cgnv6

Carrier Grade NAT and IPv6 Migration commands. Customers can extend IPv4 connectivity with standards-based Carrier Grade NAT (CGN/CGNAT) preserving their existing IPv4 address allocation and their investment in IPv4-based infrastructure. Since IPv6 is not backward compatible with IPv4, transition to IPv6 requires various solutions that can be run concurrently so network operators can phase in transition mechanisms as needed.

cgnv6 Specification

Type Intermediate Resource
Element Name cgnv6
Element URI /axapi/v3/cgnv6
Element Attributes cgnv6_attributes
Schema cgnv6 schema

Operations Allowed:

Operation Method URI Payload

Get Object

GET

/axapi/v3/cgnv6

cgnv6_attributes

cgnv6 Attributes

ddos-protection

Description: ddos-protection is a JSON Block . Please see below for ddos-protection

Type: Object

Reference Object: /axapi/v3/cgnv6/ddos-protection

dns64

Description: dns64 is a JSON Block . Please see below for dns64

Type: Object

Reference Object: /axapi/v3/cgnv6/dns64

dns64-virtualserver-list

Description: dns64-virtualserver-list is a JSON List . Please see below for dns64-virtualserver-list

Type: List

Reference Object: /axapi/v3/cgnv6/dns64-virtualserver/{name}

ds-lite

Description: ds-lite is a JSON Block . Please see below for ds-lite

Type: Object

Reference Object: /axapi/v3/cgnv6/ds-lite

fixed-nat

Description: fixed-nat is a JSON Block . Please see below for fixed-nat

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/global

http-alg

Description: http-alg is a JSON Block . Please see below for http-alg

Type: Object

Reference Object: /axapi/v3/cgnv6/http-alg

icmp

Description: icmp is a JSON Block . Please see below for icmp

Type: Object

Reference Object: /axapi/v3/cgnv6/icmp

l4

Description: l4 is a JSON Block . Please see below for l4

Type: Object

Reference Object: /axapi/v3/cgnv6/l4

logging

Description: logging is a JSON Block . Please see below for logging

Type: Object

Reference Object: /axapi/v3/cgnv6/logging

lsn

Description: lsn is a JSON Block . Please see below for lsn

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn

lsn-lid-list

Description: lsn-lid-list is a JSON List . Please see below for lsn-lid-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn-lid/{lid-number}

lsn-radius-profile-list

Description: lsn-radius-profile-list is a JSON List . Please see below for lsn-radius-profile-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn-radius-profile/{lid-profile-index}

lsn-rule-list-list

Description: lsn-rule-list-list is a JSON List . Please see below for lsn-rule-list-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn-rule-list/{name}

lw-4o6

Description: lw-4o6 is a JSON Block . Please see below for lw-4o6

Type: Object

Reference Object: /axapi/v3/cgnv6/lw-4o6

nat

Description: nat is a JSON Block . Please see below for nat

Type: Object

Reference Object: /axapi/v3/cgnv6/nat

nat46-stateless

Description: nat46-stateless is a JSON Block . Please see below for nat46-stateless

Type: Object

Reference Object: /axapi/v3/cgnv6/nat46-stateless

nat64

Description: nat64 is a JSON Block . Please see below for nat64

Type: Object

Reference Object: /axapi/v3/cgnv6/nat64

one-to-one

Description: one-to-one is a JSON Block . Please see below for one-to-one

Type: Object

Reference Object: /axapi/v3/cgnv6/one-to-one

pcp

Description: pcp is a JSON Block . Please see below for pcp

Type: Object

Reference Object: /axapi/v3/cgnv6/pcp

resource-usage

Description: resource-usage is a JSON Block . Please see below for resource-usage

Type: Object

Reference Object: /axapi/v3/cgnv6/resource-usage

sctp

Description: sctp is a JSON Block . Please see below for sctp

Type: Object

Reference Object: /axapi/v3/cgnv6/sctp

server-list

Description: server-list is a JSON List . Please see below for server-list

Type: List

Reference Object: /axapi/v3/cgnv6/server/{name}

service-group-list

Description: service-group-list is a JSON List . Please see below for service-group-list

Type: List

Reference Object: /axapi/v3/cgnv6/service-group/{name}

sixrd

Description: sixrd is a JSON Block . Please see below for sixrd

Type: Object

Reference Object: /axapi/v3/cgnv6/sixrd

stateful-firewall

Description: stateful-firewall is a JSON Block . Please see below for stateful-firewall

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall

template

Description: template is a JSON Block . Please see below for template

Type: Object

Reference Object: /axapi/v3/cgnv6/template

translation

Description: translation is a JSON Block . Please see below for translation

Type: Object

Reference Object: /axapi/v3/cgnv6/translation

lsn

Specification
Type object

alg

Description: alg is a JSON Block . Please see below for l844_alg

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg

endpoint-independent-filtering

Description: endpoint-independent-filtering is a JSON Block . Please see below for l844_endpoint-independent-filtering

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/endpoint-independent-filtering

endpoint-independent-mapping

Description: endpoint-independent-mapping is a JSON Block . Please see below for l844_endpoint-independent-mapping

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/endpoint-independent-mapping

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/global

health-check-gateway-list

Description: health-check-gateway-list is a JSON List . Please see below for l844_health-check-gateway-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn/health-check-gateway/{ipv4-addr}+{ipv6-addr}

inside

Description: inside is a JSON Block . Please see below for l844_inside

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/inside

performance

Description: performance is a JSON Block . Please see below for l844_performance

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/performance

port-overloading

Description: port-overloading is a JSON Block . Please see below for l844_port-overloading

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/port-overloading

port-reservation-list

Description: port-reservation-list is a JSON List . Please see below for l844_port-reservation-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn/port-reservation/{inside}+{inside-port-start}+{inside-port-end}+{nat}+{nat-port-start}+{nat-port-end}

radius

Description: radius is a JSON Block . Please see below for l844_radius

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/radius

stun-timeout

Description: stun-timeout is a JSON Block . Please see below for l844_stun-timeout

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/stun-timeout

tcp

Description: tcp is a JSON Block . Please see below for l844_tcp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/tcp

lsn.radius

Specification
Type object

server

Description: server is a JSON Block . Please see below for l844_server

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/radius/server

lsn.radius.server

Specification
Type object

attribute

Description: attribute is a JSON List . Please see below for l844_attribute

Type: List

encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED secret string)

listen-port

Description: Configure the listen port of RADIUS server (Port number)

Type: number

Range: 1024-65535

remote

Description: remote is a JSON Block . Please see below for l844_remote

Type: Object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

secret

Description: Configure shared secret

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

secret-string

Description: The RADIUS secret

Type: string

Format: password

uuid

Description: uuid of the object

Type: string

vrid

Description: Join a VRRP-A failover group

Type: number

Range: 1-31

lsn.radius.server.remote

Specification
Type object

ipv4-list

Description: IP-list of IPv4 remote clients (IP-list name)

Type: string

Format: string-rlx

ipv6-list

Description: IP-list of IPv6 remote clients (IP-list name)

Type: string

Format: string-rlx

lsn.radius.server.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘msisdn-received’: MSISDN Received; ‘imei-received’: IMEI Received; ‘imsi-received’: IMSI Received; ‘custom-received’: Custom attribute Received; ‘radius-request-received’: RADIUS Request Received; ‘radius-request-dropped’: RADIUS Request Dropped (Malformed Packet); ‘radius-table-full’: RADIUS Request Dropped (Table Full); ‘ha-standby-dropped’: HA Standby Dropped; ‘smp-mem-allocated’: RADIUS SMP Memory Allocated; ‘smp-mem-alloc-failed’: RADIUS SMP Memory Allocation Failed; ‘smp-mem-freed’: RADIUS SMP Memory Freed; ‘smp-created’: RADIUS SMP Created; ‘smp-in-rml’: RADIUS SMP in RML; ‘smp-deleted’: RADIUS SMP Deleted; ‘mem-allocated’: RADIUS Memory Allocated; ‘mem-alloc-failed’: RADIUS Memory Allocation Failed; ‘mem-freed’: RADIUS Memory Freed; ‘ha-sync-create-sent’: HA Record Sync Create Sent; ‘ha-sync-delete-sent’: HA Record Sync Delete Sent; ‘ha-sync-create-recv’: HA Record Sync Create Received; ‘ha-sync-delete-recv’: HA Record Sync Delete Received;

Type: string

Supported Values: all, msisdn-received, imei-received, imsi-received, custom-received, radius-request-received, radius-request-dropped, radius-table-full, ha-standby-dropped, smp-mem-allocated, smp-mem-alloc-failed, smp-mem-freed, smp-created, smp-in-rml, smp-deleted, mem-allocated, mem-alloc-failed, mem-freed, ha-sync-create-sent, ha-sync-delete-sent, ha-sync-create-recv, ha-sync-delete-recv

lsn.radius.server.attribute

Specification
Type list
Block object keys

attribute-value

Description: ‘inside-ip’: Inside IP address; ‘inside-ipv6’: Inside IPv6 address; ‘imei’: International Mobile Equipment Identity (IMEI); ‘imsi’: International Mobile Subscriber Identity (IMSI); ‘msisdn’: Mobile Subscriber Integrated Services Digital Network-Number (MSISDN); ‘custom1’: Customized attribute 1; ‘custom2’: Customized attribute 2; ‘custom3’: Customized attribute 3;

Type: string

Supported Values: inside-ip, inside-ipv6, imei, imsi, msisdn, custom1, custom2, custom3

custom-number

Description: RADIUS attribute number

Type: number

Range: 1-255

custom-vendor

Description: RADIUS vendor attribute information (RADIUS vendor ID)

Type: number

Range: 1-65535

name

Description: Customized attribute name

Type: string

number

Description: RADIUS attribute number

Type: number

Range: 1-255

value

Description: ‘hexadecimal’: Type of attribute value is hexadecimal;

Type: string

Supported Values: hexadecimal

vendor

Description: RADIUS vendor attribute information (RADIUS vendor ID)

Type: number

Range: 1-65535

lsn.endpoint-independent-mapping

Specification
Type object

tcp

Description: tcp is a JSON Block . Please see below for l844_tcp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/endpoint-independent-mapping/tcp

udp

Description: udp is a JSON Block . Please see below for l844_udp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/endpoint-independent-mapping/udp

lsn.endpoint-independent-mapping.udp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

uuid

Description: uuid of the object

Type: string

lsn.endpoint-independent-mapping.udp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

lsn.endpoint-independent-mapping.tcp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

uuid

Description: uuid of the object

Type: string

lsn.endpoint-independent-mapping.tcp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

lsn.port-overloading

Specification
Type object

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/port-overloading/global

tcp

Description: tcp is a JSON Block . Please see below for l844_tcp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/port-overloading/tcp

udp

Description: udp is a JSON Block . Please see below for l844_udp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/port-overloading/udp

lsn.port-overloading.udp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

uuid

Description: uuid of the object

Type: string

lsn.port-overloading.udp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

lsn.port-overloading.global

Specification
Type object

allow-different-user

Description: Allow different users to overload the same port (default: disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

unique

Description: ‘destination-address’: Allow overloading when the destination addresses is unique; ‘destination-address-and-port’: Allow overloading when the destination address and port 2-tuple is unique (default);

Type: string

Supported Values: destination-address, destination-address-and-port

Default: destination-address-and-port

uuid

Description: uuid of the object

Type: string

lsn.port-overloading.tcp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

uuid

Description: uuid of the object

Type: string

lsn.port-overloading.tcp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

lsn.health-check-gateway-list

Specification
Type list
Block object keys

ipv4-addr

Description: Specify IPv4 Gateway

Type: string

Format: ipv4-address

ipv6-addr

Description: Specify IPv6 Gateway

Type: string

Format: ipv6-address

uuid

Description: uuid of the object

Type: string

lsn.alg

Specification
Type object

esp

Description: esp is a JSON Block . Please see below for l844_esp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg/esp

ftp

Description: ftp is a JSON Block . Please see below for l844_ftp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg/ftp

pptp

Description: pptp is a JSON Block . Please see below for l844_pptp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg/pptp

rtsp

Description: rtsp is a JSON Block . Please see below for l844_rtsp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg/rtsp

sip

Description: sip is a JSON Block . Please see below for l844_sip

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg/sip

tftp

Description: tftp is a JSON Block . Please see below for l844_tftp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/alg/tftp

lsn.alg.ftp

Specification
Type object

ftp-value

Description: ‘disable’: Disable FTP ALG for LSN;

Type: string

Supported Values: disable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

lsn.alg.ftp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘port-requests’: PORT Requests From Client; ‘eprt-requests’: EPRT Requests From Client; ‘lprt-requests’: LPRT Requests From Client; ‘pasv-replies’: PASV Replies From Server; ‘epsv-replies’: EPSV Replies From Server; ‘lpsv-replies’: LPSV Replies From Server; ‘port-retransmits’: Port Mode Request Retransmits; ‘pasv-retransmits’: Passive Mode Reply Retransmits; ‘port-helper-created’: Port Mode Helper Created; ‘pasv-helper-created’: Passive Mode Helper Created; ‘port-helper-freed’: Port Mode Helper Freed; ‘pasv-helper-freed’: Passive Mode Helper Freed; ‘port-helper-unused’: Port Mode Helper Unused; ‘pasv-helper-unused’: Passive Mode Helper Unused; ‘port-helper-creation-failure’: Port Helper Creation Failure; ‘pasv-helper-creation-failure’: Passive Helper Creation Failure; ‘get-conn-ext-failure’: Get Conn Extension Failure; ‘smp-app-type-mismatch’: SMP ALG App Type Mismatch;

Type: string

Supported Values: all, port-requests, eprt-requests, lprt-requests, pasv-replies, epsv-replies, lpsv-replies, port-retransmits, pasv-retransmits, port-helper-created, pasv-helper-created, port-helper-freed, pasv-helper-freed, port-helper-unused, pasv-helper-unused, port-helper-creation-failure, pasv-helper-creation-failure, get-conn-ext-failure, smp-app-type-mismatch

lsn.alg.sip

Specification
Type object

rtp-stun-timeout

Description: RTP/RTCP STUN timeout in minutes (Default is 5 minutes)

Type: number

Range: 2-10

Default: 5

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

sip-value

Description: ‘enable’: Enable SIP ALG for LSN;

Type: string

Supported Values: enable

uuid

Description: uuid of the object

Type: string

lsn.alg.sip.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘method-register’: SIP Method REGISTER; ‘method-invite’: SIP Method INVITE; ‘method-ack’: SIP Method ACK; ‘method-cancel’: SIP Method CANCEL; ‘method-bye’: SIP Method BYE; ‘method-options’: SIP Method OPTIONS; ‘method-prack’: SIP Method PRACK; ‘method-subscribe’: SIP Method SUBSCRIBE; ‘method-notify’: SIP Method NOTIFY; ‘method-publish’: SIP Method PUBLISH; ‘method-info’: SIP Method INFO; ‘method-refer’: SIP Method REFER; ‘method-message’: SIP Method MESSAGE; ‘method-update’: SIP Method UPDATE; ‘method-unknown’: SIP Method UNKNOWN; ‘parse-error’: SIP Message Parse Error; ‘req-uri-op-failrue’: SIP Operate Request Uri Failure; ‘via-hdr-op-failrue’: SIP Operate Via Header Failure; ‘contact-hdr-op-failrue’: SIP Operate Contact Header Failure; ‘from-hdr-op-failrue’: SIP Operate From Header Failure; ‘to-hdr-op-failrue’: SIP Operate To Header Failure; ‘route-hdr-op-failrue’: SIP Operate Route Header Failure; ‘record-route-hdr-op-failrue’: SIP Operate Record-Route Header Failure; ‘content-length-hdr-op-failrue’: SIP Operate Content-Length Failure; ‘third-party-registration’: SIP Third-Party Registration; ‘conn-ext-creation-failure’: SIP Create Connection Extension Failure; ‘alloc-contact-port-failure’: SIP Alloc Contact Port Failure; ‘outside-contact-port-mismatch’: SIP Outside Contact Port Mismatch NAT Port; ‘inside-contact-port-mismatch’: SIP Inside Contact Port Mismatch; ‘third-party-sdp’: SIP Third-Party SDP; ‘sdp-process-candidate-failure’: SIP Operate SDP Media Candidate Attribute Failure; ‘sdp-op-failure’: SIP Operate SDP Failure; ‘sdp-alloc-port-map-success’: SIP Alloc SDP Port Map Success; ‘sdp-alloc-port-map-failure’: SIP Alloc SDP Port Map Failure; ‘modify-failure’: SIP Message Modify Failure; ‘rewrite-failure’: SIP Message Rewrite Failure; ‘tcp-out-of-order-drop’: TCP Out-of-Order Drop;

Type: string

Supported Values: all, method-register, method-invite, method-ack, method-cancel, method-bye, method-options, method-prack, method-subscribe, method-notify, method-publish, method-info, method-refer, method-message, method-update, method-unknown, parse-error, req-uri-op-failrue, via-hdr-op-failrue, contact-hdr-op-failrue, from-hdr-op-failrue, to-hdr-op-failrue, route-hdr-op-failrue, record-route-hdr-op-failrue, content-length-hdr-op-failrue, third-party-registration, conn-ext-creation-failure, alloc-contact-port-failure, outside-contact-port-mismatch, inside-contact-port-mismatch, third-party-sdp, sdp-process-candidate-failure, sdp-op-failure, sdp-alloc-port-map-success, sdp-alloc-port-map-failure, modify-failure, rewrite-failure, tcp-out-of-order-drop

lsn.alg.esp

Specification
Type object

esp-value

Description: ‘enable’: Enable ESP ALG for LSN;

Type: string

Supported Values: enable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

lsn.alg.esp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘session-created’: ESP Sessions Created; ‘placeholder-debug’: Placeholder Debug;

Type: string

Supported Values: all, session-created, placeholder-debug

lsn.alg.pptp

Specification
Type object

pptp-value

Description: ‘enable’: Enable PPTP ALG for LSN;

