nxos.Ipv4AccessListEntry
Explore with Pulumi AI
This resource can manage IPv4 Access List Entries.
- API Documentation: ipv4aclACE
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nxos = Lbrlabs.PulumiPackage.Nxos;
return await Deployment.RunAsync(() => 
{
    var example = new Nxos.Ipv4AccessListEntry("example", new()
    {
        Ack = false,
        Action = "permit",
        DestinationAddressGroup = "AG1",
        DestinationPort1 = "443",
        DestinationPort2 = "0",
        DestinationPortGroup = "PG1",
        DestinationPortMask = "0",
        DestinationPortOperator = "eq",
        DestinationPrefix = "10.1.1.0",
        DestinationPrefixLength = "24",
        DestinationPrefixMask = "255.255.255.0",
        Dscp = 0,
        Est = false,
        Fin = false,
        Fragment = false,
        HttpOptionType = "invalid",
        IcmpCode = 0,
        IcmpType = 0,
        Logging = true,
        PacketLength1 = "19",
        PacketLength2 = "9210",
        PacketLengthOperator = "range",
        Precedence = "0",
        Protocol = "tcp",
        ProtocolMask = "tcp",
        Psh = false,
        Redirect = "RD",
        Remark = "Line1",
        Rev = false,
        Rst = false,
        SequenceNumber = 10,
        SourceAddressGroup = "AG2",
        SourcePort1 = "443",
        SourcePort2 = "0",
        SourcePortGroup = "PG2",
        SourcePortMask = "0",
        SourcePortOperator = "eq",
        SourcePrefix = "20.1.0.0",
        SourcePrefixLength = "16",
        SourcePrefixMask = "255.255.0.0",
        Syn = false,
        TimeRange = "TR1",
        Ttl = 0,
        Urg = false,
        Vlan = 4095,
        Vni = "invalid",
    });
});
package main
import (
	"github.com/lbrlabs/pulumi-nxos/sdk/go/nxos"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := nxos.NewIpv4AccessListEntry(ctx, "example", &nxos.Ipv4AccessListEntryArgs{
			Ack:                     pulumi.Bool(false),
			Action:                  pulumi.String("permit"),
			DestinationAddressGroup: pulumi.String("AG1"),
			DestinationPort1:        pulumi.String("443"),
			DestinationPort2:        pulumi.String("0"),
			DestinationPortGroup:    pulumi.String("PG1"),
			DestinationPortMask:     pulumi.String("0"),
			DestinationPortOperator: pulumi.String("eq"),
			DestinationPrefix:       pulumi.String("10.1.1.0"),
			DestinationPrefixLength: pulumi.String("24"),
			DestinationPrefixMask:   pulumi.String("255.255.255.0"),
			Dscp:                    pulumi.Int(0),
			Est:                     pulumi.Bool(false),
			Fin:                     pulumi.Bool(false),
			Fragment:                pulumi.Bool(false),
			HttpOptionType:          pulumi.String("invalid"),
			IcmpCode:                pulumi.Int(0),
			IcmpType:                pulumi.Int(0),
			Logging:                 pulumi.Bool(true),
			PacketLength1:           pulumi.String("19"),
			PacketLength2:           pulumi.String("9210"),
			PacketLengthOperator:    pulumi.String("range"),
			Precedence:              pulumi.String("0"),
			Protocol:                pulumi.String("tcp"),
			ProtocolMask:            pulumi.String("tcp"),
			Psh:                     pulumi.Bool(false),
			Redirect:                pulumi.String("RD"),
			Remark:                  pulumi.String("Line1"),
			Rev:                     pulumi.Bool(false),
			Rst:                     pulumi.Bool(false),
			SequenceNumber:          pulumi.Int(10),
			SourceAddressGroup:      pulumi.String("AG2"),
			SourcePort1:             pulumi.String("443"),
			SourcePort2:             pulumi.String("0"),
			SourcePortGroup:         pulumi.String("PG2"),
			SourcePortMask:          pulumi.String("0"),
			SourcePortOperator:      pulumi.String("eq"),
			SourcePrefix:            pulumi.String("20.1.0.0"),
			SourcePrefixLength:      pulumi.String("16"),
			SourcePrefixMask:        pulumi.String("255.255.0.0"),
			Syn:                     pulumi.Bool(false),
			TimeRange:               pulumi.String("TR1"),
			Ttl:                     pulumi.Int(0),
			Urg:                     pulumi.Bool(false),
			Vlan:                    pulumi.Int(4095),
			Vni:                     pulumi.String("invalid"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nxos.Ipv4AccessListEntry;
import com.pulumi.nxos.Ipv4AccessListEntryArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new Ipv4AccessListEntry("example", Ipv4AccessListEntryArgs.builder()        
            .ack(false)
            .action("permit")
            .destinationAddressGroup("AG1")
            .destinationPort1("443")
            .destinationPort2("0")
            .destinationPortGroup("PG1")
            .destinationPortMask("0")
            .destinationPortOperator("eq")
            .destinationPrefix("10.1.1.0")
            .destinationPrefixLength("24")
            .destinationPrefixMask("255.255.255.0")
            .dscp(0)
            .est(false)
            .fin(false)
            .fragment(false)
            .httpOptionType("invalid")
            .icmpCode(0)
            .icmpType(0)
            .logging(true)
            .packetLength1("19")
            .packetLength2("9210")
            .packetLengthOperator("range")
            .precedence("0")
            .protocol("tcp")
            .protocolMask("tcp")
            .psh(false)
            .redirect("RD")
            .remark("Line1")
            .rev(false)
            .rst(false)
            .sequenceNumber(10)
            .sourceAddressGroup("AG2")
            .sourcePort1("443")
            .sourcePort2("0")
            .sourcePortGroup("PG2")
            .sourcePortMask("0")
            .sourcePortOperator("eq")
            .sourcePrefix("20.1.0.0")
