Management Access Policy

Location in GUI: Fabric » Fabric Policies » Policies » Pod » Management Access

Diagram

Classes

apic

Name	Type	Constraint	Mandatory	Default Value
fabric_policies	Class	fabric_policies	No

fabric_policies (apic)

Name	Type	Constraint	Mandatory	Default Value
pod_policies	Class	pod_policies	No

pod_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
management_access_policies	List	management_access_policies	No

management_access_policies (apic.fabric_policies.pod_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
alias	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	No
ssh	Class	ssh	No
telnet	Class	telnet	No
https	Class	https	No
http	Class	http	No

ssh (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	true, false	No	true
password_auth	Boolean	true, false	No	true
port	Integer	min: 1, max: 65535	No	22
aes128_ctr	Boolean	true, false	No	true
aes128_gcm	Boolean	true, false	No	true
aes192_ctr	Boolean	true, false	No	true
aes256_ctr	Boolean	true, false	No	true
aes256_gcm	Boolean	true, false	No	true
chacha	Boolean	true, false	No	false
hmac_sha1	Boolean	true, false	No	false
hmac_sha2_256	Boolean	true, false	No	true
hmac_sha2_512	Boolean	true, false	No	true
curve25519_sha256	Boolean	true, false	No	true
curve25519_sha256_libssh	Boolean	true, false	No	true
dh1_sha1	Boolean	true, false	No	false
dh14_sha1	Boolean	true, false	No	false
dh14_sha256	Boolean	true, false	No	true
dh16_sha512	Boolean	true, false	No	true
ecdh_sha2_nistp256	Boolean	true, false	No	true
ecdh_sha2_nistp384	Boolean	true, false	No	true
ecdh_sha2_nistp521	Boolean	true, false	No	true

ssh (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	true, false	No	true
password_auth	Boolean	true, false	No	true
port	Integer	min: 1, max: 65535	No	22
aes128_ctr	Boolean	true, false	No	true
aes128_gcm	Boolean	true, false	No	true
aes192_ctr	Boolean	true, false	No	true
aes256_ctr	Boolean	true, false	No	true
aes256_gcm	Boolean	true, false	No	false
chacha	Boolean	true, false	No	true
hmac_sha1	Boolean	true, false	No	true
hmac_sha2_256	Boolean	true, false	No	true
hmac_sha2_512	Boolean	true, false	No	true
curve25519_sha256	Boolean	true, false	No	false
curve25519_sha256_libssh	Boolean	true, false	No	false
dh1_sha1	Boolean	true, false	No	false
dh14_sha1	Boolean	true, false	No	false
dh14_sha256	Boolean	true, false	No	false
dh16_sha512	Boolean	true, false	No	false
ecdh_sha2_nistp256	Boolean	true, false	No	false
ecdh_sha2_nistp384	Boolean	true, false	No	false
ecdh_sha2_nistp521	Boolean	true, false	No	false

telnet (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	true, false	No	false
port	Integer	min: 1, max: 65535	No	23

https (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	true, false	No	true
client_cert_auth_state	Boolean	true, false	No	false
dh	Choice	1024, 2048, 4096	No	none
port	Integer	min: 1, max: 65535	No	443
tlsv1	Boolean	true, false	No	false
tlsv1_1	Boolean	true, false	No	false
tlsv1_2	Boolean	true, false	No	true
tlsv1_3	Boolean	true, false	No	false
key_ring	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	No	default
allow_origins	String	Regex: ^[a-zA-Z0-9-_:/.,]{1,256}$	No

https (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	true, false	No	true
client_cert_auth_state	Boolean	true, false	No	false
dh	Choice	1024, 2048, 4096	No	none
port	Integer	min: 1, max: 65535	No	443
tlsv1	Boolean	true, false	No	false
tlsv1_1	Boolean	true, false	No	true
tlsv1_2	Boolean	true, false	No	true
tlsv1_3	Boolean	true, false	No	false
key_ring	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	No	default
allow_origins	String	Regex: ^[a-zA-Z0-9-_:/.,]{1,256}$	No

http (apic.fabric_policies.pod_policies.management_access_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	true, false	No	false
port	Integer	min: 1, max: 65535	No	80
allow_origins	String	Regex: ^[a-zA-Z0-9-_:/.,]{1,256}$	No

Examples

apic:
  fabric_policies:
    pod_policies:
      management_access_policies:
        - name: MGMT1
          telnet:
            admin_state: true
          ssh:
            port: 22
            hmac_sha1: false
            chacha: false
          https:
            tlsv1: true
          http:
            admin_state: true
            port: 8080