitoring Profile Binding Map.
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Create Infra Port Monitoring Profile Binding Map


API will create Infra Port Monitoring Profile Binding Map.
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Update Infra Port Monitoring Profile Binding Map


API will update Infra Port Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PUT /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Get mirror stack status for Infra Port Monitoring Profile Binding Map


API will get Infra Port Monitoring Profile Binding Map mirror stack status.
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>/mirror-stack-status
GET /policy/api/v1/infra/segments/<infra-segment-id>/ports/<infra-port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>/mirror-stack-status

List Infra Segment Discovery Profile Binding Maps


API will list all Infra Segment Discovery Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps

Delete Segment Discovery Profile Binding Profile


API will delete Segment Discovery Profile Binding Profile
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Get Infra Segment Discovery Profile Binding Map


API will get Infra Segment Discovery Profile Binding Map
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Create Infra Segment Discovery Profile Binding Map


API will create Infra Segment Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Update Infra Segment Discovery Profile Binding Map


API will update Infra Segment Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/segments/<infra-segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

List Infra Segment Monitoring Profile Binding Maps


API will list all Infra Segment Monitoring Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps

Delete Infra Segment Monitoring Profile Binding Profile


API will delete Infra Segment Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Get Infra Segment Monitoring Profile Binding Map


API will get Infra Segment Monitoring Profile Binding Map.
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Create Infra Segment Monitoring Profile Binding Map


API will create infra segment monitoring profile binding map.
PATCH /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Update Infra Segment Monitoring Profile Binding Map


API will update Infra Segment Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Get Infra Segment Monitoring Profile Binding Map


API will get Infra Segment Monitoring Profile Binding Map mirror stack status.
GET /policy/api/v1/infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>/mirror-stack-status
GET /policy/api/v1/global-infra/segments/<infra-segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>/mirror-stack-status

Delete infra segment


Delete infra segment
DELETE /policy/api/v1/infra/segments/<segment-id>

Force delete infra segment


Force delete bypasses validations during segment deletion. This may result in an inconsistent connectivity.
DELETE /policy/api/v1/infra/segments/<segment-id>?force=true

Read infra segment


Read infra segment
Note:
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PATCH API payload, the path returned in the GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
GET /policy/api/v1/infra/segments/<segment-id>
GET /policy/api/v1/global-infra/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, update the segment with specified attributes.

Force parameter is required when workload connectivity is indirectly impacted
with the current update.
PATCH /policy/api/v1/infra/segments/<segment-id>?force=true

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, update the segment with specified attributes.
PATCH /policy/api/v1/infra/segments/<segment-id>

Delete DHCP lease(s) specified by IP and MAC


Delete one or multiple DHCP lease(s) specified by IP and MAC.

If there is a DHCP server running upon the given segment, or this segment
is using a DHCP server running in its connected Tier-0 or Tier-1, the DHCP
lease(s) which match exactly the IP address and the MAC address will be
deleted. If no such lease matches, the deletion for this lease will be
ignored.

The DHCP lease to be deleted will be removed by the system from both active
and standby node. The system will report error if the DHCP lease could not
be removed from both nodes. If the DHCP lease could not be removed on either
node, please check the DHCP server status. Once the DHCP server status is
UP, please invoke the deletion API again to ensure the lease gets deleted
from both nodes.
POST /policy/api/v1/infra/segments/<segment-id>?action=delete_dhcp_leases

Create or update a infra segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, replace the segment with this object.
Note:
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PATCH API payload, the path returned in the GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the Alarm, GPRR, error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
PUT /policy/api/v1/infra/segments/<segment-id>

Create or update a infra segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, replace the segment with this object.

Force parameter is required when workload connectivity is indirectly impacted
with the current replacement.
Note:
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PATCH API payload, the path returned in the GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the Alarm, GPRR, error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
PUT /policy/api/v1/infra/segments/<segment-id>?force=true

Get downlink port Address Resolution Protocol Proxies for infra segment in CSV format


Returns ARP proxy table for downlink port on connected to the segment in CSV format
GET /policy/api/v1/infra/segments/<segment-id>/arp-proxy?format=csv
GET /policy/api/v1/global-infra/segments/<segment-id>/arp-proxy?format=csv

Get downlink port Address Resolution Protocol Proxies for infra segment


Returns ARP proxy table for downlink port on connected to the segment
GET /policy/api/v1/global-infra/segments/<segment-id>/arp-proxy
GET /policy/api/v1/infra/segments/<segment-id>/arp-proxy

Get ARP table from segment interface (downlink)


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
interface (downlink) attaching segment to tier-0/tier-1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/segments/<segment-id>/arp-table
GET /policy/api/v1/global-infra/segments/<segment-id>/arp-table

Get ARP table from segment interface (downlink) in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format for the
interface (downlink) attaching segment to tier-0/tier-1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/global-infra/segments/<segment-id>/arp-table?format=csv
GET /policy/api/v1/infra/segments/<segment-id>/arp-table?format=csv

Get infra segment bridge end point statistics using segment ID and profile path.


Get detailed information on infra segment bridge end point statistics using segment ID and profile path.
GET /policy/api/v1/infra/segments/<segment-id>/bep-statistics

Get Tier-1 segment bridge end point status using segment ID and profile path.


Get detailed information on Tier-1 segment bridge end point status using segment ID and profile path.
GET /policy/api/v1/infra/segments/<segment-id>/bep-status

List all DHCP static bindings


Paginated list of all DHCP static binding instances
GET /policy/api/v1/global-infra/segments/<segment-id>/dhcp-static-binding-configs
GET /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs

Delete DHCP static binding


Delete DHCP static binding
DELETE /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding


Read DHCP static binding
GET /policy/api/v1/global-infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>
GET /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with specified attributes.
PATCH /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with this object.
PUT /policy/api/v1/infra/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding state


Read DHCP static binding state
GET /policy/api/v1/global-infra/segments/<segment-id>/dhcp-static-bindings/<binding-id>/state
GET /policy/api/v1/infra/segments/<segment-id>/dhcp-static-bindings/<binding-id>/state

Get ARP table for downlink router port on tier-0 router


This API is deprecated because it is duplicate.
Please use /infra/segments/<segment-id>/arp-table
Segment ID is the ID of the segment that is connected to the the tier-0
GET /policy/api/v1/global-infra/segments/<segment-id>/gateway-interface-arp-table (Deprecated)
GET /policy/api/v1/infra/segments/<segment-id>/gateway-interface-arp-table (Deprecated)

Get ARP table for downlink router port on tier-0 router in CSV


This API is deprecated because it is duplicate.
Please use /infra/segments/<segment-id>/arp-table?format=csv
Segment ID is the ID of the segment that is connected to the the tier-0
GET /policy/api/v1/global-infra/segments/<segment-id>/gateway-interface-arp-table?format=csv (Deprecated)
GET /policy/api/v1/infra/segments/<segment-id>/gateway-interface-arp-table?format=csv (Deprecated)

Get DAD state for downlink router port on tier-0 router


Segment ID is the ID of the segment that is connected to the the tier-0
GET /policy/api/v1/infra/segments/<segment-id>/gateway-interface-dad-state
GET /policy/api/v1/global-infra/segments/<segment-id>/gateway-interface-dad-state

Get statistics for downlink router port on tier-0 router


Segment ID is the ID of the segment that is connected to the the tier-0
GET /policy/api/v1/global-infra/segments/<segment-id>/gateway-interface-statistics
GET /policy/api/v1/infra/segments/<segment-id>/gateway-interface-statistics

Get statistics for downlink router port on tier-0 router


Segment ID is the ID of the segment that is connected to the the tier-0
GET /policy/api/v1/global-infra/segments/<segment-id>/gateway-interface-statistics/summary
GET /policy/api/v1/infra/segments/<segment-id>/gateway-interface-statistics/summary

Get infra segment MAC table in CSV


Returns MAC table for a segment
GET /policy/api/v1/infra/segments/<segment-id>/mac-table?format=csv
GET /policy/api/v1/global-infra/segments/<segment-id>/mac-table?format=csv

Get infra segment MAC table


Returns MAC table for a segment
GET /policy/api/v1/infra/segments/<segment-id>/mac-table
GET /policy/api/v1/global-infra/segments/<segment-id>/mac-table

List infra segment ports


List all the ports for an infra.
GET /policy/api/v1/infra/segments/<segment-id>/ports
GET /policy/api/v1/global-infra/segments/<segment-id>/ports

Delete an infra segment port


Delete an infra segment port by giving ID.
DELETE /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
DELETE /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Get infra segment port by ID


Get detail information on an infra segment port by giving ID.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Patch an infra segment port


Create an infra segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object fields which presents in the request body.
PATCH /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
PATCH /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Create or update an infra segment port


Create an infra segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object already exists.
PUT /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>
PUT /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>

Get infra segment port MAC table in CSV


Returns MAC table for a segment port
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/mac-table?format=csv
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/mac-table?format=csv

Get MAC table for infra segment port


Returns MAC table for a segment port
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/mac-table
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/mac-table

List Port QoS Profile Binding Maps


API will list all Port QoS Profile Binding Maps in current port id.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps

Delete Port QoS Profile Binding Profile


API will delete Port QoS Profile Binding Profile.
DELETE /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
DELETE /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Get Port QoS Profile Binding Map


API will get Port QoS Profile Binding Map.
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Create Port QoS Profile Binding Map


API will create Port QoS Profile Binding Map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
PATCH /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Update Port QoS Profile Binding Map


API will update Port QoS Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
PUT /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

List infra segment port security profile binding maps


API will list all port security profile binding maps.
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps

Delete the infra segment port security profile binding map


API will delete the port security profile binding map.
DELETE /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
DELETE /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Get infra segment port security profile binding map


API will return details of the port security profile binding map. If the
security profile binding map does not exist, it will return 404.
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Patch infra segment port security profile binding map


Create a new port security profile binding map if the given security profile
binding map does not exist. Otherwise, patch the existing port security
profile binding map.
For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PATCH /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Create or replace the infra segment port security profile binding map


API will create or replace the port security profile binding map.
For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PUT /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Get infra segment port state


Returns infra segment port state on enforcement point
GET /policy/api/v1/infra/segments/<segment-id>/ports/<port-id>/state
GET /policy/api/v1/global-infra/segments/<segment-id>/ports/<port-id>/state

