Create Network Policy Set (v2.0)
POST/sdwan/v2.0/api/networkpolicysets
Create a network policy set for a tenant.
Request
- application/json
Body
Details of the network policy to be created
- Array [
- Array [
- ]
- Array [
- ]
- Array [
- ]
- ]
The existing policy from Network Policies for cloning the policy set.
The default rule for the policy set.
The description of the network policy set. Max size = 256.
Lists if the network policy sets are disabled.
Reason the network policy set is disabled.
The network policy set ID.
Lists if the network policy set is inactive.
Reason the network policy set is inactive.
The name of the network policy set.
The required version of the network policy.
policy_rules NetworkPolicyRule[]
Lists the details of the policy rules.
The app definition IDs that have applied network policy rules. The number of applications for a policy rule is limited to 256.
The description of the network policy rule. Max size = 256.
The destination prefix ID.
The network policy rule based on rules that are enabled.
The network policy rule ID.
The name of the network policy rule. Max size = 128.
The network context applied to the network policy rule. Network context segments network traffic for the purpose of applying different network policy rules for the same application.
The network policy rule order number. The default order number for a policy rule is 1024.
paths_allowed PathsAllowedrequired
The paths allowed for the application.
active_paths WANPath[]required
The configured active path for the rule.
The label to identify the path.
Possible values: [vpn
, direct
, servicelink
]
The path type.
backup_paths WANPath[]
The configured backup path for the rule.
The label to identify the path.
Possible values: [vpn
, direct
, servicelink
]
The path type.
l3_failure_paths WANPath[]
The configured l3 failure path for the rule.
The label to identify the path.
Possible values: [vpn
, direct
, servicelink
]
The path type.
service_context ServiceContext
Information on the service context.
The configured active service label ID.
Possible values: [CG_TRANSIT
, NON_CG_TRANSIT
, SASE
]
The configured active service label type.
The configured backup service label ID.
Possible values: [CG_TRANSIT
, NON_CG_TRANSIT
, SASE
]
The configured backup service label type.
Possible values: [ALLOWED_TRANSIT
, REQUIRED_TRANSIT
]
The type of service context.
The ID of the source prefixes.
A information field that can be added to identify the network policy rule. Maximum 10 unique tags of length 1024 each are allowed.
The region of the site.
Send to element.
A information field that can be added to identify the network policy set. Maximum 10 unique tags of length 1024 each are allowed.
Responses
- 200
- 400
Successful Operation
- application/json
- Schema
- Example (from schema)
Schema
- Array [
- Array [
- ]
- Array [
- ]
- Array [
- ]
- ]
The existing policy from Network Policies for cloning the policy set.
The default rule for the policy set.
The description of the network policy set. Max size = 256.
Lists if the network policy sets are disabled.
Reason the network policy set is disabled.
The network policy set ID.
Lists if the network policy set is inactive.
Reason the network policy set is inactive.
The name of the network policy set.
The required version of the network policy.
policy_rules NetworkPolicyRule[]
Lists the details of the policy rules.
The app definition IDs that have applied network policy rules. The number of applications for a policy rule is limited to 256.
The description of the network policy rule. Max size = 256.
The destination prefix ID.
The network policy rule based on rules that are enabled.
The network policy rule ID.
The name of the network policy rule. Max size = 128.
The network context applied to the network policy rule. Network context segments network traffic for the purpose of applying different network policy rules for the same application.
The network policy rule order number. The default order number for a policy rule is 1024.
paths_allowed PathsAllowedrequired
The paths allowed for the application.
active_paths WANPath[]required
The configured active path for the rule.
The label to identify the path.
Possible values: [vpn
, direct
, servicelink
]
The path type.
backup_paths WANPath[]
The configured backup path for the rule.
The label to identify the path.
Possible values: [vpn
, direct
, servicelink
]
The path type.
l3_failure_paths WANPath[]
The configured l3 failure path for the rule.
The label to identify the path.
Possible values: [vpn
, direct
, servicelink
]
The path type.
service_context ServiceContext
Information on the service context.
The configured active service label ID.
Possible values: [CG_TRANSIT
, NON_CG_TRANSIT
, SASE
]
The configured active service label type.
The configured backup service label ID.
Possible values: [CG_TRANSIT
, NON_CG_TRANSIT
, SASE
]
The configured backup service label type.
Possible values: [ALLOWED_TRANSIT
, REQUIRED_TRANSIT
]
The type of service context.
The ID of the source prefixes.
A information field that can be added to identify the network policy rule. Maximum 10 unique tags of length 1024 each are allowed.
The region of the site.
Send to element.
A information field that can be added to identify the network policy set. Maximum 10 unique tags of length 1024 each are allowed.
{
"clone_from": "string",
"defaultrule_policyset": true,
"disabled": true,
"disabled_reason": "string",
"id": "string",
"inactive": true,
"inactive_reason": "string",
"name": "string",
"policy_req_version": "string",
"policy_rules": [
{
"app_def_ids": [
"string"
],
"destination_prefixes_id": "string",
"enabled": true,
"id": "string",
"name": "string",
"network_context_id": "string",
"order_number": 0,
"paths_allowed": {
"active_paths": [
{
"label": "string",
"path_type": "vpn"
}
],
"backup_paths": [
{
"label": "string",
"path_type": "vpn"
}
],
"l3_failure_paths": [
{
"label": "string",
"path_type": "vpn"
}
]
},
"service_context": {
"active_service_label_id": "string",
"active_service_label_type": "CG_TRANSIT",
"backup_service_label_id": "string",
"backup_service_label_type": "CG_TRANSIT",
"type": "ALLOWED_TRANSIT"
},
"source_prefixes_id": "string",
"tags": [
"string"
]
}
],
"region": "string",
"send_to_element": true,
"tags": [
"string"
]
}
Bad Request
- application/json
- Schema
- Example (from schema)
- Example
Schema
- Array [
- ]
_error ErrorResponse[]
The error code.
The error message.
{
"_error": [
{
"code": "string",
"message": "string"
}
]
}
{
"value": {
"_error": [
{
"code": "NAME_REQD"
},
{
"code": "DESCRIPTION_EXCEEDS_LIMIT"
},
{
"code": "POLICY_SET_CONFIG_INVALID_CLONE_FROM"
},
{
"code": "INVALID_DEFAULTRULE_FLAG_OF_CLONE_FROM"
},
{
"code": "INVALID_JSON_EXTRA_ATTRIBUTE"
},
{
"code": "POLICY_SET_CONFIG_CREATION_FAILED"
}
]
}
}