"name": "IETF ACL",
"description": "Provides example requests for ietf-access-control-list management",
"order": [
- "cf26c4b2-e4f9-0f6c-7580-eb26974108c9",
- "1ca730f6-84ad-8524-7163-a90d8bfceaa0",
- "95f0aa5d-5edc-97f6-ca8a-1bfac12c8d84",
- "289e9685-70b8-458a-9931-8b084e3de1c0",
- "0f599614-dd67-56bc-5b99-b11ee550e513",
- "46c3bf20-4abd-07f8-3d74-7fd573ebb970",
- "17b4b10b-83da-7cdd-d291-16f8367b7783",
- "52d38df8-8d85-d6f0-dccd-cbd8544631f9",
- "49bbe783-2cff-a8e9-4541-62b829b61dda",
- "7e79e1d0-831a-7afb-9ec0-b8b11af551f7"
+ "ea9e0f3b-ede6-2104-892b-bb8fd72e3d5d",
+ "fe6a8289-d2dc-e671-2490-5546d223f47f",
+ "5e93fbca-86d0-12a5-45fd-45d7dfa3bd40",
+ "5140ac58-342a-1576-8b0e-99eb8b3b1fb2",
+ "9f58c827-d698-fc60-ec49-c2ccbca97c35",
+ "4d3d06fe-8a64-d0e4-400a-79c4fbd6db73",
+ "33280f11-2d61-09d3-f726-9907ef00dc19",
+ "60d4ab79-dea1-de5a-63eb-6e26d3d1481b",
+ "d668c31c-b904-cd65-124c-dd2a89149b70",
+ "13b938a5-7a53-513f-44b9-33d869b8cb53",
+ "4442a2fd-497d-ee8d-22cd-43b72c358f67",
+ "161987f9-8912-f724-2f2d-d7548b12e8f9"
],
"owner": "45557",
"collectionId": "e9ba4e80-fb4d-1eae-07e7-97b323164130"
"rawModeData": "{\n \n \"neighbor\":{\n \"ip\":\"172.16.0.2\",\n \"link-layer-address\":\"00:01:11:00:02:02\"\n }\n \n}\n",
"folder": "0ef5f1df-d43a-17fe-b006-249f83c88552"
},
- {
- "id": "0f599614-dd67-56bc-5b99-b11ee550e513",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl1",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "GET",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1471595112052,
- "name": "Read acl1 list (cfg)",
- "description": "",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\r\n \r\n \"interface\": [\r\n {\r\n \"name\": \"testInterface\",\r\n \"description\": \"for testing purposes\",\r\n \"type\": \"iana-if-type:ethernetCsmacd\",\r\n \"enabled\": \"true\",\r\n \"link-up-down-trap-enable\": \"enabled\",\r\n \"ietf-ip:ipv4\": {\r\n \"enabled\": \"true\",\r\n \"mtu\": \"1500\",\r\n \"address\": [\r\n {\r\n \"ip\": \"1.2.3.0\",\r\n \"netmask\": \"255.255.255.0\"\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n \r\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "10de9ebb-db91-b664-adfa-e4b347c2ce79",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"responses": [],
"rawModeData": "{\r\n \r\n \"interface\": [\r\n {\r\n \"name\": \"testInterface\",\r\n \"description\": \"for testing purposes\",\r\n \"type\": \"iana-if-type:ethernetCsmacd\",\r\n \"enabled\": \"true\",\r\n \"link-up-down-trap-enable\": \"enabled\",\r\n \"ietf-ip:ipv4\": {\r\n \"enabled\": \"true\",\r\n \"mtu\": \"1500\",\r\n \"address\": [\r\n {\r\n \"ip\": \"1.2.3.0\",\r\n \"netmask\": \"255.255.255.0\"\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n \r\n}"
},
- {
- "id": "17b4b10b-83da-7cdd-d291-16f8367b7783",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress/access-lists/acl/ietf-access-control-list:ipv4-acl/acl3",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "PUT",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1472135956801,
- "name": "Enable L3 IP4 ACL on local0 interface",
- "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface.\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen:\nvppctl show inacl type ip4",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\n\n \"acl\": [\n {\n \"type\" : \"ietf-access-control-list:ipv4-acl\",\n \"name\" : \"acl3\"\n }\n ]\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "1bd21e57-376e-a8e4-14b2-97598824abbb",
"headers": "Content-Type: application/json\nAuthorization: Basic YWRtaW46YWRtaW4=\n",
"rawModeData": "",
"folder": "e742a44e-2e82-fe0c-d7c1-2f6b6bc1f0e9"
},
- {
- "id": "1ca730f6-84ad-8524-7163-a90d8bfceaa0",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl2",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "PUT",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1471940027513,
- "name": "Write acl2 list (L2)",
- "description": "",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:eth-acl\",\r\n \"acl-name\": \"acl2\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-mac-address\": \"11:11:11:11:11:11\",\r\n \"source-mac-address\": \"22:22:22:22:22:22\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"destination-mac-address\": \"33:33:33:33:33:33\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"source-mac-address\": \"44:44:44:44:44:44\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "218a3ee0-7ef3-adf1-088c-62a1a3e3c2a7",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"folder": "d47d6b3b-4c3f-7671-5bba-447d6c59ea3b",
