Policy Group

Policy groups simplify the experience of configuring and deploying various policies on Cisco Catalyst SD-WAN devices.

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
policy_groups	List	[policy_groups]	No

policy_groups (sdwan)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	Yes
description	String		No
application_priority	String	Regex: ^[^&<>! "]{1,128}$	No
ngfw_security	String	Regex: ^[^&<>! "]{1,128}$	No
sse	String	Regex: ^[^&<>! "]{1,128}$	No

Examples

Example-1: The example below defines a policy group named emea_policy and assigns an application priority profile.

sdwan:
  policy_groups:
    - name: emea_policy
      description: policy group for branches in EMEA
      application_priority: emea_app_priority

Example-2: The example below defines a policy group with an NGFW security profile.

sdwan:
  policy_groups:
    - name: branch_security_policy
      description: policy group with NGFW security for branch sites
      ngfw_security: ngfw_profile

CoR for SaaS variable catalog and logic depending on device role.

When implementing Cor for SaaS the assigned application priority profile has a sequence with cloud_probe: true and cloud_saas: true, this causes the SDWAN manager to automatically expect some CoR for SaaS variables to be provided when deploying the policy group. The policy group implicitly requires per-router variables listed under each router’s cor_saas_variable section from the data model.

Variable	Type	Values
cor_saas_device_role	enum	dia, gateway, client
cor_saas_vpn_type	enum	service-vpn, vpn-0
cor_saas_lb_enabled	bool	—
cor_saas_sig_enabled	bool	—
cor_saas_source_ip_based	bool	—
cor_saas_latency	int	≥ 1
cor_saas_loss	int	0–100
cor_saas_interface_list	list(str)	min 1 element
cor_saas_tloc_list	list(str)	min 1 element
cor_saas_sig_tunnel_list	list(str)	min 1 element

The role that is assigned to a router determines what other variables might be required or not. Here is a list for reference.

• client
  • cor_saas_device_role
• dia
  • cor_saas_device_role
  • cor_saas_sig_enabled
    • If true:
      • cor_saas_sig_tunnel_list
    • If false:
      • cor_saas_tloc_list
      • cor_saas_lb_enabled
        • If true:
          • cor_saas_loss
          • cor_saas_latency
          • cor_saas_source_ip_based
        • If false: no additional variables required
• gateway
  • cor_saas_device_role
  • cor_saas_vpn_type
    • If service-vpn:
      • cor_saas_interface_list
      • cor_saas_lb_enabled
        • If true:
          • cor_saas_loss
          • cor_saas_latency
          • cor_saas_source_ip_based
        • If false: no additional variables required
    • If vpn-0:
      • cor_saas_sig_enabled
        • If true:
          • cor_saas_sig_tunnel_list
        • If false:
          • cor_saas_tloc_list
          • cor_saas_lb_enabled
            • If true:
              • cor_saas_loss
              • cor_saas_latency
              • cor_saas_source_ip_based
            • If false: no additional variables required

Policy groups simplify the experience of configuring and deploying various policies on Cisco Catalyst SD-WAN devices.

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
policy_groups	List	[policy_groups]	No

policy_groups (sdwan)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	Yes
description	String		No
application_priority	String	Regex: ^[^&<>! "]{1,128}$	No
ngfw_security	String	Regex: ^[^&<>! "]{1,128}$	No

Examples

Example-1: The example below defines a policy group named emea_policy and assigns an application priority profile.

sdwan:
  policy_groups:
    - name: emea_policy
      description: policy group for branches in EMEA
      application_priority: emea_app_priority

Example-2: The example below defines a policy group with an NGFW security profile.

sdwan:
  policy_groups:
    - name: branch_security_policy
      description: policy group with NGFW security for branch sites
      ngfw_security: ngfw_profile

Policy groups simplify the experience of configuring and deploying various policies on Cisco Catalyst SD-WAN devices.

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
policy_groups	List	[policy_groups]	No

policy_groups (sdwan)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	Yes
description	String		No
application_priority	String	Regex: ^[^&<>! "]{1,128}$	No

Examples

Example-1: The example below defines a policy group named emea_policy and assignes application priority profile.

sdwan:
  policy_groups:
    - name: emea_policy
      description: policy group for branches in EMEA
      application_priority: emea_app_priority