Type: string

Supported Values: enable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

lsn.alg.pptp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘calls-established’: Calls Established; ‘mismatched-pns-call-id’: Mismatched PNS Call ID; ‘gre-sessions-created’: GRE Sessions Created; ‘gre-sessions-freed’: GRE Sessions Freed; ‘no-gre-session-match’: No Matching GRE Session; ‘smp-sessions-created’: SMP Sessions Created; ‘smp-sessions-freed’: SMP Sessions Freed; ‘smp-session-creation-failure’: SMP Session Creation Failures; ‘extension-creation-failure’: Extension Creation Failures; ‘ha-sent’: HA Info Sent; ‘ha-rcv’: HA Info Received; ‘ha-no-mem’: HA Memory Allocation Failure; ‘ha-conflict’: HA Call ID Conflicts; ‘ha-overwrite’: HA Call ID Overwrites; ‘ha-call-sent’: HA Call Sent; ‘ha-call-rcv’: HA Call Received; ‘ha-smp-conflict’: HA SMP Conflicts; ‘ha-smp-in-del-q’: HA SMP Deleted; ‘smp-app-type-mismatch’: SMP ALG App Type Mismatch; ‘quota-inc’: Quota Incremented; ‘quota-dec’: Quota Decremented; ‘quota-inc-not-found’: Quota Not Found on Increment; ‘quota-dec-not-found’: Quota Not Found on Decrement;

Type: string

Supported Values: all, calls-established, mismatched-pns-call-id, gre-sessions-created, gre-sessions-freed, no-gre-session-match, smp-sessions-created, smp-sessions-freed, smp-session-creation-failure, extension-creation-failure, ha-sent, ha-rcv, ha-no-mem, ha-conflict, ha-overwrite, ha-call-sent, ha-call-rcv, ha-smp-conflict, ha-smp-in-del-q, smp-app-type-mismatch, quota-inc, quota-dec, quota-inc-not-found, quota-dec-not-found

lsn.alg.rtsp

Specification
Type object

rtsp-value

Description: ‘enable’: Enable RTSP ALG for LSN;

Type: string

Supported Values: enable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

lsn.alg.rtsp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘streams-created’: Streams Created; ‘streams-freed’: Streams Freed; ‘stream-creation-failure’: Stream Creation Failures; ‘ports-allocated’: Stream Client Ports Allocated; ‘ports-freed’: Stream Client Ports Freed; ‘port-allocation-failure’: Stream Client Port Allocation Failures; ‘unknown-client-port-from-server’: Server Replies With Unknown Client Ports; ‘data-session-created’: Data Session Created; ‘data-session-freed’: Data Session Freed; ‘no-session-mem’: Data Session Creation Failures; ‘ha-sent’: HA Sent; ‘ha-rcv’: HA RCV; ‘smp-inserted’: SMP Session Inserted; ‘smp-removed’: SMP Session Removed; ‘smp-reused’: SMP Session Reused; ‘nat-pool-standby’: New Session NAT Pool Standby; ‘smp-deleted’: New Session SMP Already Deleted; ‘control-closed’: New Session Closed; ‘data-session-exists’: New Session Already Exists; ‘data-session-creation-failure’: New Data Session Creation Failure; ‘rtp-reversed’: RTP Reverse Creation; ‘rtcp-reversed’: RTCP Reverse Creation; ‘cross-cpu-sent’: Cross CPU Sent; ‘cross-cpu-rcv’: Cross CPU Received; ‘cross-cpu-no-session’: Cross CPU No Session Found; ‘cross-cpu-created’: Cross CPU Creation; ‘cross-cpu-rcv-failure’: Cross CPU Receive Failure; ‘data-free-smp-retry-lookup’: Data Session Free SMP Retry Lookup; ‘data-free-smp-not-found’: Data Session Free SMP Not Found; ‘ha-streams-sent’: HA Streams Sent; ‘ha-streams-rcv’: HA Streams Received; ‘ha-stream-incompatible’: HA Incompatible Streams Received; ‘ha-stream-exists’: HA Stream Already Exists; ‘ha-port-allocation-failure’: HA Stream Port Allocation Failure; ‘ha-data-session-sent’: HA Data Session Sent; ‘ha-data-session-rcv’: HA Data Session Received; ‘ha-data-no-smp’: HA Data Session SMP Not Found; ‘ha-control-closed’: HA New Data Control Session Closed; ‘ha-data-exists’: HA New Data Session Already Exists; ‘ha-extension-failure’: HA Conn Extension Failure; ‘ha-stream-smp-reused’: HA SMP Session Reused; ‘ha-stream-smp-acquire-failure’: HA SMP Session Acquire Failure; ‘smp-app-type-mismatch’: SMP ALG App Type Mismatch;

Type: string

Supported Values: all, streams-created, streams-freed, stream-creation-failure, ports-allocated, ports-freed, port-allocation-failure, unknown-client-port-from-server, data-session-created, data-session-freed, no-session-mem, ha-sent, ha-rcv, smp-inserted, smp-removed, smp-reused, nat-pool-standby, smp-deleted, control-closed, data-session-exists, data-session-creation-failure, rtp-reversed, rtcp-reversed, cross-cpu-sent, cross-cpu-rcv, cross-cpu-no-session, cross-cpu-created, cross-cpu-rcv-failure, data-free-smp-retry-lookup, data-free-smp-not-found, ha-streams-sent, ha-streams-rcv, ha-stream-incompatible, ha-stream-exists, ha-port-allocation-failure, ha-data-session-sent, ha-data-session-rcv, ha-data-no-smp, ha-control-closed, ha-data-exists, ha-extension-failure, ha-stream-smp-reused, ha-stream-smp-acquire-failure, smp-app-type-mismatch

lsn.alg.tftp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

tftp-value

Description: ‘enable’: Enable TFTP ALG for LSN;

Type: string

Supported Values: enable

uuid

Description: uuid of the object

Type: string

lsn.alg.tftp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘session-created’: TFTP Client Sessions Created; ‘placeholder-debug’: Placeholder Debug;

Type: string

Supported Values: all, session-created, placeholder-debug

lsn.inside

Specification
Type object

source

Description: source is a JSON Block . Please see below for l844_source

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/inside/source

lsn.inside.source

Specification
Type object

class-list

Description: Class List (Class List Name)

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

lsn.global

Specification
Type object

attempt-port-preservation

Description: ‘disable’: Don’t attempt port preservation for NAT allocation;

Type: string

Supported Values: disable

hairpinning

Description: ‘filter-none’: Allow self-hairpinning (default). Warning: Only applies to UDP. TCP will use filter-self-ip-port; ‘filter-self-ip’: Block hairpinning to the user’s own IP; ‘filter-self-ip-port’: Block hairpinning to the user’s same IP and port combination;

Type: string

Supported Values: filter-none, filter-self-ip, filter-self-ip-port

Default: filter-none

half-close-timeout

Description: Set LSN Half close timeout (Half close timeout in seconds (default not set))

Type: number

Range: 2-3000

icmp

Description: icmp is a JSON Block . Please see below for icmp

Type: Object

inbound-refresh

Description: ‘disable’: Disable NAT Inbound Refresh Behavior;

Type: string

Supported Values: disable

ip-selection

Description: ‘random’: Random (long-run uniformly distributed) NAT IP selection (default); ‘round-robin’: Round-robin; ‘least-used-strict’: Fewest NAT ports used; ‘least-udp-used-strict’: Fewest UDP NAT ports used; ‘least-tcp-used-strict’: Fewest TCP NAT ports used; ‘least-reserved-strict’: Fewest NAT ports reserved; ‘least-udp-reserved-strict’: Fewest UDP NAT ports reserved; ‘least-tcp-reserved-strict’: Fewest TCP NAT ports reserved; ‘least-users-strict’: Fewest number of users;

Type: string

Supported Values: random, round-robin, least-used-strict, least-udp-used-strict, least-tcp-used-strict, least-reserved-strict, least-udp-reserved-strict, least-tcp-reserved-strict, least-users-strict

Default: random

logging

Description: logging is a JSON Block . Please see below for logging

Type: Object

port-batching

Description: port-batching is a JSON Block . Please see below for l844_port-batching

Type: Object

syn-timeout

Description: Set LSN SYN timeout (SYN idle-timeout in seconds (default: 4 seconds))

Type: number

Range: 2-30

Default: 4

uuid

Description: uuid of the object

Type: string

lsn.global.logging

Specification
Type object

default-template

Description: Bind the default NAT logging template for LSN (Bind a NAT logging template)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/cgnv6/template/logging

pool

Description: pool is a JSON List . Please see below for l844_pool

Type: List

lsn.global.logging.pool

Specification
Type list
Block object keys

pool-name

Description: NAT pool

Type: string

Format: string-rlx

template

Description: Bind a NAT logging template

Type: string

Format: string-rlx

Reference Object: /axapi/v3/cgnv6/template/logging

lsn.global.port-batching

Specification
Type object

size

Description: ‘1’: Allocate 1 port at a time (default); ‘8’: Allocate 8 ports at a time; ‘16’: Allocate 16 ports at a time; ‘32’: Allocate 32 ports at a time; ‘64’: Allocate 64 ports at a time; ‘128’: Allocate 128 ports at a time; ‘256’: Allocate 256 ports at a time; ‘512’: Allocate 512 ports at a time;

Type: string

Supported Values: 1, 8, 16, 32, 64, 128, 256, 512

Default: 1

tcp-time-wait-interval

Description: Minutes before TCP NAT ports can be reused (default: 2)

Type: number

Range: 0-10

Default: 2

lsn.global.icmp

Specification
Type object

send-on-port-unavailable

Description: ‘host-unreachable’: Send ICMP destination host unreachable; ‘admin-filtered’: Send ICMP admin filtered;

Type: string

Supported Values: host-unreachable, admin-filtered

send-on-user-quota-exceeded

Description: ‘host-unreachable’: Send ICMP destination host unreachable; ‘disable’: Disable ICMP quota exceeded message;

Type: string

Supported Values: host-unreachable, disable

lsn.tcp

Specification
Type object

mss-clamp

Description: mss-clamp is a JSON Block . Please see below for l844_mss-clamp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/tcp/mss-clamp

reset-on-error

Description: reset-on-error is a JSON Block . Please see below for l844_reset-on-error

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/tcp/reset-on-error

lsn.tcp.mss-clamp

Specification
Type object

min

Description: Specify the min value allowed for the TCP MSS (Specify the min value allowed for the TCP MSS (default: ((576 - 60 - 60))))

Type: number

Range: 0-1460

Default: 456

mss-clamp-type

Description: ‘fixed’: Specify a fixed max value for the TCP MSS; ‘subtract’: Specify the value to subtract from the TCP MSS; ‘none’: No TCP MSS clamping (default);

Type: string

Supported Values: fixed, subtract, none

Default: none

mss-subtract

Description: Specify the value to subtract from the TCP MSS (default: not configured)

Type: number

Range: 0-1460

mss-value

Description: The max value allowed for the TCP MSS (default: not configured)},

Type: number

Range: 0-1460

uuid

Description: uuid of the object

Type: string

lsn.tcp.reset-on-error

Specification
Type object

outbound

Description: ‘disable’: Disable send TCP reset on error;

Type: string

Supported Values: disable

uuid

Description: uuid of the object

Type: string

lsn.port-reservation-list

Specification
Type list
Block object keys

inside

Description: Inside User Address and Port Range (Inside User IP address)

Type: string

Format: ipv4-address

inside-port-end

Description: Inside End Port

Type: number

Range: 1-65535

inside-port-start

Description: Inside Start Port

Type: number

Range: 1-65535

nat

Description: NAT IP address

Type: string

Format: ipv4-address

nat-port-end

Description: NAT End Port

Type: number

Range: 1-65535

nat-port-start

Description: NAT Start Port

Type: number

Range: 1-65535

uuid

Description: uuid of the object

Type: string

lsn.stun-timeout

Specification
Type object

tcp-list

Description: tcp-list is a JSON List . Please see below for l844_tcp-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn/stun-timeout/tcp/{port-start}+{port-end}

udp-list

Description: udp-list is a JSON List . Please see below for l844_udp-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn/stun-timeout/udp/{port-start}+{port-end}

lsn.stun-timeout.udp-list

Specification
Type list
Block object keys

port-end

Description: Port Range (Port Range End)

Type: number

Range: 1-65535

port-start

Description: Port Range (Port Range Start)

Type: number

Range: 1-65535

timeout

Description: STUN timeout in minutes (default: 2 minutes)

Type: number

Range: 0-60

uuid

Description: uuid of the object

Type: string

lsn.stun-timeout.tcp-list

Specification
Type list
Block object keys

port-end

Description: Port Range (Port Range End)

Type: number

Range: 1-65535

port-start

Description: Port Range (Port Range Start)

Type: number

Range: 1-65535

timeout

Description: STUN timeout in minutes (default: 2 minutes)

Type: number

Range: 0-60

uuid

Description: uuid of the object

Type: string

lsn.performance

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

lsn.performance.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘data-sessions-current-epoch’: data-sessions-current-epoch; ‘fullcone-created-current-epoch’: fullcone-created-current-epoch; ‘user-quote-created-current-epoch’: user-quote-created-current-epoch; ‘data-sessions-previous-epoch-first’: data-sessions-previous-epoch-first; ‘fullcone-created-previous-epoch-first’: fullcone-created-previous-epoch-first; ‘user-quote-created-previous-epoch-first’: user-quote-created-previous-epoch-first; ‘data-sessions-previous-epoch-last’: data-sessions-previous-epoch-last; ‘fullcone-created-previous-epoch-last’: fullcone-created-previous-epoch-last; ‘user-quote-created-previous-epoch-last’: user-quote-created-previous-epoch-last;

Type: string

Supported Values: all, data-sessions-current-epoch, fullcone-created-current-epoch, user-quote-created-current-epoch, data-sessions-previous-epoch-first, fullcone-created-previous-epoch-first, user-quote-created-previous-epoch-first, data-sessions-previous-epoch-last, fullcone-created-previous-epoch-last, user-quote-created-previous-epoch-last

lsn.endpoint-independent-filtering

Specification
Type object

tcp

Description: tcp is a JSON Block . Please see below for l844_tcp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/endpoint-independent-filtering/tcp

udp

Description: udp is a JSON Block . Please see below for l844_udp

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn/endpoint-independent-filtering/udp

lsn.endpoint-independent-filtering.udp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

session-limit

Description: Limit number of EIF sessions that can be created per port

Type: number

Range: 1-65535

Default: 65535

uuid

Description: uuid of the object

Type: string

lsn.endpoint-independent-filtering.udp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

lsn.endpoint-independent-filtering.tcp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

session-limit

Description: Limit number of EIF sessions that can be created per port

Type: number

Range: 1-65535

Default: 65535

uuid

Description: uuid of the object

Type: string

lsn.endpoint-independent-filtering.tcp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

global

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

global.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘tcp-total-ports-allocated’: Total TCP ports allocated; ‘udp-total-ports-allocated’: Total UDP ports allocated; ‘icmp-total-ports-allocated’: Total ICMP ports allocated;

Type: string

Supported Values: all, tcp-total-ports-allocated, udp-total-ports-allocated, icmp-total-ports-allocated

fixed-nat

Specification
Type object

alg

Description: alg is a JSON Block . Please see below for l844_alg

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/global

inside

Description: inside is a JSON Block . Please see below for l844_inside

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/inside

fixed-nat.alg

Specification
Type object

esp

Description: esp is a JSON Block . Please see below for l844_esp

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg/esp

ftp

Description: ftp is a JSON Block . Please see below for l844_ftp

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg/ftp

pptp

Description: pptp is a JSON Block . Please see below for l844_pptp

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg/pptp

rtsp

Description: rtsp is a JSON Block . Please see below for l844_rtsp

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg/rtsp

sip

Description: sip is a JSON Block . Please see below for l844_sip

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg/sip

tftp

Description: tftp is a JSON Block . Please see below for l844_tftp

Type: Object

Reference Object: /axapi/v3/cgnv6/fixed-nat/alg/tftp

fixed-nat.alg.ftp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.alg.ftp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘port-requests’: PORT Requests From Client; ‘eprt-requests’: EPRT Requests From Client; ‘lprt-requests’: LPRT Requests From Client; ‘pasv-replies’: PASV Replies From Server; ‘epsv-replies’: EPSV Replies From Server; ‘lpsv-replies’: LPSV Replies From Server; ‘port-retransmits’: Port Mode Request Retransmits; ‘pasv-retransmits’: Passive Mode Reply Retransmits; ‘port-helper-created’: Port Mode Helper Created; ‘pasv-helper-created’: Passive Mode Helper Created; ‘port-helper-freed’: Port Mode Helper Freed; ‘pasv-helper-freed’: Passive Mode Helper Freed; ‘port-helper-unused’: Port Mode Helper Unused; ‘pasv-helper-unused’: Passive Mode Helper Unused; ‘port-helper-creation-failure’: Port Helper Creation Failure; ‘pasv-helper-creation-failure’: Passive Helper Creation Failure; ‘get-conn-ext-failure’: Get Conn Extension Failure; ‘smp-app-type-mismatch’: SMP ALG App Type Mismatch;

