raguard

AsterNOS YANG Model for ND Snooping.

module: asternos-raguard
  +--rw raguard
     +--rw interfaces
     |  +--rw interface* [name]
     |     +--rw name    cmn:ethernet-port-name
     |     +--rw role?   identityref
     +--rw policies
        +--rw policy* [if-name]
           +--rw if-name            cmn:vlan-name
           +--rw hop-limit-high?    uint8
           +--rw hop-limit-low?     uint8
           +--rw managed-flag?      boolean
           +--rw other-flag?        boolean
           +--rw prefix*            inet:ipv6-prefix
           +--rw router-pref-max?   identityref
           +--rw src-ip*            inet:ipv6-address-no-zone
           +--rw src-mac*           yang:mac-address

Resources

Resource List

Path	Access
/raguard	Read-Write
/raguard/interfaces	Read-Write
/raguard/interfaces/interface	Read-Write
/raguard/interfaces/interface/name	Read-Write
/raguard/interfaces/interface/role	Read-Write
/raguard/policies	Read-Write
/raguard/policies/policy	Read-Write
/raguard/policies/policy/if-name	Read-Write
/raguard/policies/policy/hop-limit-high	Read-Write
/raguard/policies/policy/hop-limit-low	Read-Write
/raguard/policies/policy/managed-flag	Read-Write
/raguard/policies/policy/other-flag	Read-Write
/raguard/policies/policy/prefix	Read-Write
/raguard/policies/policy/router-pref-max	Read-Write
/raguard/policies/policy/src-ip	Read-Write
/raguard/policies/policy/src-mac	Read-Write

Detailed Nodes

/raguard

Path

/raguard

Node Type

container

Description

raguard configuration.

Access

Read-Write

/raguard/interfaces

Path

/raguard/interfaces

Node Type

container

Description

raguard interface configuration.

Access

Read-Write

/raguard/interfaces/interface

Path

/raguard/interfaces/interface

Node Type

list

Description

raguard interface.

Access

Read-Write

/raguard/interfaces/interface/name

Path

/raguard/interfaces/interface/name

Node Type

leaf

Description

interface name.

Access

Read-Write

Data Type

/raguard/interfaces/interface/role

Path

/raguard/interfaces/interface/role

Node Type

leaf

Description

RA guard interface role.

Access

Read-Write

Data Type

Constraints

IdentityRef with options:

• router
• none
• user
• hybrid

/raguard/policies

Path

/raguard/policies

Node Type

container

Description

RA guard policy configuration.

Access

Read-Write

/raguard/policies/policy

Path

/raguard/policies/policy

Node Type

list

Description

RA guard policy.

Access

Read-Write

/raguard/policies/policy/if-name

Path

/raguard/policies/policy/if-name

Node Type

leaf

Description

Interface name for configuring RA Guard policy, the interfaces within this VLAN must be set to hybrid role to take effect.

Access

Read-Write

Data Type

/raguard/policies/policy/hop-limit-high

Path

/raguard/policies/policy/hop-limit-high

Node Type

leaf

Description

The maximum value of the hop limit in RA packet.

Access

Read-Write

Data Type

Constraints

Valid range: 0 to 255

/raguard/policies/policy/hop-limit-low

Path

/raguard/policies/policy/hop-limit-low

Node Type

leaf

Description

The minimum value of the hop limit in RA packet.

Access

Read-Write

Data Type

Constraints

Valid range: 0 to 255

/raguard/policies/policy/managed-flag

Path

/raguard/policies/policy/managed-flag

Node Type

leaf

Description

Managed flag of RA packet.

Access

Read-Write

Data Type

Constraints

Valid in [true, false]

/raguard/policies/policy/other-flag

Path

/raguard/policies/policy/other-flag

Node Type

leaf

Description

Other flag of RA packet.

Access

Read-Write

Data Type

Constraints

Valid in [true, false]

/raguard/policies/policy/prefix

Path

/raguard/policies/policy/prefix

Node Type

leaf-list

Description

Prefix of RA packet.

Access

Read-Write

Data Type

Constraints

The ipv6-prefix type represents an IPv6 prefix.

The prefix length is given by the number following the slash character and must be less than or equal to 128.

A prefix length value of n corresponds to an IP address mask that has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.

The canonical format of an IPv6 prefix has all bits of the IPv6 address set to zero that are not part of the IPv6 prefix. Furthermore, the IPv6 address is represented as defined in Section 4 of RFC 5952.

The definition of ipv6-prefix does not require that bits, which are not part of the prefix, are set to zero. However, implementations have to return values in canonical format, which requires non-prefix bits to be set to zero. This means that 2001:db8::1/64 must be accepted as a valid value but it will be converted into the canonical format 2001:db8::/64.

/raguard/policies/policy/router-pref-max

Path

/raguard/policies/policy/router-pref-max

Node Type

leaf

Description

The router preference priority of RA packet. Effective when the Prf value is not greater than the set value.

Access

Read-Write

Data Type

Constraints

IdentityRef with options:

• high
• low
• medium

/raguard/policies/policy/src-ip

Path

/raguard/policies/policy/src-ip

Node Type

leaf-list

Description

Source IP of RA packet.

Access

Read-Write

Data Type

Constraints

An IPv6 address without a zone index. This type, derived from the type ipv6-address, may be used in situations where the zone is known from the context and no zone index is needed.

/raguard/policies/policy/src-mac

Path

/raguard/policies/policy/src-mac

Node Type

leaf-list

Description

Source MAC of RA packet.

Access

Read-Write

Data Type

Constraints

The mac-address type represents an IEEE 802 MAC address.

The canonical representation uses lowercase characters.

In the value set and its semantics, this type is equivalent to the MacAddress textual convention of the SMIv2.