            .sourcePrefixLength("16")
            .sourcePrefixMask("255.255.0.0")
            .syn(false)
            .timeRange("TR1")
            .ttl(0)
            .urg(false)
            .vlan(4095)
            .vni("invalid")
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as nxos from "@lbrlabs/pulumi-nxos";
const example = new nxos.Ipv4AccessListEntry("example", {
    ack: false,
    action: "permit",
    destinationAddressGroup: "AG1",
    destinationPort1: "443",
    destinationPort2: "0",
    destinationPortGroup: "PG1",
    destinationPortMask: "0",
    destinationPortOperator: "eq",
    destinationPrefix: "10.1.1.0",
    destinationPrefixLength: "24",
    destinationPrefixMask: "255.255.255.0",
    dscp: 0,
    est: false,
    fin: false,
    fragment: false,
    httpOptionType: "invalid",
    icmpCode: 0,
    icmpType: 0,
    logging: true,
    packetLength1: "19",
    packetLength2: "9210",
    packetLengthOperator: "range",
    precedence: "0",
    protocol: "tcp",
    protocolMask: "tcp",
    psh: false,
    redirect: "RD",
    remark: "Line1",
    rev: false,
    rst: false,
    sequenceNumber: 10,
    sourceAddressGroup: "AG2",
    sourcePort1: "443",
    sourcePort2: "0",
    sourcePortGroup: "PG2",
    sourcePortMask: "0",
    sourcePortOperator: "eq",
    sourcePrefix: "20.1.0.0",
    sourcePrefixLength: "16",
    sourcePrefixMask: "255.255.0.0",
    syn: false,
    timeRange: "TR1",
    ttl: 0,
    urg: false,
    vlan: 4095,
    vni: "invalid",
});
import pulumi
import lbrlabs_pulumi_nxos as nxos
example = nxos.Ipv4AccessListEntry("example",
    ack=False,
    action="permit",
    destination_address_group="AG1",
    destination_port1="443",
    destination_port2="0",
    destination_port_group="PG1",
    destination_port_mask="0",
    destination_port_operator="eq",
    destination_prefix="10.1.1.0",
    destination_prefix_length="24",
    destination_prefix_mask="255.255.255.0",
    dscp=0,
    est=False,
    fin=False,
    fragment=False,
    http_option_type="invalid",
    icmp_code=0,
    icmp_type=0,
    logging=True,
    packet_length1="19",
    packet_length2="9210",
    packet_length_operator="range",
    precedence="0",
    protocol="tcp",
    protocol_mask="tcp",
    psh=False,
    redirect="RD",
    remark="Line1",
    rev=False,
    rst=False,
    sequence_number=10,
    source_address_group="AG2",
    source_port1="443",
    source_port2="0",
    source_port_group="PG2",
    source_port_mask="0",
    source_port_operator="eq",
    source_prefix="20.1.0.0",
    source_prefix_length="16",
    source_prefix_mask="255.255.0.0",
    syn=False,
    time_range="TR1",
    ttl=0,
    urg=False,
    vlan=4095,
    vni="invalid")
resources:
  example:
    type: nxos:Ipv4AccessListEntry
    properties:
      ack: false
      action: permit
      destinationAddressGroup: AG1
      destinationPort1: '443'
      destinationPort2: '0'
      destinationPortGroup: PG1
      destinationPortMask: '0'
      destinationPortOperator: eq
      destinationPrefix: 10.1.1.0
      destinationPrefixLength: '24'
      destinationPrefixMask: 255.255.255.0
      dscp: 0
      est: false
      fin: false
      fragment: false
      httpOptionType: invalid
      icmpCode: 0
      icmpType: 0
      logging: true
      packetLength1: '19'
      packetLength2: '9210'
      packetLengthOperator: range
      precedence: '0'
      protocol: tcp
      protocolMask: tcp
      psh: false
      redirect: RD
      remark: Line1
      rev: false
      rst: false
      sequenceNumber: 10
      sourceAddressGroup: AG2
      sourcePort1: '443'
      sourcePort2: '0'
      sourcePortGroup: PG2
      sourcePortMask: '0'
      sourcePortOperator: eq
      sourcePrefix: 20.1.0.0
      sourcePrefixLength: '16'
      sourcePrefixMask: 255.255.0.0
      syn: false
      timeRange: TR1
      ttl: 0
      urg: false
      vlan: 4095
      vni: invalid
Create Ipv4AccessListEntry Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Ipv4AccessListEntry(name: string, args: Ipv4AccessListEntryArgs, opts?: CustomResourceOptions);@overload
def Ipv4AccessListEntry(resource_name: str,
                        args: Ipv4AccessListEntryArgs,
                        opts: Optional[ResourceOptions] = None)
@overload
def Ipv4AccessListEntry(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        sequence_number: Optional[int] = None,
                        precedence: Optional[str] = None,
                        syn: Optional[bool] = None,
                        destination_port1: Optional[str] = None,
                        destination_port2: Optional[str] = None,
                        destination_port_group: Optional[str] = None,
                        destination_port_mask: Optional[str] = None,
                        destination_port_operator: Optional[str] = None,
                        destination_prefix: Optional[str] = None,
                        destination_prefix_length: Optional[str] = None,
                        destination_prefix_mask: Optional[str] = None,
                        device: Optional[str] = None,
                        dscp: Optional[int] = None,
                        est: Optional[bool] = None,
                        fin: Optional[bool] = None,
                        fragment: Optional[bool] = None,
                        http_option_type: Optional[str] = None,
                        icmp_code: Optional[int] = None,
                        icmp_type: Optional[int] = None,
                        logging: Optional[bool] = None,
                        name: Optional[str] = None,
                        packet_length1: Optional[str] = None,
