[{"label":"Latest (v1.0)","version":"latest"}]
nsx-vmc-policy

InlineTier01

Properties

boolean
default_rule_logging Optional

Indicates if logging should be enabled for the default whitelisting rule. This filed is deprecated and recommended to change Rule logging filed. Note that this filed is not synchornied with default logging field.


array of string
dhcp_config_paths Optional

DHCP configuration for Segments connected to Tier-0. DHCP service is configured in relay mode.


boolean
disable_firewall Optional

Disable or enable gateway fiewall.


string
failover_mode Optional

Determines the behavior when a Tier-0 instance in ACTIVE-STANDBY high-availability mode restarts after a failure. If set to PREEMPTIVE, the preferred node will take over, even if it causes another failure. If set to NON_PREEMPTIVE, then the instance that restarted will remain secondary. This property is not used when the ha_mode property is set to ACTIVE_ACTIVE. Only applicable when edge cluster is configured in Tier0 locale-service.

Possible values are: PREEMPTIVENON_PREEMPTIVE


boolean
force_whitelisting Optional

This filed is deprecated and recommended to change Rule action filed. Note that this filed is not synchornied with default rule field.


string
ha_mode Optional

Specify high-availability mode for Tier-0. Default is ACTIVE_ACTIVE.

Possible values are: ACTIVE_ACTIVEACTIVE_STANDBY


array of string as ip-cidr-block
internal_transit_subnets Optional

Specify subnets that are used to assign addresses to logical links connecting service routers and distributed routers. Only IPv4 addresses are supported. When not specified, subnet 169.254.0.0/24 is assigned by default in ACTIVE_ACTIVE HA mode or 169.254.0.0/28 in ACTIVE_STANDBY mode.


array of string
ipv6_profile_paths Optional

IPv6 NDRA and DAD profiles configuration on Tier0. Either or both NDRA and/or DAD profiles can be configured.


array of string as ip-cidr-block
transit_subnets Optional

Specify transit subnets that are used to assign addresses to logical links connecting tier-0 and tier-1s. Both IPv4 and IPv6 addresses are supported. When not specified, subnet 100.64.0.0/16 is configured by default.

JSON Example

{
	"default_rule_logging": false,
	"dhcp_config_paths": [
		"string"
	],
	"disable_firewall": false,
	"failover_mode": "PREEMPTIVE",
	"force_whitelisting": false,
	"ha_mode": "ACTIVE_ACTIVE",
	"internal_transit_subnets": [
		"string"
	],
	"ipv6_profile_paths": [
		"string"
	],
	"transit_subnets": [
		"string"
	]
}

Vendor Extensions

This class contains the following vendor extensions defined in the spec:
x-vmw-nsx-module: PolicyConnectivity
[{"label":"Latest (v1.0)","version":"latest"}]
nsx-vmc-policy
Used By

Tier0

Feedback

Was this page helpful?