List Segment QoS Profile Binding Maps


API will list all Segment QoS Profile Binding Maps in current segment id.
GET /policy/api/v1/global-infra/segments/<segment-id>/segment-qos-profile-binding-maps
GET /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps

Delete Segment QoS Profile Binding Profile


API will delete Segment QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Get Segment QoS Profile Binding Map


API will get Segment QoS Profile Binding Map.
GET /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Create Segment QoS Profile Binding Map


API will create segment QoS profile binding map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Update Segment QoS Profile Binding Map


API will update Segment QoS Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

List infra segment security profile binding maps


API will list all segment security profile binding maps.
GET /policy/api/v1/global-infra/segments/<segment-id>/segment-security-profile-binding-maps
GET /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps

Delete infra segment security profile binding map


API will delete segment security profile binding map.
DELETE /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Get infra segment security profile binding map


API will return details of the segment security profile binding map. If the
binding map does not exist, it will return 404.
GET /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>
GET /policy/api/v1/global-infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Patch infra segment security profile binding map


Create a new segment security profile binding map if the given security
profile binding map does not exist. Otherwise, patch the existing segment
security profile binding map.
For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Create or replace infra segment security profile binding map


API will create or replace segment security profile binding map.
For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Get infra segment TEP table


Returns TEP table for a segment
GET /policy/api/v1/infra/segments/<segment-id>/tep-table
GET /policy/api/v1/global-infra/segments/<segment-id>/tep-table

Get tier-1 segment TEP table in CSV


Returns TEP table for a segment in CSV
GET /policy/api/v1/global-infra/segments/<segment-id>/tep-table?format=csv
GET /policy/api/v1/infra/segments/<segment-id>/tep-table?format=csv

Get infra segment port statistics information


Get infra segment port statistics information.
GET /policy/api/v1/infra/segments/<segments-id>/ports/<port-id>/statistics
GET /policy/api/v1/global-infra/segments/<segments-id>/ports/<port-id>/statistics

Get infra segment port status information


Get infra segment port status information.
GET /policy/api/v1/global-infra/segments/<segments-id>/ports/<port-id>/status
GET /policy/api/v1/infra/segments/<segments-id>/ports/<port-id>/status

Get infra segment state information


Get infra segment state information.
GET /policy/api/v1/infra/segments/<segments-id>/state
GET /policy/api/v1/global-infra/segments/<segments-id>/state

Get infra segment statistics information


Get infra segment statistics information.
GET /policy/api/v1/global-infra/segments/<segments-id>/statistics
GET /policy/api/v1/infra/segments/<segments-id>/statistics

List Service Segments


Paginated list of all Service Segments
GET /policy/api/v1/infra/segments/service-segments

Delete Service Segment


Delete Service Segment with given ID
DELETE /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Read Service Segment


Read a Service Segment with the given id
GET /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Create a service segment


A service segment with the service-segment-id is created.
Modification of service segment is not supported.
PATCH /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Create service segment


A service segment with the service-segment-id is created.
Modification of service segment is not supported.
PUT /policy/api/v1/infra/segments/service-segments/<service-segment-id>

Get infra segments by configuration state


Returns all infra segments with configuration state on the enforcement
point specified in the request
GET /policy/api/v1/infra/segments/state
GET /policy/api/v1/global-infra/segments/state

List L2 Bridge Endpoint Profiles


List all L2 bridge profiles
GET /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles

Delete L2 Bridge Endpoint Profile


API will delete L2 bridge profile with ID profile-id
DELETE /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

Get L2 Bridge Endpoint Profile


Read L2 bridge profile with ID profile-id
GET /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

Create or update L2 Bridge Endpoint Profile


API will create or update L2 bridge profile with ID profile-id.
L2 Bridge profile is only allowed under an enforcement-point with path
/infra/sites/default/enforcement-points/default.
PATCH /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

Create or update L2 Bridge Endpoint Profile


API will create or update L2 bridge profile with ID profile-id.
L2 Bridge profile is only allowed under an enforcement-point with path
/infra/sites/default/enforcement-points/default.
PUT /policy/api/v1/infra/sites/<site-id>/enforcement-points/<enforcement-point-id>/edge-bridge-profiles/<profile-id>

List SpoofGuard profiles


API will list all SpoofGuard profiles.
GET /policy/api/v1/global-infra/spoofguard-profiles
GET /policy/api/v1/infra/spoofguard-profiles

Delete SpoofGuard profile


API will delete SpoofGuard profile with the given id.
DELETE /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>
DELETE /policy/api/v1/global-infra/spoofguard-profiles/<spoofguard-profile-id>

Get SpoofGuard profile


API will return details of the SpoofGuard profile with given id. If the
profile does not exist, it will return 404.
GET /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>
GET /policy/api/v1/global-infra/spoofguard-profiles/<spoofguard-profile-id>

Patch SpoofGuard profile


Create a new SpoofGuard profile if the SpoofGuard profile with the given id
does not exist. Otherwise, patch with the existing SpoofGuard profile.
PATCH /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>
PATCH /policy/api/v1/global-infra/spoofguard-profiles/<spoofguard-profile-id>

Create or replace SpoofGuard profile


API will create or replace SpoofGuard profile.
PUT /policy/api/v1/infra/spoofguard-profiles/<spoofguard-profile-id>
PUT /policy/api/v1/global-infra/spoofguard-profiles/<spoofguard-profile-id>

List Tier-0s


Paginated list of all Tier-0s
GET /policy/api/v1/global-infra/tier-0s
GET /policy/api/v1/infra/tier-0s

Delete Tier-0


Delete Tier-0
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>

Read Tier-0


Read Tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>

Create or update a Tier-0


If a Tier-0 with the tier-0-id is not already present, create a new
Tier-0. If it already exists, update the Tier-0 for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>

Reprocess Tier0 gateway configuration and publish updates to NSX controller


Reprocess Tier0 gateway configuration and configuration of related entities like Tier0 interfaces
and static routes, etc. Any missing Updates are published to NSX controller.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>?action=reprocess

Create or update a Tier-0


If a Tier-0 with the tier-0-id is not already present, create a new
Tier-0. If it already exists, replace the Tier-0 instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>

Get Tier-0 Address Resolution Protocol Proxies


Returns ARP proxy table for a tier-0
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/arp-proxies
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/arp-proxies

Get Tier-0 Address Resolution Protocol Proxies in CSV format


Returns ARP proxy table for a tier-0 in CSV format
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/arp-proxies?format=csv
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/arp-proxies?format=csv

List BGP community lists


Paginated list of all community lists under a tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/community-lists

Delete a BGP community list


Delete a BGP community list
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Read a BGP community list


Read a BGP community list
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Create or update a BGP community list


If a community list with the community-list-id is not already present,
create a new community list. If it already exists, update the community
list for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Create or update a BGP community list


If a community list with the community-list-id is not already present,
create a new community list. If it already exists, replace the community
list instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/community-lists/<community-list-id>

Delete DNS configuration for tier-0 instance


Delete DNS configuration for tier-0 instance
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Read the DNS Forwarder for the given tier-0 instance


Read the DNS Forwarder for the given tier-0 instance
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Update the DNS Forwarder


Update the DNS Forwarder
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Perform the specified DNS forwarder action


Perform the specified action for Tier0 DNS forwarder on specified enforcement point.
POST /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Update the DNS Forwarder


Update the DNS Forwarder
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder

Resolve a given address via the dns forwarder at Tier0


Query the nameserver for an ip-address or a FQDN of the given an address optionally using
an specified DNS server. If the address is a fqdn, nslookup will resolve ip-address with it.
If the address is an ip-address, do a reverse lookup and answer fqdn(s).
If enforcement point is specified, then DNS forwarder nslookup answer will get fetched from
specified enforcement point. Otherwise from all enforcement points.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder/nslookup
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder/nslookup

Get tier-0 DNS forwarder statistics


Get statistics of tier-0 DNS forwarder.
- no enforcement point path specified: Statistics will be evaluated on each enforcement
point.
- {enforcement_point_path}: Statistics are evaluated only on the given enforcement point.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder/statistics
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder/statistics

Get current status of tier-0 DNS forwarder


Get current status of tier-0 DNS forwarder.
- no enforcement point path specified: Status will be evaluated on each enforcement
point.
- {enforcement_point_path}: Status will be evaluated only on the given enforcement
point.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/dns-forwarder/status
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/dns-forwarder/status

Read Evpn Configuration


Read Evpn Configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/evpn

Create or Update evpn configuration


Create a evpn configuration if it is not already present,
otherwise update the evpn configuration.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/evpn

Create or Update evpn configuration


Create or update evpn configuration.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/evpn

Get forwarding table from tier-0


Get forwarding table from tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/forwarding-table
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/forwarding-table

Get forwarding table from tier-0 in CSV format


Get forwarding table from tier-0 gateway in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/forwarding-table?format=csv
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/forwarding-table?format=csv

Get IPSec VPN service list result


Get paginated list of all IPSec VPN services
for given Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services

Delete IPSec VPN service


Delete IPSec VPN service for under Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN service


Get IPSec VPN service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>

Create or patch IPSec VPN service


Create or patch IPSec VPN service under Tier-0.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>

Create or fully replace IPSec VPN service


Create or fully replace IPSec VPN service under given Tier-0.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN local endpoint list result


Get paginated list of all IPSec VPN local endpoints
for a given ipsec vpn service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints

Delete IPSec VPN local endpoint


Delete IPSec VPN local endpoint for a given ipsec vpn
service under Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN local endpoint


Get IPSec VPN local endpoint for a given ipsec vpn
service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or patch a custom IPSec VPN local endpoint


Create or patch a custom IPSec VPN local endpoint
under Tier-0.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or fully replace IPSec VPN local endpoint


Create or fully replace IPSec VPN local endpoint
for a given ipsec vpn service under Tier-0.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN sessions list result


Get paginated list of all IPSec VPN sessions
for a given ipsec vpn service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions

Delete IPSec VPN session


Delete IPSec VPN session for a given ipsec vpn
service under Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN Session


Get IPSec VPN session with senstive data for
a given ipsec vpn service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data

Get IPSec VPN Session


Get IPSec VPN session without sensitive data
for a given ipsec vpn service under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or patch an IPSec VPN session