                        packet_length2: Optional[str] = None,
                        vlan: Optional[int] = None,
                        destination_address_group: Optional[str] = None,
                        redirect: Optional[str] = None,
                        protocol_mask: Optional[str] = None,
                        psh: Optional[bool] = None,
                        protocol: Optional[str] = None,
                        remark: Optional[str] = None,
                        rev: Optional[bool] = None,
                        rst: Optional[bool] = None,
                        action: Optional[str] = None,
                        source_address_group: Optional[str] = None,
                        source_port1: Optional[str] = None,
                        source_port2: Optional[str] = None,
                        source_port_group: Optional[str] = None,
                        source_port_mask: Optional[str] = None,
                        source_port_operator: Optional[str] = None,
                        source_prefix: Optional[str] = None,
                        source_prefix_length: Optional[str] = None,
                        source_prefix_mask: Optional[str] = None,
                        ack: Optional[bool] = None,
                        time_range: Optional[str] = None,
                        ttl: Optional[int] = None,
                        urg: Optional[bool] = None,
                        packet_length_operator: Optional[str] = None,
                        vni: Optional[str] = None)func NewIpv4AccessListEntry(ctx *Context, name string, args Ipv4AccessListEntryArgs, opts ...ResourceOption) (*Ipv4AccessListEntry, error)public Ipv4AccessListEntry(string name, Ipv4AccessListEntryArgs args, CustomResourceOptions? opts = null)
public Ipv4AccessListEntry(String name, Ipv4AccessListEntryArgs args)
public Ipv4AccessListEntry(String name, Ipv4AccessListEntryArgs args, CustomResourceOptions options)
type: nxos:Ipv4AccessListEntry
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args Ipv4AccessListEntryArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var ipv4AccessListEntryResource = new Nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource", new()
{
    SequenceNumber = 0,
    Precedence = "string",
    Syn = false,
    DestinationPort1 = "string",
    DestinationPort2 = "string",
    DestinationPortGroup = "string",
    DestinationPortMask = "string",
    DestinationPortOperator = "string",
    DestinationPrefix = "string",
    DestinationPrefixLength = "string",
    DestinationPrefixMask = "string",
    Device = "string",
    Dscp = 0,
    Est = false,
    Fin = false,
    Fragment = false,
    HttpOptionType = "string",
    IcmpCode = 0,
    IcmpType = 0,
    Logging = false,
    Name = "string",
    PacketLength1 = "string",
    PacketLength2 = "string",
    Vlan = 0,
    DestinationAddressGroup = "string",
    Redirect = "string",
    ProtocolMask = "string",
    Psh = false,
    Protocol = "string",
    Remark = "string",
    Rev = false,
    Rst = false,
    Action = "string",
    SourceAddressGroup = "string",
    SourcePort1 = "string",
    SourcePort2 = "string",
    SourcePortGroup = "string",
    SourcePortMask = "string",
    SourcePortOperator = "string",
    SourcePrefix = "string",
    SourcePrefixLength = "string",
    SourcePrefixMask = "string",
    Ack = false,
    TimeRange = "string",
    Ttl = 0,
    Urg = false,
    PacketLengthOperator = "string",
    Vni = "string",
});
example, err := nxos.NewIpv4AccessListEntry(ctx, "ipv4AccessListEntryResource", &nxos.Ipv4AccessListEntryArgs{
	SequenceNumber:          pulumi.Int(0),
	Precedence:              pulumi.String("string"),
	Syn:                     pulumi.Bool(false),
	DestinationPort1:        pulumi.String("string"),
	DestinationPort2:        pulumi.String("string"),
	DestinationPortGroup:    pulumi.String("string"),
	DestinationPortMask:     pulumi.String("string"),
	DestinationPortOperator: pulumi.String("string"),
	DestinationPrefix:       pulumi.String("string"),
	DestinationPrefixLength: pulumi.String("string"),
	DestinationPrefixMask:   pulumi.String("string"),
	Device:                  pulumi.String("string"),
	Dscp:                    pulumi.Int(0),
	Est:                     pulumi.Bool(false),
	Fin:                     pulumi.Bool(false),
	Fragment:                pulumi.Bool(false),
	HttpOptionType:          pulumi.String("string"),
	IcmpCode:                pulumi.Int(0),
	IcmpType:                pulumi.Int(0),
	Logging:                 pulumi.Bool(false),
	Name:                    pulumi.String("string"),
	PacketLength1:           pulumi.String("string"),
	PacketLength2:           pulumi.String("string"),
	Vlan:                    pulumi.Int(0),
	DestinationAddressGroup: pulumi.String("string"),
	Redirect:                pulumi.String("string"),
	ProtocolMask:            pulumi.String("string"),
	Psh:                     pulumi.Bool(false),
	Protocol:                pulumi.String("string"),
	Remark:                  pulumi.String("string"),
	Rev:                     pulumi.Bool(false),
	Rst:                     pulumi.Bool(false),
	Action:                  pulumi.String("string"),
	SourceAddressGroup:      pulumi.String("string"),
	SourcePort1:             pulumi.String("string"),
	SourcePort2:             pulumi.String("string"),
	SourcePortGroup:         pulumi.String("string"),
	SourcePortMask:          pulumi.String("string"),
	SourcePortOperator:      pulumi.String("string"),
	SourcePrefix:            pulumi.String("string"),
	SourcePrefixLength:      pulumi.String("string"),