Type: string

Supported Values: all, port-requests, eprt-requests, lprt-requests, pasv-replies, epsv-replies, lpsv-replies, port-retransmits, pasv-retransmits, port-helper-created, pasv-helper-created, port-helper-freed, pasv-helper-freed, port-helper-unused, pasv-helper-unused, port-helper-creation-failure, pasv-helper-creation-failure, get-conn-ext-failure, smp-app-type-mismatch

fixed-nat.alg.sip

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.alg.sip.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘method-register’: SIP Method REGISTER; ‘method-invite’: SIP Method INVITE; ‘method-ack’: SIP Method ACK; ‘method-cancel’: SIP Method CANCEL; ‘method-bye’: SIP Method BYE; ‘method-options’: SIP Method OPTIONS; ‘method-prack’: SIP Method PRACK; ‘method-subscribe’: SIP Method SUBSCRIBE; ‘method-notify’: SIP Method NOTIFY; ‘method-publish’: SIP Method PUBLISH; ‘method-info’: SIP Method INFO; ‘method-refer’: SIP Method REFER; ‘method-message’: SIP Method MESSAGE; ‘method-update’: SIP Method UPDATE; ‘method-unknown’: SIP Method UNKNOWN; ‘parse-error’: SIP Message Parse Error; ‘req-uri-op-failrue’: SIP Operate Request Uri Failure; ‘via-hdr-op-failrue’: SIP Operate Via Header Failure; ‘contact-hdr-op-failrue’: SIP Operate Contact Header Failure; ‘from-hdr-op-failrue’: SIP Operate From Header Failure; ‘to-hdr-op-failrue’: SIP Operate To Header Failure; ‘route-hdr-op-failrue’: SIP Operate Route Header Failure; ‘record-route-hdr-op-failrue’: SIP Operate Record-Route Header Failure; ‘content-length-hdr-op-failrue’: SIP Operate Content-Length Failure; ‘third-party-registration’: SIP Third-Party Registration; ‘conn-ext-creation-failure’: SIP Create Connection Extension Failure; ‘alloc-contact-port-failure’: SIP Alloc Contact Port Failure; ‘outside-contact-port-mismatch’: SIP Outside Contact Port Mismatch NAT Port; ‘inside-contact-port-mismatch’: SIP Inside Contact Port Mismatch; ‘third-party-sdp’: SIP Third-Party SDP; ‘sdp-process-candidate-failure’: SIP Operate SDP Media Candidate Attribute Failure; ‘sdp-op-failure’: SIP Operate SDP Failure; ‘sdp-alloc-port-map-success’: SIP Alloc SDP Port Map Success; ‘sdp-alloc-port-map-failure’: SIP Alloc SDP Port Map Failure; ‘modify-failure’: SIP Message Modify Failure; ‘rewrite-failure’: SIP Message Rewrite Failure; ‘tcp-out-of-order-drop’: TCP Out-of-Order Drop;

Type: string

Supported Values: all, method-register, method-invite, method-ack, method-cancel, method-bye, method-options, method-prack, method-subscribe, method-notify, method-publish, method-info, method-refer, method-message, method-update, method-unknown, parse-error, req-uri-op-failrue, via-hdr-op-failrue, contact-hdr-op-failrue, from-hdr-op-failrue, to-hdr-op-failrue, route-hdr-op-failrue, record-route-hdr-op-failrue, content-length-hdr-op-failrue, third-party-registration, conn-ext-creation-failure, alloc-contact-port-failure, outside-contact-port-mismatch, inside-contact-port-mismatch, third-party-sdp, sdp-process-candidate-failure, sdp-op-failure, sdp-alloc-port-map-success, sdp-alloc-port-map-failure, modify-failure, rewrite-failure, tcp-out-of-order-drop

fixed-nat.alg.esp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.alg.esp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘session-created’: ESP Sessions Created; ‘placeholder-debug’: Placeholder Debug;

Type: string

Supported Values: all, session-created, placeholder-debug

fixed-nat.alg.pptp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.alg.pptp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘calls-established’: Calls Established; ‘mismatched-pns-call-id’: Mismatched PNS Call ID; ‘gre-sessions-created’: GRE Sessions Created; ‘gre-sessions-freed’: GRE Sessions Freed; ‘no-gre-session-match’: No Matching GRE Session; ‘smp-sessions-created’: SMP Sessions Created; ‘smp-sessions-freed’: SMP Sessions Freed; ‘smp-session-creation-failure’: SMP Session Creation Failures; ‘extension-creation-failure’: Extension Creation Failures; ‘ha-sent’: HA Info Sent; ‘ha-rcv’: HA Info Received; ‘ha-no-mem’: HA Memory Allocation Failure; ‘ha-conflict’: HA Call ID Conflicts; ‘ha-overwrite’: HA Call ID Overwrites; ‘ha-call-sent’: HA Call Sent; ‘ha-call-rcv’: HA Call Received; ‘ha-smp-conflict’: HA SMP Conflicts; ‘ha-smp-in-del-q’: HA SMP Deleted; ‘smp-app-type-mismatch’: SMP ALG App Type Mismatch;

Type: string

Supported Values: all, calls-established, mismatched-pns-call-id, gre-sessions-created, gre-sessions-freed, no-gre-session-match, smp-sessions-created, smp-sessions-freed, smp-session-creation-failure, extension-creation-failure, ha-sent, ha-rcv, ha-no-mem, ha-conflict, ha-overwrite, ha-call-sent, ha-call-rcv, ha-smp-conflict, ha-smp-in-del-q, smp-app-type-mismatch

fixed-nat.alg.rtsp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.alg.rtsp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘streams-created’: Streams Created; ‘streams-freed’: Streams Freed; ‘stream-creation-failure’: Stream Creation Failures; ‘ports-allocated’: Stream Client Ports Allocated; ‘ports-freed’: Stream Client Ports Freed; ‘port-allocation-failure’: Stream Client Port Allocation Failures; ‘unknown-client-port-from-server’: Server Replies With Unknown Client Ports; ‘data-session-created’: Data Session Created; ‘data-session-freed’: Data Session Freed; ‘no-session-mem’: Data Session Creation Failures; ‘smp-inserted’: SMP Session Inserted; ‘smp-removed’: SMP Session Removed; ‘smp-reused’: SMP Session Reused; ‘fixed-nat-lid-standby’: New Session Fixed NAT LID Standby; ‘smp-deleted’: New Session SMP Already Deleted; ‘control-closed’: New Session Closed; ‘data-session-exists’: New Session Already Exists; ‘data-session-creation-failure’: New Data Session Creation Failure; ‘rtp-reversed’: RTP Reverse Creation; ‘rtcp-reversed’: RTCP Reverse Creation; ‘cross-cpu-sent’: Cross CPU Sent; ‘cross-cpu-rcv’: Cross CPU Received; ‘cross-cpu-no-session’: Cross CPU No Session Found; ‘cross-cpu-created’: Cross CPU Creation; ‘cross-cpu-rcv-failure’: Cross CPU Receive Failure; ‘data-free-smp-retry-lookup’: Data Session Free SMP Retry Lookup; ‘data-free-smp-not-found’: Data Session Free SMP Not Found; ‘ha-streams-sent’: HA Streams Sent; ‘ha-streams-rcv’: HA Streams Received; ‘ha-stream-incompatible’: HA Incompatible Streams Received; ‘ha-stream-exists’: HA Stream Already Exists; ‘ha-port-allocation-failure’: HA Stream Port Allocation Failure; ‘ha-data-session-sent’: HA Data Session Sent; ‘ha-data-session-rcv’: HA Data Session Received; ‘ha-data-no-smp’: HA Data Session SMP Not Found; ‘ha-control-closed’: HA New Data Control Session Closed; ‘ha-data-exists’: HA New Data Session Already Exists; ‘ha-extension-failure’: HA Conn Extension Failure; ‘ha-stream-smp-reused’: HA SMP Session Reused; ‘ha-stream-smp-acquire-failure’: HA SMP Session Acquire Failure; ‘smp-app-type-mismatch’: SMP ALG App Type Mismatch;

Type: string

Supported Values: all, streams-created, streams-freed, stream-creation-failure, ports-allocated, ports-freed, port-allocation-failure, unknown-client-port-from-server, data-session-created, data-session-freed, no-session-mem, smp-inserted, smp-removed, smp-reused, fixed-nat-lid-standby, smp-deleted, control-closed, data-session-exists, data-session-creation-failure, rtp-reversed, rtcp-reversed, cross-cpu-sent, cross-cpu-rcv, cross-cpu-no-session, cross-cpu-created, cross-cpu-rcv-failure, data-free-smp-retry-lookup, data-free-smp-not-found, ha-streams-sent, ha-streams-rcv, ha-stream-incompatible, ha-stream-exists, ha-port-allocation-failure, ha-data-session-sent, ha-data-session-rcv, ha-data-no-smp, ha-control-closed, ha-data-exists, ha-extension-failure, ha-stream-smp-reused, ha-stream-smp-acquire-failure, smp-app-type-mismatch

fixed-nat.alg.tftp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.alg.tftp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘session-created’: TFTP Client Sessions Created; ‘placeholder-debug’: Placeholder Debug;

Type: string

Supported Values: all, session-created, placeholder-debug

fixed-nat.inside

Specification
Type object

iplist-list

Description: iplist-list is a JSON List . Please see below for l844_iplist-list

Type: List

Reference Object: /axapi/v3/cgnv6/fixed-nat/inside/iplist/{inside-ip-list}+{partition}

ipv4address-list

Description: ipv4address-list is a JSON List . Please see below for l844_ipv4address-list

Type: List

Reference Object: /axapi/v3/cgnv6/fixed-nat/inside/ipv4address/{inside-start-address}+{inside-end-address}+{inside-netmask}+{partition}

ipv6address-list

Description: ipv6address-list is a JSON List . Please see below for l844_ipv6address-list

Type: List

Reference Object: /axapi/v3/cgnv6/fixed-nat/inside/ipv6address/{inside-start-address}+{inside-end-address}+{inside-netmask}+{partition}

fixed-nat.inside.iplist-list

Specification
Type list
Block object keys

dest-rule-list

Description: Bind destination based Rule-List (Fixed NAT Rule-List Name)

Type: string

dynamic-pool-size

Description: Configure size of Dynamic pool (Default: 0)

Type: number

Range: 0-64511

Default: 0

inside-ip-list

Description: Name of IP List used to specify Inside Users

Type: string

Format: string-rlx

method

Description: ‘use-all-nat-ips’: Use all the NAT IP addresses configured; ‘use-least-nat-ips’: Use the least number of NAT IP addresses required (default);

Type: string

Supported Values: use-all-nat-ips, use-least-nat-ips

Default: use-least-nat-ips

nat-end-address

Description: IPv4 End NAT Address

Type: string

Format: ipv4-address

nat-ip-list

Description: Name of IP List used to specify NAT addresses

Type: string

Format: string-rlx

nat-netmask

Description: NAT Addresses IP Netmask

Type: string

Format: ipv4-netmask-brief

nat-start-address

Description: Start NAT Address

Type: string

Format: ipv4-address

offset

Description: offset is a JSON Block . Please see below for l844_offset

Type: Object

partition

Description: Inside User Partition (Partition Name)

Type: string

ports-per-user

Description: Configure Ports per Inside User (ports-per-user)

Type: number

Range: 1-64512

respond-to-user-mac

Description: Use the user’s source MAC for the next hop rather than the routing table (Default: off)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

session-quota

Description: Configure per user quota on sessions

Type: number

Range: 1-2147483647

usable-nat-ports

Description: usable-nat-ports is a JSON Block . Please see below for l844_usable-nat-ports

Type: Object

uuid

Description: uuid of the object

Type: string

vrid

Description: VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

fixed-nat.inside.iplist-list.usable-nat-ports

Specification
Type object

usable-end-port

Description: End Port of Usable NAT Ports

Type: number

Range: 1024-65535

usable-start-port

Description: Start Port of Usable NAT Ports

Type: number

Range: 1024-65535

fixed-nat.inside.iplist-list.offset

Specification
Type object

numeric-offset

Description: Configure a numeric offset to the first NAT IP address

Type: number

Range: 0-1024000

Default: 0

Mutual Exclusion: numeric-offset and random are mutually exclusive

random

Description: Randomly choose the first NAT IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: random and numeric-offset are mutually exclusive

fixed-nat.inside.ipv4address-list

Specification
Type list
Block object keys

dest-rule-list

Description: Bind destination based Rule-List (Fixed NAT Rule-List Name)

Type: string

dynamic-pool-size

Description: Configure size of Dynamic pool (Default: 0)

Type: number

Range: 0-64511

Default: 0

inside-end-address

Description: IPv4 Inside User End Address

Type: string

Format: ipv4-address

inside-netmask

Description: IPv4 Netmask

Type: string

Format: ipv4-netmask-brief

inside-start-address

Description: IPv4 Inside User Start Address

Type: string

Format: ipv4-address

method

Description: ‘use-all-nat-ips’: Use all the NAT IP addresses configured; ‘use-least-nat-ips’: Use the least number of NAT IP addresses required (default);

Type: string

Supported Values: use-all-nat-ips, use-least-nat-ips

Default: use-least-nat-ips

nat-end-address

Description: IPv4 End NAT Address

Type: string

Format: ipv4-address

nat-ip-list

Description: Name of IP List used to specify NAT addresses

Type: string

Format: string-rlx

nat-netmask

Description: NAT Addresses IP Netmask

Type: string

Format: ipv4-netmask-brief

nat-start-address

Description: Start NAT Address

Type: string

Format: ipv4-address

offset

Description: offset is a JSON Block . Please see below for l844_offset

Type: Object

partition

Description: Inside User Partition (Partition Name)

Type: string

ports-per-user

Description: Configure Ports per Inside User (ports-per-user)

Type: number

Range: 1-64512

respond-to-user-mac

Description: Use the user’s source MAC for the next hop rather than the routing table (Default: off)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

session-quota

Description: Configure per user quota on sessions

Type: number

Range: 1-2147483647

usable-nat-ports

Description: usable-nat-ports is a JSON Block . Please see below for l844_usable-nat-ports

Type: Object

uuid

Description: uuid of the object

Type: string

vrid

Description: VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

fixed-nat.inside.ipv4address-list.usable-nat-ports

Specification
Type object

usable-end-port

Description: End Port of Usable NAT Ports

Type: number

Range: 1024-65535

usable-start-port

Description: Start Port of Usable NAT Ports

Type: number

Range: 1024-65535

fixed-nat.inside.ipv4address-list.offset

Specification
Type object

numeric-offset

Description: Configure a numeric offset to the first NAT IP address

Type: number

Range: 0-1024000

Default: 0

Mutual Exclusion: numeric-offset and random are mutually exclusive

random

Description: Randomly choose the first NAT IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: random and numeric-offset are mutually exclusive

fixed-nat.inside.ipv6address-list

Specification
Type list
Block object keys

dest-rule-list

Description: Bind destination based Rule-List (Fixed NAT Rule-List Name)

Type: string

dynamic-pool-size

Description: Configure size of Dynamic pool (Default: 0)

Type: number

Range: 0-64511

Default: 0

inside-end-address

Description: IPv6 Inside User End Address

Type: string

Format: ipv6-address

inside-netmask

Description: Inside User IPv6 Netmask

Type: number

Range: 64-128

inside-start-address

Description: IPv6 Inside User Start Address

Type: string

Format: ipv6-address

method

Description: ‘use-all-nat-ips’: Use all the NAT IP addresses configured; ‘use-least-nat-ips’: Use the least number of NAT IP addresses required (default);

Type: string

Supported Values: use-all-nat-ips, use-least-nat-ips

Default: use-least-nat-ips

nat-end-address

Description: IPv6 End NAT Address

Type: string

Format: ipv4-address

nat-ip-list

Description: Name of IP List used to specify NAT addresses

Type: string

Format: string-rlx

nat-netmask

Description: NAT Addresses IP Netmask

Type: string

Format: ipv4-netmask-brief

nat-start-address

Description: Start NAT Address

Type: string

Format: ipv4-address

offset

Description: offset is a JSON Block . Please see below for l844_offset

Type: Object

partition

Description: Inside User Partition (Partition Name)

Type: string

ports-per-user

Description: Configure Ports per Inside User (ports-per-user)

Type: number

Range: 1-64512

respond-to-user-mac

Description: Use the user’s source MAC for the next hop rather than the routing table (Default: off)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

session-quota

Description: Configure per user quota on sessions

Type: number

Range: 1-2147483647

usable-nat-ports

Description: usable-nat-ports is a JSON Block . Please see below for l844_usable-nat-ports