Create or patch an IPSec VPN session for
a given ipsec vpn service under Tier-0.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or fully replace IPSec VPN session


Create or fully replace IPSec VPN session for a given
ipsec vpn service under Tier-0.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN session detailed status under Tier-0


- no enforcement point path specified: detailed status is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed status is fetched realtime from the enforcement point.
- source=cached: cached detailed status from enforcement point is returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/detailed-status (Deprecated)

Get IPSec VPN configuration for the peer site


Download IPSec VPN configuration for the peer site. Peer config also
contains PSK; be careful when sharing or storing it.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config

Get IPSec VPN session statistics under Tier-0


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from enforcement point are returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Reset the statistics of the given VPN session


Resets the statistics of the given VPN session.
Since source of data is enforcement point, data is
reset there.
POST /policy/api/v1/global-infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Get IPSec VPN Session Summary


Summarized view of all tier-0 IPSec VPN sessions for a specified service.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/summary

Get L2VPN service list result under Tier-0


Get paginated list of all L2VPN services under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services

Delete L2VPN service under Tier-0


Delete L2VPN service for given Tier-0.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>

Get L2VPN service under Tier-0


Get L2VPN service for given Tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>

Create or patch L2VPN service under Tier-0


Create or patch L2VPN service for given Tier-0
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>

Create or fully replace L2VPN service under Tier-0


Create or fully replace L2VPN service for given Tier-0. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>

Get L2VPN sessions list result under Tier-0


Get paginated list of all L2VPN sessions under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions

Delete L2VPN session under Tier-0


Delete L2VPN session under Tier-0. When L2VPN Service is in CLIENT Mode, the L2VPN Session is deleted along with its transpot tunnels and related resources.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN Session under Tier-0


Get L2VPN session under Tier-0.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-0


Create or patch an L2VPN session under Tier-0. API supported
only when L2VPN Service is in Server Mode.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-0 from Peer Codes


Create or patch an L2VPN session under Tier-0 from Peer Codes.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. IPSec VPN Service and Local Endpoint are created only
when required, i.e., an IPSec VPN Service does not already exist,
or an IPSec VPN Local Endpoint with same local address does not
already exist.
Updating the L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the different resources associated with it is
not allowed, except for IPSec VPN Service and Local Endpoint,
resources that are not system owned.
API supported only when L2VPN Service is in Client Mode.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code

Create or fully replace L2VPN session under Tier-0


Create or fully replace L2VPN session under Tier-0. API supported
only when L2VPN Service is in Server Mode.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN session detailed status under Tier-0


- no enforcement point path specified: detailed tatus is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed tatus is fetched realtime from the enforcement point.
- source=cached: cached detailed status is returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get Tier-0 L2VPN session configuration for the peer site


Get peer config for the Tier-0 L2VPN session to configure the remote
side of the tunnel.
- no enforcement point path specified: L2VPN Session Peer Codes
will be evaluated on each enforcement point.
- enforcement point paths specified: L2VPN Session Peer Codes
are evaluated only on the given enforcement points.
API supported only when L2VPN Service is in Server Mode.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>/peer-config

Get L2Vpn session remote mac for logical switch


Returns L2Vpn session remote macs for a logical switch.
Data is fetched from enforcement point.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/detailed-status instead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac

Get L2VPN session statistics under Tier-0


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from the enforcement point are returned.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/sessions/<session-id>/statistics

List Tier-0 locale-services


Paginated list of all Tier-0 locale-services
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services

Get Tier-0 Address Resolution Protocol Proxies


This API is deprecated. Please use /infra/tier-0s/<tier-0-id>/arp-proxies
Returns ARP proxy table for a tier-0
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/arp-proxies (Deprecated)
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/arp-proxies (Deprecated)

Delete overridden BGP routing config


Deletes the specified overridden BgpRoutingConfig. If the BgpRoutingConfig
is not overridden, it won't get deleted.
DELETE /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

Read BGP routing config


Read BGP routing config
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

Create or update BGP routing config


If an BGP routing config not present, create BGP routing config.
If it already exists, update the routing config.
PATCH /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

Create or update a BGP routing config


If BGP routing config is not already present, create BGP routing config.
If it already exists, replace the BGP routing config with this object.
PUT /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp

List BGP neighbor configurations


Paginated list of all BGP neighbor configurations
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors

Delete BGP neighbor config


Delete BGP neighbor config
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>
DELETE /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Read BGP neighbor config


Read BGP neighbor config
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Create or update a BGP neighbor config


If BGP neighbor config with the neighbor-id is not already present, create a new
neighbor config. If it already exists, replace the BGP neighbor config with this object.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>
PATCH /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Create or update a BGP neighbor config


If BGP neighbor config with the neighbor-id is not already present, create a new
neighbor config. If it already exists, replace the BGP neighbor config with this object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>
PUT /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>

Get BGP neighbor advertised routes


Returns routes advertised by BGP neighbor from all edge transport nodes on which
this neighbor is currently enabled.
The query parameter "source=cached" is not supported.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/advertised-routes
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/advertised-routes

Get BGP neighbor advertised routes in CSV format


Returns routes advertised by BGP neighbor from all edge transport nodes on which
this neighbor is currently enabled in CSV format. Routes from all enforcement points are returned.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/advertised-routes?format=csv
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/advertised-routes?format=csv

Get routes learned by BGP neighbor in CSV format


Returns routes learned by BGP neighbor from all edge nodes on which
this neighbor is currently enabled. Routes from all enforcement points are returned.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/routes?format=csv
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/routes?format=csv

Get routes learned by BGP neighbor


Returns routes learned by BGP neighbor from all edge nodes on which
this neighbor is currently enabled.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/routes
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/<neighbor-id>/routes

Get BGP neighbor status for the Tier0


Returns the status of all the BGP neighbors for the given Tier0.
To get BGP neighbor status for a particular enforcement point,
parameter "enforcement_point_path=<enforcement_point_path>" needs to be specified.
If an enforcement_point is unspecified, then bgp neighbor status for all enforcement points is fetched.
To get BGP neighbors status for the logical router from particular edge node,
parameter "edge_path=<edge_path>" needs to be specified.
If an edge_path is unspecified, then bgp neighbor status for all edges is fetched.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/status
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/bgp/neighbors/status

List Tier-0 Interfaces


Paginated list of all Tier-0 Interfaces
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces

Delete Tier-0 interface


Delete Tier-0 interface
DELETE /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Read Tier-0 interface


Read Tier-0 interface
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Create or update a Tier-0 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, update the interface for specified attributes.
PATCH /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Create or update a Tier-0 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, replace the interface with this object.
PUT /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>

Get Tier-0 Interface Address Resolution Protocol Proxies in CSV format


Returns ARP proxy table for a tier-0 interface in CSV format. Interfaces can be of types
- EXTERNAL and SERVICE. Interfaces of type LOOBACK and downlink are not
supported.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy?format=csv
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy?format=csv

Get Tier-0 Interface Address Resolution Protocol Proxies


Returns ARP proxy table for a tier-0 interface. Interfaces can be of types
- EXTERNAL and SERVICE. Interfaces of type LOOBACK and downlink are not
supported.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy

Get ARP table from tier-0 interface in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format
for the tier-0 interface, on a edge node if a query parameter
"edge_path=<policy-edge-path>" is given. The edge_path
parameter is mandatory if the interface type is not EXTERNAL.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table?format=csv
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table?format=csv

Get ARP table from tier-0 interface


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
tier-0 interface, on a edge node if a query parameter
"edge_path=<policy-edge-path>" is given. The edge_path
parameter is mandatory if the interface type is not EXTERNAL.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table

Get DAD status by interface


Get tier-0 interface DAD state information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/dad-state
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/dad-state

Get tier-0 interface statistics information


Get tier-0 interface statistics information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics

Get tier-0 interface statistics summary information


Get tier-0 interface statistics summary information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics/summary
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics/summary

Get IPSec VPN service list result


Get paginated list of all IPSec VPN services
for given locale service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services (Deprecated)

Delete IPSec VPN service


Delete IPSec VPN service for given locale
service under Tier-0.
This API is deprecated. Please use DELETE /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Get IPSec VPN service


Get IPSec VPN service for given locale
service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Create or patch IPSec VPN service


Create or patch IPSec VPN service for given locale
service under Tier-0.
This API is deprecated. Please use PATCH /infra/tier-0s/<tier-0-id>/
ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Create or fully replace IPSec VPN service


Create or fully replace IPSec VPN service for given
locale service under Tier-0.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Get IPSec VPN local endpoint list result


Get paginated list of all IPSec VPN local endpoints
for a given locale service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints (Deprecated)

Delete IPSec VPN local endpoint


Delete IPSec VPN local endpoint for a given locale
service under Tier-0.
This API is deprecated. Please use DELETE /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Get IPSec VPN local endpoint


Get IPSec VPN local endpoint for a given locale
service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Create or patch a custom IPSec VPN local endpoint


Create or patch a custom IPSec VPN local endpoint
for a given locale service under Tier-0.
This API is deprecated. Please use PATCH /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Create or fully replace IPSec VPN local endpoint


Create or fully replace IPSec VPN local endpoint
for a given locale service under Tier-0.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Get IPSec VPN sessions list result


Get paginated list of all IPSec VPN sessions
for a given locale service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions (Deprecated)

Delete IPSec VPN session


Delete IPSec VPN session for a given locale
service under Tier-0.
This API is deprecated. Please use DELETE /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get IPSec VPN Session


Get IPSec VPN session with senstive data for
a given locale service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data (Deprecated)

Get IPSec VPN Session


Get IPSec VPN session without sensitive data
for a given locale service under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or patch an IPSec VPN session


Create or patch an IPSec VPN session for
a given locale service under Tier-0.
This API is deprecated. Please use PATCH /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or fully replace IPSec VPN session


Create or fully replace IPSec VPN session for a given
locale service under Tier-0.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get IPSec VPN session detailed status under Tier-0


- no enforcement point path specified: detailed status is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed status is fetched realtime from the enforcement point.
- source=cached: cached detailed status from enforcement point is returned.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/detailed-status instead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/detailed-status (Deprecated)

Get IPSec VPN configuration for the peer site


Download IPSec VPN configuration for the peer site. Peer config also
contains PSK; be careful when sharing or storing it.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config instead.
Note:
Please note that request is validated and any error messages returned from validation may include
the new VPN path instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config (Deprecated)

