nxos.Ipv4AccessListEntry
Explore with Pulumi AI
This resource can manage IPv4 Access List Entries.
- API Documentation: ipv4aclACE
 
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nxos = Lbrlabs.PulumiPackage.Nxos;
return await Deployment.RunAsync(() => 
{
    var example = new Nxos.Ipv4AccessListEntry("example", new()
    {
        Ack = false,
        Action = "permit",
        DestinationAddressGroup = "AG1",
        DestinationPort1 = "443",
        DestinationPort2 = "0",
        DestinationPortGroup = "PG1",
        DestinationPortMask = "0",
        DestinationPortOperator = "eq",
        DestinationPrefix = "10.1.1.0",
        DestinationPrefixLength = "24",
        DestinationPrefixMask = "255.255.255.0",
        Dscp = 0,
        Est = false,
        Fin = false,
        Fragment = false,
        HttpOptionType = "invalid",
        IcmpCode = 0,
        IcmpType = 0,
        Logging = true,
        PacketLength1 = "19",
        PacketLength2 = "9210",
        PacketLengthOperator = "range",
        Precedence = "0",
        Protocol = "tcp",
        ProtocolMask = "tcp",
        Psh = false,
        Redirect = "RD",
        Remark = "Line1",
        Rev = false,
        Rst = false,
        SequenceNumber = 10,
        SourceAddressGroup = "AG2",
        SourcePort1 = "443",
        SourcePort2 = "0",
        SourcePortGroup = "PG2",
        SourcePortMask = "0",
        SourcePortOperator = "eq",
        SourcePrefix = "20.1.0.0",
        SourcePrefixLength = "16",
        SourcePrefixMask = "255.255.0.0",
        Syn = false,
        TimeRange = "TR1",
        Ttl = 0,
        Urg = false,
        Vlan = 4095,
        Vni = "invalid",
    });
});
package main
import (
	"github.com/lbrlabs/pulumi-nxos/sdk/go/nxos"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := nxos.NewIpv4AccessListEntry(ctx, "example", &nxos.Ipv4AccessListEntryArgs{
			Ack:                     pulumi.Bool(false),
			Action:                  pulumi.String("permit"),
			DestinationAddressGroup: pulumi.String("AG1"),
			DestinationPort1:        pulumi.String("443"),
			DestinationPort2:        pulumi.String("0"),
			DestinationPortGroup:    pulumi.String("PG1"),
			DestinationPortMask:     pulumi.String("0"),
			DestinationPortOperator: pulumi.String("eq"),
			DestinationPrefix:       pulumi.String("10.1.1.0"),
			DestinationPrefixLength: pulumi.String("24"),
			DestinationPrefixMask:   pulumi.String("255.255.255.0"),
			Dscp:                    pulumi.Int(0),
			Est:                     pulumi.Bool(false),
			Fin:                     pulumi.Bool(false),
			Fragment:                pulumi.Bool(false),
			HttpOptionType:          pulumi.String("invalid"),
			IcmpCode:                pulumi.Int(0),
			IcmpType:                pulumi.Int(0),
			Logging:                 pulumi.Bool(true),
			PacketLength1:           pulumi.String("19"),
			PacketLength2:           pulumi.String("9210"),
			PacketLengthOperator:    pulumi.String("range"),
			Precedence:              pulumi.String("0"),
			Protocol:                pulumi.String("tcp"),
			ProtocolMask:            pulumi.String("tcp"),
			Psh:                     pulumi.Bool(false),
			Redirect:                pulumi.String("RD"),
			Remark:                  pulumi.String("Line1"),
			Rev:                     pulumi.Bool(false),
			Rst:                     pulumi.Bool(false),
			SequenceNumber:          pulumi.Int(10),
			SourceAddressGroup:      pulumi.String("AG2"),
			SourcePort1:             pulumi.String("443"),
			SourcePort2:             pulumi.String("0"),
			SourcePortGroup:         pulumi.String("PG2"),
			SourcePortMask:          pulumi.String("0"),
			SourcePortOperator:      pulumi.String("eq"),
			SourcePrefix:            pulumi.String("20.1.0.0"),
			SourcePrefixLength:      pulumi.String("16"),
			SourcePrefixMask:        pulumi.String("255.255.0.0"),
			Syn:                     pulumi.Bool(false),
			TimeRange:               pulumi.String("TR1"),