Type: Object

uuid

Description: uuid of the object

Type: string

vrid

Description: VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

fixed-nat.inside.ipv6address-list.usable-nat-ports

Specification
Type object

usable-end-port

Description: End Port of Usable NAT Ports

Type: number

Range: 1024-65535

usable-start-port

Description: Start Port of Usable NAT Ports

Type: number

Range: 1024-65535

fixed-nat.inside.ipv6address-list.offset

Specification
Type object

numeric-offset

Description: Configure a numeric offset to the first NAT IP address

Type: number

Range: 0-1024000

Default: 0

Mutual Exclusion: numeric-offset and random are mutually exclusive

random

Description: Randomly choose the first NAT IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: random and numeric-offset are mutually exclusive

fixed-nat.global

Specification
Type object

create-port-mapping-file

Description: Create Port Mapping File

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fixed-nat.global.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘total-nat-in-use’: Total NAT Addresses in-use; ‘total-tcp-allocated’: Total TCP Ports Allocated; ‘total-tcp-freed’: Total TCP Ports Freed; ‘total-udp-allocated’: Total UDP Ports Allocated; ‘total-udp-freed’: Total UDP Ports Freed; ‘total-icmp-allocated’: Total ICMP Ports Allocated; ‘total-icmp-freed’: Total ICMP Ports Freed; ‘nat44-data-session-created’: NAT44 Data Sessions Created; ‘nat44-data-session-freed’: NAT44 Data Sessions Freed; ‘nat64-data-session-created’: NAT64 Data Sessions Created; ‘nat64-data-session-freed’: NAT64 Data Sessions Freed; ‘dslite-data-session-created’: DS-Lite Data Sessions Created; ‘dslite-data-session-freed’: DS-Lite Data Sessions Freed; ‘nat-port-unavailable-tcp’: TCP NAT Port Unavailable; ‘nat-port-unavailable-udp’: UDP NAT Port Unavailable; ‘nat-port-unavailable-icmp’: ICMP NAT Port Unavailable; ‘session-user-quota-exceeded’: Sessions User Quota Exceeded; ‘nat44-tcp-fullcone-created’: NAT44 TCP Full-Cone Created; ‘nat44-tcp-fullcone-freed’: NAT44 TCP Full-Cone Freed; ‘nat44-udp-fullcone-created’: NAT44 UDP Full-Cone Created; ‘nat44-udp-fullcone-freed’: NAT44 UDP Full-Cone Freed; ‘nat44-udp-alg-fullcone-created’: NAT44 UDP ALG Full-Cone Created; ‘nat44-udp-alg-fullcone-freed’: NAT44 UDP ALG Full-Cone Freed; ‘nat64-tcp-fullcone-created’: NAT64 TCP Full-Cone Created; ‘nat64-tcp-fullcone-freed’: NAT64 TCP Full-Cone Freed; ‘nat64-udp-fullcone-created’: NAT64 UDP Full-Cone Created; ‘nat64-udp-fullcone-freed’: NAT64 UDP Full-Cone Freed; ‘nat64-udp-alg-fullcone-created’: NAT64 UDP ALG Full-Cone Created; ‘nat64-udp-alg-fullcone-freed’: NAT64 UDP ALG Full-Cone Freed; ‘dslite-tcp-fullcone-created’: DS-Lite TCP Full-Cone Created; ‘dslite-tcp-fullcone-freed’: DS-Lite TCP Full-Cone Freed; ‘dslite-udp-fullcone-created’: DS-Lite UDP Full-Cone Created; ‘dslite-udp-fullcone-freed’: DS-Lite UDP Full-Cone Freed; ‘dslite-udp-alg-fullcone-created’: DS-Lite UDP ALG Full-Cone Created; ‘dslite-udp-alg-fullcone-freed’: DS-Lite UDP ALG Full-Cone Freed; ‘fullcone-failure’: Full-Cone Session Creation Failed; ‘nat44-eim-match’: NAT44 Endpoint-Independent-Mapping Matched; ‘nat64-eim-match’: NAT64 Endpoint-Independent-Mapping Matched; ‘dslite-eim-match’: DS-Lite Endpoint-Independent-Mapping Matched; ‘nat44-eif-match’: NAT44 Endpoint-Independent-Filtering Matched; ‘nat64-eif-match’: NAT64 Endpoint-Independent-Filtering Matched; ‘dslite-eif-match’: DS-Lite Endpoint-Independent-Filtering Matched; ‘nat44-inbound-filtered’: NAT44 Endpoint-Dependent Filtering Drop; ‘nat64-inbound-filtered’: NAT64 Endpoint-Dependent Filtering Drop; ‘dslite-inbound-filtered’: DS-Lite Endpoint-Dependent Filtering Drop; ‘nat44-eif-limit-exceeded’: NAT44 Endpoint-Independent-Filtering Limit Exceeded; ‘nat64-eif-limit-exceeded’: NAT64 Endpoint-Independent-Filtering Limit Exceeded; ‘dslite-eif-limit-exceeded’: DS-Lite Endpoint-Independent-Filtering Limit Exceeded; ‘nat44-hairpin’: NAT44 Hairpin Session Created; ‘nat64-hairpin’: NAT64 Hairpin Session Created; ‘dslite-hairpin’: DS-Lite Hairpin Session Created; ‘standby-drop’: Fixed NAT LID Standby Drop; ‘fixed-nat-fullcone-self-hairpinning-drop’: Self-Hairpinning Drop; ‘6rd-drop’: Fixed NAT IPv6 in IPv4 Packet Drop; ‘dest-rlist-drop’: Fixed NAT Dest Rule List Drop; ‘dest-rlist-pass-through’: Fixed NAT Dest Rule List Pass-Through; ‘dest-rlist-snat-drop’: Fixed NAT Dest Rules List Source NAT Drop; ‘cross-cpu-helper-created’: Cross CPU Helper Session Created; ‘cross-cpu-helper-free-retry-lookup’: Cross CPU Helper Session Free Retry Lookup; ‘cross-cpu-helper-free-not-found’: Cross CPU Helper Session Free not Found; ‘cross-cpu-helper-free’: Cross CPU Helper Session Freed; ‘cross-cpu-rcv’: Cross CPU Helper Packets Received; ‘cross-cpu-bad-l3’: Cross CPU Unsupported L3; ‘cross-cpu-bad-l4’: Cross CPU Unsupported L4; ‘cross-cpu-no-session’: Cross CPU no Session Found; ‘cross-cpu-helper-deleted’: Cross CPU Helper Session Deleted; ‘cross-cpu-helper-fixed-nat-lid-standby’: Cross CPU Helper Fixed NAT LID Standby; ‘cross-cpu-helper-cpu-mismatch’: Cross CPU Helper CPU Mismatch; ‘cross-cpu-sent’: Cross CPU Helper Packets Sent; ‘lid-not-enabled’: Fixed NAT LID not Enabled; ‘fullcone-in-del-q’: Full-Cone Session in Delete Queue; ‘fullcone-overflow’: Fell-Cone Session Conn-Count Overflow; ‘fullcone-inbound-idx-mismatch’: Full-Cone Session Fixed NAT LID mismatch; ‘fullcone-retry-lookup’: Full-cone session retry look-up; ‘fullcone-not-found’: Full-cone session not found; ‘fullcone-overflow-eim’: Full-cone EIM Overflow; ‘fullcone-overflow-eif’: Full-cone EIF Overflow; ‘ha-config-mismatch’: HA Fixed NAT Config Mismatch; ‘ha-user-quota-exceeded’: HA User Quota Exceeded; ‘ha-fullcone-mismatch’: HA Full-Cone Mismatch; ‘ha-dnat-mismatch’: HA Destination NAT Config Mismatch; ‘ha-nat-port-unavailable’: HA NAT Port Unavailable; ‘ha-fullcone-failure’: HA Full-Cone Failure; ‘ha-endpoint-indep-map-match’: HA Endpoint-Independent-Mapping Match; ‘udp-alg-eim-mismatch’: UDP ALG Endpoint-Independent Mapping Mismatch; ‘udp-alg-no-nat-ip’: UDP ALG User-Quota Unknown NAT IP; ‘udp-alg-alloc-failure’: UDP ALG Port Allocation Failure; ‘mtu-exceeded’: Packet Exceeded MTU; ‘frag’: Fragmented Packets; ‘frag-icmp’: ICMP Packet Too Big Sent; ‘periodic-log-msg-alloc’: Fixed NAT Periodic Log Msg Allocated; ‘periodic-log-msg-free’: Fixed NAT Periodic Log Msg Freed; ‘disable-log-msg-alloc’: Fixed NAT Disable Log Msg Allocated; ‘disable-log-msg-free’: Fixed NAT Disable Log Msg Freed; ‘sip-alg-reuse-contact-fullcone’: SIP ALG Reuse Contact Full-cone Session; ‘sip-alg-contact-fullcone-mismatch’: SIP ALG Contact Full-cone Session Mismatch; ‘sip-alg-create-contact-fullcone-failure’: SIP ALG Create Contact Full-cone Session Failure; ‘sip-alg-single-rtp-fullcone’: SIP ALG Single RTP Full-cone Found; ‘sip-alg-rtcp-fullcone-mismatch’: SIP ALG RTCP Full-cone NAT Port Mismatch; ‘sip-alg-reuse-rtp-rtcp-fullcone’: SIP ALG Reuse RTP/RTCP Full-cone Session; ‘sip-alg-single-rtcp-fullcone’: SIP ALG Single RTCP Full-cone Found; ‘sip-alg-create-rtp-fullcone-failure’: SIP ALG Create RTP Full-cone Session Failure; ‘sip-alg-create-rtcp-fullcone-failure’: SIP ALG Create RTCP Full-cone Session Failure; ‘icmp-out-of-state-uqe-admin-filtered-sent’: Total User Quota Exceeded ICMP admin filtered sent; ‘icmp-out-of-state-uqe-host-unreachable-sent’: Total User Quota Exceeded ICMP host unreachable sent; ‘icmp-out-of-state-uqe-dropped’: Total User Queue Exceeded ICMP notification dropped; ‘nat-esp-ip-conflicts’: Fixed NAT ESP IP Conflicts; ‘total-tcp-allocated-shadow’: Total TCP Ports Allocated; ‘total-tcp-freed-shadow’: Total TCP Ports Freed; ‘total-udp-allocated-shadow’: Total UDP Ports Allocated; ‘total-udp-freed-shadow’: Total UDP Ports Freed; ‘total-icmp-allocated-shadow’: Total ICMP Ports Allocated; ‘total-icmp-freed-shadow’: Total ICMP Ports Freed; ‘nat44-data-session-created-shadow’: NAT44 Data Sessions Created; ‘nat44-data-session-freed-shadow’: NAT44 Data Sessions Freed; ‘nat64-data-session-created-shadow’: NAT64 Data Sessions Created; ‘nat64-data-session-freed-shadow’: NAT64 Data Sessions Freed; ‘dslite-data-session-created-shadow’: DS-Lite Data Sessions Created; ‘dslite-data-session-freed-shadow’: DS-Lite Data Sessions Freed; ‘nat44-tcp-fullcone-created-shadow’: NAT44 TCP Full-Cone Created; ‘nat44-tcp-fullcone-freed-shadow’: NAT44 TCP Full-Cone Freed; ‘nat44-udp-fullcone-created-shadow’: NAT44 UDP Full-Cone Created; ‘nat44-udp-fullcone-freed-shadow’: NAT44 UDP Full-Cone Freed; ‘nat44-udp-alg-fullcone-created-shadow’: NAT44 UDP ALG Full-Cone Created;

Type: string

Supported Values: all, total-nat-in-use, total-tcp-allocated, total-tcp-freed, total-udp-allocated, total-udp-freed, total-icmp-allocated, total-icmp-freed, nat44-data-session-created, nat44-data-session-freed, nat64-data-session-created, nat64-data-session-freed, dslite-data-session-created, dslite-data-session-freed, nat-port-unavailable-tcp, nat-port-unavailable-udp, nat-port-unavailable-icmp, session-user-quota-exceeded, nat44-tcp-fullcone-created, nat44-tcp-fullcone-freed, nat44-udp-fullcone-created, nat44-udp-fullcone-freed, nat44-udp-alg-fullcone-created, nat44-udp-alg-fullcone-freed, nat64-tcp-fullcone-created, nat64-tcp-fullcone-freed, nat64-udp-fullcone-created, nat64-udp-fullcone-freed, nat64-udp-alg-fullcone-created, nat64-udp-alg-fullcone-freed, dslite-tcp-fullcone-created, dslite-tcp-fullcone-freed, dslite-udp-fullcone-created, dslite-udp-fullcone-freed, dslite-udp-alg-fullcone-created, dslite-udp-alg-fullcone-freed, fullcone-failure, nat44-eim-match, nat64-eim-match, dslite-eim-match, nat44-eif-match, nat64-eif-match, dslite-eif-match, nat44-inbound-filtered, nat64-inbound-filtered, dslite-inbound-filtered, nat44-eif-limit-exceeded, nat64-eif-limit-exceeded, dslite-eif-limit-exceeded, nat44-hairpin, nat64-hairpin, dslite-hairpin, standby-drop, fixed-nat-fullcone-self-hairpinning-drop, 6rd-drop, dest-rlist-drop, dest-rlist-pass-through, dest-rlist-snat-drop, cross-cpu-helper-created, cross-cpu-helper-free-retry-lookup, cross-cpu-helper-free-not-found, cross-cpu-helper-free, cross-cpu-rcv, cross-cpu-bad-l3, cross-cpu-bad-l4, cross-cpu-no-session, cross-cpu-helper-deleted, cross-cpu-helper-fixed-nat-lid-standby, cross-cpu-helper-cpu-mismatch, cross-cpu-sent, lid-not-enabled, fullcone-in-del-q, fullcone-overflow, fullcone-inbound-idx-mismatch, fullcone-retry-lookup, fullcone-not-found, fullcone-overflow-eim, fullcone-overflow-eif, ha-config-mismatch, ha-user-quota-exceeded, ha-fullcone-mismatch, ha-dnat-mismatch, ha-nat-port-unavailable, ha-fullcone-failure, ha-endpoint-indep-map-match, udp-alg-eim-mismatch, udp-alg-no-nat-ip, udp-alg-alloc-failure, mtu-exceeded, frag, frag-icmp, periodic-log-msg-alloc, periodic-log-msg-free, disable-log-msg-alloc, disable-log-msg-free, sip-alg-reuse-contact-fullcone, sip-alg-contact-fullcone-mismatch, sip-alg-create-contact-fullcone-failure, sip-alg-single-rtp-fullcone, sip-alg-rtcp-fullcone-mismatch, sip-alg-reuse-rtp-rtcp-fullcone, sip-alg-single-rtcp-fullcone, sip-alg-create-rtp-fullcone-failure, sip-alg-create-rtcp-fullcone-failure, icmp-out-of-state-uqe-admin-filtered-sent, icmp-out-of-state-uqe-host-unreachable-sent, icmp-out-of-state-uqe-dropped, nat-esp-ip-conflicts, total-tcp-allocated-shadow, total-tcp-freed-shadow, total-udp-allocated-shadow, total-udp-freed-shadow, total-icmp-allocated-shadow, total-icmp-freed-shadow, nat44-data-session-created-shadow, nat44-data-session-freed-shadow, nat64-data-session-created-shadow, nat64-data-session-freed-shadow, dslite-data-session-created-shadow, dslite-data-session-freed-shadow, nat44-tcp-fullcone-created-shadow, nat44-tcp-fullcone-freed-shadow, nat44-udp-fullcone-created-shadow, nat44-udp-fullcone-freed-shadow, nat44-udp-alg-fullcone-created-shadow

counters2

Description: ‘nat44-udp-alg-fullcone-freed-shadow’: NAT44 UDP ALG Full-Cone Freed; ‘nat64-tcp-fullcone-created-shadow’: NAT64 TCP Full-Cone Created; ‘nat64-tcp-fullcone-freed-shadow’: NAT64 TCP Full-Cone Freed; ‘nat64-udp-fullcone-created-shadow’: NAT64 UDP Full-Cone Created; ‘nat64-udp-fullcone-freed-shadow’: NAT64 UDP Full-Cone Freed; ‘nat64-udp-alg-fullcone-created-shadow’: NAT64 UDP ALG Full-Cone Created; ‘nat64-udp-alg-fullcone-freed-shadow’: NAT64 UDP ALG Full-Cone Freed; ‘dslite-tcp-fullcone-created-shadow’: DS-Lite TCP Full-Cone Created; ‘dslite-tcp-fullcone-freed-shadow’: DS-Lite TCP Full-Cone Freed; ‘dslite-udp-fullcone-created-shadow’: DS-Lite UDP Full-Cone Created; ‘dslite-udp-fullcone-freed-shadow’: DS-Lite UDP Full-Cone Freed; ‘dslite-udp-alg-fullcone-created-shadow’: DS-Lite UDP ALG Full-Cone Created; ‘dslite-udp-alg-fullcone-freed-shadow’: DS-Lite UDP ALG Full-Cone Freed;

Type: string

Supported Values: nat44-udp-alg-fullcone-freed-shadow, nat64-tcp-fullcone-created-shadow, nat64-tcp-fullcone-freed-shadow, nat64-udp-fullcone-created-shadow, nat64-udp-fullcone-freed-shadow, nat64-udp-alg-fullcone-created-shadow, nat64-udp-alg-fullcone-freed-shadow, dslite-tcp-fullcone-created-shadow, dslite-tcp-fullcone-freed-shadow, dslite-udp-fullcone-created-shadow, dslite-udp-fullcone-freed-shadow, dslite-udp-alg-fullcone-created-shadow, dslite-udp-alg-fullcone-freed-shadow

template

Specification
Type object

dns-list

Description: dns-list is a JSON List . Please see below for l844_dns-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/dns/{name}

http-alg-list

Description: http-alg-list is a JSON List . Please see below for l844_http-alg-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/http-alg/{name}

logging-list

Description: logging-list is a JSON List . Please see below for l844_logging-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/logging/{name}

pcp-list

Description: pcp-list is a JSON List . Please see below for l844_pcp-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/pcp/{name}

policy-list

Description: policy-list is a JSON List . Please see below for l844_policy-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/policy/{name}

template.policy-list

Specification
Type list
Block object keys

class-list

Description: class-list is a JSON Block . Please see below for l844_class-list

Type: Object

Reference Object: /axapi/v3/cgnv6/template/policy/{name}/class-list

name

Description: Policy template name

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.class-list

Specification
Type object

client-ip-l3-dest

Description: Use destination IP as client IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: client-ip-l3-dest and client-ip-l7-header are mutually exclusive

client-ip-l7-header

Description: Use extract client IP address from L7 header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: client-ip-l7-header and client-ip-l3-dest are mutually exclusive

header-name

Description: Specify L7 header name

Type: string

lid-list

Description: lid-list is a JSON List . Please see below for l844_lid-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/policy/{name}/class-list/lid/{lidnum}

name

Description: Class list name

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.class-list.lid-list

Specification
Type list
Block object keys

action-value

Description: ‘forward’: Forward the traffic even it exceeds limit; ‘reset’: Reset the connection when it exceeds limit;

Type: string

Supported Values: forward, reset

conn-limit

Description: Connection limit

Type: number

Range: 0-1048575

conn-per

Description: Per (Specify interval in number of 100ms)

Type: number

Range: 1-65535

conn-rate-limit

Description: Specify connection rate limit

Type: number

Range: 1-2147483647

dns64

Description: dns64 is a JSON Block . Please see below for dns64

Type: Object

interval

Description: Specify log interval in minutes, by default system will log every over limit instance

Type: number

Range: 1-255

lidnum

Description: Specify a limit ID

Type: number

Range: 1-31

lockout

Description: Don’t accept any new connection for certain time (Lockout duration in minutes)

Type: number

Range: 1-1023

log

Description: Log a message

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

over-limit-action

Description: Set action when exceeds limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

request-limit

Description: Request limit (Specify request limit)

Type: number

Range: 0-1048575

request-per

Description: Per (Specify interval in number of 100ms)

Type: number

Range: 1-65535

request-rate-limit

Description: Request rate limit (Specify request rate limit)