Get IPSec VPN session statistics under Tier-0


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from enforcement point are returned.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/statisticsinstead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics (Deprecated)

Reset the statistics of the given VPN session


Resets the statistics of the given VPN session.
Since source of data is enforcement point, data is
reset there.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/statistics instead.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics (Deprecated)

Get IPSec VPN Session Summary


Summarized view of all tier-0 IPSec VPN sessions for a specified service.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/ipsec-vpn-services/<service-id>/summary
instead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/summary (Deprecated)

Get L2VPN service list result under Tier-0


Get paginated list of all L2VPN services under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/l2vpn-services instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services (Deprecated)

Delete L2VPN service under Tier-0


Delete L2VPN service for given Tier-0 locale service.
This API is deprecated. Please use DELETE /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Get L2VPN service under Tier-0


Get L2VPN service for given Tier-0 locale service.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Create or patch L2VPN service under Tier-0


Create or patch L2VPN service for given Tier-0 locale service.
This API is deprecated. Please use PATCH /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the
new VPN path instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Create or fully replace L2VPN service under Tier-0


Create or fully replace L2VPN service for given Tier-0 locale service.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Get L2VPN sessions list result under Tier-0


Get paginated list of all L2VPN sessions under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/
l2vpn-services/<service-id>/sessions instead.
Note:
The API will return a new VPN path for "transport_tunnels" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions (Deprecated)

Delete L2VPN session under Tier-0


Delete L2VPN session under Tier-0. When L2VPN Service is in CLIENT Mode,
the L2VPN Session is deleted along with its transpot tunnels and related
resources.
This API is deprecated. Please use DELETE /infra/tier-0s/<tier-0-id>/
l2vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the
new VPN path instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get L2VPN Session under Tier-0


Get L2VPN session under Tier-0.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/
l2vpn-services/<service-id>/sessions/<session-id> instead.
Note:
The API will return a new VPN path for "transport_tunnels" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or patch an L2VPN session under Tier-0


Create or patch an L2VPN session under Tier-0. API supported
only when L2VPN Service is in Server Mode.
This API is deprecated. Please use PATCH /infra/tier-0s/<tier-0-id>/
l2vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or patch an L2VPN session under Tier-0 from Peer Codes


Create or patch an L2VPN session under Tier-0 from Peer Codes.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. IPSec VPN Service and Local Endpoint are created only
when required, i.e., an IPSec VPN Service does not already exist,
or an IPSec VPN Local Endpoint with same local address does not
already exist.
Updating the L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the different resources associated with it is
not allowed, except for IPSec VPN Service and Local Endpoint,
resources that are not system owned.
API supported only when L2VPN Service is in Client Mode.
This API is deprecated. Please use POST /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/
sessions/<session-id>?action=create_with_peer_code instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
POST /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code (Deprecated)

Create or fully replace L2VPN session under Tier-0


Create or fully replace L2VPN session under Tier-0. API supported
only when L2VPN Service is in Server Mode.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-0s/<tier-0-id>/
l2vpn-services/<service-id>/sessions/<session-id> instead.
Note:
The API will return a new VPN path for "transport_tunnels" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get L2VPN session detailed status under Tier-0


- no enforcement point path specified: detailed tatus is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed tatus is fetched realtime from the enforcement point.
- source=cached: cached detailed status is returned.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/
sessions/<session-id>/detailed-status instead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/detailed-status (Deprecated)

Get Tier-0 L2VPN session configuration for the peer site


Get peer config for the Tier-0 L2VPN session to configure the remote
side of the tunnel.
- no enforcement point path specified: L2VPN Session Peer Codes
will be evaluated on each enforcement point.
- enforcement point paths specified: L2VPN Session Peer Codes
are evaluated only on the given enforcement points.
API supported only when L2VPN Service is in Server Mode.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/
sessions/<session-id>/peer-config instead.
Note:
The "transport_tunnel_path" returned in the payload wil be a new vpn path instead of the deprecated API path.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/peer-config (Deprecated)

Get L2Vpn session remote mac for logical switch


Returns L2Vpn session remote macs for a logical switch.
Data is fetched from enforcement point.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/
sessions/<session-id>/remote-mac instead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac (Deprecated)

Get L2VPN session statistics under Tier-0


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from the enforcement point are returned.
This API is deprecated. Please use GET /infra/tier-0s/<tier-0-id>/l2vpn-services/<service-id>/
sessions/<session-id>/statistics instead.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/statistics (Deprecated)

Read OSPF routing config


Read OSPF routing config
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf

Create or update a OSPF routing config


If OSPF routing config is not already present, create OSPF routing config.
If it already exists, replace the OSPF routing config with this object.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf

Create or update a OSPF routing config


If OSPF routing config is not already present, create OSPF routing config.
If it already exists, replace the OSPF routing config with this object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf

List OSPF area configurations


List all OSPF area configurations.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/areas

Delete OSPF Area config


Delete OSPF Area config
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/areas/<area-id>

Read OSPF Area config


Read OSPF Area config
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/areas/<area-id>

Create or update a OSPF Area config


If OSPF Area config is not already present, create OSPF Area config.
If it already exists, replace the OSPF Area config with this object.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/areas/<area-id>

Create or update a OSPF Area config


If OSPF Area config is not already present, create OSPF Area config.
If it already exists, replace the OSPF Area config with this object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/areas/<area-id>

Get OSPF database information


Get OSPF database information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/database

Get OSPF Database information in CSV format


Get OSPF Database information in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/database?format=csv

Get OSPF neighbor information


Get OSPF neighbor information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/neighbors

Get OSPF route information


Get OSPF route information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/routes

Get OSPF route information in CSV format


Get OSPF route information in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/ospf/routes?format=csv

List Service Interfaces


Paginated list of all Service Interfaces
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces

Delete service interface


Delete service interface
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Read service interface


Read service interface
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Create or update a Tier-0 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, update the interface for specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Create a service interface


If an interface with the interface-id is not already present, create a new
interface. Modification of service interface is not allowed.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

List Tier-0 Deployment maps


Paginated list of all Tier-0 Deployment Entries.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps

Delete Tier-0 Deployment Map


Delete Tier-0 Deployment Map
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Read a Tier-0 Deployment Map


Read a Tier-0 Deployment Map
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Patch a Tier-0 Deployment Map under Tier-0


If the passed Tier-0 Deployment Map does not already exist, create a new Tier-0 Deployment Map.
If it already exists, patch it.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Create a new Tier-0 Deployment Map under Tier-0


If the passed Tier-0 Deployment Map does not already exist, create a new Tier-0 Deployment Map.
If it already exists, replace it.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-service-id>/tier-0-deployment-maps/<tier-0-deployment-map-id>

Delete Tier-0 locale-services


Delete Tier-0 locale-services
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

Read Tier-0 locale-services


Read Tier-0 locale-services
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

Create or update a tier-0 locale-services


If a Tier-0 locale-services with the locale-services-id is not already
present, create a new locale-services. If it already exists, update
Tier-0 locale-services with specified attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

Create or update a Tier-0 locale-services


If a Tier-0 locale-services with the locale-services-id is not already
present, create a new locale-services. If it already exists, replace the
Tier-0 locale-services instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>

List evpn tunnel endpoint configuration


List all evpn tunnel endpoint configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints

Delete evpn tunnel endpoint configuration


Delete evpn tunnel endpoint configuration.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Read evpn tunnel endpoint configuration


Read evpn tunnel endpoint configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Create or Update evpn tunnel endpoint configuration


Create a evpn tunnel endpoint config if the tunnel-endpoint-id is not already present,
otherwise update the tunnel endpoint configuration.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Create or Update evpn tunnel endpoint configuration


Create or update evpn tunnel endpoint configuration.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/evpn-tunnel-endpoints/<tunnel-endpoint-id>

Read Multicast Configuration


Read Multicast Configuration.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast

Create or update multicast configuration


Create or update a Tier-0 multicast configuration defining the multicast replication range,
the IGMP or a PIM profile. It will update the configuration if there is already one in place.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast

Create or update multicast configuration


Create or update a Tier-0 multicast configuration defining the multicast replication range,
the IGMP or a PIM profile. It will update the configuration if there is already one in place.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast

Get Multicast Forwarding In Csv Format


Get Multicast Forwarding In CSV Format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/forwarding?format=csv

Get Multicast Forwarding


Get Multicast Forwarding.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/forwarding

Get IGMP Memberships in CSV format


Get Igmp Memberships in CSV format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/igmp-memberships?format=csv

Get IGMP Memberships


Get Igmp Memberships.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/igmp-memberships

Get PIM Rendezvous Point Mappings In CSV Format


Get PIM Rendezvous Point Mappings In CSV Format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/pim-rp-mappings?format=csv

Get PIM Rendezvous Point Mappings


Get PIM Rendezvous Point Mappings.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/pim-rp-mappings

Get Multicast Routes in Csv Format


Get Multicast Routes in CSV Format.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/routes?format=csv

Get Multicast Routes


Get Multicast Routes.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/locale-services/<locale-services-id>/multicast/routes

List Policy NAT types.


