nxos.Ipv4AccessListEntry
Explore with Pulumi AI
This resource can manage IPv4 Access List Entries.
- API Documentation: ipv4aclACE
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nxos = Lbrlabs.PulumiPackage.Nxos;
return await Deployment.RunAsync(() =>
{
var example = new Nxos.Ipv4AccessListEntry("example", new()
{
Ack = false,
Action = "permit",
DestinationAddressGroup = "AG1",
DestinationPort1 = "443",
DestinationPort2 = "0",
DestinationPortGroup = "PG1",
DestinationPortMask = "0",
DestinationPortOperator = "eq",
DestinationPrefix = "10.1.1.0",
DestinationPrefixLength = "24",
DestinationPrefixMask = "255.255.255.0",
Dscp = 0,
Est = false,
Fin = false,
Fragment = false,
HttpOptionType = "invalid",
IcmpCode = 0,
IcmpType = 0,
Logging = true,
PacketLength1 = "19",
PacketLength2 = "9210",
PacketLengthOperator = "range",
Precedence = "0",
Protocol = "tcp",
ProtocolMask = "tcp",
Psh = false,
Redirect = "RD",
Remark = "Line1",
Rev = false,
Rst = false,
SequenceNumber = 10,
SourceAddressGroup = "AG2",
SourcePort1 = "443",
SourcePort2 = "0",
SourcePortGroup = "PG2",
SourcePortMask = "0",
SourcePortOperator = "eq",
SourcePrefix = "20.1.0.0",
SourcePrefixLength = "16",
SourcePrefixMask = "255.255.0.0",
Syn = false,
TimeRange = "TR1",
Ttl = 0,
Urg = false,
Vlan = 4095,
Vni = "invalid",
});
});
package main
import (
"github.com/lbrlabs/pulumi-nxos/sdk/go/nxos"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := nxos.NewIpv4AccessListEntry(ctx, "example", &nxos.Ipv4AccessListEntryArgs{
Ack: pulumi.Bool(false),
Action: pulumi.String("permit"),
DestinationAddressGroup: pulumi.String("AG1"),
DestinationPort1: pulumi.String("443"),
DestinationPort2: pulumi.String("0"),
DestinationPortGroup: pulumi.String("PG1"),
DestinationPortMask: pulumi.String("0"),
DestinationPortOperator: pulumi.String("eq"),
DestinationPrefix: pulumi.String("10.1.1.0"),
DestinationPrefixLength: pulumi.String("24"),
DestinationPrefixMask: pulumi.String("255.255.255.0"),
Dscp: pulumi.Int(0),
Est: pulumi.Bool(false),
Fin: pulumi.Bool(false),
Fragment: pulumi.Bool(false),
HttpOptionType: pulumi.String("invalid"),
IcmpCode: pulumi.Int(0),
IcmpType: pulumi.Int(0),
Logging: pulumi.Bool(true),
PacketLength1: pulumi.String("19"),
PacketLength2: pulumi.String("9210"),
PacketLengthOperator: pulumi.String("range"),
Precedence: pulumi.String("0"),
Protocol: pulumi.String("tcp"),
ProtocolMask: pulumi.String("tcp"),
Psh: pulumi.Bool(false),
Redirect: pulumi.String("RD"),
Remark: pulumi.String("Line1"),
Rev: pulumi.Bool(false),
Rst: pulumi.Bool(false),
SequenceNumber: pulumi.Int(10),
SourceAddressGroup: pulumi.String("AG2"),
SourcePort1: pulumi.String("443"),
SourcePort2: pulumi.String("0"),
SourcePortGroup: pulumi.String("PG2"),
SourcePortMask: pulumi.String("0"),
SourcePortOperator: pulumi.String("eq"),
SourcePrefix: pulumi.String("20.1.0.0"),
SourcePrefixLength: pulumi.String("16"),
SourcePrefixMask: pulumi.String("255.255.0.0"),
Syn: pulumi.Bool(false),
TimeRange: pulumi.String("TR1"),
Ttl: pulumi.Int(0),
Urg: pulumi.Bool(false),
Vlan: pulumi.Int(4095),
Vni: pulumi.String("invalid"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nxos.Ipv4AccessListEntry;
import com.pulumi.nxos.Ipv4AccessListEntryArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Ipv4AccessListEntry("example", Ipv4AccessListEntryArgs.builder()
.ack(false)
.action("permit")
.destinationAddressGroup("AG1")
.destinationPort1("443")
.destinationPort2("0")
.destinationPortGroup("PG1")
.destinationPortMask("0")
.destinationPortOperator("eq")
.destinationPrefix("10.1.1.0")
.destinationPrefixLength("24")
.destinationPrefixMask("255.255.255.0")
.dscp(0)
.est(false)
.fin(false)
.fragment(false)
.httpOptionType("invalid")
.icmpCode(0)
.icmpType(0)
.logging(true)
.packetLength1("19")
.packetLength2("9210")
.packetLengthOperator("range")
.precedence("0")
.protocol("tcp")
.protocolMask("tcp")
.psh(false)
.redirect("RD")
.remark("Line1")
.rev(false)
.rst(false)
.sequenceNumber(10)
.sourceAddressGroup("AG2")
.sourcePort1("443")
.sourcePort2("0")
.sourcePortGroup("PG2")
.sourcePortMask("0")
.sourcePortOperator("eq")
.sourcePrefix("20.1.0.0")
.sourcePrefixLength("16")
.sourcePrefixMask("255.255.0.0")
.syn(false)
.timeRange("TR1")
.ttl(0)
.urg(false)
.vlan(4095)
.vni("invalid")
.build());
}
}
import pulumi
import lbrlabs_pulumi_nxos as nxos
example = nxos.Ipv4AccessListEntry("example",
