External Endpoint Group

Location in GUI: Application Management » Schemas

Diagram

Class Diagram

Classes

templates (ndo.schemas)

Name	Type	Constraint	Mandatory	Default Value
external_endpoint_groups	List	`[external_endpoint_groups]`	No

external_endpoint_groups (ndo.schemas.templates)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
type	Choice	`on-premise`, `cloud`	No	`on-premise`
preferred_group	Boolean	`true`, `false`	No	`false`
vrf	Class	`[vrf]`	Yes
l3out	Class	`[l3out]`	No
application_profile	Class	`[application_profile]`	No
subnets	List	`[subnets]`	No
contracts	Class	`[contracts]`	No
selectors	List	`[selectors]`	No
sites	List	`[sites]`	No

vrf (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
schema	String		No
template	String		No

l3out (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
schema	String		No
template	String		No

application_profile (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
schema	String		No
template	String		No

subnets (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory	Default Value
prefix	IP		Yes
import_route_control	Boolean	`true`, `false`	No	`false`
export_route_control	Boolean	`true`, `false`	No	`false`
shared_route_control	Boolean	`true`, `false`	No	`false`
import_security	Boolean	`true`, `false`	No	`true`
shared_security	Boolean	`true`, `false`	No	`false`
aggregate_import	Boolean	`true`, `false`	No	`false`
aggregate_export	Boolean	`true`, `false`	No	`false`
aggregate_shared	Boolean	`true`, `false`	No	`false`

contracts (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory	Default Value
consumers	List	`[consumers]`	No
providers	List	`[providers]`	No

selectors (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
ips	List	IP	Yes

sites (ndo.schemas.templates.external_endpoint_groups)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
tenant	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No
l3out	Class	`[l3out]`	No
route_reachability	Choice	`internet`, `site-ext`	No	`internet`
selectors	List	`[selectors]`	No

consumers (ndo.schemas.templates.external_endpoint_groups.contracts)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
schema	String		No
template	String		No

providers (ndo.schemas.templates.external_endpoint_groups.contracts)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
schema	String		No
template	String		No

l3out (ndo.schemas.templates.external_endpoint_groups.sites)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
tenant	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	No
schema	String		No
template	String		No

selectors (ndo.schemas.templates.external_endpoint_groups.sites)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
ips	List	IP	Yes

Examples

On-premise External Endpoint Group:

ndo:
  schemas:
    - name: ABC
      templates:
        - name: TEMPLATE1
          external_endpoint_groups:
            - name: EXT-EPG1
              preferred_group: false
              vrf:
                name: VRF1
                schema: ABC
                template: TEMPLATE1
              subnets:
                - prefix: 0.0.0.0/0
                  import_route_control: 'yes'
                  export_route_control: 'yes'
                  shared_route_control: 'yes'
                  import_security: 'yes'
                  shared_security: 'yes'
                  aggregate_import: 'yes'
                  aggregate_export: 'yes'
                  aggregate_shared: 'yes'
                - prefix: 10.0.0.0/8
              contracts:
                consumers:
                  - name: CONTRACT1
                    schema: ABC
                    template: TEMPLATE1
                providers:
                  - name: CONTRACT1
                    schema: ABC
                    template: TEMPLATE1
              sites:
                - name: APIC1
                  tenant: MSO1
                  l3out: 
                    name: ANS-L3OUT

Azure External Endpoint Group:

ndo:
  schemas:
    - name: AZURE1
      templates:
        - name: TEMPLATE1
          external_endpoint_groups:
            - name: EXT-EPG1
              type: cloud
              vrf:
                name: VRF1
              application_profile:
                name: AP1
              selectors:
                - name: SELECTOR1
                  ips:
                    - 10.1.1.1
                    - 10.1.1.2
              sites:
                - name: AZURE-SITE1
                  selectors:
                    - name: SELECTOR2
                      ips:
                        - 10.1.1.3
                        - 10.1.1.4