List all NAT sections under the given Tier-0 ID.
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat

List NAT Rules


List NAT Rules from Tier-0 denoted by Tier-0 ID, under NAT section
denoted by <nat-id>.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PATCH/PUT API, the path returned in the GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules

Delete NAT Rule


Delete NAT Rule from Tier-0 denoted by Tier-0 ID, under NAT section denoted by <nat-id>. Under tier-0 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule


Get NAT Rule from Tier-0 denoted by Tier-0 ID, under NAT section
denoted by <nat-id>.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PUT/PATCH API, the path returned in the GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Create or update a NAT Rule on tier-0


If a NAT Rule is not already present on Tier-0 denoted by Tier-0 ID,
under NAT section denoted by <nat-id>, create a new NAT Rule.
If it already exists, update the NAT Rule.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PATCH API, the path returned in the GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Update NAT Rule


Update NAT Rule on Tier-0 denoted by Tier-0 ID, under NAT section
denoted by <nat-id>.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PUT API, the path returned in the PUT/GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule Statistics


Get NAT Rule Statistics from Tier-0 denoted by Tier-0 ID, under NAT section
denoted by <nat-id>.
Under tier-0 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics

List NAT Rules Statistics


List NAT Rules Statistics from Tier-0 denoted by Tier-0 ID.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/nat/statistics
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/nat/statistics

List prefix lists


Paginated list of all prefix lists
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/prefix-lists
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists

Delete a prefix list


Delete a prefix list
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

Read a prefix list


Read a prefix list
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

Create or patch a prefix list


If prefix list for prefix-list-id is not already present, create
a prefix list. If it already exists, patch prefix list for prefix-list-id.
Note:
Patching existing prefix-list's "prefixes" property will overwrite the existing prefixes.
GET and PATCH is the expected set of operations to update or append new entries to the existig prefixes.
Patching existing prefixes require order to be preserved to avoid traffic impact. During PATCH operation,
reordering of existing prefixes may impact routes and eventually datapath.
Order here is crucial and it all depends upon action. If action for every prefix is PERMIT then order may
not impact but if there is DENY prefix then change in ordering could lead to traffic impact.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

Create or update a prefix list


If prefix list for prefix-list-id is not already present, create
a prefix list. If it already exists, replace the prefix list for
prefix-list-id.
Note:
Updating existing prefixes require order to be preserved to avoid traffic impact. During PATCH operation,
reordering of existing prefixes may impact routes and eventually datapath.
Order here is crucial and it all depends upon action. If action for every prefix is PERMIT then order may
not impact but if there is DENY prefix then change in ordering could lead to traffic impact.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/prefix-lists/<prefix-list-id>

List route maps


Paginated list of all route maps under a tier-0
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/route-maps

Delete a route map


Delete a route map
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Read a route map


Read a route map
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Create or update a route map


If a route map with the route-map-id is not already present, create a new
route map. If it already exists, update the route map for specified
attributes.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Create or update a route map


If a route map with the route-map-id is not already present,
create a new route map. If it already exists, replace the
route map instance with the new object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/route-maps/<route-map-id>

Get routing table from tier-0


Get routing table from tier-0
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/routing-table
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/routing-table

Get routing table from tier-0 in CSV format


Get routing table from tier-0 gateway in CSV format.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/routing-table?format=csv
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/routing-table?format=csv

Get Tier0 state


Returns
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/state
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/state

List Tier-0 Static Routes


Paginated list of all Tier-0 Static Routes
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes

Delete Tier-0 static routes


Delete Tier-0 static routes
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>

Read Tier-0 static routes


Read Tier-0 static routes
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/<route-id>

Create or update a Tier-0 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, update static routes for route-id.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>

Create or update a Tier-0 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, replace the static routes for route-id.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/<route-id>
PUT /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/<route-id>

List StaticRouteBfdPeers


Paginated list of all StaticRouteBfdPeers.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/bfd-peers

Delete this StaticRouteBfdPeer and all the entities contained by it.


Delete this StaticRouteBfdPeer and all the entities contained by it.
DELETE /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Read a StaticRouteBfdPeer


Read a StaticRouteBfdPeer with the bfd-peer-id.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Create or update a StaticRouteBfdPeer


If a StaticRouteBfdPeer with the bfd-peer-id is not already present,
create a new StaticRouteBfdPeer. If it already exists, update the
StaticRouteBfdPeer. This is a full replace.
PATCH /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Create or update a StaticRouteBfdPeer


If a StaticRouteBfdPeer with the bfd-peer-id is not already present,
create a new StaticRouteBfdPeer. If it already exists, update the
StaticRouteBfdPeer. This operation will fully replace the object.
PUT /policy/api/v1/infra/tier-0s/<tier-0-id>/static-routes/bfd-peers/<bfd-peer-id>

Get tier-0 router link arp information


Get tier-0 interface arp information.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/tier-1-interface/arp-table
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/tier-1-interface/arp-table

Get ARP table from tier-0 router link interface in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format
for the tier-0 router link interface, on a edge node. The edge_path
parameter is mandatory if the interface type is not EXTERNAL.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/tier-1-interface/arp-table?format=csv
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/tier-1-interface/arp-table?format=csv

Get tier-0 router link statistics information


Get tier-0 interface statistics information.
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/tier-1-interface/statistics
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/tier-1-interface/statistics

Get tier-0 router link statistics summary information


Get tier-0 interface statistics summary information.
GET /policy/api/v1/infra/tier-0s/<tier-0-id>/tier-1-interface/statistics/summary
GET /policy/api/v1/global-infra/tier-0s/<tier-0-id>/tier-1-interface/statistics/summary

List Tier-1 instances


Paginated list of all Tier-1 instances
GET /policy/api/v1/global-infra/tier-1s
GET /policy/api/v1/infra/tier-1s

Delete Tier-1 configuration


Delete Tier-1 configuration
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>

Read Tier-1 configuration


Read Tier-1 configuration
GET /policy/api/v1/infra/tier-1s/<tier-1-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>

Create or update Tier-1 configuration


If Tier-1 with the tier-1-id is not already present, create a new Tier-1 instance.
If it already exists, update the tier-1 instance with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>

Reprocess Tier1 gateway configuration and publish updates to NSX controller


Reprocess Tier1 gateway configuration and configuration of related entities like Tier1 interfaces
and static routes, etc. Any missing Updates are published to NSX controller.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>?action=reprocess

Create or update tier-1 configuration


If Tier-1 with the tier-1-id is not already present, create a new Tier-1 instance.
If it already exists, replace the Tier-1 instance with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>

Get Tier-1 Address Resolution Protocol Proxies


Returns ARP proxy table for a tier-1
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/arp-proxies
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/arp-proxies

Get Tier-1 Address Resolution Protocol Proxies in CSV format


Returns ARP proxy table for a tier-1 in CSV format
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/arp-proxies?format=csv
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/arp-proxies?format=csv

Delete DNS configuration for tier-1 instance


Delete DNS configuration for tier-1 instance
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Read the DNS Forwarder for the given tier-1 instance


Read the DNS Forwarder for the given tier-1 instance
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder

Create or update the DNS Forwarder


Create or update the DNS Forwarder
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Perform the specified DNS forwarder action


Perform the specified action for Tier0 DNS forwarder on specified enforcement point.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder
POST /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder

Create or update the DNS Forwarder


Create or update the DNS Forwarder
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder

Resolve a given address via the dns forwarder at Tier1


Query the nameserver for an ip-address or a FQDN of the given an address optionally using
an specified DNS server. If the address is a fqdn, nslookup will resolve ip-address with it.
If the address is an ip-address, do a reverse lookup and answer fqdn(s).
If enforcement point is specified, then DNS forwarder nslookup answer will get fetched from
specified enforcement point. Otherwise from all enforcement points.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder/nslookup
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder/nslookup

Get tier-1 DNS forwarder statistics


Get statistics of tier-1 DNS forwarder.
- no enforcement point path specified: Statistics will be evaluated on each enforcement
point.
- {enforcement_point_path}: Statistics are evaluated only on the given enforcement point.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder/statistics

Get current status of tier-1 DNS forwarder


Get current status of tier-1 DNS forwarder.
- no enforcement point path specified: Status will be evaluated on each enforcement
point.
- {enforcement_point_path}: Status will be evaluated only on the given enforcement
point.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/dns-forwarder/status
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/dns-forwarder/status

Get forwarding table from tier-1 in CSV format


Get forwarding table from tier-1 gateway in CSV format.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/forwarding-table?format=csv
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/forwarding-table?format=csv

Get forwarding table from tier-1


Get forwarding table from tier-1
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/forwarding-table
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/forwarding-table

Get IPSec VPN service list result


Get paginated list of all IPSec VPN services
under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services

Delete IPSec VPN service


Delete given IPSec VPN service under Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN service


Get given IPSec VPN service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>

Create or patch IPSec VPN service


Create or patch IPSec VPN service under Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>

Create or fully replace IPSec VPN service


Create or fully replace IPSec VPN service under Tier-1.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>

Get IPSec VPN local endpoint list result


Get paginated list of all IPSec VPN local endpoints
for a given ipsec vpn service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/local-endpoints

Delete IPSec VPN local endpoint


Delete IPSec VPN local endpoint for a ipsec vpn
service under Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN local endpoint


Get IPSec VPN local endpoint for a ipsec vpn
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or patch a custom IPSec VPN local endpoint


Create or patch a custom IPSec VPN local endpoint for a given ipsec vpn service under Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Create or fully replace IPSec VPN local endpoint


Create or fully replace IPSec VPN local endpoint
for a given ipsec vpn service under Tier-1.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id>

Get IPSec VPN sessions list result


Get paginated list of all IPSec VPN sessions for a given ipsec vpn
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions

Delete IPSec VPN session


Delete IPSec VPN session for a given ipsec-vpn service under Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN Session


Get IPSec VPN session without sensitive data for a ipsec vpn
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN Session


Get IPSec VPN session with senstive data for a ipsec vpn
service under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data

Create or patch an IPSec VPN session


Create or patch an IPSec VPN session for a ipsec vpn
service under Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Create or fully replace IPSec VPN session


Create or fully replace IPSec VPN session for a ipsec vpn
service under Tier-1.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>

Get IPSec VPN session detailed status under Tier-1


- no enforcement point path specified: detailed status is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed status is fetched realtime from the enforcement point.
- source=cached: cached detailed status from enforcement point is returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get IPSec VPN configuration for the peer site


Download IPSec VPN configuration for the peer site. Peer config also
contains PSK; be careful when sharing or storing it.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config

Get IPSec VPN session statistics under Tier-1


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from enforcement point are returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Reset the statistics of the given VPN session


Resets the statistics of the given VPN session.
Since source of data is enforcement point, data is
reset there.
POST /policy/api/v1/global-infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics

Get IPSec VPN Session Summary


Summarized view of all tier-1 IPSec VPN sessions for a specified service.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/summary

Get L2VPN service list result under Tier-1


Get paginated list of all L2VPN services under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services

Delete L2VPN service under Tier-1


Delete L2VPN service for given Tier-1.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>

Get L2VPN service under Tier-1


Get L2VPN service for given Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>

Create or patch L2VPN service under Tier-1


Create or patch L2VPN service for given Tier-1.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>

Create or fully replace L2VPN service under Tier-1


Create or fully replace L2VPN service for given Tier-1. Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>

