{ "id":"/axapi/v3/rule-set/{name}/rule/{name}/action-group", "type":"object", "node-type":"scalar", "title":"action-group", "partition-visibility":"shared", "description":"Configure action-group", "properties":{ "type":{ "type":"string", "format":"enum", "partition-visibility":"shared", "description":"'permit': permit; 'deny': deny; 'reset': reset; ", "enum":[ "permit", "deny", "reset" ], "optional":true }, "permit-log":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "not":"ipsec", "description":"Enable logging", "optional":true }, "reset-log":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable logging", "optional":true }, "deny-log":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable logging", "optional":true }, "listen-on-port":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "not-list":[ "ipsec", "cgnv6" ], "description":"Listen on port", "optional":true }, "forward":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "not-list":[ "ipsec", "cgnv6" ], "description":"Forward packet", "optional":true }, "ipsec":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "not-list":[ "permit-log", "listen-on-port", "forward", "cgnv6", "permit-limit-policy", "permit-respond-to-user-mac" ], "description":"Apply IPsec encapsulation", "optional":true }, "vpn-ipsec-name":{ "type":"string", "format":"string", "minLength":1, "maxLength":31, "partition-visibility":"shared", "$ref":"/axapi/v3/vpn/ipsec", "description":"VPN IPsec name", "optional":true }, "cgnv6":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "not-list":[ "listen-on-port", "forward", "ipsec" ], "description":"Apply CGNv6 policy", "optional":true }, "cgnv6-policy":{ "type":"string", "format":"enum", "partition-visibility":"shared", "description":"'lsn-lid': Apply specified CGNv6 LSN LID; 'fixed-nat': Apply CGNv6 Fixed NAT; 'ds-lite': Apply CGNv6 DS-Lite; ", "enum":[ "lsn-lid", "fixed-nat", "ds-lite" ], "optional":true }, "cgnv6-lsn-lid":{ "type":"number", "format":"number", "minimum":1, "maximum":1023, "partition-visibility":"shared", "description":"LSN LID", "optional":true }, "cgnv6-ds-lite":{ "type":"string", "format":"enum", "partition-visibility":"shared", "description":"'lsn-lid': Apply specified CGNv6 LSN LID; ", "enum":[ "lsn-lid" ], "optional":true }, "cgnv6-ds-lite-lsn-lid":{ "type":"number", "format":"number", "minimum":1, "maximum":1023, "partition-visibility":"shared", "description":"LSN LID", "optional":true }, "inspect-payload":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Enable DS-Lite tunnel inspection", "optional":true }, "permit-limit-policy":{ "type":"number", "format":"number", "minimum":1, "maximum":1023, "partition-visibility":"shared", "$ref":"/axapi/v3/template/limit-policy", "not":"ipsec", "description":"Limit policy Template", "optional":true }, "permit-respond-to-user-mac":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "not":"ipsec", "description":"Use the user's source MAC for the next hop rather than the routing table (default:off)", "optional":true }, "reset-respond-to-user-mac":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"Use the user's source MAC for the next hop rather than the routing table (default:off)", "optional":true }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object", "optional":true } } }