"rawModeData": ""
},
- {
- "id": "289e9685-70b8-458a-9931-8b084e3de1c0",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:ipv6-acl/acl4",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "PUT",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1472199072153,
- "name": "Write acl4 list (IP6)",
- "description": "",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:ipv6-acl\",\r\n \"acl-name\": \"acl4\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/64\",\r\n \"protocol\": \"6\",\r\n \"dscp\": \"11\",\r\n \"source-ipv6-network\": \"aaaa:bbbb:cccc:dddd:5555:6666:7777:8888/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/96\",\r\n \"protocol\": \"6\",\r\n \"dscp\": \"11\",\r\n \"source-ipv6-network\": \"aaaa:bbbb:cccc:dddd:5555:6666:7777:8888/8\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/128\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "2a3a5de9-ed06-6468-2c11-ddbdc4ec1224",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"folder": "42603a84-8d76-77de-197f-19387eb13c97",
"rawModeData": "{\n \n \"ietf-interfaces:interface\": [\n {\n \"name\": \"TenGigabitEthernet7/0/0\",\n \"description\": \"for testing purposes\",\n \"type\": \"iana-if-type:ethernetCsmacd\",\n \"v3po:proxy-arp\" :{\n \"vrf-id\" : 0,\n \"low-addr\" : \"111.1.1.1\",\n\t\t \"high-addr\" : \"111.1.1.255\"\n }\n }\n ]\n \n}"
},
- {
- "id": "46c3bf20-4abd-07f8-3d74-7fd573ebb970",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "PUT",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1471935414498,
- "name": "Enable L2 aACL on local0 interface",
- "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface.\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen:\nvppctl show inacl type l2",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\n \"ingress\": {\n \"access-lists\": {\n \"acl\": [\n {\n \"type\" : \"ietf-access-control-list:eth-acl\",\n \"name\" : \"acl1\"\n },\n {\n \"type\" : \"ietf-access-control-list:eth-acl\",\n \"name\" : \"acl2\"\n }\n ],\n \"default-action\": \"permit\",\n \"mode\": \"l2\"\n }\n }\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "488acc8a-0816-d280-8c9d-bc1326edea9b",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"folder": "1ea15402-cdce-9573-f746-fc9256e18e53",
"rawModeData": ""
},
- {
- "id": "49bbe783-2cff-a8e9-4541-62b829b61dda",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/v3po:ietf-acl",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "DELETE",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1472215679330,
- "name": "Disable ACLs on local0",
- "description": "Disables all ACLs assigned to local0 interface.\n\nTo verify, invoke:\n\nvppctl show classify table verbose\n\nand:\n\nvppctl show inacl type l2\nvppctl show inacl type ip4\nvppctl show inacl type ip6",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "4a8f8191-91ce-d65c-58c9-206204603a3e",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"rawModeData": "{\r\n \r\n \"interface\": [\r\n {\r\n \"name\": \"vxlanTun1\",\r\n \"description\": \"for testing purposes\",\r\n \"type\": \"v3po:vxlan-tunnel\",\r\n \"enabled\": \"true\",\r\n \"link-up-down-trap-enable\": \"enabled\",\r\n \"routing\" : {\r\n \"vrf-id\" : \"0\"\r\n },\r\n \"vxlan\" : {\r\n \"src\" : \"192.168.1.6\",\r\n \"dst\" : \"192.168.1.9\",\r\n \"vni\" : \"88\",\r\n \"encap-vrf-id\" : \"0\"\r\n }\r\n }\r\n ]\r\n \r\n}",
"folder": "f15540bc-415f-0ce0-4c25-5a5406d11242"
},
- {
- "id": "52d38df8-8d85-d6f0-dccd-cbd8544631f9",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress/access-lists/acl/ietf-access-control-list:ipv6-acl/acl4",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "PUT",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1472212582064,
- "name": "Enable L3 IP6 ACL on local0 interface",
- "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface.\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen:\nvppctl show inacl type ip6",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\n\n \"acl\": [\n {\n \"type\" : \"ietf-access-control-list:ipv6-acl\",\n \"name\" : \"acl4\"\n }\n ]\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "5b0d301e-c2d1-5179-41eb-d1fb07cc93f0",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"responses": [],