	SourcePrefixMask:        pulumi.String("string"),
	Ack:                     pulumi.Bool(false),
	TimeRange:               pulumi.String("string"),
	Ttl:                     pulumi.Int(0),
	Urg:                     pulumi.Bool(false),
	PacketLengthOperator:    pulumi.String("string"),
	Vni:                     pulumi.String("string"),
})
var ipv4AccessListEntryResource = new Ipv4AccessListEntry("ipv4AccessListEntryResource", Ipv4AccessListEntryArgs.builder()
    .sequenceNumber(0)
    .precedence("string")
    .syn(false)
    .destinationPort1("string")
    .destinationPort2("string")
    .destinationPortGroup("string")
    .destinationPortMask("string")
    .destinationPortOperator("string")
    .destinationPrefix("string")
    .destinationPrefixLength("string")
    .destinationPrefixMask("string")
    .device("string")
    .dscp(0)
    .est(false)
    .fin(false)
    .fragment(false)
    .httpOptionType("string")
    .icmpCode(0)
    .icmpType(0)
    .logging(false)
    .name("string")
    .packetLength1("string")
    .packetLength2("string")
    .vlan(0)
    .destinationAddressGroup("string")
    .redirect("string")
    .protocolMask("string")
    .psh(false)
    .protocol("string")
    .remark("string")
    .rev(false)
    .rst(false)
    .action("string")
    .sourceAddressGroup("string")
    .sourcePort1("string")
    .sourcePort2("string")
    .sourcePortGroup("string")
    .sourcePortMask("string")
    .sourcePortOperator("string")
    .sourcePrefix("string")
    .sourcePrefixLength("string")
    .sourcePrefixMask("string")
    .ack(false)
    .timeRange("string")
    .ttl(0)
    .urg(false)
    .packetLengthOperator("string")
    .vni("string")
    .build());
ipv4_access_list_entry_resource = nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource",
    sequence_number=0,
    precedence="string",
    syn=False,
    destination_port1="string",
    destination_port2="string",
    destination_port_group="string",
    destination_port_mask="string",
    destination_port_operator="string",
    destination_prefix="string",
    destination_prefix_length="string",
    destination_prefix_mask="string",
    device="string",
    dscp=0,
    est=False,
    fin=False,
    fragment=False,
    http_option_type="string",
    icmp_code=0,
    icmp_type=0,
    logging=False,
    name="string",
    packet_length1="string",
    packet_length2="string",
    vlan=0,
    destination_address_group="string",
    redirect="string",
    protocol_mask="string",
    psh=False,
    protocol="string",
    remark="string",
    rev=False,
    rst=False,
    action="string",
    source_address_group="string",
    source_port1="string",
    source_port2="string",
    source_port_group="string",
    source_port_mask="string",
    source_port_operator="string",
    source_prefix="string",
    source_prefix_length="string",
    source_prefix_mask="string",
    ack=False,
    time_range="string",
    ttl=0,
    urg=False,
    packet_length_operator="string",
    vni="string")
const ipv4AccessListEntryResource = new nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource", {
    sequenceNumber: 0,
    precedence: "string",
    syn: false,
    destinationPort1: "string",
    destinationPort2: "string",
    destinationPortGroup: "string",
    destinationPortMask: "string",
    destinationPortOperator: "string",
    destinationPrefix: "string",
    destinationPrefixLength: "string",
    destinationPrefixMask: "string",
    device: "string",
    dscp: 0,
    est: false,
    fin: false,
    fragment: false,
    httpOptionType: "string",
    icmpCode: 0,
    icmpType: 0,
    logging: false,
    name: "string",
    packetLength1: "string",
    packetLength2: "string",
    vlan: 0,
    destinationAddressGroup: "string",
    redirect: "string",
    protocolMask: "string",
    psh: false,
    protocol: "string",
    remark: "string",
    rev: false,
    rst: false,
    action: "string",
    sourceAddressGroup: "string",
    sourcePort1: "string",
    sourcePort2: "string",
    sourcePortGroup: "string",
    sourcePortMask: "string",
    sourcePortOperator: "string",
    sourcePrefix: "string",
    sourcePrefixLength: "string",
    sourcePrefixMask: "string",
    ack: false,
    timeRange: "string",
    ttl: 0,
    urg: false,
    packetLengthOperator: "string",
    vni: "string",
});
type: nxos:Ipv4AccessListEntry
properties:
    ack: false
    action: string
    destinationAddressGroup: string
    destinationPort1: string
    destinationPort2: string
    destinationPortGroup: string
    destinationPortMask: string
    destinationPortOperator: string
    destinationPrefix: string
    destinationPrefixLength: string
    destinationPrefixMask: string
    device: string
    dscp: 0
    est: false
    fin: false
    fragment: false
    httpOptionType: string
    icmpCode: 0
    icmpType: 0
    logging: false
    name: string
    packetLength1: string
    packetLength2: string
    packetLengthOperator: string
    precedence: string
    protocol: string
    protocolMask: string
    psh: false
    redirect: string
    remark: string
    rev: false
    rst: false
    sequenceNumber: 0
    sourceAddressGroup: string
    sourcePort1: string
    sourcePort2: string
    sourcePortGroup: string
    sourcePortMask: string
    sourcePortOperator: string
    sourcePrefix: string
    sourcePrefixLength: string
    sourcePrefixMask: string
    syn: false
    timeRange: string
    ttl: 0
    urg: false
    vlan: 0
    vni: string
Ipv4AccessListEntry Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Ipv4AccessListEntry resource accepts the following input properties:
- SequenceNumber int
- Sequence number.