ack=False,
action="permit",
destination_address_group="AG1",
destination_port1="443",
destination_port2="0",
destination_port_group="PG1",
destination_port_mask="0",
destination_port_operator="eq",
destination_prefix="10.1.1.0",
destination_prefix_length="24",
destination_prefix_mask="255.255.255.0",
dscp=0,
est=False,
fin=False,
fragment=False,
http_option_type="invalid",
icmp_code=0,
icmp_type=0,
logging=True,
packet_length1="19",
packet_length2="9210",
packet_length_operator="range",
precedence="0",
protocol="tcp",
protocol_mask="tcp",
psh=False,
redirect="RD",
remark="Line1",
rev=False,
rst=False,
sequence_number=10,
source_address_group="AG2",
source_port1="443",
source_port2="0",
source_port_group="PG2",
source_port_mask="0",
source_port_operator="eq",
source_prefix="20.1.0.0",
source_prefix_length="16",
source_prefix_mask="255.255.0.0",
syn=False,
time_range="TR1",
ttl=0,
urg=False,
vlan=4095,
vni="invalid")
import * as pulumi from "@pulumi/pulumi";
import * as nxos from "@lbrlabs/pulumi-nxos";
const example = new nxos.Ipv4AccessListEntry("example", {
ack: false,
action: "permit",
destinationAddressGroup: "AG1",
destinationPort1: "443",
destinationPort2: "0",
destinationPortGroup: "PG1",
destinationPortMask: "0",
destinationPortOperator: "eq",
destinationPrefix: "10.1.1.0",
destinationPrefixLength: "24",
destinationPrefixMask: "255.255.255.0",
dscp: 0,
est: false,
fin: false,
fragment: false,
httpOptionType: "invalid",
icmpCode: 0,
icmpType: 0,
logging: true,
packetLength1: "19",
packetLength2: "9210",
packetLengthOperator: "range",
precedence: "0",
protocol: "tcp",
protocolMask: "tcp",
psh: false,
redirect: "RD",
remark: "Line1",
rev: false,
rst: false,
sequenceNumber: 10,
sourceAddressGroup: "AG2",
sourcePort1: "443",
sourcePort2: "0",
sourcePortGroup: "PG2",
sourcePortMask: "0",
sourcePortOperator: "eq",
sourcePrefix: "20.1.0.0",
sourcePrefixLength: "16",
sourcePrefixMask: "255.255.0.0",
syn: false,
timeRange: "TR1",
ttl: 0,
urg: false,
vlan: 4095,
vni: "invalid",
});
resources:
example:
type: nxos:Ipv4AccessListEntry
properties:
ack: false
action: permit
destinationAddressGroup: AG1
destinationPort1: '443'
destinationPort2: '0'
destinationPortGroup: PG1
destinationPortMask: '0'
destinationPortOperator: eq
destinationPrefix: 10.1.1.0
destinationPrefixLength: '24'
destinationPrefixMask: 255.255.255.0
dscp: 0
est: false
fin: false
fragment: false
httpOptionType: invalid
icmpCode: 0
icmpType: 0
logging: true
packetLength1: '19'
packetLength2: '9210'
packetLengthOperator: range
precedence: '0'
protocol: tcp
protocolMask: tcp
psh: false
redirect: RD
remark: Line1
rev: false
rst: false
sequenceNumber: 10
sourceAddressGroup: AG2
sourcePort1: '443'
sourcePort2: '0'
sourcePortGroup: PG2
sourcePortMask: '0'
sourcePortOperator: eq
sourcePrefix: 20.1.0.0
sourcePrefixLength: '16'
sourcePrefixMask: 255.255.0.0
syn: false
timeRange: TR1
ttl: 0
urg: false
vlan: 4095
vni: invalid
Create Ipv4AccessListEntry Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Ipv4AccessListEntry(name: string, args: Ipv4AccessListEntryArgs, opts?: CustomResourceOptions);
@overload
def Ipv4AccessListEntry(resource_name: str,
args: Ipv4AccessListEntryArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Ipv4AccessListEntry(resource_name: str,
opts: Optional[ResourceOptions] = None,
sequence_number: Optional[int] = None,
precedence: Optional[str] = None,
syn: Optional[bool] = None,
destination_port1: Optional[str] = None,
destination_port2: Optional[str] = None,
destination_port_group: Optional[str] = None,
destination_port_mask: Optional[str] = None,
destination_port_operator: Optional[str] = None,
destination_prefix: Optional[str] = None,
destination_prefix_length: Optional[str] = None,
destination_prefix_mask: Optional[str] = None,
device: Optional[str] = None,
dscp: Optional[int] = None,
est: Optional[bool] = None,
fin: Optional[bool] = None,
fragment: Optional[bool] = None,
http_option_type: Optional[str] = None,
icmp_code: Optional[int] = None,
icmp_type: Optional[int] = None,
logging: Optional[bool] = None,
name: Optional[str] = None,
packet_length1: Optional[str] = None,
packet_length2: Optional[str] = None,
vlan: Optional[int] = None,
destination_address_group: Optional[str] = None,
redirect: Optional[str] = None,
protocol_mask: Optional[str] = None,
psh: Optional[bool] = None,
protocol: Optional[str] = None,
