Create NAT Policy Set (v2.0)

POST 
/sdwan/v2.0/api/natpolicysets

Create a new NAT policy set.

Request

application/json

Body

Details of NAT Policy Set to be created

clone_from string

The policy set that has been cloned from.

description

The description of the NAT policy set. Max size = 256.

destination_zone_policyrule_order string[]

The destination zone where the policy rule order is clasified.

disabled boolean

Lists if the NAT policy sets are disabled.

disabled_reason string

Reason the NAT policy set is disabled.

id string

The ID of the policy set.

inactive boolean

Lists if the NAT policy set is inactive.

inactive_reason string

Reason the NAT policy set is inactive.

name stringrequired

The name of the NAT policy set. Max size = 128.

policy_req_version string

The policy version.

policy_rules NATPolicyRule[]
Lists the details of the policy rules.
Array [
actions NATAction[]required
The actions for the configured NAT policy rule/set. A maximum 4 actions can be specified in a NAT policy rule/set.
Array [
nat_pool_id string
The ID of the the NAT pool used in policy rules and bound to interfaces.
port integer
The port range of the action in the NAT policy rule.
protocols string[]
The protocol of the action for the NAT policy rule. Supports max 4 protocols.
type stringrequired
Possible values: [NO_NAT, SOURCE_NAT_DYNAMIC, SOURCE_NAT_STATIC, DESTINATION_NAT_DYNAMIC, DESTINATION_NAT_STATIC, ALG_DISABLE]
The type of action for NAT policy.
]
description
The description of the NAT policy rule/set. Max size = 256.
destination_ports PortRange[]
The start and end port for Port Ranges. A maximum of 16 port ranges is allowed, and port ranges can only be added for TCP or UDP protocols.
Array [
from integer
The start port of the destination/source port range.
to integer
The end port of the destination/source port range.
]
destination_prefixes BasePolicyPrefixS
Lists the details of the destination prefixes.
description
The description for the source/destination prefixes.
id string
The ID of the source/destination prefix.
ipv4_prefixes string[]
Lists the IP prefixes.
ipv6_prefixes string[]
Ipv6 Prefixes
name string
The name of the source/destination prefix.
tags string[]
A information field that can be added to identify the source/destination prefix.
destination_prefixes_id string
The ID of the destination prefix.
destination_zone NATPolicyZone
List the details of the destination zone.
default_for_public_interfaces boolean
The default source/destination zone for public interfaces.
description
The description for the source/destination zone. Max size = 128.
disabled boolean
Lists if the source/destination zone set is disabled.
disabled_reason string
Reason the source/destination zone is disabled.
id string
The ID of the source/destination zone.
inactive boolean
Lists if the source/destination zone is inactive.
inactive_reason string
Reason the source/destination zone is inactive.
name stringrequired
The name of the source/destination zone.
region string
The region of the site.
tags string[]
A information field that can be added to identify the source/destination zone.
destination_zone_id string
The ID of the destination zone. Destination zone is based on the direction of the traffic with respect to the ION device.
disabled boolean
Lists if the NAT policy rule/set is disabled.
disabled_reason string
Reason the NAT policy rule/set is disabled.
enabled boolean
Lists if the NAT policy rule/set is enabled.
id string
The ID of the policy rule/set.
inactive boolean
Lists if the NAT policy rule/set is inactive.
inactive_reason string
Reason the NAT policy rule/set is inactive.
name stringrequired
The name of the NAT policy rule/set.
natpolicypools NATPolicyPool[]
Lists the details of the NAT policy pools.
Array [
description
The description for the NAT policy pool. Max size = 256.
id string
The ID of the NAT policy pool.
name stringrequired
The name of the NAT policy pool. Max size = 128.
tags string[]
A information field that can be added to identify the NAT policy pool. Maximum 10 unique tags of length 1024 each are allowed.
]
policyset_id string
The ID of the NAT policy set. NAT policy sets contain policy rules and are a part of NAT policy set stacks.
protocol integer
The protocol for the NAT policy set. TCP or UDP.
region string
Region
source_ports PortRange[]
List the details of the source port range. A maximum of 16 port ranges are allowed, and port ranges can only be added for TCP or UDP protocols.
Array [
from integer
The start port of the destination/source port range.
to integer
The end port of the destination/source port range.
]
source_prefixes BasePolicyPrefixS
List the details of the source prefixes.
description
The description for the source/destination prefixes.
id string
The ID of the source/destination prefix.
ipv4_prefixes string[]
Lists the IP prefixes.
ipv6_prefixes string[]
Ipv6 Prefixes
name string
The name of the source/destination prefix.
tags string[]
A information field that can be added to identify the source/destination prefix.
source_prefixes_id string
The ID of the source prefixes.
source_zone NATPolicyZone
Lists the details of the source zone used in policy rules and bound to interfaces.
default_for_public_interfaces boolean
The default source/destination zone for public interfaces.
description
The description for the source/destination zone. Max size = 128.
disabled boolean
Lists if the source/destination zone set is disabled.
disabled_reason string
Reason the source/destination zone is disabled.
id string
The ID of the source/destination zone.
inactive boolean
Lists if the source/destination zone is inactive.
inactive_reason string
Reason the source/destination zone is inactive.
name stringrequired
The name of the source/destination zone.
region string
The region of the site.
tags string[]
A information field that can be added to identify the source/destination zone.
source_zone_id string
The ID of the NAT policy source zone. Source zones identify traffic that is sourced from a zone.
tags string[]
A information field that can be added to identify the NAT policy rule/set. Maximum 10 unique tags of length 1024 each are allowed.
]
region string