Type: number

Range: 1-4294967295

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.class-list.lid-list.dns64

Specification
Type object

disable

Description: Disable

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

exclusive-answer

Description: Exclusive Answer in DNS Response

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

prefix

Description: IPv6 prefix

Type: string

Format: ipv6-address-plen

template.logging-list

Specification
Type list
Block object keys

batched-logging-disable

Description: Disable multiple logs per packet

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

custom

Description: custom is a JSON Block . Please see below for l844_custom

Type: Object

facility

Description: ‘kernel’: 0: Kernel; ‘user’: 1: User-level; ‘mail’: 2: Mail; ‘daemon’: 3: System daemons; ‘security-authorization’: 4: Security/authorization; ‘syslog’: 5: Syslog internal; ‘line-printer’: 6: Line printer; ‘news’: 7: Network news; ‘uucp’: 8: UUCP subsystem; ‘cron’: 9: Time-related; ‘security-authorization-private’: 10: Private security/authorization; ‘ftp’: 11: FTP; ‘ntp’: 12: NTP; ‘audit’: 13: Audit; ‘alert’: 14: Alert; ‘clock’: 15: Clock-related; ‘local0’: 16: Local use 0; ‘local1’: 17: Local use 1; ‘local2’: 18: Local use 2; ‘local3’: 19: Local use 3; ‘local4’: 20: Local use 4; ‘local5’: 21: Local use 5; ‘local6’: 22: Local use 6; ‘local7’: 23: Local use 7;

Type: string

Supported Values: kernel, user, mail, daemon, security-authorization, syslog, line-printer, news, uucp, cron, security-authorization-private, ftp, ntp, audit, alert, clock, local0, local1, local2, local3, local4, local5, local6, local7

Default: local0

format

Description: ‘binary’: Binary logging format; ‘compact’: Compact ASCII logging format (Hex format with compact representation); ‘custom’: Arbitrary custom logging format; ‘default’: Default A10 logging format (ASCII); ‘rfc5424’: RFC5424 compliant logging format;

Type: string

Supported Values: binary, compact, custom, default, rfc5424

Default: default

include-destination

Description: Include the destination IP and port in logs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

include-http

Description: include-http is a JSON Block . Please see below for l844_include-http

Type: Object

include-inside-user-mac

Description: Include the inside user MAC address in logs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

include-partition-name

Description: Include partition name in logging events

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

include-radius-attribute

Description: include-radius-attribute is a JSON Block . Please see below for l844_include-radius-attribute

Type: Object

log

Description: log is a JSON Block . Please see below for l844_log

Type: Object

log-receiver

Description: log-receiver is a JSON Block . Please see below for l844_log-receiver

Type: Object

name

Description: Logging template name

Type: string

Format: string-rlx

resolution

Description: ‘seconds’: Logging timestamp resolution in seconds (default); ‘10-milliseconds’: Logging timestamp resolution in 10s of milli-seconds;

Type: string

Supported Values: seconds, 10-milliseconds

Default: seconds

rfc-custom

Description: rfc-custom is a JSON Block . Please see below for l844_rfc-custom

Type: Object

rule

Description: rule is a JSON Block . Please see below for l844_rule

Type: Object

service-group

Description: Set NAT logging service-group

Type: string

Format: string-rlx

severity

Description: severity is a JSON Block . Please see below for l844_severity

Type: Object

shared

Description: Service group is in shared patition

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

source-address

Description: source-address is a JSON Block . Please see below for l844_source-address

Type: Object

source-port

Description: source-port is a JSON Block . Please see below for l844_source-port

Type: Object

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.logging-list.include-http

Specification
Type object

header-cfg

Description: header-cfg is a JSON List . Please see below for l844_header-cfg

Type: List

l4-session-info

Description: Log the L4 session information of the HTTP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

method

Description: Log the HTTP Request Method

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

request-number

Description: HTTP Request Number

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.logging-list.include-http.header-cfg

Specification
Type list
Block object keys

custom-header-name

Description: Header name

Type: string

custom-max-length

Description: Max length for a HTTP request log (Max header length (Default: 100 char))

Type: number

Range: 100-1000

Default: 100

http-header

Description: ‘cookie’: Log HTTP Cookie Header; ‘referer’: Log HTTP Referer Header; ‘user-agent’: Log HTTP User-Agent Header; ‘header1’: Log HTTP Header 1; ‘header2’: Log HTTP Header 2; ‘header3’: Log HTTP Header 3;

Type: string

Supported Values: cookie, referer, user-agent, header1, header2, header3

max-length

Description: Max length for a HTTP request log (Max header length (Default: 100 char))

Type: number

Range: 100-1000

Default: 100

template.logging-list.severity

Specification
Type object

severity-string

Description: ‘emergency’: 0: Emergency; ‘alert’: 1: Alert; ‘critical’: 2: Critical; ‘error’: 3: Error; ‘warning’: 4: Warning; ‘notice’: 5: Notice; ‘informational’: 6: Informational; ‘debug’: 7: Debug;

Type: string

Supported Values: emergency, alert, critical, error, warning, notice, informational, debug

Default: debug

Mutual Exclusion: severity-string and severity-val are mutually exclusive

severity-val

Description: Logging severity level

Type: number

Range: 0-7

Default: 7

Mutual Exclusion: severity-val and severity-string are mutually exclusive

template.logging-list.custom

Specification
Type object

custom-header

Description: ‘use-syslog-header’: Use syslog header as custom log header;

Type: string

Supported Values: use-syslog-header

custom-message

Description: custom-message is a JSON Block . Please see below for l844_custom-message

Type: Object

custom-time-stamp-format

Description: Customize the time stamp format (Customize the time-stamp format. Default:%Y%m%d%H%M%S)

Type: string

Format: string-rlx

template.logging-list.custom.custom-message

Specification
Type object

custom-fixed-nat-allocated

Description: Fixed-NAT allocated (Custom message string)

Type: string

Format: string-rlx

custom-fixed-nat-freed

Description: Fixed-NAT freed (Custom message string)

Type: string

Format: string-rlx

custom-http-request-got

Description: HTTP request got (Custom message string)

Type: string

Format: string-rlx

custom-port-allocated

Description: Port allocated (Custom message string)

Type: string

Format: string-rlx

custom-port-batch-allocated

Description: Port Batch allocated (Custom message string)

Type: string

Format: string-rlx

custom-port-batch-freed

Description: Port Batch freed (Custom message string)

Type: string

Format: string-rlx

custom-port-freed

Description: Port freed (Custom message string)

Type: string

Format: string-rlx

custom-session-created

Description: Session created (Custom message string)

Type: string

Format: string-rlx

custom-session-deleted

Description: Session deleted (Custom message string)

Type: string

Format: string-rlx

template.logging-list.source-address

Specification
Type object

ip

Description: Specify source IP address

Type: string

Format: ipv4-address

ipv6

Description: Specify source IPv6 address

Type: string

Format: ipv6-address

template.logging-list.log

Specification
Type object

fixed-nat

Description: fixed-nat is a JSON Block . Please see below for fixed-nat

Type: Object

http-requests

Description: ‘host’: Log the HTTP Host Header; ‘url’: Log the HTTP Request URL;

Type: string

Supported Values: host, url

port-mappings

Description: ‘creation’: Log only creation of NAT mappgins; ‘disable’: Disable Log creation and deletion of NAT mappings;

Type: string

Supported Values: creation, disable

port-overloading

Description: Force logging of all port-overloading sessions

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

sessions

Description: Log all data sessions created using NAT

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.logging-list.log.fixed-nat

Specification
Type object

fixed-nat-http-requests

Description: ‘host’: Log the HTTP Host Header; ‘url’: Log the HTTP Request URL;

Type: string

Supported Values: host, url

fixed-nat-port-mappings

Description: ‘both’: Log creation and deletion of NAT mappings; ‘creation’: Log creation of NAT mappings;

Type: string

Supported Values: both, creation

fixed-nat-sessions

Description: Log all Fixed NAT sessions

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-ports

Description: user-ports is a JSON Block . Please see below for l844_user-ports

Type: Object

template.logging-list.log.fixed-nat.user-ports

Specification
Type object

days

Description: Specify period in days

Type: number

Range: 1-30

start-time

Description: Time when periodic logging starts (Specify start time(hh:mm))

Type: string

Format: time-hhmm

user-ports

Description: Log Fixed NAT User Ports Configured

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.logging-list.source-port

Specification
Type object

any

Description: Use any source port

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: any and source-port-num are mutually exclusive

source-port-num

Description: Set source port for sending NAT syslogs (default: 514)

Type: number

Range: 1-65535

Default: 514

Mutual Exclusion: source-port-num and any are mutually exclusive

template.logging-list.log-receiver

Specification
Type object

encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED secret string)

radius

Description: Use RADIUS server for NAT logging

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

secret-string

Description: The RADIUS server’s secret

Type: string

Format: password

template.logging-list.include-radius-attribute

Specification
Type object

attr-cfg

Description: attr-cfg is a JSON List . Please see below for l844_attr-cfg

Type: List

template.logging-list.include-radius-attribute.attr-cfg

Specification
Type list
Block object keys

attr

Description: ‘imei’: Include IMEI; ‘imsi’: Include IMSI; ‘msisdn’: Include MSISDN; ‘custom1’: Customized attribute 1; ‘custom2’: Customized attribute 2; ‘custom3’: Customized attribute 3;

Type: string

Supported Values: imei, imsi, msisdn, custom1, custom2, custom3

attr-event

Description: ‘http-requests’: Include in HTTP request logs; ‘port-mappings’: Include in port-mapping logs; ‘sessions’: Include in session logs;

Type: string

Supported Values: http-requests, port-mappings, sessions

template.logging-list.rule

Specification
Type object

rule-http-requests

Description: rule-http-requests is a JSON Block . Please see below for l844_rule-http-requests

Type: Object

template.logging-list.rule.rule-http-requests

Specification
Type object

dest-port

Description: dest-port is a JSON List . Please see below for l844_dest-port

Type: List

log-every-http-request

Description: Log every HTTP request in an HTTP 1.1 session (Default: Log the first HTTP request in a session)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

max-url-len

Description: Max length of URL log (Max URL length (Default: 100 char))

Type: number

Range: 100-1000

Default: 100

template.logging-list.rule.rule-http-requests.dest-port

Specification
Type list
Block object keys

dest-port-number

Description:

Type: number

Range: 1-65535

include-byte-count

Description: Include the byte count of HTTP Request/Response in CGN session deletion logs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.logging-list.rfc-custom

Specification
Type object

header

Description: header is a JSON Block . Please see below for l844_header

Type: Object

message

Description: message is a JSON Block . Please see below for l844_message

Type: Object

template.logging-list.rfc-custom.header

Specification
Type object

use-alternate-timestamp

Description: Use alternate non-RFC5424 compliant timestamp. Ex: 1990 Jan 15 12:30:30

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.logging-list.rfc-custom.message

Specification
Type object

http-request-got

Description: HTTP request got (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

ipv6-tech

Description: ipv6-tech is a JSON List . Please see below for l844_ipv6-tech

Type: List

session-created

Description: Session created (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

session-deleted

Description: Session deleted (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

template.logging-list.rfc-custom.message.ipv6-tech

Specification
Type list
Block object keys

fixed-nat-allocated

Description: Fixed-NAT allocated (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

fixed-nat-freed

Description: Fixed-NAT freed (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

port-allocated

Description: Port allocated (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

port-batch-allocated

Description: Port Batch allocated (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

port-batch-freed

Description: Port Batch freed (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

port-freed

Description: Port freed (Custom message string. Should be in the format of “MSGID [STRUCTURED-DATA] MSG”)

Type: string

Format: string-rlx

tech-type

Description: ‘lsn’: LSN; ‘nat64’: NAT64; ‘ds-lite’: DS-Lite; ‘sixrd-nat64’: 6rd-NAT64;

Type: string

Supported Values: lsn, nat64, ds-lite, sixrd-nat64

template.pcp-list

Specification
Type list
Block object keys

allow-third-party-from-lan

Description: Allow third party request coming from LAN (default is disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

allow-third-party-from-wan

Description: Allow third party request coming from WAN (default is disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

announce

Description: PCP ANNOUNCE Opcode (default is enabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

check-client-nonce

Description: To validate NONCE value in PCP request (default: disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

disable-map-filter

Description: To disable processing of FILTER options in MAP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

map

Description: PCP MAP Opcode (default is enabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

maximum

Description: To set maximum lifetime of PCP mappings (default 1440 minutes)

Type: number

Range: 2-1440

Default: 1440

minimum

Description: To set minimum lifetime of PCP mappings (default 2 minutes)

Type: number

Range: 2-1440

Default: 2

name

Description: PCP Template name

Type: string

Format: string-rlx

pcp-server-port

Description: PCP server listening port (default 5351) (PCP UDP destination port)

Type: number

Range: 1024-65535

Default: 5351

peer

Description: PCP PEER Opcode (default is enabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

source-ip

Description: Specify source IP address for IPv4 ANNOUNCE message

Type: string

Format: ipv4-address

source-ipv6

Description: Specify source IPv6 address for IPv6 ANNOUNCE message

Type: string

Format: ipv6-address

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.http-alg-list

Specification
Type list
Block object keys

encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED secret string)

header-name-client-ip

Description: Header name (default: X-Forwarded-For)

Type: string

Default: X-Forwarded-For

header-name-msisdn

Description: Header name (default: X-MSISDN)

Type: string

Default: X-MSISDN

include-tunnel-ip

Description: Include the tunnel IP (applies to DS-Lite and 6RD-NAT64 sessions)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

method

Description: ‘append’: Append if there is already a header (default); ‘replace’: Replace if there is already a header;

Type: string

Supported Values: append, replace

Default: append

name

Description: HTTP-ALG template name

Type: string

Format: string-rlx

radius-sg

Description: RADIUS service group (RADIUS service group name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/cgnv6/service-group

request-insert-client-ip

Description: Insert Client IP into HTTP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

request-insert-msisdn

Description: Insert MSISDN into HTTP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

retry

Description: Specify the maximum retries allowed for sending an request to a RADIUS server (default 2) (The maximum retries allowed for sending an request to the radius server (default 2))

Type: number

Range: 0-3

Default: 2

retry-svr-num

Description: Specify the maximum RADIUS servers allowed to try (default 0)

Type: number

Range: 0-1

Default: 0

secret-string

Description: The RADIUS secret

Type: string

Format: password

timeout

Description: The maximum time allowed for waiting for a response from a radius server (default 2)

Type: number

Range: 1-3

Default: 2

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list

Specification
Type list
Block object keys

class-list

Description: class-list is a JSON Block . Please see below for l844_class-list

Type: Object

Reference Object: /axapi/v3/cgnv6/template/dns/{name}/class-list

default-policy

Description: ‘nocache’: Cache disable; ‘cache’: Cache enable;

Type: string

Supported Values: nocache, cache

Default: nocache

disable-dns-template

Description: Disable DNS template

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

dns64

Description: dns64 is a JSON Block . Please see below for dns64

Type: Object

Reference Object: /axapi/v3/cgnv6/template/dns/{name}/dns64

drop

Description: Drop the malformed query

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: drop and forward are mutually exclusive

forward

Description: Forward to service group (Service group name)

Type: string

Mutual Exclusion: forward and drop are mutually exclusive

max-cache-size

Description: Define maximum cache size (Maximum cache entry per VIP)

Type: number

name

Description: DNS Template Name

Type: string

Format: string-rlx

period

Description: Period in minutes

Type: number

Range: 1-10000

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list.class-list

Specification
Type object

lid-list

Description: lid-list is a JSON List . Please see below for l844_lid-list

Type: List

Reference Object: /axapi/v3/cgnv6/template/dns/{name}/class-list/lid/{lidnum}

name

Description: Specify a class list name

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list.class-list.lid-list

Specification
Type list
Block object keys

action-value

Description: ‘dns-cache-disable’: Disable DNS cache when it exceeds limit; ‘dns-cache-enable’: Enable DNS cache when it exceeds limit; ‘forward’: Forward the traffic even it exceeds limit;

Type: string

Supported Values: dns-cache-disable, dns-cache-enable, forward

conn-rate-limit

Description: Connection rate limit

Type: number

Range: 1-2147483647

dns

Description: dns is a JSON Block . Please see below for l844_dns

Type: Object

lidnum

Description: Specify a limit ID

Type: number

Range: 1-31

lockout

Description: Don’t accept any new connection for certain time (Lockout duration in minutes)

Type: number

Range: 1-1023

log

Description: Log a message

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

log-interval

Description: Log interval (minute, by default system will log every over limit instance)

Type: number

Range: 1-255

over-limit-action

Description: Action when exceeds limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

per

Description: Per (Number of 100ms)

Type: number

Range: 1-65535

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list.class-list.lid-list.dns

Specification
Type object

cache-action

Description: ‘cache-disable’: Disable dns cache; ‘cache-enable’: Enable dns cache;

Type: string

Supported Values: cache-disable, cache-enable

Default: cache-disable

ttl

Description: TTL for cache entry (TTL in seconds)

Type: number

Range: 1-65535

weight

Description: Weight for cache entry

Type: number

Range: 1-7

template.dns-list.dns64

Specification
Type object

answer-only-disable

Description: Disable Only translate the Answer Section

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

auth-data

Description: Set AA flag in DNS Response

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

cache

Description: Generate Response by DNS Cache

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

change-query

Description: Always change incoming AAAA DNS Query to A

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

compress-disable

Description: Disable Always try DNS Compression

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

deep-check-rr-disable

Description: Disable Check DNS Response Records

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop-cname-disable

Description: Disable Drop DNS CNAME Response

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

enable

Description: Enable DNS64 (Need to config this option before config any other dns64 options)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ignore-rcode3-disable

Description: Disable Ignore DNS error Response with rcode 3

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

max-qr-length

Description: Max Question Record Length, default is 128

Type: number

Range: 1-1023

Default: 128

parallel-query

Description: Forward AAAA Query & generate A Query in parallel

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

passive-query-disable

Description: Disable Generate A query upon empty or error Response

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

retry

Description: Retry count, default is 3 (Retry Number)

