Update Network Policy Rule (v2.1)
Update a network policy rule of a tenant.
Path Parameters
- policy_set_id string required
The network policy set ID.
- policy_rule_id string required
ID of the network policy rule.
- application/json
Request Body
Details to update the Network Policy policy rule.
- app_def_ids string[]
The app definition IDs that have applied network policy rules. The number of applications for a policy rule is limited to 256.
- description
The description of the network policy rule. Max size = 256.
- destination_prefixes_id string
The destination prefix ID.
- enabled boolean
The network policy rule based on rules that are enabled.
- id string
The network policy rule ID.
- name string required
The name of the network policy rule. Max size = 128.
- network_context_id string
The network context applied to the network policy rule. Network context segments network traffic for the purpose of applying different network policy rules for the same application.
- order_number integer
The network policy rule order number. The default order number for a policy rule is 1024.
paths_allowed PathsAllowedV2N1 required
The paths allowed for the application.
active_paths WANPath[]
Active Paths
Array [label stringThe label to identify the path.
path_type string requiredPossible values: [
vpn
,direct
,servicelink
]The path type.
]backup_paths WANPath[]
Backup Paths
Array [label stringThe label to identify the path.
path_type string requiredPossible values: [
vpn
,direct
,servicelink
]The path type.
]l3_failure_paths WANPath[]
L3 Failure Paths
Array [label stringThe label to identify the path.
path_type string requiredPossible values: [
vpn
,direct
,servicelink
]The path type.
]service_context ServiceContext
Information on the service context.
active_service_label_id string requiredThe configured active service label ID.
active_service_label_type stringPossible values: [
CG_TRANSIT
,NON_CG_TRANSIT
,SASE
]The configured active service label type.
backup_service_label_id stringThe configured backup service label ID.
backup_service_label_type stringPossible values: [
CG_TRANSIT
,NON_CG_TRANSIT
,SASE
]The configured backup service label type.
type string requiredPossible values: [
ALLOWED_TRANSIT
,REQUIRED_TRANSIT
]The type of service context.
- source_prefixes_id string
The ID of the source prefixes.
- tags string[]
A information field that can be added to identify the network policy rule. Maximum 10 unique tags of length 1024 each are allowed.
- 200
- 400
Successful Operation
- application/json
- Schema
- Example (from schema)
Schema
- app_def_ids string[]
The app definition IDs that have applied network policy rules. The number of applications for a policy rule is limited to 256.
- description
The description of the network policy rule. Max size = 256.
- destination_prefixes_id string
The destination prefix ID.
- enabled boolean
The network policy rule based on rules that are enabled.
- id string
The network policy rule ID.
- name string
The name of the network policy rule. Max size = 128.
- network_context_id string
The network context applied to the network policy rule. Network context segments network traffic for the purpose of applying different network policy rules for the same application.
- order_number integer
The network policy rule order number. The default order number for a policy rule is 1024.
paths_allowed PathsAllowedV2N1
The paths allowed for the application.
active_paths WANPath[]
Active Paths
Array [label stringThe label to identify the path.
path_type string requiredPossible values: [
vpn
,direct
,servicelink
]The path type.
]backup_paths WANPath[]
Backup Paths
Array [label stringThe label to identify the path.
path_type string requiredPossible values: [
vpn
,direct
,servicelink
]The path type.
]l3_failure_paths WANPath[]
L3 Failure Paths
Array [label stringThe label to identify the path.
path_type string requiredPossible values: [
vpn
,direct
,servicelink
]The path type.
]service_context ServiceContext
Information on the service context.
active_service_label_id string requiredThe configured active service label ID.
active_service_label_type stringPossible values: [
CG_TRANSIT
,NON_CG_TRANSIT
,SASE
]The configured active service label type.
backup_service_label_id stringThe configured backup service label ID.
backup_service_label_type stringPossible values: [
CG_TRANSIT
,NON_CG_TRANSIT
,SASE
]The configured backup service label type.
type string requiredPossible values: [
ALLOWED_TRANSIT
,REQUIRED_TRANSIT
]The type of service context.
- source_prefixes_id string
The ID of the source prefixes.
