Skip to main content

External Endpoint Group

Location in GUI: Application Management » Schemas

Diagram

Classes

templates (ndo.schemas)

NameTypeConstraintMandatoryDefault Value
external_endpoint_groupsList[external_endpoint_groups]No

external_endpoint_groups (ndo.schemas.templates)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
typeChoiceon-premise, cloudNoon-premise
preferred_groupBooleantrue, falseNofalse
vrfClass[vrf]Yes
l3outClass[l3out]No
application_profileClass[application_profile]No
subnetsList[subnets]No
contractsClass[contracts]No
selectorsList[selectors]No
sitesList[sites]No

vrf (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
schemaStringNo
templateStringNo

l3out (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
schemaStringNo
templateStringNo

application_profile (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
schemaStringNo
templateStringNo

subnets (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
prefixIPYes
import_route_controlBooleantrue, falseNofalse
export_route_controlBooleantrue, falseNofalse
shared_route_controlBooleantrue, falseNofalse
import_securityBooleantrue, falseNotrue
shared_securityBooleantrue, falseNofalse
aggregate_importBooleantrue, falseNofalse
aggregate_exportBooleantrue, falseNofalse
aggregate_sharedBooleantrue, falseNofalse

contracts (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
consumersList[consumers]No
providersList[providers]No

selectors (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
nameStringYes
ipsListIPYes

sites (ndo.schemas.templates.external_endpoint_groups)

NameTypeConstraintMandatoryDefault Value
nameStringYes
tenantStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$No
l3outClass[l3out]No
route_reachabilityChoiceinternet, site-extNointernet
selectorsList[selectors]No

consumers (ndo.schemas.templates.external_endpoint_groups.contracts)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
schemaStringNo
templateStringNo

providers (ndo.schemas.templates.external_endpoint_groups.contracts)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
schemaStringNo
templateStringNo

l3out (ndo.schemas.templates.external_endpoint_groups.sites)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
tenantStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$No
schemaStringNo
templateStringNo

selectors (ndo.schemas.templates.external_endpoint_groups.sites)

NameTypeConstraintMandatoryDefault Value
nameStringYes
ipsListIPYes

Examples

On-premise External Endpoint Group:

ndo:
schemas:
- name: ABC
templates:
- name: TEMPLATE1
external_endpoint_groups:
- name: EXT-EPG1
preferred_group: false
vrf:
name: VRF1
schema: ABC
template: TEMPLATE1
subnets:
- prefix: 0.0.0.0/0
import_route_control: 'yes'
export_route_control: 'yes'
shared_route_control: 'yes'
import_security: 'yes'
shared_security: 'yes'
aggregate_import: 'yes'
aggregate_export: 'yes'
aggregate_shared: 'yes'
- prefix: 10.0.0.0/8
contracts:
consumers:
- name: CONTRACT1
schema: ABC
template: TEMPLATE1
providers:
- name: CONTRACT1
schema: ABC
template: TEMPLATE1
sites:
- name: APIC1
tenant: MSO1
l3out:
name: ANS-L3OUT

Azure External Endpoint Group:

ndo:
schemas:
- name: AZURE1
templates:
- name: TEMPLATE1
external_endpoint_groups:
- name: EXT-EPG1
type: cloud
vrf:
name: VRF1
application_profile:
name: AP1
selectors:
- name: SELECTOR1
ips:
- 10.1.1.1
- 10.1.1.2
sites:
- name: AZURE-SITE1
selectors:
- name: SELECTOR2
ips:
- 10.1.1.3
- 10.1.1.4