raguard

asternos raguard module description asternos yang model for nd snooping yang tree diagram module asternos raguard + rw raguard + rw interfaces \| + rw interface \[name] \| + rw name cmn\ ethernet port name \| + rw role? identityref + rw policies + rw policy \[if name] + rw if name cmn\ vlan name + rw hop limit high? uint8 + rw hop limit low? uint8 + rw managed flag? boolean + rw other flag? boolean + rw prefix inet\ ipv6 prefix + rw router pref max? identityref + rw src ip inet\ ipv6 address no zone + rw src mac yang\ mac address resources resource list path access /raguard read write /raguard/interfaces read write /raguard/interfaces/interface read write /raguard/interfaces/interface/name read write /raguard/interfaces/interface/role read write /raguard/policies read write /raguard/policies/policy read write /raguard/policies/policy/if name read write /raguard/policies/policy/hop limit high read write /raguard/policies/policy/hop limit low read write /raguard/policies/policy/managed flag read write /raguard/policies/policy/other flag read write /raguard/policies/policy/prefix read write /raguard/policies/policy/router pref max read write /raguard/policies/policy/src ip read write /raguard/policies/policy/src mac read write detailed nodes /raguard path /raguard node type container description raguard configuration access read write /raguard/interfaces path /raguard/interfaces node type container description raguard interface configuration access read write /raguard/interfaces/interface path /raguard/interfaces/interface node type list description raguard interface access read write /raguard/interfaces/interface/name path /raguard/interfaces/interface/name node type leaf description interface name access read write data type /raguard/interfaces/interface/role path /raguard/interfaces/interface/role node type leaf description ra guard interface role access read write data type constraints identityref with options router none user hybrid /raguard/policies path /raguard/policies node type container description ra guard policy configuration access read write /raguard/policies/policy path /raguard/policies/policy node type list description ra guard policy access read write /raguard/policies/policy/if name path /raguard/policies/policy/if name node type leaf description interface name for configuring ra guard policy, the interfaces within this vlan must be set to hybrid role to take effect access read write data type /raguard/policies/policy/hop limit high path /raguard/policies/policy/hop limit high node type leaf description the maximum value of the hop limit in ra packet access read write data type constraints valid range 0 to 255 /raguard/policies/policy/hop limit low path /raguard/policies/policy/hop limit low node type leaf description the minimum value of the hop limit in ra packet access read write data type constraints valid range 0 to 255 /raguard/policies/policy/managed flag path /raguard/policies/policy/managed flag node type leaf description managed flag of ra packet access read write data type constraints valid in \[true, false] /raguard/policies/policy/other flag path /raguard/policies/policy/other flag node type leaf description other flag of ra packet access read write data type constraints valid in \[true, false] /raguard/policies/policy/prefix path /raguard/policies/policy/prefix node type leaf list description prefix of ra packet access read write data type constraints the ipv6 prefix type represents an ipv6 prefix the prefix length is given by the number following the slash character and must be less than or equal to 128 a prefix length value of n corresponds to an ip address mask that has n contiguous 1 bits from the most significant bit (msb) and all other bits set to 0 the canonical format of an ipv6 prefix has all bits of the ipv6 address set to zero that are not part of the ipv6 prefix furthermore, the ipv6 address is represented as defined in section 4 of rfc 5952 the definition of ipv6 prefix does not require that bits, which are not part of the prefix, are set to zero however, implementations have to return values in canonical format, which requires non prefix bits to be set to zero this means that 2001\ db8 1/64 must be accepted as a valid value but it will be converted into the canonical format 2001\ db8 /64 /raguard/policies/policy/router pref max path /raguard/policies/policy/router pref max node type leaf description the router preference priority of ra packet effective when the prf value is not greater than the set value access read write data type constraints identityref with options high low medium /raguard/policies/policy/src ip path /raguard/policies/policy/src ip node type leaf list description source ip of ra packet access read write data type constraints an ipv6 address without a zone index this type, derived from the type ipv6 address, may be used in situations where the zone is known from the context and no zone index is needed /raguard/policies/policy/src mac path /raguard/policies/policy/src mac node type leaf list description source mac of ra packet access read write data type constraints the mac address type represents an ieee 802 mac address the canonical representation uses lowercase characters in the value set and its semantics, this type is equivalent to the macaddress textual convention of the smiv2