			Ttl:                     pulumi.Int(0),
			Urg:                     pulumi.Bool(false),
			Vlan:                    pulumi.Int(4095),
			Vni:                     pulumi.String("invalid"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nxos.Ipv4AccessListEntry;
import com.pulumi.nxos.Ipv4AccessListEntryArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new Ipv4AccessListEntry("example", Ipv4AccessListEntryArgs.builder()        
            .ack(false)
            .action("permit")
            .destinationAddressGroup("AG1")
            .destinationPort1("443")
            .destinationPort2("0")
            .destinationPortGroup("PG1")
            .destinationPortMask("0")
            .destinationPortOperator("eq")
            .destinationPrefix("10.1.1.0")
            .destinationPrefixLength("24")
            .destinationPrefixMask("255.255.255.0")
            .dscp(0)
            .est(false)
            .fin(false)
            .fragment(false)
            .httpOptionType("invalid")
            .icmpCode(0)
            .icmpType(0)
            .logging(true)
            .packetLength1("19")
            .packetLength2("9210")
            .packetLengthOperator("range")
            .precedence("0")
            .protocol("tcp")
            .protocolMask("tcp")
            .psh(false)
            .redirect("RD")
            .remark("Line1")
            .rev(false)
            .rst(false)
            .sequenceNumber(10)
            .sourceAddressGroup("AG2")
            .sourcePort1("443")
            .sourcePort2("0")
            .sourcePortGroup("PG2")
            .sourcePortMask("0")
            .sourcePortOperator("eq")
            .sourcePrefix("20.1.0.0")
            .sourcePrefixLength("16")
            .sourcePrefixMask("255.255.0.0")
            .syn(false)
            .timeRange("TR1")
            .ttl(0)
            .urg(false)
            .vlan(4095)
            .vni("invalid")
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as nxos from "@lbrlabs/pulumi-nxos";
const example = new nxos.Ipv4AccessListEntry("example", {
    ack: false,
    action: "permit",
    destinationAddressGroup: "AG1",
    destinationPort1: "443",
    destinationPort2: "0",
    destinationPortGroup: "PG1",
    destinationPortMask: "0",
    destinationPortOperator: "eq",
    destinationPrefix: "10.1.1.0",
    destinationPrefixLength: "24",
    destinationPrefixMask: "255.255.255.0",
    dscp: 0,
    est: false,
    fin: false,
    fragment: false,
    httpOptionType: "invalid",
    icmpCode: 0,
    icmpType: 0,
    logging: true,
    packetLength1: "19",
    packetLength2: "9210",
    packetLengthOperator: "range",
    precedence: "0",
    protocol: "tcp",
    protocolMask: "tcp",
    psh: false,
    redirect: "RD",
    remark: "Line1",
    rev: false,
    rst: false,
    sequenceNumber: 10,
    sourceAddressGroup: "AG2",
    sourcePort1: "443",
    sourcePort2: "0",
    sourcePortGroup: "PG2",
    sourcePortMask: "0",
    sourcePortOperator: "eq",
    sourcePrefix: "20.1.0.0",
    sourcePrefixLength: "16",
    sourcePrefixMask: "255.255.0.0",
    syn: false,
    timeRange: "TR1",
    ttl: 0,
    urg: false,
    vlan: 4095,
    vni: "invalid",
});
import pulumi
import lbrlabs_pulumi_nxos as nxos
example = nxos.Ipv4AccessListEntry("example",
    ack=False,
    action="permit",
    destination_address_group="AG1",
    destination_port1="443",
    destination_port2="0",
    destination_port_group="PG1",
    destination_port_mask="0",
    destination_port_operator="eq",
    destination_prefix="10.1.1.0",
    destination_prefix_length="24",
    destination_prefix_mask="255.255.255.0",
    dscp=0,
    est=False,
    fin=False,
    fragment=False,
    http_option_type="invalid",
    icmp_code=0,
    icmp_type=0,
    logging=True,
    packet_length1="19",
    packet_length2="9210",
    packet_length_operator="range",
    precedence="0",
    protocol="tcp",
    protocol_mask="tcp",
    psh=False,