Type: number

Range: 0-15

Default: 3

single-response-disable

Description: Disable Single Response which is used to avoid ambiguity

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

timeout

Description: Timeout to send additional Queries, unit: second, default is 1

Type: number

Range: 0-15

Default: 1

trans-ptr

Description: Translate DNS PTR Records

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

trans-ptr-query

Description: Translate DNS PTR Query

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ttl

Description: Specify Max TTL in DNS Response, unit: second

Type: number

Range: 1-1000000000

uuid

Description: uuid of the object

Type: string

pcp

Specification
Type object

default-template

Description: Bind the default template for PCP (Bind a PCP template)

Type: string

Format: string-rlx

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

pcp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘packets-rcv’: Packets Received; ‘lsn-map-process-success’: PCP MAP Request Processing Success (NAT44); ‘dslite-map-process-success’: PCP MAP Request Processing Success (DS-Lite); ‘nat64-map-process-success’: PCP MAP Request Processing Success (NAT64); ‘lsn-peer-process-success’: PCP PEER Request Processing Success (NAT44); ‘dslite-peer-process-success’: PCP PEER Request Processing Success (DS-Lite); ‘nat64-peer-process-success’: PCP PEER Request Processing Success (NAT64); ‘lsn-announce-process-success’: PCP ANNOUNCE Request Processing Success (NAT44); ‘dslite-announce-process-success’: PCP ANNOUNCE Request Processing Success (DS-Lite); ‘nat64-announce-process-success’: PCP ANNOUNCE Request Processing Success (NAT64); ‘pkt-not-request-drop’: Packet Not a PCP Request; ‘pkt-too-short-drop’: Packet Too Short; ‘noroute-drop’: Response No Route; ‘unsupported-version’: Unsupported PCP version; ‘not-authorized’: PCP Request Not Authorized; ‘malform-request’: PCP Request Malformed; ‘unsupp-opcode’: Unsupported PCP Opcode; ‘unsupp-option’: Unsupported PCP Option; ‘malform-option’: PCP Option Malformed; ‘no-resources’: No System or NAT Resources; ‘unsupp-protocol’: Unsupported Mapping Protocol; ‘user-quota-exceeded’: User Quota Exceeded; ‘cannot-provide-suggest’: Cannot Provide Suggested Port When PREFER_FAILURE; ‘address-mismatch’: PCP Client Address Mismatch; ‘excessive-remote-peers’: Excessive Remote Peers; ‘pkt-not-from-nat-inside’: Packet Dropped For Not Coming From NAT Inside; ‘l4-process-error’: L3/L4 Process Error; ‘internal-error-drop’: Internal Error; ‘unsol_ance_sent_succ’: Unsolicited Announce Sent; ‘unsol_ance_sent_fail’: Unsolicited Announce Send Failure; ‘ha_sync_epoch_sent’: HA Sync PCP Epoch Sent; ‘ha_sync_epoch_rcv’: HA Sync PCP Epoch Recv; ‘fullcone-ext-alloc’: PCP Fullcone Extension Alloc; ‘fullcone-ext-free’: PCP Fullcone Extension Free; ‘fullcone-ext-alloc-failure’: PCP Fullcone Extension Alloc Failure; ‘fullcone-ext-notfound’: PCP Fullcone Extension Not Found; ‘fullcone-ext-reuse’: PCP Fullcone Extension Reuse; ‘client-nonce-mismatch’: PCP Client Nonce Mismatch; ‘map-filter-set’: PCP MAP Filter Set; ‘map-filter-deny’: PCP MAP Filter Deny Inbound;

Type: string

Supported Values: all, packets-rcv, lsn-map-process-success, dslite-map-process-success, nat64-map-process-success, lsn-peer-process-success, dslite-peer-process-success, nat64-peer-process-success, lsn-announce-process-success, dslite-announce-process-success, nat64-announce-process-success, pkt-not-request-drop, pkt-too-short-drop, noroute-drop, unsupported-version, not-authorized, malform-request, unsupp-opcode, unsupp-option, malform-option, no-resources, unsupp-protocol, user-quota-exceeded, cannot-provide-suggest, address-mismatch, excessive-remote-peers, pkt-not-from-nat-inside, l4-process-error, internal-error-drop, unsol_ance_sent_succ, unsol_ance_sent_fail, ha_sync_epoch_sent, ha_sync_epoch_rcv, fullcone-ext-alloc, fullcone-ext-free, fullcone-ext-alloc-failure, fullcone-ext-notfound, fullcone-ext-reuse, client-nonce-mismatch, map-filter-set, map-filter-deny

stateful-firewall

Specification
Type object

alg

Description: alg is a JSON Block . Please see below for l844_alg

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg

endpoint-independent-filtering

Description: endpoint-independent-filtering is a JSON Block . Please see below for l844_endpoint-independent-filtering

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/endpoint-independent-filtering

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/global

stun-timeout-list

Description: stun-timeout-list is a JSON List . Please see below for l844_stun-timeout-list

Type: List

Reference Object: /axapi/v3/cgnv6/stateful-firewall/stun-timeout/{port}+{port-end}

tcp

Description: tcp is a JSON Block . Please see below for l844_tcp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/tcp

udp

Description: udp is a JSON Block . Please see below for l844_udp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/udp

vrid

Description: vrid is a JSON Block . Please see below for l844_vrid

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/vrid

stateful-firewall.udp

Specification
Type object

idle-timeout-list

Description: idle-timeout-list is a JSON List . Please see below for l844_idle-timeout-list

Type: List

Reference Object: /axapi/v3/cgnv6/stateful-firewall/udp/idle-timeout/{port}+{port-end}

stun-timeout-list

Description: stun-timeout-list is a JSON List . Please see below for l844_stun-timeout-list

Type: List

Reference Object: /axapi/v3/cgnv6/stateful-firewall/udp/stun-timeout/{port}+{port-end}

stateful-firewall.udp.stun-timeout-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

Range: 1-65535

port-end

Description: Port Range End

Type: number

Range: 1-65535

stun-timeout-val-port-range

Description: STUN timeout (default: 2 minutes)

Type: number

Range: 0-60

Default: 2

uuid

Description: uuid of the object

Type: string

stateful-firewall.udp.idle-timeout-list

Specification
Type list
Block object keys

fast

Description: Fast aging for idle sessions

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: fast and idle-timeout-val-port-range are mutually exclusive

idle-timeout-val-port-range

Description: Idle timeout for IPv4 and IPv6 TCP established sessions (Idle timeout for IPv4 and IPv6 TCP established sessions (default: 300 seconds))

Type: number

Range: 60-15000

Default: 300

Mutual Exclusion: idle-timeout-val-port-range and fast are mutually exclusive

port

Description: Single Destination Port or Port Range Start

Type: number

Range: 1-65535

port-end

Description: Port Range End

Type: number

Range: 1-65535

uuid

Description: uuid of the object

Type: string

stateful-firewall.vrid

Specification
Type object

uuid

Description: uuid of the object

Type: string

vrid-value

Description: Set VRRP-A vrid for stateful firewall (IPv4 and IPv6)

Type: number

Range: 1-31

stateful-firewall.alg

Specification
Type object

ftp

Description: ftp is a JSON Block . Please see below for l844_ftp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg/ftp

pptp

Description: pptp is a JSON Block . Please see below for l844_pptp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg/pptp

rtp

Description: rtp is a JSON Block . Please see below for l844_rtp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg/rtp

rtsp

Description: rtsp is a JSON Block . Please see below for l844_rtsp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg/rtsp

sip

Description: sip is a JSON Block . Please see below for l844_sip

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg/sip

tftp

Description: tftp is a JSON Block . Please see below for l844_tftp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/alg/tftp

stateful-firewall.alg.ftp

Specification
Type object

ftp-value

Description: ‘disable’: Disable ALG;

Type: string

Supported Values: disable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

stateful-firewall.alg.ftp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘client-port-request’: PORT Requests From Client; ‘client-eprt-request’: EPRT Requests From Client; ‘server-pasv-reply’: PASV Replies From Server; ‘server-epsv-reply’: EPSV Replies From Server; ‘port-retransmits’: PORT Retransmits; ‘pasv-retransmits’: PASV Retransmits; ‘smp-app-type-mismatch’: SMP App Type Mismatch; ‘retransmit-sanity-check-failure’: Retransmit Sanity Check Failure; ‘smp-conn-alloc-failure’: SMP Helper Conn Alloc Failure; ‘port-helper-created’: PORT Helper Created; ‘pasv-helper-created’: PASV Helper Created; ‘port-helper-acquire-in-del-q’: PORT Helper Acquire In Del Queue; ‘port-helper-acquire-already-used’: PORT Helper Acquire Already Used; ‘pasv-helper-acquire-in-del-q’: PASV Helper Acquire In Del Queue; ‘pasv-helper-acquire-already-used’: PASV Helper Acquire Already Used; ‘port-helper-freed-used’: PORT Helper Freed Used; ‘port-helper-freed-unused’: PORT Helper Freed Unused; ‘pasv-helper-freed-used’: PASV Helper Freed Used; ‘pasv-helper-freed-unused’: PASV Helper Freed Unused;

Type: string

Supported Values: all, client-port-request, client-eprt-request, server-pasv-reply, server-epsv-reply, port-retransmits, pasv-retransmits, smp-app-type-mismatch, retransmit-sanity-check-failure, smp-conn-alloc-failure, port-helper-created, pasv-helper-created, port-helper-acquire-in-del-q, port-helper-acquire-already-used, pasv-helper-acquire-in-del-q, pasv-helper-acquire-already-used, port-helper-freed-used, port-helper-freed-unused, pasv-helper-freed-used, pasv-helper-freed-unused

stateful-firewall.alg.sip

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

sip-value

Description: ‘disable’: Disable ALG;

Type: string

Supported Values: disable

uuid

Description: uuid of the object

Type: string

stateful-firewall.alg.sip.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘stat-request’: Request Received; ‘stat-response’: Response Received; ‘method-register’: Method REGISTER; ‘method-invite’: Method INVITE; ‘method-ack’: Method ACK; ‘method-cancel’: Method CANCEL; ‘method-bye’: Method BYE; ‘method-port-config’: Method OPTIONS; ‘method-prack’: Method PRACK; ‘method-subscribe’: Method SUBSCRIBE; ‘method-notify’: Method NOTIFY; ‘method-publish’: Method PUBLISH; ‘method-info’: Method INFO; ‘method-refer’: Method REFER; ‘method-message’: Method MESSAGE; ‘method-update’: Method UPDATE; ‘method-unknown’: Method Unknown; ‘parse-error’: Message Parse Error; ‘keep-alive’: Keep Alive; ‘contact-error’: Contact Process Error; ‘sdp-error’: SDP Process Error; ‘rtp-port-no-op’: RTP Port No Op; ‘rtp-rtcp-port-success’: RTP RTCP Port Success; ‘rtp-port-failure’: RTP Port Failure; ‘rtcp-port-failure’: RTCP Port Failure; ‘contact-port-no-op’: Contact Port No Op; ‘contact-port-success’: Contact Port Success; ‘contact-port-failure’: Contact Port Failure; ‘contact-new’: Contact Alloc; ‘contact-alloc-failure’: Contact Alloc Failure; ‘contact-eim’: Contact EIM; ‘contact-eim-set’: Contact EIM Set; ‘rtp-new’: RTP Alloc; ‘rtp-alloc-failure’: RTP Alloc Failure; ‘rtp-eim’: RTP EIM;

Type: string

Supported Values: all, stat-request, stat-response, method-register, method-invite, method-ack, method-cancel, method-bye, method-port-config, method-prack, method-subscribe, method-notify, method-publish, method-info, method-refer, method-message, method-update, method-unknown, parse-error, keep-alive, contact-error, sdp-error, rtp-port-no-op, rtp-rtcp-port-success, rtp-port-failure, rtcp-port-failure, contact-port-no-op, contact-port-success, contact-port-failure, contact-new, contact-alloc-failure, contact-eim, contact-eim-set, rtp-new, rtp-alloc-failure, rtp-eim

stateful-firewall.alg.pptp

Specification
Type object

pptp-value

Description: ‘disable’: Disable ALG;

Type: string

Supported Values: disable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

stateful-firewall.alg.pptp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘calls-established’: Calls Established; ‘call-req-pns-call-id-mismatch’: Call ID Mismatch on Call Request; ‘call-reply-pns-call-id-mismatch’: Call ID Mismatch on Call Reply; ‘gre-session-created’: GRE Session Created; ‘gre-session-freed’: GRE Session Freed; ‘call-req-retransmit’: Call Request Retransmit; ‘call-req-new’: Call Request New; ‘call-req-ext-alloc-failure’: Call Request Ext Alloc Failure; ‘call-reply-call-id-unknown’: Call Reply Unknown Client Call ID; ‘call-reply-retransmit’: Call Reply Retransmit; ‘call-reply-ext-ext-alloc-failure’: Call Request Ext Alloc Failure; ‘smp-app-type-mismatch’: SMP App Type Mismatch; ‘smp-client-call-id-mismatch’: SMP Client Call ID Mismatch; ‘smp-sessions-created’: SMP Session Created; ‘smp-sessions-freed’: SMP Session Freed; ‘smp-alloc-failure’: SMP Session Alloc Failure; ‘gre-conn-creation-failure’: GRE Conn Alloc Failure; ‘gre-conn-ext-creation-failure’: GRE Conn Ext Alloc Failure; ‘gre-no-fwd-route’: GRE No Fwd Route; ‘gre-no-rev-route’: GRE No Rev Route; ‘gre-no-control-conn’: GRE No Control Conn; ‘gre-conn-already-exists’: GRE Conn Already Exists; ‘gre-free-no-ext’: GRE Free No Ext; ‘gre-free-no-smp’: GRE Free No SMP; ‘gre-free-smp-app-type-mismatch’: GRE Free SMP App Type Mismatch; ‘control-freed’: Control Session Freed; ‘control-free-no-ext’: Control Free No Ext; ‘control-free-no-smp’: Control Free No SMP; ‘control-free-smp-app-type-mismatch’: Control Free SMP App Type Mismatch;

Type: string

Supported Values: all, calls-established, call-req-pns-call-id-mismatch, call-reply-pns-call-id-mismatch, gre-session-created, gre-session-freed, call-req-retransmit, call-req-new, call-req-ext-alloc-failure, call-reply-call-id-unknown, call-reply-retransmit, call-reply-ext-ext-alloc-failure, smp-app-type-mismatch, smp-client-call-id-mismatch, smp-sessions-created, smp-sessions-freed, smp-alloc-failure, gre-conn-creation-failure, gre-conn-ext-creation-failure, gre-no-fwd-route, gre-no-rev-route, gre-no-control-conn, gre-conn-already-exists, gre-free-no-ext, gre-free-no-smp, gre-free-smp-app-type-mismatch, control-freed, control-free-no-ext, control-free-no-smp, control-free-smp-app-type-mismatch

stateful-firewall.alg.rtsp

Specification
Type object

rtsp-value

Description: ‘disable’: Disable ALG;

Type: string

Supported Values: disable

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

stateful-firewall.alg.rtsp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘transport-inserted’: Transport Created; ‘transport-freed’: Transport Freed; ‘transport-alloc-failure’: Transport Alloc Failure; ‘data-session-created’: Data Session Created; ‘data-session-freed’: Data Session Freed; ‘ext-creation-failure’: Extension Creation Failure; ‘transport-add-to-ext’: Transport Added to Extension; ‘transport-removed-from-ext’: Transport Removed from Extension; ‘transport-too-many’: Too Many Transports for Control Conn; ‘transport-already-in-ext’: Transport Already in Extension; ‘transport-exists’: Transport Already Exists; ‘transport-link-ext-failure-control’: Transport Link to Extension Failure Control; ‘transport-link-ext-data’: Transport Link to Extension Data; ‘transport-link-ext-failure-data’: Transport Link to Extension Failure Data; ‘transport-inserted-shadow’: Transport Inserted Shadow; ‘transport-creation-race’: Transport Create Race; ‘transport-alloc-failure-shadow’: Transport Alloc Failure Shadow; ‘transport-put-in-del-q’: Transport Put in Delete Queue; ‘transport-freed-shadow’: Transport Freed Shadow; ‘transport-acquired-from-control’: Transport Acquired Control; ‘transport-found-from-prev-control’: Transport Found From Prev Control; ‘transport-acquire-failure-from-control’: Transport Acquire Failure Control; ‘transport-released-from-control’: Transport Released Control; ‘transport-double-release-from-control’: Transport Double Release Control; ‘transport-acquired-from-data’: Transport Acquired Data; ‘transport-acquire-failure-from-data’: Transport Acquire Failure Data; ‘transport-released-from-data’: Transport Released Data; ‘transport-double-release-from-data’: Transport Double Release Data; ‘transport-retry-lookup-on-data-free’: Transport Retry Lookup Data; ‘transport-not-found-on-data-free’: Transport Not Found Data; ‘data-session-created-shadow’: Data Session Created Shadow; ‘data-session-freed-shadow’: Data Session Freed Shadow; ‘ha-control-ext-creation-failure’: HA Control Extension Creation Failure; ‘ha-control-session-created’: HA Control Session Created; ‘ha-data-session-created’: HA Data Session Created;

Type: string

Supported Values: all, transport-inserted, transport-freed, transport-alloc-failure, data-session-created, data-session-freed, ext-creation-failure, transport-add-to-ext, transport-removed-from-ext, transport-too-many, transport-already-in-ext, transport-exists, transport-link-ext-failure-control, transport-link-ext-data, transport-link-ext-failure-data, transport-inserted-shadow, transport-creation-race, transport-alloc-failure-shadow, transport-put-in-del-q, transport-freed-shadow, transport-acquired-from-control, transport-found-from-prev-control, transport-acquire-failure-from-control, transport-released-from-control, transport-double-release-from-control, transport-acquired-from-data, transport-acquire-failure-from-data, transport-released-from-data, transport-double-release-from-data, transport-retry-lookup-on-data-free, transport-not-found-on-data-free, data-session-created-shadow, data-session-freed-shadow, ha-control-ext-creation-failure, ha-control-session-created, ha-data-session-created

stateful-firewall.alg.rtp

Specification
Type object

rtp-stun-timeout

Description: RTP/RTCP STUN timeout (default: 5 minutes)}

Type: number

Range: 2-10

Default: 5

uuid

Description: uuid of the object

Type: string

stateful-firewall.alg.tftp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

tftp-value

Description: ‘disable’: Disable ALG;

