Class iacl:Entry (CONCRETE)

Class ID:10977
Class Label: ACL entry of the CoPP Prefilter
Encrypted: false - Exportable: true - Persistent: true - Configurable: true - Subject to Quota: Disabled - Abstraction Layer: Logical Model - APIC NX Processing: Disabled
Write Access: [admin]
Read Access: [admin]
Creatable/Deletable: yes (see Container Mos for details)
Semantic Scope: Fabric
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Parent
Monitoring Flags : [ IsObservable: true, HasStats: true, HasFaults: true, HasHealth: true, HasEventRules: false ]

RN FORMAT: proto-{ipProto}-src-{[srcAddr]}-dst-{[dstAddr]}-srcFromP-{srcPortFrom}-srcToP-{srcPortTo}-dstFromP-{dstPortFrom}-dstToP-{dstPortTo}

    [1] PREFIX=proto- PROPERTY = ipProto


    [2] PREFIX=-src- PROPERTY = srcAddr


    [3] PREFIX=-dst- PROPERTY = dstAddr


    [4] PREFIX=-srcFromP- PROPERTY = srcPortFrom


    [5] PREFIX=-srcToP- PROPERTY = srcPortTo


    [6] PREFIX=-dstFromP- PROPERTY = dstPortFrom


    [7] PREFIX=-dstToP- PROPERTY = dstPortTo




DN FORMAT: 

[1] uni/infra/iaclspinep-{name}/proto-{ipProto}-src-{[srcAddr]}-dst-{[dstAddr]}-srcFromP-{srcPortFrom}-srcToP-{srcPortTo}-dstFromP-{dstPortFrom}-dstToP-{dstPortTo}

[3] uni/infra/iaclleafp-{name}/proto-{ipProto}-src-{[srcAddr]}-dst-{[dstAddr]}-srcFromP-{srcPortFrom}-srcToP-{srcPortTo}-dstFromP-{dstPortFrom}-dstToP-{dstPortTo}

                

Diagram

Super Mo: pol:Obj, Container Mos: iacl:AProfile (deletable:yes), Contained Mos: aaa:RbacAnnotation, tag:Annotation, tag:Tag,

Containers Hierarchies

top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ fabric:Topology The root for IFC topology.    ├ fabric:Pod A pod.      ├ fabric:Node The root node for the APIC.        ├ ctx:Local The local Context.          ├ ctx:Application The context application.            ├ pol:Uni Represents policy definition/resolution universe.              ├ infra:Infra A container for all tenant infra configurations.                ├ iacl:SpineProfile  CoPP Prefilter policy that can be applied at SPINE nodes                  ├ iacl:Entry  ACL entry of the CoPP Prefilter top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ pol:Uni Represents policy definition/resolution universe.    ├ infra:Infra A container for all tenant infra configurations.      ├ iacl:SpineProfile  CoPP Prefilter policy that can be applied at SPINE nodes        ├ iacl:Entry  ACL entry of the CoPP Prefilter top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ fabric:Topology The root for IFC topology.    ├ fabric:Pod A pod.      ├ fabric:Node The root node for the APIC.        ├ ctx:Local The local Context.          ├ ctx:Application The context application.            ├ pol:Uni Represents policy definition/resolution universe.              ├ infra:Infra A container for all tenant infra configurations.                ├ iacl:LeafProfile  CoPP Prefilter policy that can be applied at LEAF nodes                  ├ iacl:Entry  ACL entry of the CoPP Prefilter top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ pol:Uni Represents policy definition/resolution universe.    ├ infra:Infra A container for all tenant infra configurations.      ├ iacl:LeafProfile  CoPP Prefilter policy that can be applied at LEAF nodes        ├ iacl:Entry  ACL entry of the CoPP Prefilter