Get L2VPN sessions list result under Tier-1


Get paginated list of all L2VPN sessions under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions

Delete L2VPN session under Tier-1


Delete L2VPN session under Tier-1. When L2VPN Service is in CLIENT Mode, the L2VPN Session is deleted along with its transpot tunnels and related resources.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN Session under Tier-1


Get L2VPN session under Tier-1.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-1


Create or patch an L2VPN session under Tier-1. API supported
only when L2VPN Service is in Server Mode.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>

Create or patch an L2VPN session under Tier-1 from Peer Codes


Create or patch an L2VPN session under Tier-1 from Peer Codes.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. IPSec VPN Service and Local Endpoint are created only
when required, i.e., an IPSec VPN Service does not already exist,
or an IPSec VPN Local Endpoint with same local address does not
already exist.
Updating the L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the different resources associated with it is
not allowed, except for IPSec VPN Service and Local Endpoint,
resources that are not system owned.
API supported only when L2VPN Service is in Client Mode.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code

Create or fully replace L2VPN session under Tier-1


Create or fully replace L2VPN session under Tier-1. API supported
only when L2VPN Service is in Server Mode.
Revision is optional for creation and required for update.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>

Get L2VPN session detailed status under Tier-1


- no enforcement point path specified: detailed tatus is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed tatus is fetched realtime from the enforcement point.
- source=cached: cached detailed status is returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>/detailed-status

Get Tier-1 L2VPN session configuration for the peer site


Get peer config for the Tier-1 L2VPN session to configure the remote
side of the tunnel.
- no enforcement point path specified: L2VPN Session Peer Codes
will be evaluated on each enforcement point.
- enforcement point paths specified: L2VPN Session Peer Codes
are evaluated only on the given enforcement points.
API supported only when L2VPN Service is in Server Mode.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>/peer-config

Get L2Vpn session remote mac for logical switch


Returns L2Vpn session remote macs for a logical switch.
Data is fetched from enforcement point.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac

Get L2VPN session statistics under Tier-1


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from the enforcement point are returned.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>/statistics

List Tier-1 locale-services


Paginated list of all Tier-1 locale-services
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services

Get Tier-1 Address Resolution Protocol Proxies


This API is deprecated. Please use /infra/tier-1s/<tier-1-id>/arp-proxies
Returns ARP proxy table for a tier-1
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/arp-proxies (Deprecated)
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/arp-proxies (Deprecated)

Get Tier-1 Interface Address Resolution Protocol Proxies in CSV format


Returns ARP proxy table for a tier-1 interface in CSV format
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy?format=csv
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy?format=csv

Get Tier-1 Interface Address Resolution Protocol Proxies


Returns ARP proxy table for a tier-1 interface
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-proxy

Get ARP table from tier-1 interface


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
tier-1 interface, on a edge node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table

Get ARP table from tier-1 interface in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format
for the tier-1 interface, on a edge node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table?format=csv
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/arp-table?format=csv

Get DAD status by interface


Get tier-1 interface DAD state information.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/dad-state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/dad-state

Get tier-1 interface statistics information


Get tier-1 interface statistics information.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics

Get tier-1 interface statistics summary information


Get tier-1 interface statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics/summary
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/interfaces/<interface-id>/statistics/summary

Get IPSec VPN service list result


Get paginated list of all IPSec VPN services
for a given locale service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services (Deprecated)

Delete IPSec VPN service


Delete IPSec VPN service for a given locale service under Tier-1.
This API is deprecated. Please use DELETE /infra/tier-1s/<tier-1-id>/psec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Get IPSec VPN service


Get IPSec VPN service for a given locale
service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Create or patch IPSec VPN service


Create or patch IPSec VPN service for a given locale
service under Tier-1.
This API is deprecated. Please use PATCH /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Create or fully replace IPSec VPN service


Create or fully replace IPSec VPN service
for a given locale service under Tier-1.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id> (Deprecated)

Get IPSec VPN local endpoint list result


Get paginated list of all IPSec VPN local endpoints
for a given locale service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/local-endpoints instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints (Deprecated)

Delete IPSec VPN local endpoint


Delete IPSec VPN local endpoint for a given locale
service under Tier-1.
This API is deprecated. Please use DELETE /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Get IPSec VPN local endpoint


Get IPSec VPN local endpoint for a given locale
service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Create or patch a custom IPSec VPN local endpoint


Create or patch a custom IPSec VPN local endpoint for a given locale service under Tier-1.
This API is deprecated. Please use PATCH /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Create or fully replace IPSec VPN local endpoint


Create or fully replace IPSec VPN local endpoint
for a given locale service under Tier-1.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
local-endpoints/<local-endpoint-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/local-endpoints/<local-endpoint-id> (Deprecated)

Get IPSec VPN sessions list result


Get paginated list of all IPSec VPN sessions for a given locale
service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions (Deprecated)

Delete IPSec VPN session


Delete IPSec VPN session for a given locale service under Tier-1.
This API is deprecated. Please use DELETE /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the
new VPN path instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get IPSec VPN Session


Get IPSec VPN session with senstive data for a given locale
service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>?action=show_sensitive_data (Deprecated)

Get IPSec VPN Session


Get IPSec VPN session without sensitive data for a given locale
service under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or patch an IPSec VPN session


Create or patch an IPSec VPN session for a given locale
service under Tier-1.
This API is deprecated. Please use PATCH /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or fully replace IPSec VPN session


Create or fully replace IPSec VPN session for a given locale
service under Tier-1.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get IPSec VPN session detailed status under Tier-1


- no enforcement point path specified: detailed status is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed status is fetched realtime from the enforcement point.
- source=cached: cached detailed status from enforcement point is returned.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/detailed-status instead.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/detailed-status (Deprecated)

Get IPSec VPN configuration for the peer site


Download IPSec VPN configuration for the peer site. Peer config also
contains PSK; be careful when sharing or storing it.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/peer-config (Deprecated)

Get IPSec VPN session statistics under Tier-1


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from enforcement point are returned.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/statistics instead.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics (Deprecated)

Reset the statistics of the given VPN session


Resets the statistics of the given VPN session.
Since source of data is enforcement point, data is
reset there.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/
sessions/<session-id>/statistics instead.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/sessions/<session-id>/statistics (Deprecated)

Get IPSec VPN Session Summary


Summarized view of all tier-1 IPSec VPN sessions for a specified service.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/ipsec-vpn-services/<service-id>/summary
instead.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/ipsec-vpn-services/<service-id>/summary (Deprecated)

Get L2VPN service list result under Tier-1


Get paginated list of all L2VPN services under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services (Deprecated)

Delete L2VPN service under Tier-1


Delete L2VPN service for given Tier-1 locale service.
This API is deprecated. Please use DELETE /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Get L2VPN service under Tier-1


Get L2VPN service for given Tier-1 locale service.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Create or patch L2VPN service under Tier-1


Create or patch L2VPN service for given Tier-1 locale service.
This API is deprecated. Please use PATCH /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Create or fully replace L2VPN service under Tier-1


Create or fully replace L2VPN service for given Tier-1 locale service.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id> (Deprecated)

Get L2VPN sessions list result under Tier-1


Get paginated list of all L2VPN sessions under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions instead.
Note:
The API will return a new VPN path for "transport_tunnels" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions (Deprecated)

Delete L2VPN session under Tier-1


Delete L2VPN session under Tier-1. When L2VPN Service is
in CLIENT Mode, the L2VPN Session is deleted along with its transpot
tunnels and related resources.
This API is deprecated. Please use DELETE /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get L2VPN Session under Tier-1


Get L2VPN session under Tier-1.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id> instead.
Note:
The API will return a new VPN path for "transport_tunnels" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or patch an L2VPN session under Tier-1


Create or patch an L2VPN session under Tier-1. API supported
only when L2VPN Service is in Server Mode.
This API is deprecated. Please use PATCH /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id> instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Create or patch an L2VPN session under Tier-1 from Peer Codes


Create or patch an L2VPN session under Tier-1 from Peer Codes.
In addition to the L2VPN Session, the IPSec VPN Session, along
with the IKE, Tunnel, and DPD Profiles are created and owned by
the system. IPSec VPN Service and Local Endpoint are created only
when required, i.e., an IPSec VPN Service does not already exist,
or an IPSec VPN Local Endpoint with same local address does not
already exist.
Updating the L2VPN Session can be performed only through this API
by specifying new peer codes. Use of specific APIs to update the
L2VPN Session and the different resources associated with it is
not allowed, except for IPSec VPN Service and Local Endpoint,
resources that are not system owned.
API supported only when L2VPN Service is in Client Mode.
This API is deprecated. Please use POST /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code instead.
Note:
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
POST /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>?action=create_with_peer_code (Deprecated)

Create or fully replace L2VPN session under Tier-1


Create or fully replace L2VPN session under Tier-1. API supported
only when L2VPN Service is in Server Mode.
Revision is optional for creation and required for update.
This API is deprecated. Please use PUT /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id> instead.
Note:
The API will return a new VPN path for "transport_tunnels" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
Also VPN path returned in the Alarm, GPRR payload may include the new VPN path.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id> (Deprecated)

Get L2VPN session detailed status under Tier-1


- no enforcement point path specified: detailed tatus is evaluated on each enforcement point.
- an enforcement point path is specified: detailed status is evaluated only on the given
enforcement point.
- source=realtime: detailed tatus is fetched realtime from the enforcement point.
- source=cached: cached detailed status is returned.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id>/detailed-status instead.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/detailed-status (Deprecated)

Get Tier-1 L2VPN session configuration for the peer site


Get peer config for the Tier-1 L2VPN session to configure the remote
side of the tunnel.
- no enforcement point path specified: L2VPN Session Peer Codes
will be evaluated on each enforcement point.
- enforcement point paths specified: L2VPN Session Peer Codes
are evaluated only on the given enforcement points.
API supported only when L2VPN Service is in Server Mode.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id>/peer-config instead.
Note:
The API will return a new VPN path for "transport_tunnel_path" in the response payload instead of the deprecated API path
Both paths refer to the same object.
Please note that request is validated and any error messages returned from validation may include the new VPN path
instead of the deprecated path. Both new path and old path refer to same resource.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/peer-config (Deprecated)