    redirect="RD",
    remark="Line1",
    rev=False,
    rst=False,
    sequence_number=10,
    source_address_group="AG2",
    source_port1="443",
    source_port2="0",
    source_port_group="PG2",
    source_port_mask="0",
    source_port_operator="eq",
    source_prefix="20.1.0.0",
    source_prefix_length="16",
    source_prefix_mask="255.255.0.0",
    syn=False,
    time_range="TR1",
    ttl=0,
    urg=False,
    vlan=4095,
    vni="invalid")
resources:
  example:
    type: nxos:Ipv4AccessListEntry
    properties:
      ack: false
      action: permit
      destinationAddressGroup: AG1
      destinationPort1: '443'
      destinationPort2: '0'
      destinationPortGroup: PG1
      destinationPortMask: '0'
      destinationPortOperator: eq
      destinationPrefix: 10.1.1.0
      destinationPrefixLength: '24'
      destinationPrefixMask: 255.255.255.0
      dscp: 0
      est: false
      fin: false
      fragment: false
      httpOptionType: invalid
      icmpCode: 0
      icmpType: 0
      logging: true
      packetLength1: '19'
      packetLength2: '9210'
      packetLengthOperator: range
      precedence: '0'
      protocol: tcp
      protocolMask: tcp
      psh: false
      redirect: RD
      remark: Line1
      rev: false
      rst: false
      sequenceNumber: 10
      sourceAddressGroup: AG2
      sourcePort1: '443'
      sourcePort2: '0'
      sourcePortGroup: PG2
      sourcePortMask: '0'
      sourcePortOperator: eq
      sourcePrefix: 20.1.0.0
      sourcePrefixLength: '16'
      sourcePrefixMask: 255.255.0.0
      syn: false
      timeRange: TR1
      ttl: 0
      urg: false
      vlan: 4095
      vni: invalid
Create Ipv4AccessListEntry Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Ipv4AccessListEntry(name: string, args: Ipv4AccessListEntryArgs, opts?: CustomResourceOptions);@overload
def Ipv4AccessListEntry(resource_name: str,
                        args: Ipv4AccessListEntryArgs,
                        opts: Optional[ResourceOptions] = None)
@overload
def Ipv4AccessListEntry(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        sequence_number: Optional[int] = None,
                        precedence: Optional[str] = None,
                        syn: Optional[bool] = None,
                        destination_port1: Optional[str] = None,
                        destination_port2: Optional[str] = None,
                        destination_port_group: Optional[str] = None,
                        destination_port_mask: Optional[str] = None,
                        destination_port_operator: Optional[str] = None,
                        destination_prefix: Optional[str] = None,
                        destination_prefix_length: Optional[str] = None,
                        destination_prefix_mask: Optional[str] = None,
                        device: Optional[str] = None,
                        dscp: Optional[int] = None,
                        est: Optional[bool] = None,
                        fin: Optional[bool] = None,
                        fragment: Optional[bool] = None,
                        http_option_type: Optional[str] = None,
                        icmp_code: Optional[int] = None,
                        icmp_type: Optional[int] = None,
                        logging: Optional[bool] = None,
                        name: Optional[str] = None,
                        packet_length1: Optional[str] = None,
                        packet_length2: Optional[str] = None,
                        vlan: Optional[int] = None,
                        destination_address_group: Optional[str] = None,
                        redirect: Optional[str] = None,
                        protocol_mask: Optional[str] = None,
                        psh: Optional[bool] = None,
                        protocol: Optional[str] = None,
                        remark: Optional[str] = None,
                        rev: Optional[bool] = None,
