Skip to main content

Custom Control Definition

Custom Control Policy Definition define the matching conditions and Actions for Route and TLOC type filters

Diagram​

Classes​

control_policy (sdwan.centralized_policies.definitions)​

NameTypeConstraintMandatoryDefault Value
custom_control_topologyList[custom_control_topology]No

custom_control_topology (sdwan.centralized_policies.definitions.control_policy)​

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[A-Za-z0-9\-_]{1,127}$Yes
descriptionStringYes
default_action_typeChoiceaccept, rejectYes
sequencesList[sequences]Yes

sequences (sdwan.centralized_policies.definitions.control_policy.custom_control_topology)​

NameTypeConstraintMandatoryDefault Value
base_actionChoiceaccept, rejectYes
idIntegermin: 1, max: 65534Yes
nameStringYes
ip_typeChoiceipv4, ipv6, allNoipv4
typeChoicetloc, routeYes
match_criteriasClass[match_criterias]No
actionsClass[actions]No

match_criterias (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences)​

NameTypeConstraintMandatoryDefault Value
carrierChoicedefault, carrier1, carrier2, carrier3, carrier4, carrier5, carrier6, carrier7, carrier8No
color_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
domain_idIntegermin: 1, max: 4294967295No
group_idIntegermin: 0, max: 4294967295No
omp_tagIntegermin: 0, max: 4294967295No
originatorIPNo
preferenceIntegermin: 0, max: 4294967295No
site_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
site_idIntegermin: 0, max: 4294967295No
region_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
region_idIntegermin: 0, max: 63No
tloc_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
tlocClass[tloc]No
community_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
expanded_community_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
originChoiceaggregrate, bgp, bgp-external, bgp-internal, connected, eigrp, ospf, ospf-inter-area, ospf-intra-area, ospf-external1, ospf-external2, rip, static, eigrp-summary, eigrp-internal, eigrp-external, lisp, nat-dia, natpool, isis, isis-level1, isis-level2No
path_typeChoicehierarchical-path, direct-path, transport-gateway-pathNo
vpn_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
vpnIntegermin: 0, max: 65536No
ipv4_prefix_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No

actions (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences)​

NameTypeConstraintMandatoryDefault Value
omp_tagIntegermin: 0, max: 4294967295No
preferenceIntegermin: 0, max: 4294967295No
affinityIntegermin: 0, max: 63No
communityAnyString[Regex: ^[0-9]{1,5}(:)[0-9]{1,5}$] or Choice[internet, local-AS, no-export, no-advertise]No
community_additiveBooleantrue, falseNo
tlocClass[tloc]No
tloc_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No
tloc_actionChoicestrict, primary, backup, ecmpNo
serviceClass[service]No
export_to_vpn_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No

tloc (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences.match_criterias)​

NameTypeConstraintMandatoryDefault Value
ipIPYes
colorChoicedefault, mpls, metro-ethernet, biz-internet, public-internet, lte, 3g, red, green, blue, gold, silver, bronze, custom1, custom2, custom3, private1, private2, private3, private4, private5, private6Yes
encapChoiceipsec, greYes

tloc (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences.actions)​

NameTypeConstraintMandatoryDefault Value
ipIPYes
colorChoicedefault, mpls, metro-ethernet, biz-internet, public-internet, lte, 3g, red, green, blue, gold, silver, bronze, custom1, custom2, custom3, private1, private2, private3, private4, private5, private6Yes
encapChoiceipsec, greYes

service (sdwan.centralized_policies.definitions.control_policy.custom_control_topology.sequences.actions)​

NameTypeConstraintMandatoryDefault Value
typeChoiceIDP, IDS, FW, netsvc1, netsvc2, netsvc3, netsvc4, netsvc5, appqoeYes
vpnIntegermin: 0, max: 65530Yes
tlocClass[tloc]No
tloc_listStringRegex: ^[A-Za-z0-9\-_]{1,32}$No

Examples​

sdwan:
  centralized_policies:
    definitions:
      control_policy:
        custom_control_topology:
          - name: CCT_DEFINITION_TEST1
            description: CCT_DEFINITION_TEST1
            default_action_type: accept
            sequences:
              - id: 1
                base_action: accept
                name: rule1
                ip_type: ipv4
                type: route
                match_criterias:
                  color_list: COLOR-INTERNET-CCT-TEST
                  community_list: COMMUNITY-REGION-CCT-TEST
                  omp_tag: 65
                  expanded_community_list: EXP-COMMUNITY-CCT-TEST
                  preference: 45
                  originator: 10.10.20.30
                  site_list: TEXAS-CCT-TEST
                  path_type: direct-path
                  vpn_list: VPN-LIST-CCT-TEST1
                  ipv4_prefix_list: PREFIX-LIST-CCT-TEST
                  tloc:
                    ip: 10.10.33.67
                    color: custom1
                    encap: ipsec
                actions:
                  community: 100:1000
                  community_additive: true
                  preference: 48
                  omp_tag: 88
                  tloc:
                    ip: 1.2.5.9
                    color: custom2
                    encap: ipsec
                  export_to_vpn_list: VPN-LIST-CCT-TEST2
              - base_action: reject
                id: 2
                name: rule2
                ip_type: ipv4
                type: tloc
                match_criterias:
                  carrier: carrier1
                  color_list: COLOR-INTERNET-CCT-TEST2
                  domain_id: 567
                  group_id: 678
                  omp_tag: 77
                  originator: 12.13.14.15
                  preference: 88
                  site_list: TEXAS-CCT-TEST
                  tloc:
                    ip: 10.10.33.67
                    color: custom1
                    encap: ipsec
                actions:
                  omp_tag: 89
                  preference: 49