Skip to main content

Custom Control Definition

Custom Control Policy Definition define the matching conditions and Actions for Route and TLOC type filters

Diagram

Classes

control_policy (sdwan.centralized_policies.definitions)

NameTypeConstraintMandatoryDefault Value
custom_control_topologyList[custom_control_topology]No

custom_control_topology (sdwan.centralized_policies.definitions.control_policy)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[A-Za-z0-9\-_]{1,127}$Yes
descriptionStringYes
default_action_typeChoiceaccept, rejectYes
sequencesList[sequences]Yes

sequences (sdwan.centralized_policies.definitions.control_policy.custom_control_topology)

NameTypeConstraintMandatoryDefault Value
base_actionChoiceaccept, rejectYes
idIntegermin: 1, max: 65534Yes
nameStringYes
ip_typeChoiceipv4Yes
typeStringequals: tlocYes
match_criteriasClass[match_criterias]Yes
actionsClass[actions]No

match_criterias (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences)

NameTypeConstraintMandatoryDefault Value
carrierChoicedefault, carrier1, carrier2, carrier3, carrier4, carrier5, carrier6, carrier7, carrier8No
color_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
domain_idIntegermin: 1, max: 4294967295No
group_idIntegermin: 0, max: 4294967295No
omp_tagIntegermin: 0, max: 4294967295No
originatorIPNo
preferenceIntegermin: 0, max: 4294967295No
site_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
site_idIntegermin: 0, max: 4294967295No
region_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
region_idIntegermin: 0, max: 63No
tloc_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
tlocClass[tloc]No

actions (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences)

NameTypeConstraintMandatoryDefault Value
omp_tagIntegermin: 0, max: 4294967295No
preferenceIntegermin: 0, max: 4294967295No

tloc (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences.match_criterias)

NameTypeConstraintMandatoryDefault Value
ipIPYes
colorChoicedefault, mpls, metro-ethernet, biz-internet, public-internet, lte, 3g, red, green, blue, gold, silver, bronze, custom1, custom2, custom3, private1, private2, private3, private4, private5, private6Yes
encapChoiceipsec, greYes

Examples

sdwan:
centralized_policies:
definitions:
control_policy:
custom_control_topology:
- name: CCT_DEFINITION_TEST1
description: CCT_DEFINITION_TEST1
default_action_type: accept
sequences:
- id: 1
base_action: accept
name: rule1
ip_type: ipv4
type: route
match_criterias:
color_list: COLOR-INTERNET-CCT-TEST
community_list: COMMUNITY-REGION-CCT-TEST
omp_tag: 65
expanded_community_list: EXP-COMMUNITY-CCT-TEST
preference: 45
originator: 10.10.20.30
site_list: TEXAS-CCT-TEST
path_type: direct-path
vpn_list: VPN-LIST-CCT-TEST1
ipv4_prefix_list: PREFIX-LIST-CCT-TEST
tloc:
ip: 10.10.33.67
color: custom1
encap: ipsec
actions:
community: 100:1000
community_additive: true
preference: 48
omp_tag: 88
tloc:
ip: 1.2.5.9
color: custom2
encap: ipsec
export_to_vpn_list: VPN-LIST-CCT-TEST2
- base_action: reject
id: 2
name: rule2
ip_type: ipv4
type: tloc
match_criterias:
carrier: carrier1
color_list: COLOR-INTERNET-CCT-TEST2
domain_id: 567
group_id: 678
omp_tag: 77
originator: 12.13.14.15
preference: 88
site_list: TEXAS-CCT-TEST
tloc:
ip: 10.10.33.67
color: custom1
encap: ipsec
actions:
omp_tag: 89
preference: 49