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices: invalid,permit,deny- Default value:invalid
- DestinationAddress stringGroup 
- Destination address group.
- DestinationPort1 string
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort2 string
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringGroup 
- Destination port group.
- DestinationPort stringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- DestinationPrefix string
- Destination prefix.
- DestinationPrefix stringLength 
- Destination prefix length.
- DestinationPrefix stringMask 
- Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range: 0-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- HttpOption stringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- IcmpCode int
- ICMP code. - Range: 0-256- Default value:256
- IcmpType int
- ICMP type. - Range: 0-256- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value: false
- Name string
- Access list name.
- PacketLength1 string
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength2 string
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength stringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- Precedence string
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- ProtocolMask string
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- SourceAddress stringGroup 
- Source address group.
- SourcePort1 string
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort2 string
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringGroup 
- Source port group.
- SourcePort stringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- SourcePrefix string
- Source prefix.
- SourcePrefix stringLength 
- Source prefix length.
- SourcePrefix stringMask 
- Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- TimeRange string
- Time range name.
- Ttl int
- TTL. - Range: 0-255- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range: 0-4095- Default value:4095
- Vni string
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- SequenceNumber int
- Sequence number.
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices: invalid,permit,deny- Default value:invalid
- DestinationAddress stringGroup 
- Destination address group.
- DestinationPort1 string
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort2 string
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringGroup 
- Destination port group.
- DestinationPort stringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- DestinationPrefix string
- Destination prefix.
- DestinationPrefix stringLength 
- Destination prefix length.
- DestinationPrefix stringMask 
- Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range: 0-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- HttpOption stringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- IcmpCode int
- ICMP code. - Range: 0-256- Default value:256
- IcmpType int
- ICMP type. - Range: 0-256- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value: false
- Name string
- Access list name.
- PacketLength1 string
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength2 string
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength stringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- Precedence string
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- ProtocolMask string
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- SourceAddress stringGroup 
- Source address group.
- SourcePort1 string
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort2 string
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringGroup 
- Source port group.
- SourcePort stringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- SourcePrefix string
- Source prefix.
- SourcePrefix stringLength 
- Source prefix length.
- SourcePrefix stringMask 
- Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- TimeRange string
- Time range name.
- Ttl int
- TTL. - Range: 0-255- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range: 0-4095- Default value:4095
- Vni string
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- sequenceNumber Integer
- Sequence number.
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destinationAddress StringGroup 
- Destination address group.
- destinationPort1 String
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort2 String
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringGroup 
- Destination port group.
- destinationPort StringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destinationPrefix String
- Destination prefix.
- destinationPrefix StringLength 
- Destination prefix length.
- destinationPrefix StringMask 
- Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Integer
- Match DSCP. - Range: 0-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- httpOption StringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmpCode Integer
- ICMP code. - Range: 0-256- Default value:256
- icmpType Integer
- ICMP type. - Range: 0-256- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value: false
- name String
- Access list name.
- packetLength1 String
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength2 String
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength StringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence String
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocolMask String
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- sourceAddress StringGroup 
- Source address group.
- sourcePort1 String
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort2 String
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringGroup 
- Source port group.
- sourcePort StringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- sourcePrefix String
- Source prefix.
- sourcePrefix StringLength 
- Source prefix length.
- sourcePrefix StringMask 
- Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- timeRange String
- Time range name.
- ttl Integer
- TTL. - Range: 0-255- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Integer
- VLAN ID. - Range: 0-4095- Default value:4095
- vni String
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- sequenceNumber number
- Sequence number.
- ack boolean
- Match TCP ACK flag.
- action string
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destinationAddress stringGroup 
- Destination address group.
- destinationPort1 string
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort2 string
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort stringGroup 
- Destination port group.
- destinationPort stringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort stringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destinationPrefix string
- Destination prefix.
- destinationPrefix stringLength 
- Destination prefix length.
- destinationPrefix stringMask 
- Destination prefix mask.
- device string
- A device name from the provider configuration.
- dscp number
- Match DSCP. - Range: 0-63
- est boolean
- Match TCP EST flag.
- fin boolean
- Match TCP FIN flag.
- fragment boolean
- Match non-initial fragment.
- httpOption stringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmpCode number
- ICMP code. - Range: 0-256- Default value:256
- icmpType number
- ICMP type. - Range: 0-256- Default value:256
- logging boolean
- Log matches against ACL entry. - Default value: false
- name string
- Access list name.
- packetLength1 string
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength2 string
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength stringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence string
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol string
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocolMask string
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh boolean
- Match TCP PSH flag.
- redirect string
- Redirect action.
- remark string
- ACL comment.
- rev boolean
- Match TCP REV flag.
- rst boolean
- Match TCP RST flag.
- sourceAddress stringGroup 
- Source address group.
- sourcePort1 string
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort2 string
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort stringGroup 
- Source port group.
- sourcePort stringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort stringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- sourcePrefix string
- Source prefix.
- sourcePrefix stringLength 
- Source prefix length.
- sourcePrefix stringMask 
- Source prefix mask.
- syn boolean
- Match TCP SYN flag.
- timeRange string
- Time range name.
- ttl number
- TTL. - Range: 0-255- Default value:0
- urg boolean
- Match TCP URG flag.
- vlan number
- VLAN ID. - Range: 0-4095- Default value:4095
- vni string
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- sequence_number int
- Sequence number.
- ack bool
- Match TCP ACK flag.
- action str
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destination_address_ strgroup 
- Destination address group.
- destination_port1 str
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destination_port2 str
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destination_port_ strgroup 
- Destination port group.
