Access Leaf Switch Profile
Leaf Switch Profiles can either be auto-generated (one per leaf) by providing a naming convention, or can be system-generated (one per leaf), or can be defined explicitly. In case of auto-generated profiles the following placeholders can be used when defining the naming convention:
\\g<id>: gets replaced by the respective leaf node ID\\g<name>: gets replaced by the respective leaf hostname
Location in GUI: Fabric » Access Policies » Switches » Leaf Switches » Profiles
Diagram
Section titled “Diagram”Classes
Section titled “Classes”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| auto_generate_switch_pod_profiles | Boolean | true, false | No | false |
| auto_generate_access_leaf_switch_interface_profiles | Boolean | true, false | No | false |
access_policies (apic)
Section titled “access_policies (apic)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| leaf_switch_profile_name | String | min: 1, max: 64 | No | LEAF\g<id> |
| leaf_switch_selector_name | String | min: 1, max: 64 | No | LEAF\g<id> |
| leaf_interface_profile_name | String | min: 1, max: 64 | No | LEAF\g<id> |
| leaf_switch_profiles | List | [leaf_switch_profiles] | No |
nodes (apic.node_policies)
Section titled “nodes (apic.node_policies)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| id | Integer | min: 1, max: 4000 | Yes | |
| name | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | No | |
| access_policy_group | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | No |
leaf_switch_profiles (apic.access_policies)
Section titled “leaf_switch_profiles (apic.access_policies)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | Yes | |
| selectors | List | [selectors] | No | |
| interface_profiles | List | String[Regex: ^[a-zA-Z0-9_.:-]{1,64}$] | No |
selectors (apic.access_policies.leaf_switch_profiles)
Section titled “selectors (apic.access_policies.leaf_switch_profiles)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | Yes | |
| policy | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | No | |
| node_blocks | List | [node_blocks] | No |
node_blocks (apic.access_policies.leaf_switch_profiles.selectors)
Section titled “node_blocks (apic.access_policies.leaf_switch_profiles.selectors)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | Yes | |
| from | Integer | min: 1, max: 4000 | Yes | |
| to | Integer | min: 1, max: 4000 | No |
Examples
Section titled “Examples”Auto-generated profiles:
apic: auto_generate_access_leaf_switch_interface_profiles: true access_policies: leaf_switch_profile_name: "LEAF\\g<id>" leaf_switch_selector_name: "LEAF\\g<id>" node_policies: nodes: - id: 101 role: leaf access_policy_group: ALL_LEAFSSystem-generated profiles:
apic: new_interface_configuration: true node_policies: nodes: - id: 101 role: leaf access_policy_group: ALL_LEAFSExample-1: This configuration creates a leaf switch profile named LEAF101 that applies the ALL_LEAFS policy to node 101 and associates it with the LEAF101 interface profile for port configuration. This is used to control which switches get which policies and interface settings.
apic: access_policies: leaf_switch_profiles: - name: LEAF101 selectors: - name: SEL1 policy: ALL_LEAFS node_blocks: - name: BLOCK1 from: 101 interface_profiles: - LEAF101Example-2: This configuration creates a leaf switch profile that applies the ALL_LEAFS_POLICY to both leaf switches 101 and 102, and associates each with its respective interface profile for port configuration. This allows you to manage policies and interface settings for multiple switches as a group.
apic: access_policies: leaf_switch_profiles: - name: LEAF_PROFILE_101_102 selectors: - name: LEAFS_101_102 policy: ALL_LEAFS_POLICY node_blocks: - name: BLOCK_101_102 from: 101 to: 102 interface_profiles: - LEAF101_INTF_PROFILE - LEAF102_INTF_PROFILE