remark: Optional[str] = None,
rev: Optional[bool] = None,
rst: Optional[bool] = None,
action: Optional[str] = None,
source_address_group: Optional[str] = None,
source_port1: Optional[str] = None,
source_port2: Optional[str] = None,
source_port_group: Optional[str] = None,
source_port_mask: Optional[str] = None,
source_port_operator: Optional[str] = None,
source_prefix: Optional[str] = None,
source_prefix_length: Optional[str] = None,
source_prefix_mask: Optional[str] = None,
ack: Optional[bool] = None,
time_range: Optional[str] = None,
ttl: Optional[int] = None,
urg: Optional[bool] = None,
packet_length_operator: Optional[str] = None,
vni: Optional[str] = None)
func NewIpv4AccessListEntry(ctx *Context, name string, args Ipv4AccessListEntryArgs, opts ...ResourceOption) (*Ipv4AccessListEntry, error)
public Ipv4AccessListEntry(string name, Ipv4AccessListEntryArgs args, CustomResourceOptions? opts = null)
public Ipv4AccessListEntry(String name, Ipv4AccessListEntryArgs args)
public Ipv4AccessListEntry(String name, Ipv4AccessListEntryArgs args, CustomResourceOptions options)
type: nxos:Ipv4AccessListEntry
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var ipv4AccessListEntryResource = new Nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource", new()
{
SequenceNumber = 0,
Precedence = "string",
Syn = false,
DestinationPort1 = "string",
DestinationPort2 = "string",
DestinationPortGroup = "string",
DestinationPortMask = "string",
DestinationPortOperator = "string",
DestinationPrefix = "string",
DestinationPrefixLength = "string",
DestinationPrefixMask = "string",
Device = "string",
Dscp = 0,
Est = false,
Fin = false,
Fragment = false,
HttpOptionType = "string",
IcmpCode = 0,
IcmpType = 0,
Logging = false,
Name = "string",
PacketLength1 = "string",
PacketLength2 = "string",
Vlan = 0,
DestinationAddressGroup = "string",
Redirect = "string",
ProtocolMask = "string",
Psh = false,
Protocol = "string",
Remark = "string",
Rev = false,
Rst = false,
Action = "string",
SourceAddressGroup = "string",
SourcePort1 = "string",
SourcePort2 = "string",
SourcePortGroup = "string",
SourcePortMask = "string",
SourcePortOperator = "string",
SourcePrefix = "string",
SourcePrefixLength = "string",
SourcePrefixMask = "string",
Ack = false,
TimeRange = "string",
Ttl = 0,
Urg = false,
PacketLengthOperator = "string",
Vni = "string",
});
example, err := nxos.NewIpv4AccessListEntry(ctx, "ipv4AccessListEntryResource", &nxos.Ipv4AccessListEntryArgs{
SequenceNumber: pulumi.Int(0),
Precedence: pulumi.String("string"),
Syn: pulumi.Bool(false),
DestinationPort1: pulumi.String("string"),
DestinationPort2: pulumi.String("string"),
DestinationPortGroup: pulumi.String("string"),
DestinationPortMask: pulumi.String("string"),
DestinationPortOperator: pulumi.String("string"),
DestinationPrefix: pulumi.String("string"),
DestinationPrefixLength: pulumi.String("string"),
DestinationPrefixMask: pulumi.String("string"),
Device: pulumi.String("string"),
Dscp: pulumi.Int(0),
Est: pulumi.Bool(false),
Fin: pulumi.Bool(false),
Fragment: pulumi.Bool(false),
HttpOptionType: pulumi.String("string"),
IcmpCode: pulumi.Int(0),
IcmpType: pulumi.Int(0),
Logging: pulumi.Bool(false),
Name: pulumi.String("string"),
PacketLength1: pulumi.String("string"),
PacketLength2: pulumi.String("string"),
Vlan: pulumi.Int(0),
DestinationAddressGroup: pulumi.String("string"),
Redirect: pulumi.String("string"),
ProtocolMask: pulumi.String("string"),
Psh: pulumi.Bool(false),
Protocol: pulumi.String("string"),
Remark: pulumi.String("string"),
Rev: pulumi.Bool(false),
Rst: pulumi.Bool(false),
Action: pulumi.String("string"),
SourceAddressGroup: pulumi.String("string"),
SourcePort1: pulumi.String("string"),
SourcePort2: pulumi.String("string"),
SourcePortGroup: pulumi.String("string"),
SourcePortMask: pulumi.String("string"),
SourcePortOperator: pulumi.String("string"),
SourcePrefix: pulumi.String("string"),
SourcePrefixLength: pulumi.String("string"),
SourcePrefixMask: pulumi.String("string"),
Ack: pulumi.Bool(false),
TimeRange: pulumi.String("string"),
Ttl: pulumi.Int(0),
Urg: pulumi.Bool(false),
PacketLengthOperator: pulumi.String("string"),
Vni: pulumi.String("string"),
})
var ipv4AccessListEntryResource = new Ipv4AccessListEntry("ipv4AccessListEntryResource", Ipv4AccessListEntryArgs.builder()
.sequenceNumber(0)
.precedence("string")
.syn(false)