- destination_port_ strmask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destination_port_ stroperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destination_prefix str
- Destination prefix.
- destination_prefix_ strlength 
- Destination prefix length.
- destination_prefix_ strmask 
- Destination prefix mask.
- device str
- A device name from the provider configuration.
- dscp int
- Match DSCP. - Range: 0-63
- est bool
- Match TCP EST flag.
- fin bool
- Match TCP FIN flag.
- fragment bool
- Match non-initial fragment.
- http_option_ strtype 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmp_code int
- ICMP code. - Range: 0-256- Default value:256
- icmp_type int
- ICMP type. - Range: 0-256- Default value:256
- logging bool
- Log matches against ACL entry. - Default value: false
- name str
- Access list name.
- packet_length1 str
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packet_length2 str
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packet_length_ stroperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence str
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol str
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocol_mask str
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh bool
- Match TCP PSH flag.
- redirect str
- Redirect action.
- remark str
- ACL comment.
- rev bool
- Match TCP REV flag.
- rst bool
- Match TCP RST flag.
- source_address_ strgroup 
- Source address group.
- source_port1 str
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- source_port2 str
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- source_port_ strgroup 
- Source port group.
- source_port_ strmask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- source_port_ stroperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- source_prefix str
- Source prefix.
- source_prefix_ strlength 
- Source prefix length.
- source_prefix_ strmask 
- Source prefix mask.
- syn bool
- Match TCP SYN flag.
- time_range str
- Time range name.
- ttl int
- TTL. - Range: 0-255- Default value:0
- urg bool
- Match TCP URG flag.
- vlan int
- VLAN ID. - Range: 0-4095- Default value:4095
- vni str
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- sequenceNumber Number
- Sequence number.
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destinationAddress StringGroup 
- Destination address group.
- destinationPort1 String
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort2 String
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringGroup 
- Destination port group.
- destinationPort StringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destinationPrefix String
- Destination prefix.
- destinationPrefix StringLength 
- Destination prefix length.
- destinationPrefix StringMask 
- Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Number
- Match DSCP. - Range: 0-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- httpOption StringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmpCode Number
- ICMP code. - Range: 0-256- Default value:256
- icmpType Number
- ICMP type. - Range: 0-256- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value: false
- name String
- Access list name.
- packetLength1 String
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength2 String
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength StringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence String
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocolMask String
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- sourceAddress StringGroup 
- Source address group.
- sourcePort1 String
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort2 String
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringGroup 
- Source port group.
- sourcePort StringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- sourcePrefix String
- Source prefix.
- sourcePrefix StringLength 
- Source prefix length.
- sourcePrefix StringMask 
- Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- timeRange String
- Time range name.
- ttl Number
- TTL. - Range: 0-255- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Number
- VLAN ID. - Range: 0-4095- Default value:4095
- vni String
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
Outputs
All input properties are implicitly available as output properties. Additionally, the Ipv4AccessListEntry resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Ipv4AccessListEntry Resource
Get an existing Ipv4AccessListEntry resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: Ipv4AccessListEntryState, opts?: CustomResourceOptions): Ipv4AccessListEntry@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ack: Optional[bool] = None,
        action: Optional[str] = None,
        destination_address_group: Optional[str] = None,
        destination_port1: Optional[str] = None,
        destination_port2: Optional[str] = None,
        destination_port_group: Optional[str] = None,
        destination_port_mask: Optional[str] = None,
        destination_port_operator: Optional[str] = None,
        destination_prefix: Optional[str] = None,
        destination_prefix_length: Optional[str] = None,
        destination_prefix_mask: Optional[str] = None,
        device: Optional[str] = None,
        dscp: Optional[int] = None,
        est: Optional[bool] = None,
        fin: Optional[bool] = None,
        fragment: Optional[bool] = None,
        http_option_type: Optional[str] = None,
        icmp_code: Optional[int] = None,
        icmp_type: Optional[int] = None,
        logging: Optional[bool] = None,
        name: Optional[str] = None,
        packet_length1: Optional[str] = None,
        packet_length2: Optional[str] = None,
        packet_length_operator: Optional[str] = None,
        precedence: Optional[str] = None,
        protocol: Optional[str] = None,
        protocol_mask: Optional[str] = None,
        psh: Optional[bool] = None,
        redirect: Optional[str] = None,
        remark: Optional[str] = None,
        rev: Optional[bool] = None,
        rst: Optional[bool] = None,
        sequence_number: Optional[int] = None,
        source_address_group: Optional[str] = None,
        source_port1: Optional[str] = None,
        source_port2: Optional[str] = None,
        source_port_group: Optional[str] = None,
        source_port_mask: Optional[str] = None,
        source_port_operator: Optional[str] = None,
        source_prefix: Optional[str] = None,
        source_prefix_length: Optional[str] = None,
        source_prefix_mask: Optional[str] = None,
        syn: Optional[bool] = None,
        time_range: Optional[str] = None,
        ttl: Optional[int] = None,
        urg: Optional[bool] = None,
        vlan: Optional[int] = None,
        vni: Optional[str] = None) -> Ipv4AccessListEntryfunc GetIpv4AccessListEntry(ctx *Context, name string, id IDInput, state *Ipv4AccessListEntryState, opts ...ResourceOption) (*Ipv4AccessListEntry, error)public static Ipv4AccessListEntry Get(string name, Input<string> id, Ipv4AccessListEntryState? state, CustomResourceOptions? opts = null)public static Ipv4AccessListEntry get(String name, Output<String> id, Ipv4AccessListEntryState state, CustomResourceOptions options)resources:  _:    type: nxos:Ipv4AccessListEntry    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices: invalid,permit,deny- Default value:invalid
- DestinationAddress stringGroup 
- Destination address group.
