module Cisco-IOS-XE-sisf {

    yang-version 1;

    namespace
      "http://cisco.com/ns/yang/ios-xe/sisf";

    prefix ios-sisf;

    import cisco-semver {
      prefix cisco-semver;
    }

    organization "Cisco Systems, Inc.";

    contact
      "Cisco Systems, Inc.
     Customer Service

     Postal: 170 W Tasman Drive
     San Jose, CA 95134

     Tel: +1 1800 553-NETS

     E-mail: cs-yang@cisco.com";

    description
      "Cisco XE SISF Yang Model.
     Copyright (c) 2021 by Cisco Systems, Inc.
     All rights reserved.";

    revision "2021-07-01" {
      description
        "- Adding monitor leaf inside template/access-session container
       - Removing vlan-name leaf from the vlan-grouping";
    }

    cisco-semver:module-version "1.0.0";

    grouping vlanlist-grouping {
      container vlan {
        description
          "Vlan list for which this policy applies";
        leaf add {
          type string;
          description
            "add VLANs to the current list";
        }

        leaf except {
          type string;
          description
            "all VLANs except the following";
        }

        leaf remove {
          type string;
          description
            "remove VLANs from the current list";
        }

        leaf vlan-range {
          type string;
          description
            "VLAN IDs of the VLANs for which this policy applies";
        }

        leaf all {
          type empty;
          description "all VLANs";
        }

        leaf none {
          type empty;
          description "no VLANs";
        }
      }  // container vlan
    }  // grouping vlanlist-grouping

    grouping config-ipv6-nd-raguard-grouping {
      container raguard {
        presence
          "Attach default RA guard policy on interface";
        description
          "Configure RA guard on the interface";
        container attach-policy {
          description
            "Apply a policy for feature RA guard";
          list policy-name {
            key "policy-name";
            description
              "policy name for feature RA guard";
            leaf policy-name {
              type string;
            }

            uses vlanlist-grouping;
          }  // list policy-name
        }  // container attach-policy

        uses vlanlist-grouping;
      }  // container raguard
    }  // grouping config-ipv6-nd-raguard-grouping

    grouping config-device-tracking-grouping {
      container device-tracking {
        presence
          "Attach default device-tracking policy on interface";
        description
          "Configure device-tracking on the interface";
        container attach-policy {
          description
            "Apply a policy for feature device-tracking";
          list policy-name {
            key "policy-name";
            description
              "policy name for device tracking";
            leaf policy-name {
              type string;
            }

            uses vlanlist-grouping;
          }  // list policy-name
        }  // container attach-policy

        uses vlanlist-grouping;
      }  // container device-tracking
    }  // grouping config-device-tracking-grouping

    grouping config-source-guard-grouping {
      container source-guard {
        description
          "Configure IPv6 sourceguard";
        list policy {
          key "source-guard-policy-name";
          description
            "Configure a policy for feature sourceguard";
          leaf source-guard-policy-name {
            type string;
          }

          container validate {
            description
              "Validate the src of the received data traffic";
            leaf address-config {
              type boolean;
              default "true";
              description
                "Validate against addresses learned in NDP/DHCP traffic (default)";
            }

            leaf address {
              type empty;
              status deprecated;
              description
                "DEPRECATED: deprecated and replaced by address-config";
            }

            leaf prefix {
              type empty;
              description
                "Validate against prefixes learned in RA or DHCP-PD traffic";
            }
          }  // container validate

          container deny {
            description "Block data traffic";
            leaf global-autoconf {
              type empty;
              description
                "Drop data traffic from global autoconfigured addresses";
            }
          }  // container deny

          container permit {
            description "Allow data traffic";
            leaf link-local {
              type empty;
              description
                "Allow data traffic from all Link-local addresses";
            }
          }  // container permit

          leaf trusted {
            type empty;
            description
              "Bridge all data traffic";
          }
        }  // list policy
      }  // container source-guard
    }  // grouping config-source-guard-grouping

    grouping config-destination-guard-grouping {
      container destination-guard {
        description
          "Configure Destination guard";
        list policy {
          key "destination-guard-policy-name";
          description
            "Configure a policy for feature destguard";
          leaf destination-guard-policy-name {
            type string;
          }

          container enforcement {
            description
              "Sets the enforcement level";
            leaf always {
              type empty;
              description
                "Enforced under all conditions (default)";
            }

            leaf stressed {
              type empty;
              description
                "Enforced when system is under stress";
            }
          }  // container enforcement
        }  // list policy
      }  // container destination-guard
    }  // grouping config-destination-guard-grouping
  }  // module Cisco-IOS-XE-sisf