.destinationPort1("string")
.destinationPort2("string")
.destinationPortGroup("string")
.destinationPortMask("string")
.destinationPortOperator("string")
.destinationPrefix("string")
.destinationPrefixLength("string")
.destinationPrefixMask("string")
.device("string")
.dscp(0)
.est(false)
.fin(false)
.fragment(false)
.httpOptionType("string")
.icmpCode(0)
.icmpType(0)
.logging(false)
.name("string")
.packetLength1("string")
.packetLength2("string")
.vlan(0)
.destinationAddressGroup("string")
.redirect("string")
.protocolMask("string")
.psh(false)
.protocol("string")
.remark("string")
.rev(false)
.rst(false)
.action("string")
.sourceAddressGroup("string")
.sourcePort1("string")
.sourcePort2("string")
.sourcePortGroup("string")
.sourcePortMask("string")
.sourcePortOperator("string")
.sourcePrefix("string")
.sourcePrefixLength("string")
.sourcePrefixMask("string")
.ack(false)
.timeRange("string")
.ttl(0)
.urg(false)
.packetLengthOperator("string")
.vni("string")
.build());
ipv4_access_list_entry_resource = nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource",
sequence_number=0,
precedence="string",
syn=False,
destination_port1="string",
destination_port2="string",
destination_port_group="string",
destination_port_mask="string",
destination_port_operator="string",
destination_prefix="string",
destination_prefix_length="string",
destination_prefix_mask="string",
device="string",
dscp=0,
est=False,
fin=False,
fragment=False,
http_option_type="string",
icmp_code=0,
icmp_type=0,
logging=False,
name="string",
packet_length1="string",
packet_length2="string",
vlan=0,
destination_address_group="string",
redirect="string",
protocol_mask="string",
psh=False,
protocol="string",
remark="string",
rev=False,
rst=False,
action="string",
source_address_group="string",
source_port1="string",
source_port2="string",
source_port_group="string",
source_port_mask="string",
source_port_operator="string",
source_prefix="string",
source_prefix_length="string",
source_prefix_mask="string",
ack=False,
time_range="string",
ttl=0,
urg=False,
packet_length_operator="string",
vni="string")
const ipv4AccessListEntryResource = new nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource", {
sequenceNumber: 0,
precedence: "string",
syn: false,
destinationPort1: "string",
destinationPort2: "string",
destinationPortGroup: "string",
destinationPortMask: "string",
destinationPortOperator: "string",
destinationPrefix: "string",
destinationPrefixLength: "string",
destinationPrefixMask: "string",
device: "string",
dscp: 0,
est: false,
fin: false,
fragment: false,
httpOptionType: "string",
icmpCode: 0,
icmpType: 0,
logging: false,
name: "string",
packetLength1: "string",
packetLength2: "string",
vlan: 0,
destinationAddressGroup: "string",
redirect: "string",
protocolMask: "string",
psh: false,
protocol: "string",
remark: "string",
rev: false,
rst: false,
action: "string",
sourceAddressGroup: "string",
sourcePort1: "string",
sourcePort2: "string",
sourcePortGroup: "string",
sourcePortMask: "string",
sourcePortOperator: "string",
sourcePrefix: "string",
sourcePrefixLength: "string",
sourcePrefixMask: "string",
ack: false,
timeRange: "string",
ttl: 0,
urg: false,
packetLengthOperator: "string",
vni: "string",
});
type: nxos:Ipv4AccessListEntry
properties:
ack: false
action: string
destinationAddressGroup: string
destinationPort1: string
destinationPort2: string
destinationPortGroup: string
destinationPortMask: string
destinationPortOperator: string
destinationPrefix: string
destinationPrefixLength: string
destinationPrefixMask: string
device: string
dscp: 0
est: false
fin: false
fragment: false
httpOptionType: string
icmpCode: 0
icmpType: 0
logging: false
name: string
packetLength1: string
packetLength2: string
packetLengthOperator: string
precedence: string
protocol: string
protocolMask: string
psh: false
redirect: string
remark: string
rev: false
rst: false
sequenceNumber: 0
sourceAddressGroup: string
sourcePort1: string
sourcePort2: string
sourcePortGroup: string
sourcePortMask: string
sourcePortOperator: string
sourcePrefix: string
sourcePrefixLength: string
sourcePrefixMask: string
syn: false
timeRange: string
ttl: 0
urg: false
vlan: 0
vni: string
Ipv4AccessListEntry Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Ipv4AccessListEntry resource accepts the following input properties:
- Sequence
Number int - Sequence number.