The region of the site.

send_to_element boolean

Send To Element

source_zone_policyrule_order string[]

The order of the NAT policy source zone rules.

tags string[]

A information field that can be added to identify the NAT policy set. Maximum 10 unique tags of length 1024 each are allowed.

update_order boolean

Update Order

Responses

200

Successful Operation

application/json

Schema

Schema

clone_from string

The policy set that has been cloned from.

description

The description of the NAT policy set. Max size = 256.

destination_zone_policyrule_order string[]

The destination zone where the policy rule order is clasified.

disabled boolean

Lists if the NAT policy sets are disabled.

disabled_reason string

Reason the NAT policy set is disabled.

id string

The ID of the policy set.

inactive boolean

Lists if the NAT policy set is inactive.

inactive_reason string

Reason the NAT policy set is inactive.

name stringrequired

The name of the NAT policy set. Max size = 128.

policy_req_version string

The policy version.

policy_rules NATPolicyRule[]
Lists the details of the policy rules.
Array [
actions NATAction[]required
The actions for the configured NAT policy rule/set. A maximum 4 actions can be specified in a NAT policy rule/set.
Array [
nat_pool_id string
The ID of the the NAT pool used in policy rules and bound to interfaces.
port integer
The port range of the action in the NAT policy rule.
protocols string[]
The protocol of the action for the NAT policy rule. Supports max 4 protocols.
type stringrequired
Possible values: [NO_NAT, SOURCE_NAT_DYNAMIC, SOURCE_NAT_STATIC, DESTINATION_NAT_DYNAMIC, DESTINATION_NAT_STATIC, ALG_DISABLE]
The type of action for NAT policy.
]
description
The description of the NAT policy rule/set. Max size = 256.
destination_ports PortRange[]
The start and end port for Port Ranges. A maximum of 16 port ranges is allowed, and port ranges can only be added for TCP or UDP protocols.
Array [
from integer
The start port of the destination/source port range.
to integer
The end port of the destination/source port range.
]
destination_prefixes BasePolicyPrefixS
Lists the details of the destination prefixes.
description
The description for the source/destination prefixes.
id string
The ID of the source/destination prefix.
ipv4_prefixes string[]
Lists the IP prefixes.
ipv6_prefixes string[]
Ipv6 Prefixes
name string
The name of the source/destination prefix.
tags string[]
A information field that can be added to identify the source/destination prefix.
destination_prefixes_id string
The ID of the destination prefix.
destination_zone NATPolicyZone
List the details of the destination zone.
default_for_public_interfaces boolean
The default source/destination zone for public interfaces.
description
The description for the source/destination zone. Max size = 128.
disabled boolean
Lists if the source/destination zone set is disabled.
disabled_reason string
Reason the source/destination zone is disabled.
id string
The ID of the source/destination zone.
inactive boolean
Lists if the source/destination zone is inactive.
inactive_reason string
Reason the source/destination zone is inactive.
name stringrequired
The name of the source/destination zone.
region string
The region of the site.
tags string[]
A information field that can be added to identify the source/destination zone.
