Class hcloud:IpIngressRule (CONCRETE)

Class ID:15507
Class Label: ipingress
Encrypted: false - Exportable: false - Persistent: true - Configurable: false - Subject to Quota: Disabled - Abstraction Layer: Logical Model - APIC NX Processing: Disabled
Write Access: [NON CONFIGURABLE]
Read Access: [admin, tenant-connectivity, tenant-ext-connectivity, tenant-security]
Creatable/Deletable: yes (see Container Mos for details)
Semantic Scope: None
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Parent
Monitoring Flags : [ IsObservable: true, HasStats: false, HasFaults: false, HasHealth: true, HasEventRules: false ]

RN FORMAT: ipingress-{protocol}-{fromPort}-{toPort}-{icmpv4Type}-{icmpv6Type}-{icmpCode}-{[source]}

    [1] PREFIX=ipingress- PROPERTY = protocol


    [2] PREFIX=- PROPERTY = fromPort


    [3] PREFIX=- PROPERTY = toPort


    [4] PREFIX=- PROPERTY = icmpv4Type


    [5] PREFIX=- PROPERTY = icmpv6Type


    [6] PREFIX=- PROPERTY = icmpCode


    [7] PREFIX=- PROPERTY = source




DN FORMAT: 

[0] cprov-{vendor}/provacc-{[name]}/acct-{[name]}/region-{[regionName]}/context-{[name]}-addr-{[primaryCidr]}/sgroup-{[epgDn]}/ipingress-{protocol}-{fromPort}-{toPort}-{icmpv4Type}-{icmpv6Type}-{icmpCode}-{[source]}

[1] acct-{[name]}/region-{[regionName]}/context-{[name]}-addr-{[primaryCidr]}/sgroup-{[epgDn]}/ipingress-{protocol}-{fromPort}-{toPort}-{icmpv4Type}-{icmpv6Type}-{icmpCode}-{[source]}

                

Diagram

Super Mo: hcloud:ASgRule, Container Mos: hcloud:SecurityGroup (deletable:yes), Contained Mos: hcloud:EPSelectorSubnetData, hcloud:EndpointData, hcloud:ExtEPSelectorData, hcloud:FilterEntryData, hcloud:IpIngressRuleOper, hcloud:RsRFltAttData,

Containers Hierarchies

top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ hcloud:Prov  MOs Cloud Provider    ├ hcloud:ProvAccount  Cloud Provider Account      ├ hcloud:Account  Represents a cloud tenant, i.e. both owner and container of cloud resources. It maps 1:1 to fvTenant. Which means that for each fvTenant an hcloudAccount must be created. Depending on the cloud provider it implies different things, as detailed as follows. AWS: hcloudAccount stores cloud account's credentials or just the accoun...        ├ hcloud:Region  Represents a cloud region managed by CAPIC. Cloud resources will not be deployed in unmanaged regions.          ├ hcloud:Ctx             ├ hcloud:SecurityGroup  Group of endpoint sharing the same security rules              ├ hcloud:IpIngressRule  Security Group ingress rule that specifies source IP subnet address. top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ hcloud:Account  Represents a cloud tenant, i.e. both owner and container of cloud resources. It maps 1:1 to fvTenant. Which means that for each fvTenant an hcloudAccount must be created. Depending on the cloud provider it implies different things, as detailed as follows. AWS: hcloudAccount stores cloud account's credentials or just the accoun...    ├ hcloud:Region  Represents a cloud region managed by CAPIC. Cloud resources will not be deployed in unmanaged regions.      ├ hcloud:Ctx         ├ hcloud:SecurityGroup  Group of endpoint sharing the same security rules          ├ hcloud:IpIngressRule  Security Group ingress rule that specifies source IP subnet address.

Contained Hierarchy

hcloud:IpIngressRule  Security Group ingress rule that specifies source IP subnet address.  ├ fault:Counts An immutable object that provides the number of critical, major, minor, and warning faults raised on its parent object and its subtree.  ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ hcloud:EPSelectorSubnetData     ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ hcloud:EndpointData     ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ hcloud:ExtEPSelectorData     ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ hcloud:FilterEntryData     ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ hcloud:IpIngressRuleOper     ├ fault:Counts An immutable object that provides the number of critical, major, minor, and warning faults raised on its parent object and its subtree.    ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.    ├ fault:Inst Contains detailed information of a fault. This object is attached as a child of the object on which the fault condition occurred. One instance object is created for each fault condition of the parent object. A fault instance object is identified by a fault code.      ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility      ├ tag:Annotation       ├ tag:Tag     ├ health:Inst A base class for a health score instance.(Switch only)  ├ hcloud:RsRFltAttData     ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ health:Inst A base class for a health score instance.(Switch only)

Inheritance

naming:NamedObject An abstract base class for an object that contains a name.  ├ pol:Obj Represents a generic policy object.    ├ hcloud:ACloudBase  Abstract class for any cloud-related class. If you are planning to define a class for an actual cloud resource, then you must inherit from hcloud:AResource abstract class instead.      ├ hcloud:AResource  Abstract class that adds reference DNs towards resolved and logical objects.        ├ hcloud:ASgRule  Abstract Security Group Rule class containing properties that are shared between all types of rules.          ├ hcloud:IpIngressRule  Security Group ingress rule that specifies source IP subnet address.

childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction

Delete or ignore. For internal use only.

contractDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

DN of vzBrCP logical object (contract) to display in rule's description

delegateDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

DN of logical object to which delegate possible faults

description

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The description of this configuration item.

dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn

A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.

fromPort

Type: l4:Port
Primitive Type: scalar:Uint16

Overrides:hcloud:ASgRule:fromPort

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

The port block from port.

icmpCode

Type: icmp:Code
Primitive Type: scalar:Uint16

Overrides:hcloud:ASgRule:icmpCode

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

The ICMP code.

icmpv4Type

Type: icmpv4:Type
Primitive Type: scalar:UByte

Overrides:hcloud:ASgRule:icmpv4Type

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

NO COMMENTS

icmpv6Type

Type: icmpv6:Type
Primitive Type: scalar:UByte

Overrides:hcloud:ASgRule:icmpv6Type

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

NO COMMENTS

isEPSelectorSubnetDnSet

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

isExtEPSelectorDnSet

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A value that indicates how this object was created. For internal use only.

modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The time when this object was last modified.

name

Type: naming:Name
Primitive Type: string:Basic

Overrides:pol:Obj:name  |  naming:NamedObject:name

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The name of the object.

nameAlias

Type: naming:NameAlias
Primitive Type: string:Basic

Overrides:naming:NamedObject:nameAlias

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

protocol

Type: l3:IpProt
Primitive Type: scalar:UByte

Overrides:hcloud:ASgRule:protocol

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

The transfer protocol to be used for data export.

resolvedObjDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

DN of resolved object that generated this concrete (hcloud) object

rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn

Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.

source

Type: address:Ip

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

The distinguished name of the source.

status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus

The upgrade status. This property is for internal use only.

toPort

Type: l4:Port
Primitive Type: scalar:Uint16

Overrides:hcloud:ASgRule:toPort

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

The fabric card's port.