Contained Hierarchy

iacl:Entry  ACL entry of the CoPP Prefilter  ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility  ├ fault:Counts An immutable object that provides the number of critical, major, minor, and warning faults raised on its parent object and its subtree.  ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ fault:Inst Contains detailed information of a fault. This object is attached as a child of the object on which the fault condition occurred. One instance object is created for each fault condition of the parent object. A fault instance object is identified by a fault code.    ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility    ├ tag:Annotation     ├ tag:Tag   ├ health:Inst A base class for a health score instance.(Switch only)  ├ tag:Annotation   ├ tag:Tag

Inheritance

naming:NamedObject An abstract base class for an object that contains a name.  ├ pol:Obj Represents a generic policy object.    ├ iacl:Entry  ACL entry of the CoPP Prefilter

Stats

iacl:Entry  ACL entry of the CoPP Prefilter  ├ copp:PermitAg15min A class that represents the most current aggregated statistics for Filter Counters in a 15 minute sampling interval. This class updates every 5 minutes.  ├ copp:PermitAg1d A class that represents the most current aggregated statistics for Filter Counters in a 1 day sampling interval. This class updates every hour.  ├ copp:PermitAg1h A class that represents the most current aggregated statistics for Filter Counters in a 1 hour sampling interval. This class updates every 15 minutes.  ├ copp:PermitAg1mo A class that represents the most current aggregated statistics for Filter Counters in a 1 month sampling interval. This class updates every day.  ├ copp:PermitAg1qtr A class that represents the most current aggregated statistics for Filter Counters in a 1 quarter sampling interval. This class updates every day.  ├ copp:PermitAg1w A class that represents the most current aggregated statistics for Filter Counters in a 1 week sampling interval. This class updates every day.  ├ copp:PermitAg1year A class that represents the most current aggregated statistics for Filter Counters in a 1 year sampling interval. This class updates every day.  ├ copp:PermitAgHist15min A class that represents historical aggregated statistics for Filter Counters in a 15 minute sampling interval. This class updates every 5 minutes.  ├ copp:PermitAgHist1d A class that represents historical aggregated statistics for Filter Counters in a 1 day sampling interval. This class updates every hour.  ├ copp:PermitAgHist1h A class that represents historical aggregated statistics for Filter Counters in a 1 hour sampling interval. This class updates every 15 minutes.  ├ copp:PermitAgHist1mo A class that represents historical aggregated statistics for Filter Counters in a 1 month sampling interval. This class updates every day.  ├ copp:PermitAgHist1qtr A class that represents historical aggregated statistics for Filter Counters in a 1 quarter sampling interval. This class updates every day.  ├ copp:PermitAgHist1w A class that represents historical aggregated statistics for Filter Counters in a 1 week sampling interval. This class updates every day.  ├ copp:PermitAgHist1year A class that represents historical aggregated statistics for Filter Counters in a 1 year sampling interval. This class updates every day.  ├ copp:PermitPart15min A class that represents the most current portion of the statistics for Filter Counters in a 15 minute sampling interval. This class updates every 5 minutes.  ├ copp:PermitPart1d A class that represents the most current portion of the statistics for Filter Counters in a 1 day sampling interval. This class updates every hour.  ├ copp:PermitPart1h A class that represents the most current portion of the statistics for Filter Counters in a 1 hour sampling interval. This class updates every 15 minutes.  ├ copp:PermitPart1mo A class that represents the most current portion of the statistics for Filter Counters in a 1 month sampling interval. This class updates every day.  ├ copp:PermitPart1qtr A class that represents the most current portion of the statistics for Filter Counters in a 1 quarter sampling interval. This class updates every day.  ├ copp:PermitPart1w A class that represents the most current portion of the statistics for Filter Counters in a 1 week sampling interval. This class updates every day.  ├ copp:PermitPart1year A class that represents the most current portion of the statistics for Filter Counters in a 1 year sampling interval. This class updates every day.  ├ copp:PermitPart5min A class that represents the most current portion of the statistics for Filter Counters in a 5 minute sampling interval. This class updates every 10 seconds.  ├ copp:PermitPartHist15min A class that represents historical portion of the statistics for Filter Counters in a 15 minute sampling interval. This class updates every 5 minutes.  ├ copp:PermitPartHist1d A class that represents historical portion of the statistics for Filter Counters in a 1 day sampling interval. This class updates every hour.  ├ copp:PermitPartHist1h A class that represents historical portion of the statistics for Filter Counters in a 1 hour sampling interval. This class updates every 15 minutes.  ├ copp:PermitPartHist1mo A class that represents historical portion of the statistics for Filter Counters in a 1 month sampling interval. This class updates every day.  ├ copp:PermitPartHist1qtr A class that represents historical portion of the statistics for Filter Counters in a 1 quarter sampling interval. This class updates every day.  ├ copp:PermitPartHist1w A class that represents historical portion of the statistics for Filter Counters in a 1 week sampling interval. This class updates every day.  ├ copp:PermitPartHist1year A class that represents historical portion of the statistics for Filter Counters in a 1 year sampling interval. This class updates every day.  ├ copp:PermitPartHist5min A class that represents historical portion of the statistics for Filter Counters in a 5 minute sampling interval. This class updates every 10 seconds.

