Management Access Policy

Version:

Location in GUI: Fabric » Fabric Policies » Policies » Pod » Management Access

Diagram

Classes

pod_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
management_access_policies	List	`[management_access_policies]`	No

management_access_policies (apic.fabric_policies.pod_policies)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
description	String	Regex: `^[a-zA-Z0-9\\!#$%()*,-./:;@ _{\|}~?&+]{1,128}$`	No
alias	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No
ssh	Class	`[ssh]`	No
telnet	Class	`[telnet]`	No
https	Class	`[https]`	No
http	Class	`[http]`	No

ssh (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`true`
password_auth	Boolean	`true`, `false`	No	`true`
port	Integer	min: `1`, max: `65535`	No	`22`
aes128_ctr	Boolean	`true`, `false`	No	`true`
aes128_gcm	Boolean	`true`, `false`	No	`true`
aes192_ctr	Boolean	`true`, `false`	No	`true`
aes256_ctr	Boolean	`true`, `false`	No	`true`
aes256_gcm	Boolean	`true`, `false`	No	`false`
chacha	Boolean	`true`, `false`	No	`true`
hmac_sha1	Boolean	`true`, `false`	No	`true`
hmac_sha2_256	Boolean	`true`, `false`	No	`true`
hmac_sha2_512	Boolean	`true`, `false`	No	`true`
curve25519_sha256	Boolean	`true`, `false`	No	`false`
curve25519_sha256_libssh	Boolean	`true`, `false`	No	`false`
dh1_sha1	Boolean	`true`, `false`	No	`false`
dh14_sha1	Boolean	`true`, `false`	No	`false`
dh14_sha256	Boolean	`true`, `false`	No	`false`
dh16_sha512	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp256	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp384	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp521	Boolean	`true`, `false`	No	`false`

telnet (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
port	Integer	min: `1`, max: `65535`	No	`23`

https (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`true`
client_cert_auth_state	Boolean	`true`, `false`	No	`false`
dh	Choice	`1024`, `2048`, `4096`	No	`none`
port	Integer	min: `1`, max: `65535`	No	`443`
tlsv1	Boolean	`true`, `false`	No	`false`
tlsv1_1	Boolean	`true`, `false`	No	`true`
tlsv1_2	Boolean	`true`, `false`	No	`true`
tlsv1_3	Boolean	`true`, `false`	No	`false`
key_ring	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No	`default`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

http (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
port	Integer	min: `1`, max: `65535`	No	`80`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

Examples

apic:
  fabric_policies:
    pod_policies:
      management_access_policies:
        - name: MGMT1
          telnet:
            admin_state: true
          ssh:
            port: 22
            hmac_sha1: false
            chacha: false
          https:
            tlsv1: true
          http:
            admin_state: true
            port: 8080

Location in GUI: Fabric » Fabric Policies » Policies » Pod » Management Access

Diagram

Classes

pod_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
management_access_policies	List	`[management_access_policies]`	No

management_access_policies (apic.fabric_policies.pod_policies)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
description	String	Regex: `^[a-zA-Z0-9\\!#$%()*,-./:;@ _{\|}~?&+]{1,128}$`	No
alias	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No
ssh	Class	`[ssh]`	No
telnet	Class	`[telnet]`	No
https	Class	`[https]`	No
http	Class	`[http]`	No

ssh (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`true`
password_auth	Boolean	`true`, `false`	No	`true`
port	Integer	min: `1`, max: `65535`	No	`22`
aes128_ctr	Boolean	`true`, `false`	No	`true`
aes128_gcm	Boolean	`true`, `false`	No	`true`
aes192_ctr	Boolean	`true`, `false`	No	`true`
aes256_ctr	Boolean	`true`, `false`	No	`true`
aes256_gcm	Boolean	`true`, `false`	No	`false`
chacha	Boolean	`true`, `false`	No	`true`
hmac_sha1	Boolean	`true`, `false`	No	`true`
hmac_sha2_256	Boolean	`true`, `false`	No	`true`
hmac_sha2_512	Boolean	`true`, `false`	No	`true`
curve25519_sha256	Boolean	`true`, `false`	No	`false`
curve25519_sha256_libssh	Boolean	`true`, `false`	No	`false`
dh1_sha1	Boolean	`true`, `false`	No	`false`
dh14_sha1	Boolean	`true`, `false`	No	`false`
dh14_sha256	Boolean	`true`, `false`	No	`false`
dh16_sha512	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp256	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp384	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp521	Boolean	`true`, `false`	No	`false`

telnet (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
port	Integer	min: `1`, max: `65535`	No	`23`

https (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`true`
client_cert_auth_state	Boolean	`true`, `false`	No	`false`
dh	Choice	`1024`, `2048`, `4096`	No	`none`
port	Integer	min: `1`, max: `65535`	No	`443`
tlsv1	Boolean	`true`, `false`	No	`false`
tlsv1_1	Boolean	`true`, `false`	No	`true`
tlsv1_2	Boolean	`true`, `false`	No	`true`
tlsv1_3	Boolean	`true`, `false`	No	`false`
key_ring	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No	`default`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

http (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
port	Integer	min: `1`, max: `65535`	No	`80`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

Examples

apic:
  fabric_policies:
    pod_policies:
      management_access_policies:
        - name: MGMT1
          telnet:
            admin_state: true
          ssh:
            port: 22
            hmac_sha1: false
            chacha: false
          https:
            tlsv1: true
          http:
            admin_state: true
            port: 8080

