This YANG module provides a data model for host ACL data.
Copyright 2019-2020 Rubicon Communications, LLC.
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:host-config": {
- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": null,
- "netgate-host-acl:source": null
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": null,
- "netgate-host-acl:protocol": null,
- "netgate-host-acl:transport": null,
- "netgate-host-acl:source": null,
- "netgate-host-acl:version": null
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
}
Host configuration parameters.
netgate.host.acl.HostConfig to be added to list
object (netgate.host.acl.hostconfig.Security) Host security configuration parameters. |
{- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": null,
- "netgate-host-acl:source-port": null,
- "netgate-host-acl:icmp": null,
- "netgate-host-acl:destination-port": null
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
Host configuration parameters.
netgate.host.acl.HostConfig to be added or updated
object (netgate.host.acl.HostConfig) Host configuration parameters. |
{- "netgate-host-acl:host-config": {
- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": null,
- "netgate-host-acl:source": null
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": null,
- "netgate-host-acl:protocol": null,
- "netgate-host-acl:transport": null,
- "netgate-host-acl:source": null,
- "netgate-host-acl:version": null
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
}
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": null,
- "netgate-host-acl:source-port": null,
- "netgate-host-acl:icmp": null,
- "netgate-host-acl:destination-port": null
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
Host security configuration parameters.
netgate.host.acl.hostconfig.Security to be added to list
object (netgate.host.acl.hostconfig.security.HostAcls) Host access lists (ACLs). |
{- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": null
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": null,
- "netgate-host-acl:icmpv6-type": null,
- "netgate-host-acl:code": null
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
Host security configuration parameters.
netgate.host.acl.hostconfig.Security to be added or updated
object (netgate.host.acl.hostconfig.Security) Host security configuration parameters. |
{- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": null,
- "netgate-host-acl:source-port": null,
- "netgate-host-acl:icmp": null,
- "netgate-host-acl:destination-port": null
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": null
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": null,
- "netgate-host-acl:icmpv6-type": null,
- "netgate-host-acl:code": null
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
Host access lists (ACLs).
netgate.host.acl.hostconfig.security.HostAcls to be added to list
Array of objects (netgate.host.acl.hostconfig.security.hostacls.HostAcl) The list of configured host ACLs. |
{- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": null,
- "netgate-host-acl:psh": null,
- "netgate-host-acl:ece": null,
- "netgate-host-acl:ack": null,
- "netgate-host-acl:syn": null,
- "netgate-host-acl:fin": null,
- "netgate-host-acl:urg": null,
- "netgate-host-acl:cwr": null
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
Host access lists (ACLs).
netgate.host.acl.hostconfig.security.HostAcls to be added or updated
object (netgate.host.acl.hostconfig.security.HostAcls) Host access lists (ACLs). |
{- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": null
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": null,
- "netgate-host-acl:icmpv6-type": null,
- "netgate-host-acl:code": null
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
The list of configured host ACLs.
netgate.host.acl.hostconfig.security.hostacls.HostAcl to be added to list
netgate-host-acl:acl-seq | integer <int64> The sequence number of the host ACL. |
Array of objects (netgate.host.acl.hostconfig.security.hostacls.hostacl.AclRule) The list of the host ACL rules. | |
netgate-host-acl:description | string The description of the host ACL. |
netgate-host-acl:acl-name | string The name of the host ACL. |
{- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
The list of configured host ACLs.
acl-name required | string Id of host-acl |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:host-acl": {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
}
The list of configured host ACLs.
acl-name required | string Id of host-acl |
netgate.host.acl.hostconfig.security.hostacls.HostAcl to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.HostAcl) The list of configured host ACLs. |
{- "netgate-host-acl:host-acl": {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
}
The list of configured host ACLs.
acl-name required | string Id of host-acl |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
The list of the host ACL rules.