destination_zone_id string
The ID of the destination zone. Destination zone is based on the direction of the traffic with respect to the ION device.
disabled boolean
Lists if the NAT policy rule/set is disabled.
disabled_reason string
Reason the NAT policy rule/set is disabled.
enabled boolean
Lists if the NAT policy rule/set is enabled.
id string
The ID of the policy rule/set.
inactive boolean
Lists if the NAT policy rule/set is inactive.
inactive_reason string
Reason the NAT policy rule/set is inactive.
name stringrequired
The name of the NAT policy rule/set.
natpolicypools NATPolicyPool[]
Lists the details of the NAT policy pools.
Array [
description
The description for the NAT policy pool. Max size = 256.
id string
The ID of the NAT policy pool.
name stringrequired
The name of the NAT policy pool. Max size = 128.
tags string[]
A information field that can be added to identify the NAT policy pool. Maximum 10 unique tags of length 1024 each are allowed.
]
policyset_id string
The ID of the NAT policy set. NAT policy sets contain policy rules and are a part of NAT policy set stacks.
protocol integer
The protocol for the NAT policy set. TCP or UDP.
region string
Region
source_ports PortRange[]
List the details of the source port range. A maximum of 16 port ranges are allowed, and port ranges can only be added for TCP or UDP protocols.
Array [
from integer
The start port of the destination/source port range.
to integer
The end port of the destination/source port range.
]
source_prefixes BasePolicyPrefixS
List the details of the source prefixes.
description
The description for the source/destination prefixes.
id string
The ID of the source/destination prefix.
ipv4_prefixes string[]
Lists the IP prefixes.
ipv6_prefixes string[]
Ipv6 Prefixes
name string
The name of the source/destination prefix.
tags string[]
A information field that can be added to identify the source/destination prefix.
source_prefixes_id string
The ID of the source prefixes.
source_zone NATPolicyZone
Lists the details of the source zone used in policy rules and bound to interfaces.
default_for_public_interfaces boolean
The default source/destination zone for public interfaces.
description
The description for the source/destination zone. Max size = 128.
disabled boolean
Lists if the source/destination zone set is disabled.
disabled_reason string
Reason the source/destination zone is disabled.
id string
The ID of the source/destination zone.
inactive boolean
Lists if the source/destination zone is inactive.
inactive_reason string
Reason the source/destination zone is inactive.
name stringrequired
The name of the source/destination zone.
region string
The region of the site.
tags string[]
A information field that can be added to identify the source/destination zone.
source_zone_id string
The ID of the NAT policy source zone. Source zones identify traffic that is sourced from a zone.
tags string[]
A information field that can be added to identify the NAT policy rule/set. Maximum 10 unique tags of length 1024 each are allowed.
]
region string

The region of the site.

send_to_element boolean

Send To Element

source_zone_policyrule_order string[]

The order of the NAT policy source zone rules.

tags string[]

A information field that can be added to identify the NAT policy set. Maximum 10 unique tags of length 1024 each are allowed.