Location in GUI: Fabric » Fabric Policies » Policies » Pod » Management Access

Diagram

Classes

pod_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
management_access_policies	List	`[management_access_policies]`	No

management_access_policies (apic.fabric_policies.pod_policies)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
description	String	Regex: `^[a-zA-Z0-9\\!#$%()*,-./:;@ _{\|}~?&+]{1,128}$`	No
alias	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No
ssh	Class	`[ssh]`	No
telnet	Class	`[telnet]`	No
https	Class	`[https]`	No
http	Class	`[http]`	No

ssh (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`true`
password_auth	Boolean	`true`, `false`	No	`true`
port	Integer	min: `1`, max: `65535`	No	`22`
aes128_ctr	Boolean	`true`, `false`	No	`true`
aes128_gcm	Boolean	`true`, `false`	No	`true`
aes192_ctr	Boolean	`true`, `false`	No	`true`
aes256_ctr	Boolean	`true`, `false`	No	`true`
aes256_gcm	Boolean	`true`, `false`	No	`false`
chacha	Boolean	`true`, `false`	No	`true`
hmac_sha1	Boolean	`true`, `false`	No	`true`
hmac_sha2_256	Boolean	`true`, `false`	No	`true`
hmac_sha2_512	Boolean	`true`, `false`	No	`true`
curve25519_sha256	Boolean	`true`, `false`	No	`false`
curve25519_sha256_libssh	Boolean	`true`, `false`	No	`false`
dh1_sha1	Boolean	`true`, `false`	No	`false`
dh14_sha1	Boolean	`true`, `false`	No	`false`
dh14_sha256	Boolean	`true`, `false`	No	`false`
dh16_sha512	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp256	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp384	Boolean	`true`, `false`	No	`false`
ecdh_sha2_nistp521	Boolean	`true`, `false`	No	`false`

telnet (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
port	Integer	min: `1`, max: `65535`	No	`23`

https (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`true`
client_cert_auth_state	Boolean	`true`, `false`	No	`false`
dh	Choice	`1024`, `2048`, `4096`	No	`none`
port	Integer	min: `1`, max: `65535`	No	`443`
tlsv1	Boolean	`true`, `false`	No	`false`
tlsv1_1	Boolean	`true`, `false`	No	`true`
tlsv1_2	Boolean	`true`, `false`	No	`true`
tlsv1_3	Boolean	`true`, `false`	No	`false`
key_ring	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No	`default`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

http (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
port	Integer	min: `1`, max: `65535`	No	`80`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

Examples

apic:
  fabric_policies:
    pod_policies:
      management_access_policies:
        - name: MGMT1
          telnet:
            admin_state: true
          ssh:
            port: 22
            hmac_sha1: false
            chacha: false
          https:
            tlsv1: true
          http:
            admin_state: true
            port: 8080

Location in GUI: Fabric » Fabric Policies » Policies » Pod » Management Access

Diagram

Classes

pod_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
management_access_policies	List	`[management_access_policies]`	No

management_access_policies (apic.fabric_policies.pod_policies)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
description	String	Regex: `^[a-zA-Z0-9\\!#$%()*,-./:;@ _{\|}~?&+]{1,128}$`	No
alias	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No
ssh	Class	`[ssh]`	No
telnet	Class	`[telnet]`	No
https	Class	`[https]`	No
http	Class	`[http]`	No

ssh (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean		No	`true`
password_auth	Boolean		No	`true`
port	Integer	min: `1`, max: `65535`	No	`22`
aes128_ctr	Boolean		No	`true`
aes128_gcm	Boolean		No	`true`
aes192_ctr	Boolean		No	`true`
aes256_ctr	Boolean		No	`true`
aes256_gcm	Boolean		No	`false`
chacha	Boolean		No	`true`
hmac_sha1	Boolean		No	`true`
hmac_sha2_256	Boolean		No	`true`
hmac_sha2_512	Boolean		No	`true`
curve25519_sha256	Boolean		No	`false`
curve25519_sha256_libssh	Boolean		No	`false`
dh1_sha1	Boolean		No	`false`
dh14_sha1	Boolean		No	`false`
dh14_sha256	Boolean		No	`false`
dh16_sha512	Boolean		No	`false`
ecdh_sha2_nistp256	Boolean		No	`false`
ecdh_sha2_nistp384	Boolean		No	`false`
ecdh_sha2_nistp521	Boolean		No	`false`

telnet (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean		No	`false`
port	Integer	min: `1`, max: `65535`	No	`23`

https (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean		No	`true`
client_cert_auth_state	Boolean		No	`false`
dh	Choice	`1024`, `2048`, `4096`	No	`none`
port	Integer	min: `1`, max: `65535`	No	`443`
tlsv1	Boolean		No	`false`
tlsv1_1	Boolean		No	`true`
tlsv1_2	Boolean		No	`true`
tlsv1_3	Boolean		No	`false`
key_ring	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No	`default`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

http (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean		No	`false`
port	Integer	min: `1`, max: `65535`	No	`80`
allow_origins	String	Regex: `^[a-zA-Z0-9-_:/.,]{1,256}$`	No

Examples

apic:
  fabric_policies:
    pod_policies:
      management_access_policies:
        - name: MGMT1
          telnet:
            admin_state: true
          ssh:
            port: 22
            hmac_sha1: false
            chacha: false
          https:
            tlsv1: true
          http:
            admin_state: true
            port: 8080