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- Destination
Address stringGroup - Destination address group.
- Destination
Port1 string - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port2 string - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringGroup - Destination port group.
- Destination
Port stringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Destination
Prefix string - Destination prefix.
- Destination
Prefix stringLength - Destination prefix length.
- Destination
Prefix stringMask - Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range:
0
-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- Http
Option stringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- Icmp
Code int - ICMP code. - Range:
0
-256
- Default value:256
- Icmp
Type int - ICMP type. - Range:
0
-256
- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value:
false
- Name string
- Access list name.
- Packet
Length1 string - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length2 string - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length stringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Precedence string
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Protocol
Mask string - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- Source
Address stringGroup - Source address group.
- Source
Port1 string - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port2 string - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringGroup - Source port group.
- Source
Port stringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Source
Prefix string - Source prefix.
- Source
Prefix stringLength - Source prefix length.
- Source
Prefix stringMask - Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- Time
Range string - Time range name.
- Ttl int
- TTL. - Range:
0
-255
- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range:
0
-4095
- Default value:4095
- Vni string
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- Sequence
Number int - Sequence number.
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- Destination
Address stringGroup - Destination address group.
- Destination
Port1 string - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port2 string - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringGroup - Destination port group.
- Destination
Port stringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Destination
Prefix string - Destination prefix.
- Destination
Prefix stringLength - Destination prefix length.
- Destination
Prefix stringMask - Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range:
0
-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- Http
Option stringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- Icmp
Code int - ICMP code. - Range:
0
-256
- Default value:256
- Icmp
Type int - ICMP type. - Range:
0
-256
- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value:
false
- Name string
- Access list name.
- Packet
Length1 string - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length2 string - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length stringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Precedence string
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Protocol
Mask string - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- Source
Address stringGroup - Source address group.
- Source
Port1 string - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port2 string - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringGroup - Source port group.
- Source
Port stringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Source
Prefix string - Source prefix.
- Source
Prefix stringLength - Source prefix length.
- Source
Prefix stringMask - Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- Time
Range string - Time range name.
- Ttl int
- TTL. - Range:
0
-255
- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range:
0
-4095
- Default value:4095
- Vni string
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- sequence
Number Integer - Sequence number.
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination
Address StringGroup - Destination address group.
- destination
Port1 String - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port2 String - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringGroup - Destination port group.
- destination
Port StringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination
Prefix String - Destination prefix.
- destination
Prefix StringLength - Destination prefix length.
- destination
Prefix StringMask - Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Integer
- Match DSCP. - Range:
0
-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- http
Option StringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp
Code Integer - ICMP code. - Range:
0
-256
- Default value:256
- icmp
Type Integer - ICMP type. - Range:
0
-256
- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value:
false
- name String
- Access list name.
- packet
Length1 String - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length2 String - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length StringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence String
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol
Mask String - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- source
Address StringGroup - Source address group.
- source
Port1 String - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port2 String - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringGroup - Source port group.
- source
Port StringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source
Prefix String - Source prefix.
- source
Prefix StringLength - Source prefix length.
- source
Prefix StringMask - Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- time
Range String - Time range name.
- ttl Integer
- TTL. - Range:
0
-255
- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Integer
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni String
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- sequence
Number number - Sequence number.
- ack boolean
- Match TCP ACK flag.
- action string
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination
Address stringGroup - Destination address group.
- destination
Port1 string - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port2 string - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port stringGroup - Destination port group.
- destination
Port stringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port stringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination
Prefix string - Destination prefix.
- destination
Prefix stringLength - Destination prefix length.
- destination
Prefix stringMask - Destination prefix mask.
- device string
- A device name from the provider configuration.
- dscp number
- Match DSCP. - Range:
0
-63
- est boolean
- Match TCP EST flag.
- fin boolean
- Match TCP FIN flag.
- fragment boolean
- Match non-initial fragment.
- http
Option stringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp
Code number - ICMP code. - Range:
0
-256
- Default value:256
- icmp
Type number - ICMP type. - Range:
0
-256
- Default value:256
- logging boolean
- Log matches against ACL entry. - Default value:
false
- name string
- Access list name.
- packet
Length1 string - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length2 string - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length stringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence string
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol string
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol
Mask string - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh boolean
- Match TCP PSH flag.
- redirect string
- Redirect action.
- remark string
- ACL comment.
- rev boolean
- Match TCP REV flag.
- rst boolean
- Match TCP RST flag.
- source
Address stringGroup - Source address group.
- source
Port1 string - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port2 string - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port stringGroup - Source port group.
- source
Port stringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port stringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source
Prefix string - Source prefix.
- source
Prefix stringLength - Source prefix length.
- source
Prefix stringMask - Source prefix mask.
- syn boolean
- Match TCP SYN flag.
- time
Range string - Time range name.
- ttl number
- TTL. - Range:
0
-255
- Default value:0
- urg boolean
- Match TCP URG flag.
- vlan number
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni string
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- sequence_
number int - Sequence number.