acl-name required | string Id of host-acl |
netgate.host.acl.hostconfig.security.hostacls.hostacl.AclRule to be added to list
netgate-host-acl:rule-seq | integer <int64> The sequence number of the rule. |
netgate-host-acl:action | string (netgate.host.acl.HostAclAction) Enum: "permit" "deny" |
netgate-host-acl:description | string The description of the rule. |
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.PacketMatch) The matching packets of the rule. |
{- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
The list of the host ACL rules.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:acl-rule": {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
}
The list of the host ACL rules.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.AclRule to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.AclRule) The list of the host ACL rules. |
{- "netgate-host-acl:acl-rule": {
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
}
The list of the host ACL rules.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
The matching packets of the rule.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
The matching packets of the rule.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.PacketMatch to be added to list
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Link) Ethernet traffic match. | |
netgate-host-acl:input-if | string The input interface name. |
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Ip) IP traffic match. |
{- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
The matching packets of the rule.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.PacketMatch to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.PacketMatch) The matching packets of the rule. |
{- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
The matching packets of the rule.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
IP traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
IP traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Ip to be added to list
netgate-host-acl:destination | string The destination IP prefix. |
netgate-host-acl:protocol | string The IP protocol. |
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.Transport) Transport options. | |
netgate-host-acl:source | string The source IP prefix. |
netgate-host-acl:version | integer <int32> IP version. |
{- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
IP traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Ip to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Ip) IP traffic match. |
{- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
IP traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
Transport options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
}
Transport options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.Transport to be added to list
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Tcp) TCP options. | |
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.SourcePort) The source port range. | |
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Icmp) ICMP options. | |
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.DestinationPort) The destination port range. |
{- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
Transport options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.Transport to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.Transport) Transport options. |
{- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
}
Transport options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
The destination port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/destination-port" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
The destination port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.DestinationPort to be added to list
netgate-host-acl:last | integer <int32> The last port number. |
netgate-host-acl:first | integer <int32> The first port number. |
{- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
The destination port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.DestinationPort to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.DestinationPort) The destination port range. |
{- "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
The destination port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/destination-port" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
ICMP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/icmp" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}
}
ICMP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Icmp to be added to list
netgate-host-acl:icmp-type | string (netgate.host.acl.HostAclIcmpType) Enum: "echo-reply" "destination-unreachable" "source-quench" "redirect" "echo-request" "time-exceeded" "parameter-problem" "timestamp-request" "timestamp-reply" "info-request" "info-reply" "address-mask-request" "address-mask-reply" "router-advertisement" "router-solicitation" |
netgate-host-acl:icmpv6-type | string (netgate.host.acl.HostAclIcmpv6Type) Enum: "destination-unreachable" "packet-too-big" "time-exceeded" "echo-request" "echo-reply" "mld-listener-query" "mld-listener-report" "mld-listener-reduction" "nd-router-solicit" "nd-router-advert" "nd-neighbor-solicit" "nd-neighbor-advert" "nd-redirect" "parameter-problem" "router-renumbering" |
netgate-host-acl:code | integer <int32> ICMP code. |
{- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}
ICMP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Icmp to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Icmp) ICMP options. |
{- "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}
}
ICMP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/icmp" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
The source port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/source-port" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
The source port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.SourcePort to be added to list
netgate-host-acl:last | integer <int32> The last port number. |
netgate-host-acl:first | integer <int32> The first port number. |
{- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
The source port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.SourcePort to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.SourcePort) The source port range. |
{- "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
The source port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/source-port" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
TCP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/tcp" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
}
TCP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Tcp to be added to list
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.tcp.Flags) TCP flags. |
{- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
TCP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Tcp to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.Tcp) TCP options. |
{- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
}