Get L2Vpn session remote mac for logical switch


Returns L2Vpn session remote macs for a logical switch.
Data is fetched from enforcement point.
This API is deprecated. Please use GET /infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac
instead.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/remote-mac (Deprecated)

Get L2VPN session statistics under Tier-1


- no enforcement point path specified: statistics are evaluated on each enforcement point.
- an enforcement point path is specified: statistics are evaluated only on the given
enforcement point.
- source=realtime: statistics are fetched realtime from the enforcement point.
- source=cached: cached statistics from the enforcement point are returned.
This API is deprecated. Please use GET //infra/tier-1s/<tier-1-id>/l2vpn-services/<service-id>/
sessions/<session-id>/statistics instead.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/l2vpn-services/<service-id>/sessions/<session-id>/statistics (Deprecated)

List Tier 1 Service Interfaces


Paginated list of all Tier 1 Service Interfaces
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces

Delete Tier 1 service interface


Delete Tier 1 service interface
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Read Tier 1 service interface


Read Tier 1 service interface
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Create or update a Tier-1 service interface


If a Tier1 service interface with the interface-id is not already present, create a new Tier1 service
interface.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Create a Tier1 service interface


If a Tier1 service interface with the interface-id is not already present, create a new Tier1 service
interface. Modification of Tier 1 service interface is not allowed.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-service-id>/service-interfaces/<interface-id>

Delete Tier-1 locale-services


Delete Tier-1 locale-services
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

Read Tier-1 locale-services


Read Tier-1 locale-services
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

Create or update a Tier-1 locale-services


If a Tier-1 locale services with the locale-services-id is not already
present, create a new locale services. If it already exists, update
Tier-1 locale services with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

Create or update a Tier-1 locale-services


If a Tier-1 locale services with the locale-services-id is not already
present, create a new locale-services. If it already exists, replace the
Tier-1 locale services instance with the new object.

Modifying edge cluster re-allocates NSX service routers of TIER1 to a different edge
cluster. You can also place edge nodes manually and provide maximum two indices
for HA mode ACTIVE_STANDBY. To re-allocating edge cluster is a disruptive operation
and all existing statistics of Tier1 gateway will be removed.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>

List Tier-1 interfaces


Paginated list of all Tier-1 interfaces
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces

Delete Tier-1 interface


Delete Tier-1 interface
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Read Tier-1 interface


Read Tier-1 interface
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Create or update a Tier-1 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, update the interface for specified
attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Create or update a tier-1 interface


If an interface with the interface-id is not already present, create a new
interface. If it already exists, replace the interface with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/interfaces/<interface-id>

Read Multicast Configuration


Read Multicast Configuration.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast

Create or update multicast configuration


Create or update a Tier-1 multicast configuration defining the multicast replication range.
It will update the configuration if there is already one in place.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast

Create or update multicast configuration


Create or update a Tier-1 multicast configuration defining the multicast replication range.
It will update the configuration if there is already one in place.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast

Get Multicast Forwarding In Csv Format


Get Multicast Forwarding In CSV Format.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast/forwarding?format=csv

Get Multicast Forwarding


Get Multicast Forwarding.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast/forwarding

Get IGMP Memberships in CSV format


Get Igmp Memberships in CSV format.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast/igmp-memberships?format=csv

Get IGMP Memberships


Get Igmp Memberships.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/locale-services/<locale-services-id>/multicast/igmp-memberships

List Policy NAT types.


List all NAT sections under the given Tier-1 ID.
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat

List NAT Rules


List NAT Rules from Tier-1 denoted by Tier-1 ID, under NAT section
denoted by <nat-id>.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PATCH/PUT PoliycNatRule API, the path returned in the GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules

Delete NAT Rule


Delete NAT Rule from Tier-1 denoted by Tier-1 ID, under NAT section denoted by <nat-id>. Under tier-1 there will be 3 different NATs(sections). (INTERNAL, USER and DEFAULT) For more details related to NAT section please refer to PolicyNAT schema.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule


Get NAT Rule from Tier-1 denoted by Tier-1 ID, under NAT section
denoted by <nat-id>.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PATCH/PUT PoliycNatRule API, the path returned in the GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Create or update a Nat Rule


If a NAT Rule is not already present on Tier-1 denoted by Tier-1 ID,
under NAT section denoted by <nat-id>, create a new NAT Rule.
If it already exists, update the NAT Rule.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property, the path returned in the GET response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Update NAT Rule


Update NAT Rule on Tier-1 denoted by Tier-1 ID, under NAT section
denoted by <nat-id>.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
Note:
IPSecVpnSession as Scope: Please note that old IPSecVpnSession policy path deprecated. If user specifiy old IPSecVpnSession path in the
scope property in the PUT API, the path returned in the GET/PUT response payload will be a new path instead of the deprecated IPSecVpnSession path
Both old and new IPSecVpnSession path refer to same resource. there is no functional impact.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>

Get NAT Rule Statistics


Get NAT Rule Statistics from Tier-1 denoted by Tier-1 ID, under NAT section
denoted by <nat-id>.
Under tier-1 there will be 3 different NATs(sections).
(INTERNAL, USER and DEFAULT)
For more details related to NAT section please refer to PolicyNAT schema.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/<nat-id>/nat-rules/<nat-rule-id>/statistics

List NAT Rules Statistics


List NAT Rules Statistics from Tier-1 denoted by Tier-1 ID.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/nat/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/nat/statistics

Paginated list of all fixed segments (identified as /policy/api/v1/infra/tier-1s//segments/) under Tier-1 instance.


Paginated list of all fixed segments (identified as /policy/api/v1/infra/tier-1s//segments/) under Tier-1 instance.
This API call does not return flexible segments (identified as /policy/api/v1/infra/segments/) connected to the Tier-1.
To return all segments connected as a downlink to a Tier-1 one possibility is to use the search API with: https://{{nsx-mgr}}/policy/api/v1/search?query=resource_type:Segment%20AND%20connectivity_path:“/infra/tier-1s/
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PUT/PATCH API payload, the path returned in the GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments

Delete segment


Delete segment
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Force delete segment


Force delete bypasses validations during segment deletion. This may result in an inconsistent connectivity.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>?force=true

Read segment


Read segment
Note:
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PUT/PATCH API payload, the path returned in the GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, update the segment with specified attributes.
Note:
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PATCH API payload, the path returned in the GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the Alarm, GPRR, error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Create or update a segment


If segment with the segment-id is not already present, create a new segment.
If it already exists, replace the segment with this object.
Note:
Extended Segment: Please note that old vpn path deprecated. If user specify old l2vpn path in the
"l2_extension" object in the PUT API payload, the path returned in the PUT/GET response payload may include the new path
instead of the deprecated l2vpn path. Both old and new l2vpn path refer to same resource. there is no functional impact.
Also note that l2vpn path included in the Alarm, GPRR, error messages returned from validation may include the new VPN path
instead of the deprecated l2vpn path. Both new path and old vpn path refer to same resource.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>

Get downlink port Address Resolution Protocol Proxies for tier-1 segment


Returns ARP proxy table for downlink port on connected to the segment
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-proxy
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-proxy

Get downlink port Address Resolution Protocol Proxies for tier-1 segment in CSV


Returns ARP proxy table for downlink port on connected to the segment in CSV
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-proxy?format=csv
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-proxy?format=csv

Get ARP table from segment interface (downlink) in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format for the
interface (downlink) attaching segment to tier1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table?format=csv
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table?format=csv

Get ARP table from segment interface (downlink)


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) for the
interface (downlink) attaching segment to tier-1 gateway, on a edge
node specified in edge_path parameter.
The edge_path parameter is mandatory.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table

Get Tier-1 segment bridge end point statistics using segment ID and profile path.


Get detailed information on Tier-1 segment bridge end point statistics using segment ID and profile path.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/bep-statistics
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/bep-statistics

Get Tier-1 segment bridge end point status using segment ID and profile path.


Get detailed information on Tier-1 segment bridge end point status using segment ID and profile path.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/bep-status
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/bep-status

List all DHCP static bindings


Paginated list of all DHCP static binding instances
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs

Delete DHCP static binding


Delete DHCP static binding
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding


Read DHCP static binding
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with specified attributes.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Create or update DHCP static binding


If binding with the binding-id is not already present,
create a new DHCP static binding instance. If it already exists, replace
the existing DHCP static binding instance with this object.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-binding-configs/<binding-id>

Read DHCP static binding state


Read DHCP static binding state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-bindings/<binding-id>/state
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/dhcp-static-bindings/<binding-id>/state

Get ARP table for downlink router port on tier-1 router


This API is deprecated because it is duplicate.
Please use /infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table
Segment ID is the ID of the segment that is connected to the the tier-1
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-arp-table (Deprecated)
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-arp-table (Deprecated)

Get ARP table for downlink router port on tier-1 router in CSV


This API is deprecated because it is duplicate.
Please use /infra/tier-1s/<tier-1-id>/segments/<segment-id>/arp-table?format=csv
Segment ID is the ID of the segment that is connected to the the tier-1
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-arp-table?format=csv (Deprecated)
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-arp-table?format=csv (Deprecated)

Get DAD state for downlink router port on tier-1 router


Segment ID is the ID of the segment that is connected to the the tier-1
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-dad-state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-dad-state

Get statistics for downlink router port on tier-1 router


Segment ID is the ID of the segment that is connected to the the tier-1
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-statistics

Get statistics for downlink router port on tier-1 router


Segment ID is the ID of the segment that is connected to the the tier-1
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-statistics/summary
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/gateway-interface-statistics/summary

Get Tier-1 segment MAC table


Returns MAC table for a segment
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/mac-table
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/mac-table

Get Tier-1 segment MAC table in CSV


Returns MAC table for a segment
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/mac-table?format=csv
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/mac-table?format=csv

List Tier-1 segment ports


List all the ports for a Tier-1 segment.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports

Delete a Tier-1 segment port


Delete a Tier-1 segment port by giving ID.
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Get Tier-1 segment port by ID


Get detail information on a Tier-1 segment port by giving ID.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Patch a Tier-1 segment port


Create a Tier-1 segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object fields which presents in the request body.
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Create or update a Tier-1 segment port


Create a Tier-1 segment port if it does not exist based on the IDs, or update existing port
information by replacing the port object already exists.
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>