- DestinationPort1 string
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort2 string
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringGroup 
- Destination port group.
- DestinationPort stringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- DestinationPrefix string
- Destination prefix.
- DestinationPrefix stringLength 
- Destination prefix length.
- DestinationPrefix stringMask 
- Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range: 0-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- HttpOption stringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- IcmpCode int
- ICMP code. - Range: 0-256- Default value:256
- IcmpType int
- ICMP type. - Range: 0-256- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value: false
- Name string
- Access list name.
- PacketLength1 string
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength2 string
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength stringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- Precedence string
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- ProtocolMask string
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- SequenceNumber int
- Sequence number.
- SourceAddress stringGroup 
- Source address group.
- SourcePort1 string
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort2 string
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringGroup 
- Source port group.
- SourcePort stringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- SourcePrefix string
- Source prefix.
- SourcePrefix stringLength 
- Source prefix length.
- SourcePrefix stringMask 
- Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- TimeRange string
- Time range name.
- Ttl int
- TTL. - Range: 0-255- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range: 0-4095- Default value:4095
- Vni string
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- Ack bool
- Match TCP ACK flag.
- Action string
- Action. - Choices: invalid,permit,deny- Default value:invalid
- DestinationAddress stringGroup 
- Destination address group.
- DestinationPort1 string
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort2 string
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringGroup 
- Destination port group.
- DestinationPort stringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- DestinationPort stringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- DestinationPrefix string
- Destination prefix.
- DestinationPrefix stringLength 
- Destination prefix length.
- DestinationPrefix stringMask 
- Destination prefix mask.
- Device string
- A device name from the provider configuration.
- Dscp int
- Match DSCP. - Range: 0-63
- Est bool
- Match TCP EST flag.
- Fin bool
- Match TCP FIN flag.
- Fragment bool
- Match non-initial fragment.
- HttpOption stringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- IcmpCode int
- ICMP code. - Range: 0-256- Default value:256
- IcmpType int
- ICMP type. - Range: 0-256- Default value:256
- Logging bool
- Log matches against ACL entry. - Default value: false
- Name string
- Access list name.
- PacketLength1 string
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength2 string
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- PacketLength stringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- Precedence string
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- Protocol string
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- ProtocolMask string
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- Psh bool
- Match TCP PSH flag.
- Redirect string
- Redirect action.
- Remark string
- ACL comment.
- Rev bool
- Match TCP REV flag.
- Rst bool
- Match TCP RST flag.
- SequenceNumber int
- Sequence number.
- SourceAddress stringGroup 
- Source address group.
- SourcePort1 string
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort2 string
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringGroup 
- Source port group.
- SourcePort stringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- SourcePort stringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- SourcePrefix string
- Source prefix.
- SourcePrefix stringLength 
- Source prefix length.
- SourcePrefix stringMask 
- Source prefix mask.
- Syn bool
- Match TCP SYN flag.
- TimeRange string
- Time range name.
- Ttl int
- TTL. - Range: 0-255- Default value:0
- Urg bool
- Match TCP URG flag.
- Vlan int
- VLAN ID. - Range: 0-4095- Default value:4095
- Vni string
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destinationAddress StringGroup 
- Destination address group.
- destinationPort1 String
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort2 String
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringGroup 
- Destination port group.
- destinationPort StringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destinationPrefix String
- Destination prefix.
- destinationPrefix StringLength 
- Destination prefix length.
- destinationPrefix StringMask 
- Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Integer
- Match DSCP. - Range: 0-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- httpOption StringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmpCode Integer
- ICMP code. - Range: 0-256- Default value:256
- icmpType Integer
- ICMP type. - Range: 0-256- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value: false
- name String
- Access list name.
- packetLength1 String
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength2 String
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength StringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence String
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocolMask String
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- sequenceNumber Integer
- Sequence number.
- sourceAddress StringGroup 
- Source address group.
- sourcePort1 String
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort2 String
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringGroup 
- Source port group.
- sourcePort StringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- sourcePrefix String
- Source prefix.
- sourcePrefix StringLength 
- Source prefix length.
- sourcePrefix StringMask 
- Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- timeRange String
- Time range name.
- ttl Integer
- TTL. - Range: 0-255- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Integer
- VLAN ID. - Range: 0-4095- Default value:4095
- vni String
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- ack boolean
- Match TCP ACK flag.
- action string
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destinationAddress stringGroup 
- Destination address group.
- destinationPort1 string
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort2 string
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort stringGroup 
- Destination port group.
- destinationPort stringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort stringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destinationPrefix string
- Destination prefix.
- destinationPrefix stringLength 
- Destination prefix length.
- destinationPrefix stringMask 
- Destination prefix mask.
- device string
- A device name from the provider configuration.
- dscp number
- Match DSCP. - Range: 0-63
- est boolean
- Match TCP EST flag.
- fin boolean
- Match TCP FIN flag.
- fragment boolean
- Match non-initial fragment.
- httpOption stringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmpCode number
- ICMP code. - Range: 0-256- Default value:256
- icmpType number
- ICMP type. - Range: 0-256- Default value:256
- logging boolean
- Log matches against ACL entry. - Default value: false
- name string
- Access list name.
- packetLength1 string
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength2 string
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength stringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence string
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol string
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocolMask string
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh boolean
- Match TCP PSH flag.
- redirect string
- Redirect action.
- remark string
- ACL comment.
- rev boolean
- Match TCP REV flag.
- rst boolean
- Match TCP RST flag.