- ack bool
- Match TCP ACK flag.
- action str
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination_
address_ strgroup - Destination address group.
- destination_
port1 str - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination_
port2 str - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination_
port_ strgroup - Destination port group.
- destination_
port_ strmask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination_
port_ stroperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination_
prefix str - Destination prefix.
- destination_
prefix_ strlength - Destination prefix length.
- destination_
prefix_ strmask - Destination prefix mask.
- device str
- A device name from the provider configuration.
- dscp int
- Match DSCP. - Range:
0
-63
- est bool
- Match TCP EST flag.
- fin bool
- Match TCP FIN flag.
- fragment bool
- Match non-initial fragment.
- http_
option_ strtype - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp_
code int - ICMP code. - Range:
0
-256
- Default value:256
- icmp_
type int - ICMP type. - Range:
0
-256
- Default value:256
- logging bool
- Log matches against ACL entry. - Default value:
false
- name str
- Access list name.
- packet_
length1 str - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet_
length2 str - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet_
length_ stroperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence str
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol str
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol_
mask str - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh bool
- Match TCP PSH flag.
- redirect str
- Redirect action.
- remark str
- ACL comment.
- rev bool
- Match TCP REV flag.
- rst bool
- Match TCP RST flag.
- source_
address_ strgroup - Source address group.
- source_
port1 str - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source_
port2 str - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source_
port_ strgroup - Source port group.
- source_
port_ strmask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source_
port_ stroperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source_
prefix str - Source prefix.
- source_
prefix_ strlength - Source prefix length.
- source_
prefix_ strmask - Source prefix mask.
- syn bool
- Match TCP SYN flag.
- time_
range str - Time range name.
- ttl int
- TTL. - Range:
0
-255
- Default value:0
- urg bool
- Match TCP URG flag.
- vlan int
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni str
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- sequence
Number Number - Sequence number.
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination
Address StringGroup - Destination address group.
- destination
Port1 String - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port2 String - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringGroup - Destination port group.
- destination
Port StringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination
Prefix String - Destination prefix.
- destination
Prefix StringLength - Destination prefix length.
- destination
Prefix StringMask - Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Number
- Match DSCP. - Range:
0
-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- http
Option StringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp
Code Number - ICMP code. - Range:
0
-256
- Default value:256
- icmp
Type Number - ICMP type. - Range:
0
-256
- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value:
false
- name String
- Access list name.
- packet
Length1 String - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length2 String - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length StringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence String
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol
Mask String - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- source
Address StringGroup - Source address group.
- source
Port1 String - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port2 String - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringGroup - Source port group.
- source
Port StringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source
Prefix String - Source prefix.
- source
Prefix StringLength - Source prefix length.
- source
Prefix StringMask - Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- time
Range String - Time range name.
- ttl Number
- TTL. - Range:
0
-255
- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Number
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni String
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
Outputs
All input properties are implicitly available as output properties. Additionally, the Ipv4AccessListEntry resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Ipv4AccessListEntry Resource
Get an existing Ipv4AccessListEntry resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: Ipv4AccessListEntryState, opts?: CustomResourceOptions): Ipv4AccessListEntry
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
ack: Optional[bool] = None,
action: Optional[str] = None,
destination_address_group: Optional[str] = None,
destination_port1: Optional[str] = None,
destination_port2: Optional[str] = None,
destination_port_group: Optional[str] = None,
destination_port_mask: Optional[str] = None,
destination_port_operator: Optional[str] = None,
destination_prefix: Optional[str] = None,
destination_prefix_length: Optional[str] = None,
destination_prefix_mask: Optional[str] = None,
device: Optional[str] = None,
dscp: Optional[int] = None,
est: Optional[bool] = None,
fin: Optional[bool] = None,
fragment: Optional[bool] = None,
http_option_type: Optional[str] = None,
icmp_code: Optional[int] = None,
icmp_type: Optional[int] = None,
logging: Optional[bool] = None,
name: Optional[str] = None,
packet_length1: Optional[str] = None,
packet_length2: Optional[str] = None,
packet_length_operator: Optional[str] = None,
precedence: Optional[str] = None,
protocol: Optional[str] = None,
protocol_mask: Optional[str] = None,
psh: Optional[bool] = None,
redirect: Optional[str] = None,
remark: Optional[str] = None,
rev: Optional[bool] = None,
rst: Optional[bool] = None,
sequence_number: Optional[int] = None,
source_address_group: Optional[str] = None,
source_port1: Optional[str] = None,
source_port2: Optional[str] = None,
source_port_group: Optional[str] = None,
source_port_mask: Optional[str] = None,
source_port_operator: Optional[str] = None,
source_prefix: Optional[str] = None,
source_prefix_length: Optional[str] = None,
source_prefix_mask: Optional[str] = None,
syn: Optional[bool] = None,
time_range: Optional[str] = None,
ttl: Optional[int] = None,
urg: Optional[bool] = None,
vlan: Optional[int] = None,
vni: Optional[str] = None) -> Ipv4AccessListEntry
func GetIpv4AccessListEntry(ctx *Context, name string, id IDInput, state *Ipv4AccessListEntryState, opts ...ResourceOption) (*Ipv4AccessListEntry, error)
public static Ipv4AccessListEntry Get(string name, Input<string> id, Ipv4AccessListEntryState? state, CustomResourceOptions? opts = null)
public static Ipv4AccessListEntry get(String name, Output<String> id, Ipv4AccessListEntryState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- Destination
Address stringGroup - Destination address group.