                iacl:Entry:creation__iacl_Entry

                iacl:Entry:modification__iacl_Entry

                iacl:Entry:deletion__iacl_Entry

                

annotation

Type: mo:Annotation
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
Property Validators:
    Range:  min: "0"  max: "128"
        Allowed Chars:
            Regex: [a-zA-Z0-9_.:-]+

NO COMMENTS

childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction

Delete or ignore. For internal use only.

dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn

A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.

dstAddr

Type: iacl:addressIp
Primitive Type: address:Ip

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:

Destination Prefix to match, can be /32 or /128 for single host

dstPortFrom

Type: l4:Port
Primitive Type: scalar:Uint16

Like: copp:Filter:dstPortFrom
Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:
    Range:  min: 0  max: 0xffff

Destination Port Range, from field. Valid only for TCP/UDP cases

dstPortTo

Type: l4:Port
Primitive Type: scalar:Uint16

Like: copp:Filter:dstPortTo
Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:
    Range:  min: 0  max: 0xffff

Destination Port Range, to field. Valid only for TCP/UDP cases

extMngdBy

Type: mo:ExtMngdByType
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

ipProto

Type: l3:IpProt
Primitive Type: scalar:UByte

Like: copp:Filter:ipProto
Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:
    Range:  min: (short)0  max: (short)255

The IP protocol.

lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A value that indicates how this object was created. For internal use only.

modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The time when this object was last modified.

monPolDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The monitoring policy attached to this observable object.

name

Type: naming:Name
Primitive Type: string:Basic

Overrides:naming:NamedObject:name

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
Property Validators:
    Range:  min: "0"  max: "64"
        Allowed Chars:
            Regex: [a-zA-Z0-9_.:-]+

null

nameAlias

Type: naming:NameAlias
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
Property Validators:
    Range:  min: "0"  max: "63"
        Allowed Chars:
            Regex: [a-zA-Z0-9_.-]+

NO COMMENTS

rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn

Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.

srcAddr

Type: iacl:addressIp
Primitive Type: address:Ip

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:

Source Prefix to match, can be /32 or /128 for single host

srcPortFrom

Type: l4:Port
Primitive Type: scalar:Uint16

Like: copp:Filter:srcPortFrom
Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:
    Range:  min: 0  max: 0xffff

Source Port Range, from field. Valid only for TCP/UDP cases

srcPortTo

Type: l4:Port
Primitive Type: scalar:Uint16

Like: copp:Filter:srcPortTo
Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
Property Validators:
    Range:  min: 0  max: 0xffff

Source Port Range, to field. Valid only for TCP/UDP cases

status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus

The upgrade status. This property is for internal use only.

uid

Type: scalar:Uint16

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A unique identifier for this object.

userdom

Type: mo:UserDomType
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
Property Validators:
    Range:  min: "0"  max: "256"
        Allowed Chars:
            Regex: [a-zA-Z0-9_.:-]+

NO COMMENTS