TCP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/tcp" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
TCP flags.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/tcp/flags" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
TCP flags.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.tcp.Flags to be added to list
netgate-host-acl:rst | boolean Reset. |
netgate-host-acl:psh | boolean Push. |
netgate-host-acl:ece | boolean ECN-Echo. |
netgate-host-acl:ack | boolean Acknowledgment. |
netgate-host-acl:syn | boolean Synchronize. |
netgate-host-acl:fin | boolean Finished. |
netgate-host-acl:urg | boolean Urgent. |
netgate-host-acl:cwr | boolean Congestion Window Reduced. |
{- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
TCP flags.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.tcp.Flags to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.ip.transport.tcp.Flags) TCP flags. |
{- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
TCP flags.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/tcp/flags" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
Ethernet traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/link" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}
}
Ethernet traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Link to be added to list
netgate-host-acl:destination | string The destination MAC address. |
netgate-host-acl:source | string The source MAC address. |
{- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}
Ethernet traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Link to be added or updated
object (netgate.host.acl.hostconfig.security.hostacls.hostacl.aclrule.packetmatch.Link) Ethernet traffic match. |
{- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}
}
Ethernet traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-config/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/link" req, _ := http.NewRequest("DELETE", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:host-state": {
- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:total-packets": 0,
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": null,
- "netgate-host-acl:source": null
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": null,
- "netgate-host-acl:protocol": null,
- "netgate-host-acl:transport": null,
- "netgate-host-acl:source": null,
- "netgate-host-acl:version": null
}
}, - "netgate-host-acl:total-bytes": 0
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
}
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:security": {
- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:total-packets": 0,
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": null,
- "netgate-host-acl:source-port": null,
- "netgate-host-acl:icmp": null,
- "netgate-host-acl:destination-port": null
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}, - "netgate-host-acl:total-bytes": 0
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
}
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:host-acls": {
- "netgate-host-acl:host-acl": [
- {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:total-packets": 0,
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": null
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": null,
- "netgate-host-acl:icmpv6-type": null,
- "netgate-host-acl:code": null
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": null,
- "netgate-host-acl:first": null
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}, - "netgate-host-acl:total-bytes": 0
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
]
}
}
The list of configured host ACLs.
acl-name required | string Id of host-acl |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:host-acl": {
- "netgate-host-acl:acl-seq": 0,
- "netgate-host-acl:acl-rule": [
- {
- "netgate-host-acl:total-packets": 0,
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}, - "netgate-host-acl:total-bytes": 0
}
], - "netgate-host-acl:description": "string",
- "netgate-host-acl:acl-name": "string"
}
}
The list of the host ACL rules.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:acl-rule": {
- "netgate-host-acl:total-packets": 0,
- "netgate-host-acl:rule-seq": 0,
- "netgate-host-acl:action": "permit",
- "netgate-host-acl:description": "string",
- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}, - "netgate-host-acl:total-bytes": 0
}
}
The matching packets of the rule.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:packet-match": {
- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}, - "netgate-host-acl:input-if": "string",
- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
}
IP traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:ip": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:protocol": "string",
- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}, - "netgate-host-acl:source": "string",
- "netgate-host-acl:version": 0
}
}
Transport options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:transport": {
- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}, - "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}, - "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}, - "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
}
The destination port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/destination-port" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:destination-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
ICMP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/icmp" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:icmp": {
- "netgate-host-acl:icmp-type": "echo-reply",
- "netgate-host-acl:icmpv6-type": "destination-unreachable",
- "netgate-host-acl:code": 0
}
}
The source port range.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/source-port" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:source-port": {
- "netgate-host-acl:last": 0,
- "netgate-host-acl:first": 0
}
}
TCP options.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/tcp" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:tcp": {
- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
}
TCP flags.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/ip/transport/tcp/flags" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:flags": {
- "netgate-host-acl:rst": true,
- "netgate-host-acl:psh": true,
- "netgate-host-acl:ece": true,
- "netgate-host-acl:ack": true,
- "netgate-host-acl:syn": true,
- "netgate-host-acl:fin": true,
- "netgate-host-acl:urg": true,
- "netgate-host-acl:cwr": true
}
}
Ethernet traffic match.
acl-name required | string Id of host-acl |
rule-seq required | integer <int64> Id of acl-rule |
package main import ( "fmt" "net/http" "io/ioutil" ) func main() { url := "http://hostname/restconf/data/netgate-host-acl:host-state/security/host-acls/host-acl=%7Bacl-name%7D/acl-rule=%7Brule-seq%7D/packet-match/link" req, _ := http.NewRequest("GET", url, nil) res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := ioutil.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) }
{- "netgate-host-acl:link": {
- "netgate-host-acl:destination": "string",
- "netgate-host-acl:source": "string"
}
}