"rawModeData": "{\r\n \r\n \"interface\": [\r\n {\r\n \"name\": \"local0\",\r\n \"description\": \"for testing purposes\",\r\n \"type\": \"iana-if-type:ethernetCsmacd\",\r\n \"enabled\": \"true\",\r\n \"v3po:ethernet\": {\r\n \"mtu\": 64\r\n }\r\n }\r\n ]\r\n \r\n}"
},
- {
- "id": "7e79e1d0-831a-7afb-9ec0-b8b11af551f7",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl1",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "DELETE",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1471942346155,
- "name": "Delete acl1 list",
- "description": "Removes acl1 list from config data tree.\nRequest fails if acl1 is assigned to some interface",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "8f5860a3-ac28-811b-3830-52df067c1a60",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"responses": [],
"rawModeData": "{\r\n \r\n \"interface\": [\r\n {\r\n \"name\": \"testInterface\",\r\n \"description\": \"for testing purposes\",\r\n \"type\": \"iana-if-type:ethernetCsmacd\",\r\n \"enabled\": \"true\",\r\n \"link-up-down-trap-enable\": \"enabled\",\r\n \"ietf-ip:ipv4\": {\r\n \"enabled\": \"true\",\r\n \"mtu\": \"1500\",\r\n \"address\": [\r\n {\r\n \"ip\": \"1.2.3.0\",\r\n \"netmask\": \"255.255.255.0\"\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n \r\n}"
},
- {
- "id": "95f0aa5d-5edc-97f6-ca8a-1bfac12c8d84",
- "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
- "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:ipv4-acl/acl3",
- "preRequestScript": "",
- "pathVariables": {},
- "method": "PUT",
- "data": [],
- "dataMode": "raw",
- "version": 2,
- "tests": "",
- "currentHelper": "normal",
- "helperAttributes": {},
- "time": 1472135918219,
- "name": "Write acl3 list (IP4)",
- "description": "",
- "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
- "responses": [],
- "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:ipv4-acl\",\r\n \"acl-name\": \"acl3\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-ipv4-network\": \"1.2.3.1/24\",\r\n \"protocol\": \"4\",\r\n \"dscp\": \"11\",\r\n \"source-ipv4-network\": \"1.2.4.2/24\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"destination-ipv4-network\": \"1.1.1.1/16\",\r\n \"protocol\": \"4\",\r\n \"dscp\": \"63\",\r\n \"source-ipv4-network\": \"2.2.2.2/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"source-ipv4-network\": \"1.2.3.4/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
- "folder": "c05d7211-11b0-5688-2079-afa51196045c"
- },
{
"id": "9b3cbedf-15b4-fee0-6424-b32bc4781ca3",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"folder": "e742a44e-2e82-fe0c-d7c1-2f6b6bc1f0e9"
},
{
- "id": "cf26c4b2-e4f9-0f6c-7580-eb26974108c9",
+ "id": "ea9e0f3b-ede6-2104-892b-bb8fd72e3d5d",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
"url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl1",
"preRequestScript": "",
"rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:eth-acl\",\r\n \"acl-name\": \"acl1\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-mac-address\": \"AA:BB:CC:DD:00:00\",\r\n \"destination-mac-address-mask\": \"FF:FF:FF:FF:00:00\",\r\n \"source-mac-address\": \"00:00:00:00:AA:BB\",\r\n \"source-mac-address-mask\": \"00:00:00:00:FF:FF\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"source-mac-address\": \"01:02:03:04:05:06\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"destination-mac-address\": \"11:22:33:44:55:66\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
"folder": "c05d7211-11b0-5688-2079-afa51196045c"
},
+ {
+ "id": "fe6a8289-d2dc-e671-2490-5546d223f47f",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl2",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1471940027513,
+ "name": "Write acl2 list (L2)",
+ "description": "",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:eth-acl\",\r\n \"acl-name\": \"acl2\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-mac-address\": \"11:11:11:11:11:11\",\r\n \"source-mac-address\": \"22:22:22:22:22:22\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"destination-mac-address\": \"33:33:33:33:33:33\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"source-mac-address\": \"44:44:44:44:44:44\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "5e93fbca-86d0-12a5-45fd-45d7dfa3bd40",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:ipv4-acl/acl3",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1472135918219,
