Class vz:RsDenyRule (CONCRETE)

Class ID:1325
Class Label: Deny Rule
Encrypted: false - Exportable: true - Persistent: true - Configurable: true - Subject to Quota: Disabled
Relationship Type: named
Relationship Cardinality: n-to-m
Relationship From: vz:TSubj
Relationship From Rel: vz:RsDenyRule
Relationship To: vz:Filter
Relationship To Rel: vz:RtDenyRule
Enforceable: true
Resolvable: true
Write Access: [admin, tenant-security]
Read Access: [admin, tenant-security]
Creatable/Deletable: yes (see Container Mos for details)
Semantic Scope: EPG
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Parent
Monitoring Flags : [ IsObservable: true, HasStats: false, HasFaults: true, HasHealth: true, HasEventRules: false ]

RN FORMAT: rsdenyRule-{tnVzFilterName}

    [1] PREFIX=rsdenyRule- PROPERTY = tnVzFilterName




DN FORMAT: 

[1] uni/tn-{name}/taboo-{name}/tsubj-{name}/rsdenyRule-{tnVzFilterName}

                

Diagram

Super Mo: pol:NToRef, Container Mos: vz:TSubj (deletable:yes),

Containers Hierarchies

top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ fabric:Topology The root for IFC topology.    ├ fabric:Pod A pod.      ├ fabric:Node The root node for the APIC.        ├ ctx:Local The local Context.          ├ ctx:Application The context application.            ├ pol:Uni Represents policy definition/resolution universe.              ├ fv:Tenant A policy owner in the virtual fabric. A tenant can be either a private or a shared entity. For example, you can create a tenant with contexts and bridge domains shared by other tenants. A shared type of tenant is typically named common, default, or infra.                ├ vz:Taboo A Taboo contract provides a way for an endpoint group to specify the subjects on which communication is not allowed.                  ├ vz:TSubj The subjects for a service contract represents a sub-application running behind an endpoint group, such as an exchange server. A subject is parented by the contract.                    ├ vz:RsDenyRule A filter is a group of resolvable filter entries. Each filter entry is a combination of network traffic classification properties. Note that this relation is an internal object. top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ pol:Uni Represents policy definition/resolution universe.    ├ fv:Tenant A policy owner in the virtual fabric. A tenant can be either a private or a shared entity. For example, you can create a tenant with contexts and bridge domains shared by other tenants. A shared type of tenant is typically named common, default, or infra.      ├ vz:Taboo A Taboo contract provides a way for an endpoint group to specify the subjects on which communication is not allowed.        ├ vz:TSubj The subjects for a service contract represents a sub-application running behind an endpoint group, such as an exchange server. A subject is parented by the contract.          ├ vz:RsDenyRule A filter is a group of resolvable filter entries. Each filter entry is a combination of network traffic classification properties. Note that this relation is an internal object.

Contained Hierarchy

vz:RsDenyRule A filter is a group of resolvable filter entries. Each filter entry is a combination of network traffic classification properties. Note that this relation is an internal object.  ├ fault:Counts An immutable object that provides the number of critical, major, minor, and warning faults raised on its parent object and its subtree.  ├ fault:Inst Contains detailed information of a fault. This object is attached as a child of the object on which the fault condition occurred. One instance object is created for each fault condition of the parent object. A fault instance object is identified by a fault code.  ├ health:Inst A base class for a health score instance.(Switch only)

Inheritance

reln:Inst This is generated and used only by internal processes.  ├ reln:To This is generated and used only by internal processes.    ├ pol:NToRef Represents a source name.      ├ vz:RsDenyRule A filter is a group of resolvable filter entries. Each filter entry is a combination of network traffic classification properties. Note that this relation is an internal object.

                vz:RsDenyRule:creation__vz_RsDenyRule

                vz:RsDenyRule:modification__vz_RsDenyRule

                vz:RsDenyRule:deletion__vz_RsDenyRule

                

                vz:RsDenyRule:ResolveFail

                pol:NToRef:mismatchTarget

                

childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction

Delete or ignore. For internal use only.

directives

Type: vz:RAction
Primitive Type: scalar:Bitmask8

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
Property Validators:

The filter directives assigned to the taboo contract.

dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn

A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.

forceResolve

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Whether the relation should force pull the target.

lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A value that indicates how this object was created. For internal use only.

modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The time when this object was last modified.

monPolDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

rType

Type: reln:ResolverType
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Represents the type of resolver.

rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn

Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.

state

Type: reln:State
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Represents the state of the relationship.

stateQual

Type: reln:StateQual
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Represents the state qualifier of the relationship.

status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus

The upgrade status. This property is for internal use only.

tCl

Type: reln:ClassId
Primitive Type: scalar:Enum16

Overrides:reln:Inst:tCl

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

null

tContextDn

Type: reln:Dn
Primitive Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Specifies the target context distinguished name.

tDn

Type: reln:Dn
Primitive Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The distinguished name of the target.

tRn

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Specifies the target's related name.

tType

Type: reln:TargetType
Primitive Type: scalar:Enum8

Overrides:reln:To:tType

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Represents the type of target. The target type for this object is named.

tnVzFilterName

Type: naming:Name
Primitive Type: string:Basic

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:
    Range:  min: "1"  max: "64"
        Allowed Chars:
            Regex: [a-zA-Z0-9_.:-]+

The filter name.

uid

Type: scalar:Uint16

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A unique identifier for this object.