- Destination
Port1 string - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port2 string - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringGroup - Destination port group.
- Destination
Port stringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Destination
Prefix string - Destination prefix.
- Destination
Prefix stringLength - Destination prefix length.
- Destination
Prefix stringMask - Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range:
0
-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- Http
Option stringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- Icmp
Code int - ICMP code. - Range:
0
-256
- Default value:256
- Icmp
Type int - ICMP type. - Range:
0
-256
- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value:
false
- Name string
- Access list name.
- Packet
Length1 string - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length2 string - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length stringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Precedence string
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Protocol
Mask string - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- Sequence
Number int - Sequence number.
- Source
Address stringGroup - Source address group.
- Source
Port1 string - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port2 string - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringGroup - Source port group.
- Source
Port stringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Source
Prefix string - Source prefix.
- Source
Prefix stringLength - Source prefix length.
- Source
Prefix stringMask - Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- Time
Range string - Time range name.
- Ttl int
- TTL. - Range:
0
-255
- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range:
0
-4095
- Default value:4095
- Vni string
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- Destination
Address stringGroup - Destination address group.
- Destination
Port1 string - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port2 string - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringGroup - Destination port group.
- Destination
Port stringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Destination
Port stringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Destination
Prefix string - Destination prefix.
- Destination
Prefix stringLength - Destination prefix length.
- Destination
Prefix stringMask - Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range:
0
-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- Http
Option stringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- Icmp
Code int - ICMP code. - Range:
0
-256
- Default value:256
- Icmp
Type int - ICMP type. - Range:
0
-256
- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value:
false
- Name string
- Access list name.
- Packet
Length1 string - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length2 string - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- Packet
Length stringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Precedence string
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Protocol
Mask string - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- Sequence
Number int - Sequence number.
- Source
Address stringGroup - Source address group.
- Source
Port1 string - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port2 string - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringGroup - Source port group.
- Source
Port stringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- Source
Port stringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- Source
Prefix string - Source prefix.
- Source
Prefix stringLength - Source prefix length.
- Source
Prefix stringMask - Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- Time
Range string - Time range name.
- Ttl int
- TTL. - Range:
0
-255
- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range:
0
-4095
- Default value:4095
- Vni string
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination
Address StringGroup - Destination address group.
- destination
Port1 String - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port2 String - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringGroup - Destination port group.
- destination
Port StringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination
Prefix String - Destination prefix.
- destination
Prefix StringLength - Destination prefix length.
- destination
Prefix StringMask - Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Integer
- Match DSCP. - Range:
0
-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- http
Option StringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp
Code Integer - ICMP code. - Range:
0
-256
- Default value:256
- icmp
Type Integer - ICMP type. - Range:
0
-256
- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value:
false
- name String
- Access list name.
- packet
Length1 String - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length2 String - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length StringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence String
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol
Mask String - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- sequence
Number Integer - Sequence number.
- source
Address StringGroup - Source address group.
- source
Port1 String - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port2 String - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringGroup - Source port group.
- source
Port StringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source
Prefix String - Source prefix.
- source
Prefix StringLength - Source prefix length.
- source
Prefix StringMask - Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- time
Range String - Time range name.
- ttl Integer
- TTL. - Range:
0
-255
- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Integer
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni String
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- ack boolean
- Match TCP ACK flag.
- action string
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination
Address stringGroup - Destination address group.
- destination
Port1 string - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port2 string - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port stringGroup - Destination port group.
- destination
Port stringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port stringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination
Prefix string - Destination prefix.
- destination
Prefix stringLength - Destination prefix length.
- destination
Prefix stringMask - Destination prefix mask.
- device string
- A device name from the provider configuration.
- dscp number
- Match DSCP. - Range:
0
-63
- est boolean
- Match TCP EST flag.
- fin boolean
- Match TCP FIN flag.
- fragment boolean
- Match non-initial fragment.
- http
Option stringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp
Code number - ICMP code. - Range:
0
-256
- Default value:256
- icmp
Type number - ICMP type. - Range:
0
-256
- Default value:256
- logging boolean
- Log matches against ACL entry. - Default value:
false
- name string
- Access list name.
- packet
Length1 string - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length2 string - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length stringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence string
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol string
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol
Mask string - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh boolean
- Match TCP PSH flag.
- redirect string
- Redirect action.
- remark string
- ACL comment.
- rev boolean
- Match TCP REV flag.
- rst boolean
- Match TCP RST flag.
- sequence
Number number - Sequence number.
- source
Address stringGroup - Source address group.
- source
Port1 string - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port2 string - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port stringGroup - Source port group.
- source
Port stringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port stringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source
Prefix string - Source prefix.
- source
Prefix stringLength - Source prefix length.
- source
Prefix stringMask - Source prefix mask.