update_order boolean

Update Order

Example (from schema)

{
  "clone_from": "string",
  "destination_zone_policyrule_order": [
    "string"
  ],
  "disabled": true,
  "disabled_reason": "string",
  "id": "string",
  "inactive": true,
  "inactive_reason": "string",
  "name": "string",
  "policy_req_version": "string",
  "policy_rules": [
    {
      "actions": [
        {
          "nat_pool_id": "string",
          "port": 0,
          "protocols": [
            "string"
          ],
          "type": "NO_NAT"
        }
      ],
      "destination_ports": [
        {
          "from": 0,
          "to": 0
        }
      ],
      "destination_prefixes": {
        "id": "string",
        "ipv4_prefixes": [
          "string"
        ],
        "ipv6_prefixes": [
          "string"
        ],
        "name": "string",
        "tags": [
          "string"
        ]
      },
      "destination_prefixes_id": "string",
      "destination_zone": {
        "default_for_public_interfaces": true,
        "disabled": true,
        "disabled_reason": "string",
        "id": "string",
        "inactive": true,
        "inactive_reason": "string",
        "name": "string",
        "region": "string",
        "tags": [
          "string"
        ]
      },
      "destination_zone_id": "string",
      "disabled": true,
      "disabled_reason": "string",
      "enabled": true,
      "id": "string",
      "inactive": true,
      "inactive_reason": "string",
      "name": "string",
      "natpolicypools": [
        {
          "id": "string",
          "name": "string",
          "tags": [
            "string"
          ]
        }
      ],
      "policyset_id": "string",
      "protocol": 0,
      "region": "string",
      "source_ports": [
        {
          "from": 0,
          "to": 0
        }
      ],
      "source_prefixes": {
        "id": "string",
        "ipv4_prefixes": [
          "string"
        ],
        "ipv6_prefixes": [
          "string"
        ],
        "name": "string",
        "tags": [
          "string"
        ]
      },
      "source_prefixes_id": "string",
      "source_zone": {
        "default_for_public_interfaces": true,
        "disabled": true,
        "disabled_reason": "string",
        "id": "string",
        "inactive": true,
        "inactive_reason": "string",
        "name": "string",
        "region": "string",
        "tags": [
          "string"
        ]
      },
      "source_zone_id": "string",
      "tags": [
        "string"
      ]
    }
  ],
  "region": "string",
  "send_to_element": true,
  "source_zone_policyrule_order": [
    "string"
  ],
  "tags": [
    "string"
  ],
  "update_order": true
}

400

Bad Request

application/json

Schema

Schema

_error ErrorResponse[]
Array [
code string
The error code.
message string
The error message.
]

Example (from schema)

{
  "_error": [
    {
      "code": "string",
      "message": "string"
    }
  ]
}

Example

{
  "value": {
    "_error": [
      {
        "code": "INVALID_JSON_EXTRA_ATTRIBUTE"
      },
      {
        "code": "NAT_POLICY_SET_NAME_REQD"
      },
      {
        "code": "NAT_POLICY_SET_NAME_EXCEEDS_LIMIT"
      },
      {
        "code": "NAT_POLICY_SET_DESCRIPTION_EXCEEDS_LIMIT"
      },
      {
        "code": "NAT_POLICY_SET_CONFIG_INVALID_CLONE_FROM"
      },
      {
        "code": "NAT_SET_DUPLICATE_SOURCE_ZONE_RULES"
      },
      {
        "code": "NAT_SET_DUPLICATE_DESTINATION_ZONE_RULES"
      },
      {
        "code": "POLICY_SET_CONFIG_CREATION_FAILED"
      },
      {
        "code": "NAT_SET_CONFIG_INVALID_CLONE_FROM"
      },
      {
        "code": "NAT_SET_CONFIG_INVALID_RULE_ORDER"
      }
    ]
  }
}

Loading...