- sequenceNumber number
- Sequence number.
- sourceAddress stringGroup 
- Source address group.
- sourcePort1 string
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort2 string
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort stringGroup 
- Source port group.
- sourcePort stringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort stringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- sourcePrefix string
- Source prefix.
- sourcePrefix stringLength 
- Source prefix length.
- sourcePrefix stringMask 
- Source prefix mask.
- syn boolean
- Match TCP SYN flag.
- timeRange string
- Time range name.
- ttl number
- TTL. - Range: 0-255- Default value:0
- urg boolean
- Match TCP URG flag.
- vlan number
- VLAN ID. - Range: 0-4095- Default value:4095
- vni string
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- ack bool
- Match TCP ACK flag.
- action str
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destination_address_ strgroup 
- Destination address group.
- destination_port1 str
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destination_port2 str
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destination_port_ strgroup 
- Destination port group.
- destination_port_ strmask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destination_port_ stroperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destination_prefix str
- Destination prefix.
- destination_prefix_ strlength 
- Destination prefix length.
- destination_prefix_ strmask 
- Destination prefix mask.
- device str
- A device name from the provider configuration.
- dscp int
- Match DSCP. - Range: 0-63
- est bool
- Match TCP EST flag.
- fin bool
- Match TCP FIN flag.
- fragment bool
- Match non-initial fragment.
- http_option_ strtype 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmp_code int
- ICMP code. - Range: 0-256- Default value:256
- icmp_type int
- ICMP type. - Range: 0-256- Default value:256
- logging bool
- Log matches against ACL entry. - Default value: false
- name str
- Access list name.
- packet_length1 str
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packet_length2 str
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packet_length_ stroperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence str
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol str
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocol_mask str
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh bool
- Match TCP PSH flag.
- redirect str
- Redirect action.
- remark str
- ACL comment.
- rev bool
- Match TCP REV flag.
- rst bool
- Match TCP RST flag.
- sequence_number int
- Sequence number.
- source_address_ strgroup 
- Source address group.
- source_port1 str
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- source_port2 str
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- source_port_ strgroup 
- Source port group.
- source_port_ strmask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- source_port_ stroperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- source_prefix str
- Source prefix.
- source_prefix_ strlength 
- Source prefix length.
- source_prefix_ strmask 
- Source prefix mask.
- syn bool
- Match TCP SYN flag.
- time_range str
- Time range name.
- ttl int
- TTL. - Range: 0-255- Default value:0
- urg bool
- Match TCP URG flag.
- vlan int
- VLAN ID. - Range: 0-4095- Default value:4095
- vni str
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
- ack Boolean
- Match TCP ACK flag.
- action String
- Action. - Choices: invalid,permit,deny- Default value:invalid
- destinationAddress StringGroup 
- Destination address group.
- destinationPort1 String
- First destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort2 String
- Second destination port number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringGroup 
- Destination port group.
- destinationPort StringMask 
- Destination port mask number or name. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- destinationPort StringOperator 
- Destination port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- destinationPrefix String
- Destination prefix.
- destinationPrefix StringLength 
- Destination prefix length.
- destinationPrefix StringMask 
- Destination prefix mask.
- device String
- A device name from the provider configuration.
- dscp Number
- Match DSCP. - Range: 0-63
- est Boolean
- Match TCP EST flag.
- fin Boolean
- Match TCP FIN flag.
- fragment Boolean
- Match non-initial fragment.
- httpOption StringType 
- HTTP option method. - Choices: invalid,get,put,head,post,delete,trace,connect- Default value:invalid
- icmpCode Number
- ICMP code. - Range: 0-256- Default value:256
- icmpType Number
- ICMP type. - Range: 0-256- Default value:256
- logging Boolean
- Log matches against ACL entry. - Default value: false
- name String
- Access list name.
- packetLength1 String
- First packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength2 String
- Second packet length. Either invalidor a number between 19 and 9210. - Default value:invalid
- packetLength StringOperator 
- Packet length operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- precedence String
- Precedence. Either unspecifiedor a number between 0 and 7. - Default value:unspecified
- protocol String
- Protocol name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- protocolMask String
- Protocol mask name or number. - Choices: ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf
- psh Boolean
- Match TCP PSH flag.
- redirect String
- Redirect action.
- remark String
- ACL comment.
- rev Boolean
- Match TCP REV flag.
- rst Boolean
- Match TCP RST flag.
- sequenceNumber Number
- Sequence number.
- sourceAddress StringGroup 
- Source address group.
- sourcePort1 String
- First source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort2 String
- Second source port name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringGroup 
- Source port group.
- sourcePort StringMask 
- Source port mask name or number. - Choices: echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp
- sourcePort StringOperator 
- Source port operator. - Choices: none,lt,gt,eq,neq,range- Default value:none
- sourcePrefix String
- Source prefix.
- sourcePrefix StringLength 
- Source prefix length.
- sourcePrefix StringMask 
- Source prefix mask.
- syn Boolean
- Match TCP SYN flag.
- timeRange String
- Time range name.
- ttl Number
- TTL. - Range: 0-255- Default value:0
- urg Boolean
- Match TCP URG flag.
- vlan Number
- VLAN ID. - Range: 0-4095- Default value:4095
- vni String
- NVE VNI ID. Either invalidor a number between 0 and 16777216. - Default value:invalid
Import
 $ pulumi import nxos:index/ipv4AccessListEntry:Ipv4AccessListEntry example "sys/acl/ipv4/name-[ACL1]/seq-[10]"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- nxos lbrlabs/pulumi-nxos
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the nxosTerraform Provider.