- syn boolean
- Match TCP SYN flag.
- time
Range string - Time range name.
- ttl number
- TTL. - Range:
0
-255
- Default value:0
- urg boolean
- Match TCP URG flag.
- vlan number
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni string
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- ack bool
- Match TCP ACK flag.
- action str
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination_
address_ strgroup - Destination address group.
- destination_
port1 str - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination_
port2 str - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination_
port_ strgroup - Destination port group.
- destination_
port_ strmask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination_
port_ stroperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination_
prefix str - Destination prefix.
- destination_
prefix_ strlength - Destination prefix length.
- destination_
prefix_ strmask - Destination prefix mask.
- device str
- A device name from the provider configuration.
- dscp int
- Match DSCP. - Range:
0
-63
- est bool
- Match TCP EST flag.
- fin bool
- Match TCP FIN flag.
- fragment bool
- Match non-initial fragment.
- http_
option_ strtype - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp_
code int - ICMP code. - Range:
0
-256
- Default value:256
- icmp_
type int - ICMP type. - Range:
0
-256
- Default value:256
- logging bool
- Log matches against ACL entry. - Default value:
false
- name str
- Access list name.
- packet_
length1 str - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet_
length2 str - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet_
length_ stroperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence str
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol str
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol_
mask str - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh bool
- Match TCP PSH flag.
- redirect str
- Redirect action.
- remark str
- ACL comment.
- rev bool
- Match TCP REV flag.
- rst bool
- Match TCP RST flag.
- sequence_
number int - Sequence number.
- source_
address_ strgroup - Source address group.
- source_
port1 str - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source_
port2 str - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source_
port_ strgroup - Source port group.
- source_
port_ strmask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source_
port_ stroperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source_
prefix str - Source prefix.
- source_
prefix_ strlength - Source prefix length.
- source_
prefix_ strmask - Source prefix mask.
- syn bool
- Match TCP SYN flag.
- time_
range str - Time range name.
- ttl int
- TTL. - Range:
0
-255
- Default value:0
- urg bool
- Match TCP URG flag.
- vlan int
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni str
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices:
invalid
,permit
,deny
- Default value:invalid
- destination
Address StringGroup - Destination address group.
- destination
Port1 String - First destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port2 String - Second destination port number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringGroup - Destination port group.
- destination
Port StringMask - Destination port mask number or name. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- destination
Port StringOperator - Destination port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- destination
Prefix String - Destination prefix.
- destination
Prefix StringLength - Destination prefix length.
- destination
Prefix StringMask - Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Number
- Match DSCP. - Range:
0
-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- http
Option StringType - HTTP option method. - Choices:
invalid
,get
,put
,head
,post
,delete
,trace
,connect
- Default value:invalid
- icmp
Code Number - ICMP code. - Range:
0
-256
- Default value:256
- icmp
Type Number - ICMP type. - Range:
0
-256
- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value:
false
- name String
- Access list name.
- packet
Length1 String - First packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length2 String - Second packet length. Either
invalid
or a number between 19 and 9210. - Default value:invalid
- packet
Length StringOperator - Packet length operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- precedence String
- Precedence. Either
unspecified
or a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- protocol
Mask String - Protocol mask name or number. - Choices:
ip
,icmp
,igmp
,tcp
,udp
,gre
,esp
,ahp
,eigrp
,ospf
,nos
,pim
,pcp
,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- sequence
Number Number - Sequence number.
- source
Address StringGroup - Source address group.
- source
Port1 String - First source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port2 String - Second source port name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringGroup - Source port group.
- source
Port StringMask - Source port mask name or number. - Choices:
echo
,discard
,daytime
,chargen
,ftp-data
,ftp
,telnet
,smtp
,time
,nameserver
,whois
,tacacs
,domain
,bootps
,bootpc
,tftp
,gopher
,finger
,www
,hostname
,pop2
,pop3
,sunrpc
,ident
,nntp
,ntp
,netbios-ns
,netbios-dgm
,netbios-ss
,snmp
,snmptrap
,xdmcp
,bgp
,irc
,dnsix
,mobile-ip
,pim-auto-rp
,isakmp
,biff
,exec
,who
,login
,syslog
,cmd
,lpd
,talk
,rip
,uucp
,klogin
,kshell
,drip
,non500-isakmp
- source
Port StringOperator - Source port operator. - Choices:
none
,lt
,gt
,eq
,neq
,range
- Default value:none
- source
Prefix String - Source prefix.
- source
Prefix StringLength - Source prefix length.
- source
Prefix StringMask - Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- time
Range String - Time range name.
- ttl Number
- TTL. - Range:
0
-255
- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Number
- VLAN ID. - Range:
0
-4095
- Default value:4095
- vni String
- NVE VNI ID. Either
invalid
or a number between 0 and 16777216. - Default value:invalid
Import
$ pulumi import nxos:index/ipv4AccessListEntry:Ipv4AccessListEntry example "sys/acl/ipv4/name-[ACL1]/seq-[10]"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- nxos lbrlabs/pulumi-nxos
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
nxos
Terraform Provider.