- tags string[]
A information field that can be added to identify the network policy rule. Maximum 10 unique tags of length 1024 each are allowed.
{
"app_def_ids": [
"string"
],
"destination_prefixes_id": "string",
"enabled": true,
"id": "string",
"name": "string",
"network_context_id": "string",
"order_number": 0,
"paths_allowed": {
"active_paths": [
{
"label": "string",
"path_type": "vpn"
}
],
"backup_paths": [
{
"label": "string",
"path_type": "vpn"
}
],
"l3_failure_paths": [
{
"label": "string",
"path_type": "vpn"
}
]
},
"service_context": {
"active_service_label_id": "string",
"active_service_label_type": "CG_TRANSIT",
"backup_service_label_id": "string",
"backup_service_label_type": "CG_TRANSIT",
"type": "ALLOWED_TRANSIT"
},
"source_prefixes_id": "string",
"tags": [
"string"
]
}
Bad Request
- application/json
- Schema
- Example (from schema)
- Example
Schema
_error ErrorResponse[]
Array [code stringmessage string]
{
"_error": [
{
"code": "string",
"message": "string"
}
]
}
{
"value": {
"_error": [
{
"code": "DUPLICATE_APP_DEF_IDS"
},
{
"code": "APP_DEF_ID_LIST_SIZE_EXCEEDED"
},
{
"code": "INVALID_NETWORK_CONTEXT_ID"
},
{
"code": "INVALID_ORDER_NUMBER_MINIMUM_VAL"
},
{
"code": "INVALID_ORDER_NUMBER_MAXIMUM_VAL"
},
{
"code": "INVALID_SOURCE_PREFIXES_ID"
},
{
"code": "INVALID_DESTINATION_PREFIXES_ID"
},
{
"code": "PATHS_ALLOWED_REQUIRED"
},
{
"code": "INVALID_JSON_EXTRA_ATTRIBUTE"
},
{
"code": "INVALID_JSON_COMMON_ATTR_MISMATCH"
},
{
"code": "NETWORKPOLICYSET_NOT_PRESENT"
},
{
"code": "INVALID_POLICYSET_STATE"
},
{
"code": "INVALID_DEFAULT_RULE_FLAG"
},
{
"code": "INVALID_DEFAULT_RULE_NAME"
},
{
"code": "INVALID_DEFAULT_RULE_APPDEFS_UPDATE"
},
{
"code": "INVALID_DEFAULT_RULE_DESTINATION_PREFIX_UPDATE"
},
{
"code": "INVALID_DEFAULT_RULE_SOURCE_PREFIX_UPDATE"
},
{
"code": "INVALID_DEFAULT_RULE_ENABLED_FLAG_UPDATE"
},
{
"code": "INVALID_DEFAULT_RULE_NETWORK_CONTEXT_UPDATE"
},
{
"code": "POLICY_RULE_UPDATE_INVALID_NETWORK_CONTEXT"
},
{
"code": "POLICYRULE_CONFIG_INVALID_APPDEF_IDS"
},
{
"code": "POLICYRULE_CONFIG_INVALID_NETWORK_CONTEXT"
},
{
"code": "POLICYRULE_CONFIG_INVALID_SOURCE_PREFIX"
},
{
"code": "POLICYRULE_CONFIG_INVALID_DESTINATION_PREFIX"
},
{
"code": "POLICYRULE_CONFIG_ACTIVE_BACKUP_SERVICELABELS_SAME"
},
{
"code": "POLICYRULE_CONFIG_SERVICELABEL_DOES_NOT_EXIST"
},
{
"code": "POLICYRULE_CONFIG_INVALID_SERVICE_LABEL_ALLOWED_TRANSIT"
},
{
"code": "POLICYRULE_CONFIG_INVALID_SERVICE_LABEL_REQUIRED_TRANSIT"
},
{
"code": "POLICYRULE_CONFIG_INVALID_CGTRANSIT_VPNPATH_MISSING"
},
{
"code": "POLICYRULE_CONFIG_DUPLICATE_PATHS_SPECIFIED"
},
{
"code": "POLICYRULE_CONFIG_ALREADY_EXISTS_FOR_THE_APPS"
}
]
}
}