ietf-i2nsf-consumer-facing-interface
HTML
ietf-i2nsf-consumer-facing-interface@2017-07-03
module ietf-i2nsf-consumer-facing-interface { yang-version 1; namespace "urn:ietf:params:xml:ns:yang:ietf-i2nsf-consumer-facing-interface"; prefix capability-interface; import ietf-yang-types { prefix inet; } import ietf-yang-types { prefix yang; } organization "IETF I2NSF (Interface to Network Security Functions) Working Group"; contact "WG Web: <http://tools.ietf.org/wg/i2nsf> WG List: <mailto:i2nsf@ietf.org> WG Chair: Adrian Farrel <mailto:Adrain@olddog.co.uk> WG Chair: Linda Dunbar <mailto:Linda.duhbar@huawei.com> Editor: Jaehoon Paul Jeong <mailto:pauljeong@skku.edu>"; description "This module defines a YANG data module for consumer-facing interface to security controller."; revision "2017-07-03" { description "Initial revision"; reference "draft-kumar-i2nsf-client-facing-interface-im-02"; } container policy-instance { description "this describes the policy instances."; list policy-rule { key "policy-rule-id"; description "This represents the policy-rule of a policy instance."; leaf policy-rule-id { type uint16; description "policy rule id."; } leaf name { type string; description "Name of the policy-rule."; } leaf date { type yang:date-and-time; description "The date when the rule was created."; } leaf source { type string; description "This references either end-point-group, threat-feed, or custom-list."; } leaf destination { type string; description "This references either end-point-group, threat-feed, or custom-list."; } leaf exception { type boolean; description "This describes whether an exception has occurred or not."; } leaf exception-detail { type string; description "This includes detailed information about source and destination of an exception."; } } // list policy-rule list action { key "action-id"; description "This represents the action of a policy-rule."; leaf action-id { type string; mandatory true; description "This represents the action-id of a policy-rule."; } leaf name { type string; description "The action name."; } leaf date { type yang:date-and-time; description "When the action was taken."; } leaf primary-action { type string; description "This includes actions such as permit, mirroring, rate-limit, ips, app-firewall, auth-session, and etc"; } leaf secondary-action { type string; description "This includes optional actions such as logging, system logging and session logging."; } } // list action list precedence { key "precedence-id"; description "This describes whether there is a preceeding rule and causes problems."; leaf precedence-id { type string; mandatory true; description "This represent the precedence-id of a policy-rule."; } leaf rule-exist { type boolean; description "This determines whether there is a preceeding."; } } // list precedence list event { key "event-id"; description "This represents the security event of a policy-rule."; leaf event-id { type string; mandatory true; description "This represents the event-id."; } leaf security-event { type string; description "This references the security event in the threat-prevention ."; } leaf threat-map { type string; description "This references the threat-map in the threat-prevention."; } leaf enable { type boolean; description "This determines whether the condition matches the security event or not."; } } // list event list condition { key "condition-id"; description "This represents the condition of a policy-rule."; leaf condition-id { type string; description "This represents the condition-id."; } list caller { key "caller-id"; description "this represents the list of callers."; leaf caller-id { type uint16; description "the id of the caller."; } leaf caller-id-id { type string; description "The caller's number."; } leaf caller-country { type string; description "This determines the country of the caller."; } leaf caller-city { type string; description "This determines the city of the caller."; } } // list caller list callee { key "callee-id"; description "this represents the list of callees"; leaf callee-id { type uint16; description "The id of the callee."; } leaf callee-id-id { type string; description "The callee's number."; } leaf callee-country { type string; description "This determines the country of the callee."; } leaf callee-city { type string; description "This determines the city of the callee."; } } // list callee } // list condition list policy-calendar { key "policy-calendar-id"; description "this represents the policy calendar list."; leaf policy-calendar-id { type uint16; description "The id of the policy calendar."; } leaf name { type string; description "The name of the policy-calendar."; } leaf date { type yang:date-and-time; description "The date when this calender was created or last modified."; } leaf enforcement-type { type string; description "Whether the policy enforcement is admin-enforced, time-enforced, or event-enforced."; } leaf begin-time { type yang:date-and-time; description "The starting time for blocking suspicious calls."; } leaf end-time { type yang:date-and-time; description "The time when blocking ends."; } } // list policy-calendar } // container policy-instance } // module ietf-i2nsf-consumer-facing-interface
