rule-set rule action-group¶
Configure action-group
action-group Specification¶
Type Configuration Resource Element Name action-group Element URI /axapi/v3/rule-set/{name}/rule/{name}/action-group Element Attributes action-group_attributes Schema action-group schema
Operations Allowed:
Operation | Method | URI | Payload | |
---|---|---|---|---|
Create Object | POST | /axapi/v3/rule-set/{name}/rule/{name}/action-group | ||
Get Object | GET | /axapi/v3/rule-set/{name}/rule/{name}/action-group | ||
Modify Object | POST | /axapi/v3/rule-set/{name}/rule/{name}/action-group | ||
Replace Object | PUT | /axapi/v3/rule-set/{name}/rule/{name}/action-group | ||
Delete Object | DELETE | /axapi/v3/rule-set/{name}/rule/{name}/action-group |
action-group attributes¶
cgnv6
Description Apply CGNv6 policy
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
Mutual Exclusion: cgnv6listen-on-port, forward and ipsec are mutually exclusive
cgnv6-ds-lite
Description ‘lsn-lid’: Apply specified CGNv6 LSN LID;
Type: string
Supported Values: lsn-lid
cgnv6-ds-lite-lsn-lid
Description LSN LID
Type: number
Range: 1-1023
cgnv6-lsn-lid
Description LSN LID
Type: number
Range: 1-1023
cgnv6-policy
Description ‘lsn-lid’: Apply specified CGNv6 LSN LID; ‘fixed-nat’: Apply CGNv6 Fixed NAT; ‘ds-lite’: Apply CGNv6 DS-Lite;
Type: string
Supported Values: lsn-lid, fixed-nat, ds-lite
deny-log
Description Enable logging
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
forward
Description Forward packet
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
Mutual Exclusion: forward ipsec and cgnv6 are mutually exclusive
inspect-payload
Description Enable DS-Lite tunnel inspection
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
ipsec
Description Apply IPsec encapsulation
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
Mutual Exclusion: ipsecpermit-log, listen-on-port, forward, cgnv6, permit-limit-policy and permit-respond-to-user-mac are mutually exclusive
listen-on-port
Description Listen on port
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
Mutual Exclusion: listen-on-port ipsec and cgnv6 are mutually exclusive
permit-limit-policy
Description Limit policy Template
Type: number
Range: 1-1023
Mutual Exclusion: permit-limit-policy and ipsec are mutually exclusive
Reference Object: /axapi/v3/template/limit-policy
permit-log
Description Enable logging
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
Mutual Exclusion: permit-log and ipsec are mutually exclusive
permit-respond-to-user-mac
Description Use the user’s source MAC for the next hop rather than the routing table (default:off)
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
Mutual Exclusion: permit-respond-to-user-mac and ipsec are mutually exclusive
reset-log
Description Enable logging
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
reset-respond-to-user-mac
Description Use the user’s source MAC for the next hop rather than the routing table (default:off)
Type: boolean
Supported Values: true, false, 1, 0
Default: 0
type
Description ‘permit’: permit; ‘deny’: deny; ‘reset’: reset;
Type: string
Supported Values: permit, deny, reset
uuid
Description uuid of the object
Type: string
Maximum Length: 64 characters
Maximum Length: 1 characters
vpn-ipsec-name
Description VPN IPsec name
Type: string
Maximum Length: 31 characters
Maximum Length: 1 characters
Reference Object: /axapi/v3/vpn/ipsec