csit/variables/gbp/3node/master/tenant1.json

   1 {
   2   "policy:tenant": {
   3     "id": "tenant-red",
   4     "name": "GBPPOC",
   5     "forwarding-context": {
   6       "l2-bridge-domain": [
   7         {
   8           "id": "bridge-domain1",
   9           "parent": "l3-context-vrf-red"
  10         }
  11       ],
  12       "l2-flood-domain": [
  13         {
  14           "id": "flood-domain-1",
  15           "parent": "bridge-domain1"
  16         },
  17         {
  18           "id": "flood-domain1",
  19           "parent": "bridge-domain1"
  20         }
  21       ],
  22       "l3-context": [
  23         {
  24           "id": "l3-context-vrf-red"
  25         }
  26       ],
  27       "subnet": [
  28         {
  29           "id": "subnet-10.0.35.0/24",
  30           "ip-prefix": "10.0.35.1/24",
  31           "parent": "flood-domain-1",
  32           "virtual-router-ip": "10.0.35.1"
  33         },
  34         {
  35           "id": "subnet-10.0.36.0/24",
  36           "ip-prefix": "10.0.36.1/24",
  37           "parent": "flood-domain1",
  38           "virtual-router-ip": "10.0.36.1"
  39         }
  40       ]
  41     },
  42     "policy": {
  43       "contract": [
  44         {
  45           "clause": [
  46             {
  47               "name": "allow-http-clause",
  48               "subject-refs": [
  49                 "allow-http-subject",
  50                 "allow-icmp-subject"
  51               ]
  52             }
  53           ],
  54           "id": "icmp-http-contract",
  55           "subject": [
  56             {
  57               "name": "allow-http-subject",
  58               "rule": [
  59                 {
  60                   "classifier-ref": [
  61                     {
  62                       "direction": "in",
  63                       "name": "http-dest",
  64                       "instance-name": "http-dest"
  65                     },
  66                     {
  67                       "direction": "out",
  68                       "name": "http-src",
  69                       "instance-name": "http-src"
  70                     }
  71                   ],
  72                   "action-ref": [
  73                     {
  74                       "name": "allow1",
  75                       "order": 0
  76                     }
  77                   ],
  78                   "name": "allow-http-rule"
  79                 }
  80               ]
  81             },
  82             {
  83               "name": "allow-icmp-subject",
  84               "rule": [
  85                 {
  86                   "classifier-ref": [
  87                     {
  88                       "name": "icmp",
  89                       "instance-name": "icmp"
  90                     }
  91                   ],
  92                   "action-ref": [
  93                     {
  94                       "name": "allow1",
  95                       "order": 0
  96                     }
  97                   ],
  98                   "name": "allow-icmp-rule"
  99                 }
 100               ]
 101             }
 102           ]
 103         }
 104       ],
 105       "endpoint-group": [
 106         {
 107           "consumer-named-selector": [
 108             {
 109               "contract": [
 110                 "icmp-http-contract"
 111               ],
 112               "name": "webservers-clients-icmp-http-contract"
 113             }
 114           ],
 115           "id": "clients",
 116           "provider-named-selector": []
 117         },
 118         {
 119           "consumer-named-selector": [],
 120           "id": "webservers",
 121           "provider-named-selector": [
 122             {
 123               "contract": [
 124                 "icmp-http-contract"
 125               ],
 126               "name": "webservers-clients-icmp-http-contract"
 127             }
 128           ]
 129         }
 130       ],
 131       "subject-feature-instances": {
 132         "classifier-instance": [
 133           {
 134             "classifier-definition-id": "Classifier-L4",
 135             "name": "http-dest",
 136             "parameter-value": [
 137               {
 138                 "int-value": "6",
 139                 "name": "proto"
 140               },
 141               {
 142                 "int-value": "80",
 143                 "name": "destport"
 144               }
 145             ]
 146           },
 147           {
 148             "classifier-definition-id": "Classifier-L4",
 149             "name": "http-src",
 150             "parameter-value": [
 151               {
 152                 "int-value": "6",
 153                 "name": "proto"
 154               },
 155               {
 156                 "int-value": "80",
 157                 "name": "sourceport"
 158               }
 159             ]
 160           },
 161           {
 162             "classifier-definition-id": "Classifier-IP-Protocol",
 163             "name": "icmp",
 164             "parameter-value": [
 165               {
 166                 "int-value": "1",
 167                 "name": "proto"
 168               }
 169             ]
 170           }
 171         ],
 172         "action-instance": [
 173           {
 174             "name": "allow1",
 175             "action-definition-id": "Action-Allow"
 176           }
 177         ]
 178       }
 179     }
 180   }
 181 }