Summary
Organization | IETF I2NSF (Interface to Network Security Functions) Working Group |
Module | ietf-i2nsf-consumer-facing-interface |
Version | 2017-07-03 |
File | ietf-i2nsf-consumer-facing-interface@2017-07-03.yang |
Prefix | capability-interface |
Namespace | urn:ietf:params:xml:ns:yang:ietf-i2nsf-consumer-facing-interface |
Cooked | /cookedmodules/ietf-i2nsf-consumer-facing-interface/2017-07-03 |
YANG | /src/ietf-i2nsf-consumer-facing-interface@2017-07-03.yang |
XSD | /xsd/ietf-i2nsf-consumer-facing-interface@2017-07-03.xsd |
Abstract | This module defines a YANG data module for consumer-facing interface to security controller. |
Contact | WG Web: <http://tools.ietf.org/wg/i2nsf> WG List: <mailto:i2nsf@ietf.org> WG Chair: Adrian Farrel <mailto:Adrain@olddog.co.uk> WG Chair: Linda Dunbar <mailto:Linda.duhbar@huawei.com> Editor: Jaehoon Paul Jeong <mailto:pauljeong@skku.edu> |
Description
This module defines a YANG data module for consumer-facing interface to security controller. |
Objects
Type Key |
Mandatory config |
Optional config |
Not config |
Object | Type | Abstract |
policy-instance | container | this describes the policy instances. |
action | list | This represents the action of a policy-rule. |
action-id | leaf | This represents the action-id of a policy-rule. |
date | leaf | When the action was taken. |
name | leaf | The action name. |
primary-action | leaf | This includes actions such as permit, mirroring, rate-limit, ips, app-firewall, auth-session, and etc |
secondary-action | leaf | This includes optional actions such as logging, system logging and session logging. |
condition | list | This represents the condition of a policy-rule. |
callee | list | this represents the list of callees |
callee-city | leaf | This determines the city of the callee. |
callee-country | leaf | This determines the country of the callee. |
callee-id | leaf | The id of the callee. |
callee-id-id | leaf | The callee's number. |
caller | list | this represents the list of callers. |
caller-city | leaf | This determines the city of the caller. |
caller-country | leaf | This determines the country of the caller. |
caller-id | leaf | the id of the caller. |
caller-id-id | leaf | The caller's number. |
condition-id | leaf | This represents the condition-id. |
event | list | This represents the security event of a policy-rule. |
enable | leaf | This determines whether the condition matches the security event or not. |
event-id | leaf | This represents the event-id. |
security-event | leaf | This references the security event in the threat-prevention . |
threat-map | leaf | This references the threat-map in the threat-prevention. |
policy-calendar | list | this represents the policy calendar list. |
begin-time | leaf | The starting time for blocking suspicious calls. |
date | leaf | The date when this calender was created or last modified. |
end-time | leaf | The time when blocking ends. |
enforcement-type | leaf | Whether the policy enforcement is admin-enforced, time-enforced, or event-enforced. |
name | leaf | The name of the policy-calendar. |
policy-calendar-id | leaf | The id of the policy calendar. |
policy-rule | list | This represents the policy-rule of a policy instance. |
date | leaf | The date when the rule was created. |
destination | leaf | This references either end-point-group, threat-feed, or custom-list. |
exception | leaf | This describes whether an exception has occurred or not. |
exception-detail | leaf | This includes detailed information about source and destination of an exception. |
name | leaf | Name of the policy-rule. |
policy-rule-id | leaf | policy rule id. |
source | leaf | This references either end-point-group, threat-feed, or custom-list. |
precedence | list | This describes whether there is a preceeding rule and causes problems. |
precedence-id | leaf | This represent the precedence-id of a policy-rule. |
rule-exist | leaf | This determines whether there is a preceeding. |