Get tier-1 segment port MAC table in CSV


Returns MAC table for a segment port
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/mac-table?format=csv
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/mac-table?format=csv

Get MAC table for tier-1 segment port


Returns MAC table for a segment port
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/mac-table
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/mac-table

List Port Discovery Profile Binding Maps


API will list all Port Discovery Profile Binding Maps in current port id.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps

Delete Port Discovery Profile Binding Profile


API will delete Port Discovery Profile Binding Profile
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Get Port Discovery Profile Binding Map


API will get Port Discovery Profile Binding Map
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Create Port Discovery Profile Binding Map


API will create Port Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

Update Port Discovery Profile Binding Map


API will update Port Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-discovery-profile-binding-maps/<port-discovery-profile-binding-map-id>

List Port Monitoring Profile Binding Maps


API will list all Port Monitoring Profile Binding Maps in current port id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps

Delete Port Monitoring Profile Binding Profile


API will delete Port Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Get Port Monitoring Profile Binding Map


API will get Port Monitoring Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Create Port Monitoring Profile Binding Map


API will create Port Monitoring Profile Binding Map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Update Port Monitoring Profile Binding Map


API will update Port Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>

Get mirror stack status for Port Monitoring Profile Binding Map


API will get mirror stack status by Port Monitoring Profile Binding Map.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>/mirror-stack-status
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-monitoring-profile-binding-maps/<port-monitoring-profile-binding-map-id>/mirror-stack-status

List Port QoS Profile Binding Maps


API will list all Port QoS Profile Binding Maps in current port id.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps

Delete Port QoS Profile Binding Profile


API will delete Port QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Get Port QoS Profile Binding Map


API will get Port QoS Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Create Port QoS Profile Binding Map


API will create Port QoS Profile Binding Map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

Update Port QoS Profile Binding Map


API will update Port QoS Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-qos-profile-binding-maps/<port-qos-profile-binding-map-id>

List port security profile binding maps


API will list all port security profile binding maps.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps

Delete the port security profile binding map


API will delete the port security profile binding map.
DELETE /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Get port security profile binding map


API will return details of the port security profile binding map. If the
security profile binding map does not exist, it will return 404.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Patch port security profile binding map


Create a new port security profile binding map if the given security profile
binding map does not exist. Otherwise, patch the existing port security
profile binding map.
For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Create or replace the port security profile binding map


API will create or replace the port security profile binding map.
For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/port-security-profile-binding-maps/<port-security-profile-binding-map-id>

Get tier-1 segment port state


Returns tier-1 segment port state on enforcement point
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/ports/<port-id>/state

List Segment Discovery Profile Binding Maps


API will list all Segment Discovery Profile Binding Maps in current segment id.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps

Delete Segment Discovery Profile Binding Profile


API will delete Segment Discovery Profile Binding Profile
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Get Segment Discovery Profile Binding Map


API will get Segment Discovery Profile Binding Map
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Create Segment Discovery Profile Binding Map


API will create Segment Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

Update Segment Discovery Profile Binding Map


API will update Segment Discovery Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-discovery-profile-binding-maps/<segment-discovery-profile-binding-map-id>

List Segment Monitoring Profile Binding Maps


API will list all Segment Monitoring Profile Binding Maps in current segment id.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps

Delete Segment Monitoring Profile Binding Profile


API will delete Segment Monitoring Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Get Segment Monitoring Profile Binding Map


API will get Segment Monitoring Profile Binding Map.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Create Segment Monitoring Profile Binding Map


API will create segment monitoring profile binding map.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Update Segment Monitoring Profile Binding Map


API will update Segment Monitoring Profile Binding Map.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>

Get mirror stack status for Segment Monitoring Profile Binding Map


API will get mirror stack status by Segment Monitoring Profile Binding Map.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>/mirror-stack-status
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-monitoring-profile-binding-maps/<segment-monitoring-profile-binding-map-id>/mirror-stack-status

List Segment QoS Profile Binding Maps


API will list all Segment QoS Profile Binding Maps in current segment id.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps

Delete Segment QoS Profile Binding Profile


API will delete Segment QoS Profile Binding Profile.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Get Segment QoS Profile Binding Map


API will get Segment QoS Profile Binding Map.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Create Segment QoS Profile Binding Map


API will create segment QoS profile binding map. For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

Update Segment QoS Profile Binding Map


API will update Segment QoS Profile Binding Map. For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-qos-profile-binding-maps/<segment-qos-profile-binding-map-id>

List segment security profile binding maps


API will list all segment security profile binding maps.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps

Delete segment security profile binding map


API will delete segment security profile binding map.
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Get segment security profile binding map


API will return details of the segment security profile binding map. If the
binding map does not exist, it will return 404.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Patch segment security profile binding map


Create a new segment security profile binding map if the given security
profile binding map does not exist. Otherwise, patch the existing segment
security profile binding map.
For objects with no binding maps, default profile is applied.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Create or replace segment security profile binding map


API will create or replace segment security profile binding map.
For objects with no binding maps, default profile is applied.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/segment-security-profile-binding-maps/<segment-security-profile-binding-map-id>

Delete static ARP config


Delete static ARP config
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Read static ARP config


Read static ARP config
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Create or update a static ARP config


Create static ARP config with Tier-1 and segment IDs provided if it doesn't exist,
update with provided config if it's already created.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Create or update a static ARP config


Create static ARP config with Tier-1 and segment IDs provided if it doesn't exist,
update with provided config if it's already created.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/static-arp

Get tier-1 segment TEP table in CSV


Returns TEP table for a segment in CSV
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/tep-table?format=csv
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/tep-table?format=csv

Get tier-1 segment TEP table


Returns TEP table for a segment
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segment-id>/tep-table
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segment-id>/tep-table

Get tier-1 segment port statistics information


Get tier-1 segment port statistics information.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segments-id>/ports/<port-id>/statistics
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/ports/<port-id>/statistics

Get segment port status information


Get tier1 segment port status information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/ports/<port-id>/status
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segments-id>/ports/<port-id>/status

Get segment state information


Get tier1 segment state information.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segments-id>/state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/state

Get segment statistics information


Get tier1 segment statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/<segments-id>/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/<segments-id>/statistics

Get tier-1 segments by configuration state


Returns all tier-1 segments with configuration state on the enforcement
point specified in the request
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/segments/state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/segments/state

Get Tier1 state


Returns
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/state
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/state

List Tier-1 Static Routes


Paginated list of all Tier-1 Static Routes
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/static-routes

Delete Tier-1 static routes


Delete Tier-1 static routes
DELETE /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Read Tier-1 static routes


Read Tier-1 static routes
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/static-routes/<route-id>
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Create or update a Tier-1 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, update static routes for route-id.
PATCH /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Create or update a Tier-1 static routes


If static routes for route-id are not already present, create
static routes. If it already exists, replace the static routes for route-id.
PUT /policy/api/v1/infra/tier-1s/<tier-1-id>/static-routes/<route-id>

Get ARP table from tier-1 router link interface in CSV format


Returns ARP table (IPv4) or Neighbor Discovery table (IPv6) in CSV format
for the tier-1 router link interface.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/tier-0-interface/arp-table?format=csv
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/tier-0-interface/arp-table?format=csv

Get tier-1 router link arp information


Get tier-1 interface arp information.
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/tier-0-interface/arp-table
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/tier-0-interface/arp-table

Get tier-1 router link statistics information


Get tier-0 interface statistics information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/tier-0-interface/statistics
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/tier-0-interface/statistics

Get tier-1 router link statistics summary information


Get tier-1 interface statistics summary information.
GET /policy/api/v1/infra/tier-1s/<tier-1-id>/tier-0-interface/statistics/summary
GET /policy/api/v1/global-infra/tier-1s/<tier-1-id>/tier-0-interface/statistics/summary

Delete DHCP lease(s) specified by IP and MAC


Delete one or multiple DHCP lease(s) specified by IP and MAC under a Tier-1.

If there is a DHCP server running upon the given segment, or this segment
is using a DHCP server running in its connected Tier-1, the DHCP lease(s)
which match exactly the IP address and the MAC address will be deleted.
If no such lease matches, the deletion for this lease will be ignored.

The DHCP lease to be deleted will be removed by the system from both active
and standby node. The system will report error if the DHCP lease could not
be removed from both nodes. If the DHCP lease could not be removed on either
node, please check the DHCP server status. Once the DHCP server status is
UP, please invoke the deletion API again to ensure the lease gets deleted
from both nodes.
POST /policy/api/v1/infra/tier-1s/<tier1-id>/segments/<segment-id>?action=delete_dhcp_leases

List Policy Transport Zone Profiles


API will list all Policy Transport Zone Profiles.
GET /policy/api/v1/infra/transport-zone-profiles
GET /policy/api/v1/global-infra/transport-zone-profiles

Delete Policy Transport Zone Profile


API will delete Policy Transport Zone Profile.
DELETE /policy/api/v1/infra/transport-zone-profiles/<tz-profile-id>

Get Policy Transport Zone Profile


API will fetch Policy Transport Zone Profile.
GET /policy/api/v1/global-infra/transport-zone-profiles/<tz-profile-id>
GET /policy/api/v1/infra/transport-zone-profiles/<tz-profile-id>

Create Policy Transport Zone Profile


API will create Policy Transport Zone Profile.
PATCH /policy/api/v1/infra/transport-zone-profiles/<tz-profile-id>

Update Policy Transport Zone Profile


API will update Policy Transport Zone Profile.
PUT /policy/api/v1/infra/transport-zone-profiles/<tz-profile-id>

List Vni Pool Configuration


List all Vni Pool configuration.
GET /policy/api/v1/infra/vni-pools

Delete Vni Pool Configuration


Delete Vni Pool Configuration.
DELETE /policy/api/v1/infra/vni-pools/<vni-pool-id>

Read Vni Pool Configuration


Read Vni Pool Configuration.
GET /policy/api/v1/infra/vni-pools/<vni-pool-id>

Create or Update Vni Pool Configuration


Create a Vni Pool config if it is not already present,
otherwise update the Vni Pool configuration.
PATCH /policy/api/v1/infra/vni-pools/<vni-pool-id>

Create or Update Vni Pool Configuration


Create or update VniPool configuration.
PUT /policy/api/v1/infra/vni-pools/<vni-pool-id>