+ "name": "Write acl3 list (IP4)",
+ "description": "",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:ipv4-acl\",\r\n \"acl-name\": \"acl3\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-ipv4-network\": \"1.2.3.1/24\",\r\n \"protocol\": \"4\",\r\n \"dscp\": \"11\",\r\n \"source-ipv4-network\": \"1.2.4.2/24\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"destination-ipv4-network\": \"1.1.1.1/16\",\r\n \"protocol\": \"4\",\r\n \"dscp\": \"63\",\r\n \"source-ipv4-network\": \"2.2.2.2/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"source-ipv4-network\": \"1.2.3.4/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "5140ac58-342a-1576-8b0e-99eb8b3b1fb2",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:ipv6-acl/acl4",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1472199072153,
+ "name": "Write acl4 list (IP6)",
+ "description": "",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"ietf-access-control-list:ipv6-acl\",\r\n \"acl-name\": \"acl4\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1\",\r\n \"matches\": {\r\n \"destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/64\",\r\n \"protocol\": \"6\",\r\n \"dscp\": \"11\",\r\n \"source-ipv6-network\": \"aaaa:bbbb:cccc:dddd:5555:6666:7777:8888/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2\",\r\n \"matches\": {\r\n \"destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/96\",\r\n \"protocol\": \"6\",\r\n \"dscp\": \"11\",\r\n \"source-ipv6-network\": \"aaaa:bbbb:cccc:dddd:5555:6666:7777:8888/8\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3\",\r\n \"matches\": {\r\n \"destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/128\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "9f58c827-d698-fc60-ec49-c2ccbca97c35",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/vpp-acl:mixed-acl/acl5",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1476266995233,
+ "name": "Write acl5 list (IP+MAC)",
+ "description": "",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\r\n \"acl\": [\r\n {\r\n \"acl-type\": \"vpp-acl:mixed-acl\",\r\n \"acl-name\": \"acl5\",\r\n \"access-list-entries\": {\r\n \"ace\": [\r\n {\r\n \"rule-name\": \"rule1(ip4+mac)\",\r\n \"matches\": {\r\n \"vpp-acl:destination-mac-address\": \"AA:BB:CC:DD:00:00\",\r\n \"vpp-acl:destination-mac-address-mask\": \"FF:FF:FF:FF:00:00\",\r\n \"vpp-acl:source-mac-address\": \"00:00:00:00:AA:BB\",\r\n \"vpp-acl:source-mac-address-mask\": \"00:00:00:00:FF:FF\",\r\n \"vpp-acl:destination-ipv4-network\": \"1.2.3.1/24\",\r\n \"vpp-acl:protocol\": \"4\",\r\n \"vpp-acl:dscp\": \"11\",\r\n \"vpp-acl:source-ipv4-network\": \"1.2.4.2/24\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule2(ip4+mac)\",\r\n \"matches\": {\r\n \"vpp-acl:source-mac-address\": \"01:02:03:04:05:06\",\r\n \"vpp-acl:destination-ipv4-network\": \"1.1.1.1/16\",\r\n \"vpp-acl:protocol\": \"4\",\r\n \"vpp-acl:dscp\": \"63\",\r\n \"vpp-acl:source-ipv4-network\": \"2.2.2.2/32\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n },\r\n {\r\n \"rule-name\": \"rule3(ip6+mac)\",\r\n \"matches\": {\r\n \"vpp-acl:destination-mac-address\": \"11:22:33:44:55:66\",\r\n \"vpp-acl:destination-ipv6-network\": \"1111:2222:3333:4444:5555:6666:7777:8888/64\"\r\n },\r\n \"actions\": {\r\n \"deny\": {}\r\n }\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "4d3d06fe-8a64-d0e4-400a-79c4fbd6db73",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl1",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "GET",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1471595112052,
+ "name": "Read acl1 list (cfg)",
+ "description": "",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\r\n \r\n \"interface\": [\r\n {\r\n \"name\": \"testInterface\",\r\n \"description\": \"for testing purposes\",\r\n \"type\": \"iana-if-type:ethernetCsmacd\",\r\n \"enabled\": \"true\",\r\n \"link-up-down-trap-enable\": \"enabled\",\r\n \"ietf-ip:ipv4\": {\r\n \"enabled\": \"true\",\r\n \"mtu\": \"1500\",\r\n \"address\": [\r\n {\r\n \"ip\": \"1.2.3.0\",\r\n \"netmask\": \"255.255.255.0\"\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n \r\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "33280f11-2d61-09d3-f726-9907ef00dc19",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1471935414498,