Type: string

Supported Values: disable

uuid

Description: uuid of the object

Type: string

stateful-firewall.alg.tftp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘session-created’: Session created; ‘filler2’: Filler2;

Type: string

Supported Values: all, session-created, filler2

stateful-firewall.global

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

stateful-firewall-value

Description: ‘enable’: Enable stateful firewall;

Type: string

Supported Values: enable

uuid

Description: uuid of the object

Type: string

stateful-firewall.global.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘tcp_packet_process’: TCP Packet Process; ‘udp_packet_process’: UDP Packet Process; ‘other_packet_process’: Other Packet Process; ‘packet_inbound_deny’: Inbound Packet Denied; ‘packet_process_failure’: Packet Error Drop; ‘outbound_session_created’: Outbound Session Created; ‘outbound_session_freed’: Outbound Session Freed; ‘inbound_session_created’: Inbound Session Created; ‘inbound_session_freed’: Inbound Session Freed; ‘tcp_session_created’: TCP Session Created; ‘tcp_session_freed’: TCP Session Freed; ‘udp_session_created’: UDP Session Created; ‘udp_session_freed’: UDP Session Freed; ‘other_session_created’: Other Session Created; ‘other_session_freed’: Other Session Freed; ‘session_creation_failure’: Session Creation Failure; ‘no_fwd_route’: No Forward Route; ‘no_rev_route’: No Reverse Route; ‘packet_standby_drop’: Standby Drop; ‘tcp_fullcone_created’: TCP Full-cone Created; ‘tcp_fullcone_freed’: TCP Full-cone Freed; ‘udp_fullcone_created’: UDP Full-cone Created; ‘udp_fullcone_freed’: UDP Full-cone Freed; ‘fullcone_creation_failure’: Full-Cone Creation Failure; ‘eif_process’: Endpnt-Independent Filter Matched; ‘one_arm_drop’: One-Arm Drop; ‘no_class_list_match’: No Class-List Match Drop; ‘outbound_session_created_shadow’: Outbound Session Created Shadow; ‘outbound_session_freed_shadow’: Outbound Session Freed Shadow; ‘inbound_session_created_shadow’: Inbound Session Created Shadow; ‘inbound_session_freed_shadow’: Inbound Session Freed Shadow; ‘tcp_session_created_shadow’: TCP Session Created Shadow; ‘tcp_session_freed_shadow’: TCP Session Freed Shadow; ‘udp_session_created_shadow’: UDP Session Created Shadow; ‘udp_session_freed_shadow’: UDP Session Freed Shadow; ‘other_session_created_shadow’: Other Session Created Shadow; ‘other_session_freed_shadow’: Other Session Freed Shadow; ‘session_creation_failure_shadow’: Session Creation Failure Shadow; ‘bad_session_freed’: Bad Session Proto on Free; ‘ctl_mem_alloc’: Memory Alloc; ‘ctl_mem_free’: Memory Free; ‘tcp_fullcone_created_shadow’: TCP Full-cone Created Shadow; ‘tcp_fullcone_freed_shadow’: TCP Full-cone Freed Shadow; ‘udp_fullcone_created_shadow’: UDP Full-cone Created Shadow; ‘udp_fullcone_freed_shadow’: UDP Full-cone Freed Shadow; ‘fullcone_in_del_q’: Full-cone Found in Delete Queue; ‘fullcone_overflow_eim’: EIM Overflow; ‘fullcone_overflow_eif’: EIF Overflow; ‘fullcone_free_found’: Full-cone Free Found From Conn; ‘fullcone_free_retry_lookup’: Full-cone Retry Look-up; ‘fullcone_free_not_found’: Full-cone Free Not Found; ‘eif_limit_exceeded’: EIF Limit Exceeded; ‘eif_disable_drop’: EIF Disable Drop; ‘eif_process_failure’: EIF Process Failure; ‘eif_filtered’: EIF Filtered; ‘ha_standby_session_created’: HA Standby Session Created; ‘ha_standby_session_eim’: HA Standby Session EIM; ‘ha_standby_session_eif’: HA Standby Session EIF;

Type: string

Supported Values: all, tcp_packet_process, udp_packet_process, other_packet_process, packet_inbound_deny, packet_process_failure, outbound_session_created, outbound_session_freed, inbound_session_created, inbound_session_freed, tcp_session_created, tcp_session_freed, udp_session_created, udp_session_freed, other_session_created, other_session_freed, session_creation_failure, no_fwd_route, no_rev_route, packet_standby_drop, tcp_fullcone_created, tcp_fullcone_freed, udp_fullcone_created, udp_fullcone_freed, fullcone_creation_failure, eif_process, one_arm_drop, no_class_list_match, outbound_session_created_shadow, outbound_session_freed_shadow, inbound_session_created_shadow, inbound_session_freed_shadow, tcp_session_created_shadow, tcp_session_freed_shadow, udp_session_created_shadow, udp_session_freed_shadow, other_session_created_shadow, other_session_freed_shadow, session_creation_failure_shadow, bad_session_freed, ctl_mem_alloc, ctl_mem_free, tcp_fullcone_created_shadow, tcp_fullcone_freed_shadow, udp_fullcone_created_shadow, udp_fullcone_freed_shadow, fullcone_in_del_q, fullcone_overflow_eim, fullcone_overflow_eif, fullcone_free_found, fullcone_free_retry_lookup, fullcone_free_not_found, eif_limit_exceeded, eif_disable_drop, eif_process_failure, eif_filtered, ha_standby_session_created, ha_standby_session_eim, ha_standby_session_eif

stateful-firewall.tcp

Specification
Type object

idle-timeout-list

Description: idle-timeout-list is a JSON List . Please see below for l844_idle-timeout-list

Type: List

Reference Object: /axapi/v3/cgnv6/stateful-firewall/tcp/idle-timeout/{port}+{port-end}

stun-timeout-list

Description: stun-timeout-list is a JSON List . Please see below for l844_stun-timeout-list

Type: List

Reference Object: /axapi/v3/cgnv6/stateful-firewall/tcp/stun-timeout/{port}+{port-end}

syn-timeout

Description: syn-timeout is a JSON Block . Please see below for l844_syn-timeout

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/tcp/syn-timeout

stateful-firewall.tcp.stun-timeout-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

Range: 1-65535

port-end

Description: Port Range End

Type: number

Range: 1-65535

stun-timeout-val-port-range

Description: STUN timeout (default: 2minutes)

Type: number

Range: 0-60

Default: 2

uuid

Description: uuid of the object

Type: string

stateful-firewall.tcp.syn-timeout

Specification
Type object

syn-timeout-val

Description: Set Seconds session can remain in half-open state before being deleted (default: 4 seconds)

Type: number

Range: 2-30

Default: 4

uuid

Description: uuid of the object

Type: string

stateful-firewall.tcp.idle-timeout-list

Specification
Type list
Block object keys

idle-timeout-val-port-range

Description: Set Idle timeout for IPv4 and IPv6 TCP established sessions (Idle timeout for IPv4 and IPv6 TCP established sessions (default: 300 seconds))

Type: number

Range: 60-15000

Default: 300

port

Description: Single Destination Port or Port Range Start

Type: number

Range: 1-65535

port-end

Description: Port Range End

Type: number

Range: 1-65535

uuid

Description: uuid of the object

Type: string

stateful-firewall.stun-timeout-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

Range: 1-65535

port-end

Description: Port Range End

Type: number

Range: 1-65535

stun-timeout-val-port-range

Description: STUN timeout (default: 2 minutes)

Type: number

Range: 0-60

Default: 2

uuid

Description: uuid of the object

Type: string

stateful-firewall.endpoint-independent-filtering

Specification
Type object

tcp

Description: tcp is a JSON Block . Please see below for l844_tcp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/endpoint-independent-filtering/tcp

udp

Description: udp is a JSON Block . Please see below for l844_udp

Type: Object

Reference Object: /axapi/v3/cgnv6/stateful-firewall/endpoint-independent-filtering/udp

stateful-firewall.endpoint-independent-filtering.udp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

uuid

Description: uuid of the object

Type: string

stateful-firewall.endpoint-independent-filtering.udp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

stateful-firewall.endpoint-independent-filtering.tcp

Specification
Type object

port-list

Description: port-list is a JSON List . Please see below for l844_port-list

Type: List

uuid

Description: uuid of the object

Type: string

stateful-firewall.endpoint-independent-filtering.tcp.port-list

Specification
Type list
Block object keys

port

Description: Single Destination Port or Port Range Start

Type: number

port-end

Description: Port Range End

Type: number

nat

Specification
Type object

icmp

Description: icmp is a JSON Block . Please see below for icmp

Type: Object

Reference Object: /axapi/v3/cgnv6/nat/icmp

icmpv6

Description: icmpv6 is a JSON Block . Please see below for l844_icmpv6

Type: Object

Reference Object: /axapi/v3/cgnv6/nat/icmpv6

inside

Description: inside is a JSON Block . Please see below for l844_inside

Type: Object

Reference Object: /axapi/v3/cgnv6/nat/inside

pool-group-list

Description: pool-group-list is a JSON List . Please see below for l844_pool-group-list

Type: List

Reference Object: /axapi/v3/cgnv6/nat/pool-group/{pool-group-name}

pool-list

Description: pool-list is a JSON List . Please see below for l844_pool-list

Type: List

Reference Object: /axapi/v3/cgnv6/nat/pool/{pool-name}

range-list-list

Description: range-list-list is a JSON List . Please see below for l844_range-list-list

Type: List

Reference Object: /axapi/v3/cgnv6/nat/range-list/{name}+{partition}

nat.range-list-list

Specification
Type list
Block object keys

global-netmaskv4

Description: Mask for this Address range

Type: string

Format: ipv4-netmask

global-start-ipv4-addr

Description: Global Start IPv4 Address of this list

Type: string

Format: ipv4-address

local-netmaskv4

Description: Mask for this Address range

Type: string

Format: ipv4-netmask

local-start-ipv4-addr

Description: Local Start IPv4 Address of this list

Type: string

Format: ipv4-address

name

Description: Name for this Static List

Type: string

Format: string-rlx

partition

Description: Inside User Partition (Partition Name)

Type: string

uuid

Description: uuid of the object

Type: string

v4-count

Description: Number of addresses to be translated in this range

Type: number

Range: 1-200000

v4-vrid

Description: VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

nat.pool-group-list

Specification
Type list
Block object keys

member-list

Description: member-list is a JSON List . Please see below for l844_member-list

Type: List

Reference Object: /axapi/v3/cgnv6/nat/pool-group/{pool-group-name}/member/{pool-name}

pool-group-name

Description: Specify pool group name

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

vrid

Description: Specify VRRP-A vrid

Type: number

Range: 1-31

nat.pool-group-list.member-list

Specification
Type list
Block object keys

pool-name

Description: Specify CGNv6 NAT pool name

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

nat.icmpv6

Specification
Type object

respond-to-ping

Description: Respond to ICMPv6 echo requests to NAT pool IPs (default: disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

uuid

Description: uuid of the object

Type: string

nat.icmp

Specification
Type object

always-source-nat-errors

Description: Source NAT intermediate routers’ IPs for ICMP errors (default: disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

respond-to-ping

Description: Respond to ICMP echo requests to NAT pool IPs (default: disabled)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

uuid

Description: uuid of the object

Type: string

nat.inside

Specification
Type object

source

Description: source is a JSON Block . Please see below for l844_source

Type: Object

Reference Object: /axapi/v3/cgnv6/nat/inside/source

nat.inside.source

Specification
Type object

static-list

Description: static-list is a JSON List . Please see below for l844_static-list

Type: List

Reference Object: /axapi/v3/cgnv6/nat/inside/source/static/{src-address}+{partition}

nat.inside.source.static-list

Specification
Type list
Block object keys

nat-address

Description: NAT Address

Type: string

Format: ipv4-address

partition

Description: Inside User Partition (Partition Name)

Type: string

src-address

Description: Original Source Address

Type: string

Format: ipv4-address

uuid

Description: uuid of the object

Type: string

vrid

Description: VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

nat.pool-list

Specification
Type list
Block object keys

end-address

Description: Configure end IP address of NAT pool

Type: string

Format: ipv4-address

exclude-ip

Description: exclude-ip is a JSON List . Please see below for l844_exclude-ip

Type: List

group

Description: Share with a partition group (Partition Group Name)

Type: string

max-users-per-ip

Description: Number of users that can be assigned to a NAT IP

Type: number

Range: 1-64512

netmask

Description: Configure mask for pool

Type: string

Format: ipv4-netmask-brief

partition

Description: Share with a single partition (Partition Name)

Type: string

pool-name

Description: Specify pool name or pool group

Type: string

Format: string-rlx

shared

Description: Share this pool with other partitions (default: not shared)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

start-address

Description: Configure start IP address of NAT pool

Type: string

Format: ipv4-address

uuid

Description: uuid of the object

Type: string

vrid

Description: Configure VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

nat.pool-list.exclude-ip

Specification
Type list
Block object keys

exclude-ip-end

Description: Address range end

Type: string

Format: ipv4-address

exclude-ip-start

Description: Single IP address or IP address range start

Type: string

Format: ipv4-address

sctp

Specification
Type object

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/sctp/global

permit-payload-protocol

Description: permit-payload-protocol is a JSON Block . Please see below for l844_permit-payload-protocol

Type: Object

Reference Object: /axapi/v3/cgnv6/sctp/permit-payload-protocol

rate-limit

Description: rate-limit is a JSON Block . Please see below for l844_rate-limit

Type: Object

Reference Object: /axapi/v3/cgnv6/sctp/rate-limit

sctp.global

Specification
Type object

half-open-timeout

Description: Set SCTP half-open timeout (SCTP half-open timeout in seconds (default 4))

Type: number

Range: 2-30

Default: 4

idle-timeout

Description: SCTP idle timeout in minutes (default 5)

Type: number

Range: 1-63

Default: 5

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

sctp.global.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘session-created’: Session Created; ‘session-deleted’: Session Deleted; ‘pkt-err-drop’: Packet Error Drop; ‘oos-pkt-drop’: Out-of-state Packet Drop; ‘max-multi-home-drop’: Maximum Multi-homing IP Addresses Drop; ‘multi-home-remove-ip-skip’: Multi-homing Remove IP Parameter Skip; ‘multi-home-addr-not-found-drop’: Multi-homing IP Address Not Found Drop; ‘static-nat-cfg-not-found’: Static NAT Config Not Found Drop; ‘cfg-err-drop’: Configuration Error Drop; ‘vrrp-standby-drop’: NAT Resource VRRP-A Standby Drop; ‘invalid-frag-chunk-drop’: Invalid Fragmented Chunks Drop; ‘disallowed-chunk-removed’: Disallowed Chunk Removed; ‘disallowed-pkt-drop’: Disallowed Packet Drop; ‘rate-limit-drop’: Rate-limit Drop; ‘sby-session-created’: Standby Session Created; ‘sby-session-create-fail’: Standby Session Create Failed; ‘sby-session-updated’: Standby Session Updated; ‘sby-session-update-fail’: Standby Session Update Failed; ‘sby-static-nat-cfg-not-found’: Static NAT Config Not Found on Standby;

Type: string

Supported Values: all, session-created, session-deleted, pkt-err-drop, oos-pkt-drop, max-multi-home-drop, multi-home-remove-ip-skip, multi-home-addr-not-found-drop, static-nat-cfg-not-found, cfg-err-drop, vrrp-standby-drop, invalid-frag-chunk-drop, disallowed-chunk-removed, disallowed-pkt-drop, rate-limit-drop, sby-session-created, sby-session-create-fail, sby-session-updated, sby-session-update-fail, sby-static-nat-cfg-not-found

sctp.rate-limit

Specification
Type object

destination-list

Description: destination-list is a JSON List . Please see below for l844_destination-list

Type: List

Reference Object: /axapi/v3/cgnv6/sctp/rate-limit/destination/{ip}

source-list

Description: source-list is a JSON List . Please see below for l844_source-list

Type: List

Reference Object: /axapi/v3/cgnv6/sctp/rate-limit/source/{ip}

sctp.rate-limit.source-list

Specification
Type list
Block object keys

ip

Description: IP address

Type: string

Format: ipv4-address

rate-limit

Description: Rate limit in packets per second

Type: number

Range: 1-2147483647

uuid

Description: uuid of the object

Type: string

sctp.rate-limit.destination-list

Specification
Type list
Block object keys

ip

Description: IP address

Type: string

Format: ipv4-address

rate-limit

Description: Rate limit in packets per second

Type: number

Range: 1-2147483647

uuid

Description: uuid of the object

Type: string

sctp.permit-payload-protocol

Specification
Type object

protocol-id-list

Description: protocol-id-list is a JSON List . Please see below for l844_protocol-id-list

Type: List

Reference Object: /axapi/v3/cgnv6/sctp/permit-payload-protocol/protocol-id/{id}

protocol-name-list

Description: protocol-name-list is a JSON List . Please see below for l844_protocol-name-list

Type: List

Reference Object: /axapi/v3/cgnv6/sctp/permit-payload-protocol/protocol-name/{protocol}

sctp.permit-payload-protocol.protocol-id-list

Specification
Type list
Block object keys

id

Description: Specify SCTP permitted payload protocol IDs

Type: number

Range: 1-63

uuid

Description: uuid of the object

Type: string

sctp.permit-payload-protocol.protocol-name-list

Specification
Type list
Block object keys

protocol

Description: ‘iua’: IUA; ‘m2ua’: M2UA; ‘m3ua’: M3UA; ‘sua’: SUA; ‘m2pa’: M2PA; ‘h.323’: H.323;

