Security group in VPP renderer

[groupbasedpolicy.git] / renderers / vpp / src / main / yang / vpp-renderer.yang

diff --git a/renderers/vpp/src/main/yang/vpp-renderer.yang b/renderers/vpp/src/main/yang/vpp-renderer.yang
index 6396208259c44b70c59c466f002eb3972a471ec9..cb6ddcb5a19c37fffcc76429a9cbba9a3d6bd10c 100644 (file)
--- a/renderers/vpp/src/main/yang/vpp-renderer.yang
+++ b/renderers/vpp/src/main/yang/vpp-renderer.yang
@@ -17,6 +17,7 @@ module vpp-renderer {
     import opendaylight-l2-types { prefix l2-types; revision-date "2013-08-27"; }
     import ietf-yang-types { prefix yang-types; revision-date "2013-07-15"; }
     import ietf-inet-types { prefix "inet-types"; }
+    import yang-ext {prefix ext; revision-date "2013-07-09";}
 
     description
         "This module is a baseline for the group-based policy vpp renderer model.";
@@ -157,4 +158,13 @@ module vpp-renderer {
             }
         }
     }
+
+    augment "/vpp-renderer:config/vpp-renderer:vpp-endpoint" {
+        ext:augment-identifier "exclude-from-policy";
+        leaf exclude-from-policy {
+            description "Device attached as an endpoint may act as network element,
+                         e.g. qrouter attached via tap interface.";
+            type empty;
+        }
+    }
 }