+ "name": "Enable L2 aACL on local0 interface",
+ "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface (asumption: local0 is in l2 mode).\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen:\nvppctl show inacl type l2",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\n \"ingress\": {\n \"access-lists\": {\n \"acl\": [\n {\n \"type\" : \"ietf-access-control-list:eth-acl\",\n \"name\" : \"acl1\"\n },\n {\n \"type\" : \"ietf-access-control-list:eth-acl\",\n \"name\" : \"acl2\"\n }\n ],\n \"default-action\": \"permit\",\n \"mode\": \"l2\"\n }\n }\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "60d4ab79-dea1-de5a-63eb-6e26d3d1481b",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress/access-lists/acl/ietf-access-control-list:ipv4-acl/acl3",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1472135956801,
+ "name": "Enable L3 IP4 ACL on local0 interface",
+ "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface.\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen (depending on acl mode):\nvppctl show inacl type l2\nor\nvppctl show inacl type ip4",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\n\n \"acl\": [\n {\n \"type\" : \"ietf-access-control-list:ipv4-acl\",\n \"name\" : \"acl3\"\n }\n ]\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "d668c31c-b904-cd65-124c-dd2a89149b70",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress/access-lists/acl/ietf-access-control-list:ipv6-acl/acl4",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1472212582064,
+ "name": "Enable L3 IP6 ACL on local0 interface",
+ "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface.\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen (depending on acl mode):\nvppctl show inacl type l2\nor\nvppctl show inacl type ip6",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\n\n \"acl\": [\n {\n \"type\" : \"ietf-access-control-list:ipv6-acl\",\n \"name\" : \"acl4\"\n }\n ]\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "13b938a5-7a53-513f-44b9-33d869b8cb53",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/ietf-acl/ingress/access-lists/acl/vpp-acl:mixed-acl/acl5",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "PUT",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1476273830067,
+ "name": "Enable L3 IP4/MAC ACL on local0 interface",
+ "description": "Creates chain of classfy tabless/sessions in VPP and assigns them to local0 interface.\n\nCan be verified with:\nvppctl show classify table verbose\n\nthen (depending on acl mode):\n\nvppctl show inacl type l2\n\nor\n\nvppctl show inacl type ip4\n\nvppctl show inacl type ip6",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "{\n\n \"acl\": [\n {\n \"type\" : \"vpp-acl:mixed-acl\",\n \"name\" : \"acl5\"\n }\n ]\n}",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "4442a2fd-497d-ee8d-22cd-43b72c358f67",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-interfaces:interfaces/interface/local0/v3po:ietf-acl",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "DELETE",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1472215679330,
+ "name": "Disable ACLs on local0",
+ "description": "Disables all ACLs assigned to local0 interface.\n\nTo verify, invoke:\n\nvppctl show classify table verbose\n\nand:\n\nvppctl show inacl type l2\n\nvppctl show inacl type ip4\n\nvppctl show inacl type ip6",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
+ {
+ "id": "161987f9-8912-f724-2f2d-d7548b12e8f9",
+ "headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
+ "url": "http://localhost:8183/restconf/config/ietf-access-control-list:access-lists/acl/ietf-access-control-list:eth-acl/acl1",
+ "preRequestScript": "",
+ "pathVariables": {},
+ "method": "DELETE",
+ "data": [],
+ "dataMode": "raw",
+ "version": 2,
+ "tests": "",
+ "currentHelper": "normal",
+ "helperAttributes": {},
+ "time": 1471942346155,
+ "name": "Delete acl1 list",
+ "description": "Removes acl1 list from config data tree.\nRequest fails if acl1 is assigned to some interface",
+ "collectionId": "5bad4634-e5cf-900e-9733-0976aa9bea64",
+ "responses": [],
+ "rawModeData": "",
+ "folder": "c05d7211-11b0-5688-2079-afa51196045c"
+ },
{
"id": "d265bf51-6e6d-7087-5b55-b6afde56c325",
"headers": "Authorization: Basic YWRtaW46YWRtaW4=\nContent-Type: application/json\n",
Code Review / hc2vpp.git / commitdiff