Type: string

Supported Values: iua, m2ua, m3ua, sua, m2pa, h.323

uuid

Description: uuid of the object

Type: string

dns64

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

dns64.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘query’: Query; ‘query-bad-pkt’: Query Bad Packet; ‘query-chg’: Query Changed; ‘query-parallel’: Query Parallel; ‘query-passive’: Query Passive; ‘resp’: Response; ‘resp-bad-pkt’: Response Bad Packet; ‘resp-bad-qr’: Response Bad Query; ‘resp-chg’: Response Changed; ‘resp-err’: Response Error; ‘resp-empty’: Response Empty; ‘resp-local’: Response Local; ‘adjust’: Translated; ‘cache’: Cache; ‘drop’: Dropped;

Type: string

Supported Values: all, query, query-bad-pkt, query-chg, query-parallel, query-passive, resp, resp-bad-pkt, resp-bad-qr, resp-chg, resp-err, resp-empty, resp-local, adjust, cache, drop

nat46-stateless

Specification
Type object

fragmentation

Description: fragmentation is a JSON Block . Please see below for l844_fragmentation

Type: Object

Reference Object: /axapi/v3/cgnv6/nat46-stateless/fragmentation

global

Description: global is a JSON Block . Please see below for global

Type: Object

Reference Object: /axapi/v3/cgnv6/nat46-stateless/global

prefix

Description: prefix is a JSON Block . Please see below for l844_prefix

Type: Object

Reference Object: /axapi/v3/cgnv6/nat46-stateless/prefix

static-dest-mapping-list

Description: static-dest-mapping-list is a JSON List . Please see below for l844_static-dest-mapping-list

Type: List

Reference Object: /axapi/v3/cgnv6/nat46-stateless/static-dest-mapping/{v4-address}+{v6-address}

nat46-stateless.static-dest-mapping-list

Specification
Type list
Block object keys

count

Description: Set number of consecutive mappings (Number of mappings)

Type: number

uuid

Description: uuid of the object

Type: string

v4-address

Description: IPv4 address

Type: string

Format: ipv4-address

v6-address

Description: IPv6 address

Type: string

Format: ipv6-address

vrid

Description: VRRP-A vrid (Specify ha VRRP-A vrid)

Type: number

Range: 1-31

nat46-stateless.fragmentation

Specification
Type object

inbound

Description: inbound is a JSON Block . Please see below for l844_inbound

Type: Object

Reference Object: /axapi/v3/cgnv6/nat46-stateless/fragmentation/inbound

outbound

Description: outbound is a JSON Block . Please see below for l844_outbound

Type: Object

Reference Object: /axapi/v3/cgnv6/nat46-stateless/fragmentation/outbound

nat46-stateless.fragmentation.inbound

Specification
Type object

action

Description: ‘drop’: Drop Silently; ‘ipv4’: Use IPv4 fragmentation for oversize packets (default); ‘send-icmpv6’: Send ICMP Type 2 Code 0 (Packet Too Big);

Type: string

Supported Values: drop, ipv4, send-icmpv6

Default: ipv4

uuid

Description: uuid of the object

Type: string

nat46-stateless.fragmentation.outbound

Specification
Type object

action

Description: ‘drop’: Drop Silently; ‘ipv6’: Use IPv6 Fragmentation for oversize packets (default);

Type: string

Supported Values: drop, ipv6

Default: ipv6

count

Description: Configure number of ICMP messages sent when DF set. Default is 1

Type: number

Range: 1-5

Default: 1

df-set

Description: ‘drop’: Drop Silently; ‘ipv6’: Use IPv6 Fragmentation for oversize packets; ‘send-icmp’: Send ICMP Type 3 Code 4 (Fragmentation Needed and DF Set) (default);

Type: string

Supported Values: drop, ipv6, send-icmp

Default: send-icmp

uuid

Description: uuid of the object

Type: string

nat46-stateless.global

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l844_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

nat46-stateless.global.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘outbound_ipv4_received’: Outbound IPv4 packets received; ‘outbound_ipv4_drop’: Outbound IPv4 packets dropped; ‘outbound_ipv4_fragment_received’: Outbound IPv4 fragment packets received; ‘outbound_ipv6_unreachable’: Outbound IPv6 destination unreachable; ‘outbound_ipv6_fragmented’: Outbound IPv6 packets fragmented; ‘inbound_ipv6_received’: Inbound IPv6 packets received; ‘inbound_ipv6_drop’: Inbound IPv6 packets dropped; ‘inbound_ipv6_fragment_received’: Inbound IPv6 fragment packets received; ‘inbound_ipv4_unreachable’: Inbound IPv4 destination unreachable; ‘inbound_ipv4_fragmented’: Inbound IPv4 packets fragmented; ‘packet_too_big’: Packet too big; ‘fragment_error’: Fragment processing errors; ‘icmpv6_to_icmp’: ICMPv6 to ICMP; ‘icmpv6_to_icmp_error’: ICMPv6 to ICMP errors; ‘icmp_to_icmpv6’: ICMP to ICMPv6; ‘icmp_to_icmpv6_error’: ICMP to ICMPv6 errors; ‘ha_standby’: HA is standby; ‘other_error’: Other errors;

Type: string

Supported Values: all, outbound_ipv4_received, outbound_ipv4_drop, outbound_ipv4_fragment_received, outbound_ipv6_unreachable, outbound_ipv6_fragmented, inbound_ipv6_received, inbound_ipv6_drop, inbound_ipv6_fragment_received, inbound_ipv4_unreachable, inbound_ipv4_fragmented, packet_too_big, fragment_error, icmpv6_to_icmp, icmpv6_to_icmp_error, icmp_to_icmpv6, icmp_to_icmpv6_error, ha_standby, other_error

nat46-stateless.prefix

Specification
Type object

ipv6-prefix

Description: IPv6 prefix

Type: string

Format: ipv6-address-plen

uuid

Description: uuid of the object

Type: string

lsn-rule-list-list

Specification
Type list
Block object keys

default

Description: default is a JSON Block . Please see below for l844_default

Type: Object

Reference Object: /axapi/v3/cgnv6/lsn-rule-list/{name}/default

domain-name-list

Description: domain-name-list is a JSON List . Please see below for l844_domain-name-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn-rule-list/{name}/domain-name/{name-domain}

ip-list

Description: ip-list is a JSON List . Please see below for l844_ip-list

Type: List

Reference Object: /axapi/v3/cgnv6/lsn-rule-list/{name}/ip/{ipv4-addr}

name

Description: LSN Rule-List Name

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

lsn-rule-list-list.default

Specification
Type object

rule-cfg

Description: rule-cfg is a JSON List . Please see below for l844_rule-cfg

Type: List

uuid

Description: uuid of the object

Type: string

lsn-rule-list-list.default.rule-cfg

Specification
Type list
Block object keys

dscp-cfg

Description: dscp-cfg is a JSON Block . Please see below for l844_dscp-cfg

Type: Object

icmp-others-cfg

Description: icmp-others-cfg is a JSON Block . Please see below for l844_icmp-others-cfg

Type: Object

proto

Description: ‘tcp’: TCP L4 Protoco; ‘udp’: UDP L4 Protocol; ‘icmp’: ICMP L4 Protocol; ‘others’: Other L4 Protocl; ‘dscp’: Match dscp value;

Type: string

Supported Values: tcp, udp, icmp, others, dscp

tcp-cfg

Description: tcp-cfg is a JSON Block . Please see below for l844_tcp-cfg

Type: Object

udp-cfg

Description: udp-cfg is a JSON Block . Please see below for l844_udp-cfg

Type: Object

lsn-rule-list-list.default.rule-cfg.dscp-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action;

Type: string

Supported Values: action

action-type

Description: ‘set-dscp’: To set dscp value for the packets;

Type: string

Supported Values: set-dscp

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-match

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘any’: Match any dscp value; ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, any, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

lsn-rule-list-list.default.rule-cfg.tcp-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action; ‘no-action’: Exclude LSN Rule-List Action;

Type: string

Supported Values: action, no-action

action-type

Description: ‘dnat’: Apply Dest NAT; ‘drop’: Drop the Packets; ‘pass-through’: Pass the Packets Through; ‘snat’: Redirect the Packets to a Different Source NAT Pool; ‘set-dscp’: To set dscp value for the packets; ‘template’: Template;

Type: string

Supported Values: dnat, drop, pass-through, snat, set-dscp, template

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

end-port

Description: End of Port Range (inclusive)

Type: number

Range: 1-65535

http-alg

Description: HTTP-ALG Template (Template Name)

Type: string

Format: string-rlx

ipv4-list

Description: IP-List (IP-List Name)

Type: string

Format: string-rlx

pool

Description: NAT Pool (NAT Pool or Pool Group)

Type: string

Format: string-rlx

shared

Description: The pool is a shared pool

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

start-port

Description: Single Port or Start of Port Range (inclusive), Port 0 is Match Any Port

Type: number

Range: 0-65535

lsn-rule-list-list.default.rule-cfg.udp-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action; ‘no-action’: Exclude LSN Rule-List Action;

Type: string

Supported Values: action, no-action

action-type

Description: ‘dnat’: Apply Dest NAT; ‘drop’: Drop the Packets; ‘pass-through’: Pass the Packets Through; ‘snat’: Redirect the Packets to a Different Source NAT Pool; ‘set-dscp’: To set dscp value for the packets;

Type: string

Supported Values: dnat, drop, pass-through, snat, set-dscp

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

end-port

Description: End of Port Range (inclusive)

Type: number

Range: 1-65535

ipv4-list

Description: IP-List (IP-List Name)

Type: string

Format: string-rlx

pool

Description: NAT Pool (NAT Pool or Pool Group)

Type: string

Format: string-rlx

shared

Description: The pool is a shared pool

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

start-port

Description: Single Port or Start of Port Range (inclusive), Port 0 is Match Any Port

Type: number

Range: 0-65535

lsn-rule-list-list.default.rule-cfg.icmp-others-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action; ‘no-action’: Exclude LSN Rule-List Action;

Type: string

Supported Values: action, no-action

action-type

Description: ‘dnat’: Apply Dest NAT; ‘drop’: Drop the Packets; ‘pass-through’: Pass the Packets Through; ‘snat’: Redirect the Packets to a Different Source NAT Pool; ‘set-dscp’: To set dscp value for the packets;

Type: string

Supported Values: dnat, drop, pass-through, snat, set-dscp

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

ipv4-list

Description: IP-List (IP-List Name)

Type: string

Format: string-rlx

pool

Description: NAT Pool (NAT Pool or Pool Group)

Type: string

Format: string-rlx

shared

Description: The pool is a shared pool

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

lsn-rule-list-list.ip-list

Specification
Type list
Block object keys

ipv4-addr

Description: Configure a Specific Rule-Set (IP Network Address)

Type: string

Format: ipv4-cidr

rule-cfg

Description: rule-cfg is a JSON List . Please see below for l844_rule-cfg

Type: List

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

lsn-rule-list-list.ip-list.rule-cfg

Specification
Type list
Block object keys

dscp-cfg

Description: dscp-cfg is a JSON Block . Please see below for l844_dscp-cfg

Type: Object

icmp-others-cfg

Description: icmp-others-cfg is a JSON Block . Please see below for l844_icmp-others-cfg

Type: Object

proto

Description: ‘tcp’: TCP L4 Protoco; ‘udp’: UDP L4 Protocol; ‘icmp’: ICMP L4 Protocol; ‘others’: Other L4 Protocl; ‘dscp’: Match dscp value;

Type: string

Supported Values: tcp, udp, icmp, others, dscp

tcp-cfg

Description: tcp-cfg is a JSON Block . Please see below for l844_tcp-cfg

Type: Object

udp-cfg

Description: udp-cfg is a JSON Block . Please see below for l844_udp-cfg

Type: Object

lsn-rule-list-list.ip-list.rule-cfg.dscp-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action;

Type: string

Supported Values: action

action-type

Description: ‘set-dscp’: To set dscp value for the packets;

Type: string

Supported Values: set-dscp

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-match

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘any’: Match any dscp value; ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, any, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

lsn-rule-list-list.ip-list.rule-cfg.tcp-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action; ‘no-action’: Exclude LSN Rule-List Action;

Type: string

Supported Values: action, no-action

action-type

Description: ‘dnat’: Apply Dest NAT; ‘drop’: Drop the Packets; ‘one-to-one-snat’: Apply one-to-one source NAT for the packets; ‘pass-through’: Pass the Packets Through; ‘snat’: Redirect the Packets to a Different Source NAT Pool; ‘set-dscp’: To set dscp value for the packets; ‘template’: Template; ‘idle-timeout’: Configure idle timeout;

Type: string

Supported Values: dnat, drop, one-to-one-snat, pass-through, snat, set-dscp, template, idle-timeout

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

end-port

Description: End of Port Range (inclusive)

Type: number

Range: 1-65535

fast

Description: ‘fast’: Fast Aging;

Type: string

Supported Values: fast

http-alg

Description: HTTP-ALG Template (Template Name)

Type: string

Format: string-rlx

ipv4-list

Description: IP-List (IP-List Name)

Type: string

Format: string-rlx

pool

Description: NAT Pool (NAT Pool or Pool Group)

Type: string

Format: string-rlx

shared

Description: The pool is a shared pool

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

start-port

Description: Single Port or Start of Port Range (inclusive), Port 0 is Match Any Port

Type: number

Range: 0-65535

timeout-val

Description: Timeout in seconds

Type: number

Range: 2-15000

lsn-rule-list-list.ip-list.rule-cfg.udp-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action; ‘no-action’: Exclude LSN Rule-List Action;

Type: string

Supported Values: action, no-action

action-type

Description: ‘dnat’: Apply Dest NAT; ‘drop’: Drop the Packets; ‘one-to-one-snat’: Apply one-to-one source NAT for the packets; ‘pass-through’: Pass the Packets Through; ‘snat’: Redirect the Packets to a Different Source NAT Pool; ‘set-dscp’: To set dscp value for the packets; ‘idle-timeout’: Configure idle timeout;

Type: string

Supported Values: dnat, drop, one-to-one-snat, pass-through, snat, set-dscp, idle-timeout

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

end-port

Description: End of Port Range (inclusive)

Type: number

Range: 1-65535

fast

Description: ‘fast’: Fast Aging;

Type: string

Supported Values: fast

ipv4-list

Description: IP-List (IP-List Name)

Type: string

Format: string-rlx

pool

Description: NAT Pool (NAT Pool or Pool Group)

Type: string

Format: string-rlx

shared

Description: The pool is a shared pool

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

start-port

Description: Single Port or Start of Port Range (inclusive), Port 0 is Match Any Port

Type: number

Range: 0-65535

timeout-val

Description: Timeout in seconds

Type: number

Range: 2-15000

lsn-rule-list-list.ip-list.rule-cfg.icmp-others-cfg

Specification
Type object

action-cfg

Description: ‘action’: LSN Rule-List Action; ‘no-action’: Exclude LSN Rule-List Action;

Type: string

Supported Values: action, no-action

action-type

Description: ‘dnat’: Apply Dest NAT; ‘drop’: Drop the Packets; ‘one-to-one-snat’: Apply one-to-one source NAT for the packets; ‘pass-through’: Pass the Packets Through; ‘snat’: Redirect the Packets to a Different Source NAT Pool; ‘set-dscp’: To set dscp value for the packets;

Type: string

Supported Values: dnat, drop, one-to-one-snat, pass-through, snat, set-dscp

dscp-direction

Description: ‘inbound’: To set dscp value for inbound packets; ‘outbound’: To set dscp value for outbound packets;

Type: string

Supported Values: inbound, outbound

dscp-value

Description: ‘default’: Default dscp (000000); ‘af11’: AF11 (001010); ‘af12’: AF12 (001100); ‘af13’: AF13 (001110); ‘af21’: AF21 (010010); ‘af22’: AF22 (010100); ‘af23’: AF23 (010110); ‘af31’: AF31 (011010); ‘af32’: AF32 (011100); ‘af33’: AF33 (011110); ‘af41’: AF41 (100010); ‘af42’: AF42 (100100); ‘af43’: AF43 (100110); ‘cs1’: CS1 (001000); ‘cs2’: CS2 (010000); ‘cs3’: CS3 (011000); ‘cs4’: CS4 (100000); ‘cs5’: CS5 (101000); ‘cs6’: CS6 (110000); ‘cs7’: CS7 (111000); ‘ef’: EF (101110); ‘0’: 000000; ‘1’: 000001; ‘2’: 000010; ‘3’: 000011; ‘4’: 000100; ‘5’: 000101; ‘6’: 000110; ‘7’: 000111; ‘8’: 001000; ‘9’: 001001; ‘10’: 001010; ‘11’: 001011; ‘12’: 001100; ‘13’: 001101; ‘14’: 001110; ‘15’: 001111; ‘16’: 010000; ‘17’: 010001; ‘18’: 010010; ‘19’: 010011; ‘20’: 010100; ‘21’: 010101; ‘22’: 010110; ‘23’: 010111; ‘24’: 011000; ‘25’: 011001; ‘26’: 011010; ‘27’: 011011; ‘28’: 011100; ‘29’: 011101; ‘30’: 011110; ‘31’: 011111; ‘32’: 100000; ‘33’: 100001; ‘34’: 100010; ‘35’: 100011; ‘36’: 100100; ‘37’: 100101; ‘38’: 100110; ‘39’: 100111; ‘40’: 101000; ‘41’: 101001; ‘42’: 101010; ‘43’: 101011; ‘44’: 101100; ‘45’: 101101; ‘46’: 101110; ‘47’: 101111; ‘48’: 110000; ‘49’: 110001; ‘50’: 110010; ‘51’: 110011; ‘52’: 110100; ‘53’: 110101; ‘54’: 110110; ‘55’: 110111; ‘56’: 111000; ‘57’: 111001; ‘58’: 111010; ‘59’: 111011; ‘60’: 111100; ‘61’: 111101; ‘62’: 111110; ‘63’: 111111;

Type: string

Supported Values: default, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63

ipv4-list

Description: IP-List (IP-List Name)

Type: string

Format: string-rlx

pool

Description: NAT Pool (NAT Pool or Pool Group)

Type: string

Format: string-rlx

shared

Description: The pool is a shared pool