csit/variables/gbp/3node/master/tenant2.json

   1 {
   2     "policy:tenant": {
   3         "contract": [
   4             {
   5                 "clause": [
   6                     {
   7                         "name": "allow-http-clause",
   8                         "subject-refs": [
   9                             "allow-http-subject",
  10                             "allow-icmp-subject"
  11                         ]
  12                     }
  13                 ],
  14                 "id": "icmp-http-contract",
  15                 "subject": [
  16                     {
  17                         "name": "allow-http-subject",
  18                         "rule": [
  19                             {
  20                                 "classifier-ref": [
  21                                     {
  22                                         "direction": "in",
  23                                         "name": "http-dest",
  24                                         "instance-name": "http-dest"
  25                                     },
  26                                     {
  27                                         "direction": "out",
  28                                         "name": "http-src",
  29                                         "instance-name": "http-src"
  30                                     }
  31                                 ],
  32                                 "action-ref": [
  33                                     {
  34                                         "name": "allow1",
  35                                         "order": 0
  36                                     }
  37                                 ],
  38                                 "name": "allow-http-rule"
  39                             }
  40                         ]
  41                     },
  42                     {
  43                         "name": "allow-icmp-subject",
  44                         "rule": [
  45                             {
  46                                 "classifier-ref": [
  47                                     {
  48                                         "name": "icmp",
  49                                         "instance-name": "icmp"
  50                                     }
  51                                 ],
  52                                 "action-ref": [
  53                                     {
  54                                         "name": "allow1",
  55                                         "order": 0
  56                                     }
  57                                 ],
  58                                 "name": "allow-icmp-rule"
  59                             }
  60                         ]
  61                     }
  62                 ]
  63             }
  64         ],
  65         "endpoint-group": [
  66             {
  67                 "consumer-named-selector": [
  68                     {
  69                         "contract": [
  70                             "icmp-http-contract"
  71                         ],
  72                         "name": "webservers-clients-icmp-http-contract"
  73                     }
  74                 ],
  75                 "id": "clients",
  76                 "provider-named-selector": []
  77             },
  78             {
  79                 "consumer-named-selector": [],
  80                 "id": "webservers",
  81                 "provider-named-selector": [
  82                     {
  83                         "contract": [
  84                             "icmp-http-contract"
  85                         ],
  86                         "name": "webservers-clients-icmp-http-contract"
  87                     }
  88                 ]
  89             }
  90         ],
  91         "id": "tenant-blue",
  92         "l2-bridge-domain": [
  93             {
  94                 "id": "bridge-domain1",
  95                 "parent": "l3-context-vrf-red"
  96             }
  97         ],
  98         "l2-flood-domain": [
  99             {
 100                 "id": "flood-domain-1",
 101                 "parent": "bridge-domain1"
 102             },
 103             {
 104                 "id": "flood-domain1",
 105                 "parent": "bridge-domain1"
 106             }
 107         ],
 108         "l3-context": [
 109             {
 110                 "id": "l3-context-vrf-red"
 111             }
 112         ],
 113         "name": "GBPPOC",
 114         "subject-feature-instances": {
 115             "classifier-instance": [
 116                 {
 117                     "classifier-definition-id": "Classifier-L4",
 118                     "name": "http-dest",
 119                     "parameter-value": [
 120                         {
 121                             "int-value": "6",
 122                             "name": "proto"
 123                         },
 124                         {
 125                             "int-value": "80",
 126                             "name": "destport"
 127                         }
 128                     ]
 129                 },
 130                 {
 131                     "classifier-definition-id": "Classifier-L4",
 132                     "name": "http-src",
 133                     "parameter-value": [
 134                         {
 135                             "int-value": "6",
 136                             "name": "proto"
 137                         },
 138                         {
 139                             "int-value": "80",
 140                             "name": "sourceport"
 141                         }
 142                     ]
 143                 },
 144                 {
 145                     "classifier-definition-id": "Classifier-IP-Protocol",
 146                     "name": "icmp",
 147                     "parameter-value": [
 148                         {
 149                             "int-value": "1",
 150                             "name": "proto"
 151                         }
 152                     ]
 153                 }
 154             ],
 155             "action-instance": [
 156                 {
 157                     "name": "allow1",
 158                     "action-definition-id": "Action-Allow"
 159                 }
 160             ]
 161         },
 162         "subnet": [
 163             {
 164                 "id": "subnet-10.0.35.0/24",
 165                 "ip-prefix": "10.0.35.1/24",
 166                 "parent": "flood-domain-1",
 167                 "virtual-router-ip": "10.0.35.1"
 168             },
 169             {
 170                 "id": "subnet-10.0.36.0/24",
 171                 "ip-prefix": "10.0.36.1/24",
 172                 "parent": "flood-domain1",
 173                 "virtual-router-ip": "10.0.36.1"
 174             }
 175         ]
 176     }
 177 }