                        rst: Optional[bool] = None,
                        action: Optional[str] = None,
                        source_address_group: Optional[str] = None,
                        source_port1: Optional[str] = None,
                        source_port2: Optional[str] = None,
                        source_port_group: Optional[str] = None,
                        source_port_mask: Optional[str] = None,
                        source_port_operator: Optional[str] = None,
                        source_prefix: Optional[str] = None,
                        source_prefix_length: Optional[str] = None,
                        source_prefix_mask: Optional[str] = None,
                        ack: Optional[bool] = None,
                        time_range: Optional[str] = None,
                        ttl: Optional[int] = None,
                        urg: Optional[bool] = None,
                        packet_length_operator: Optional[str] = None,
                        vni: Optional[str] = None)func NewIpv4AccessListEntry(ctx *Context, name string, args Ipv4AccessListEntryArgs, opts ...ResourceOption) (*Ipv4AccessListEntry, error)public Ipv4AccessListEntry(string name, Ipv4AccessListEntryArgs args, CustomResourceOptions? opts = null)
public Ipv4AccessListEntry(String name, Ipv4AccessListEntryArgs args)
public Ipv4AccessListEntry(String name, Ipv4AccessListEntryArgs args, CustomResourceOptions options)
type: nxos:Ipv4AccessListEntry
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
 - The unique name of the resource.
 - args Ipv4AccessListEntryArgs
 - The arguments to resource properties.
 - opts CustomResourceOptions
 - Bag of options to control resource's behavior.
 
- resource_name str
 - The unique name of the resource.
 - args Ipv4AccessListEntryArgs
 - The arguments to resource properties.
 - opts ResourceOptions
 - Bag of options to control resource's behavior.
 
- ctx Context
 - Context object for the current deployment.
 - name string
 - The unique name of the resource.
 - args Ipv4AccessListEntryArgs
 - The arguments to resource properties.
 - opts ResourceOption
 - Bag of options to control resource's behavior.
 
- name string
 - The unique name of the resource.
 - args Ipv4AccessListEntryArgs
 - The arguments to resource properties.
 - opts CustomResourceOptions
 - Bag of options to control resource's behavior.
 
- name String
 - The unique name of the resource.
 - args Ipv4AccessListEntryArgs
 - The arguments to resource properties.
 - options CustomResourceOptions
 - Bag of options to control resource's behavior.
 
Constructor example
The following reference example uses placeholder values for all input properties.
var ipv4AccessListEntryResource = new Nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource", new()
{
    SequenceNumber = 0,
    Precedence = "string",
    Syn = false,
    DestinationPort1 = "string",
    DestinationPort2 = "string",
    DestinationPortGroup = "string",
    DestinationPortMask = "string",
    DestinationPortOperator = "string",
    DestinationPrefix = "string",
    DestinationPrefixLength = "string",
    DestinationPrefixMask = "string",
    Device = "string",
    Dscp = 0,
    Est = false,
    Fin = false,
    Fragment = false,
    HttpOptionType = "string",
    IcmpCode = 0,
    IcmpType = 0,
    Logging = false,
    Name = "string",
    PacketLength1 = "string",
    PacketLength2 = "string",
    Vlan = 0,
    DestinationAddressGroup = "string",
    Redirect = "string",
    ProtocolMask = "string",
    Psh = false,
    Protocol = "string",
    Remark = "string",
    Rev = false,
    Rst = false,
    Action = "string",
    SourceAddressGroup = "string",
    SourcePort1 = "string",
    SourcePort2 = "string",
    SourcePortGroup = "string",
    SourcePortMask = "string",
    SourcePortOperator = "string",
    SourcePrefix = "string",
    SourcePrefixLength = "string",
    SourcePrefixMask = "string",
    Ack = false,
    TimeRange = "string",
    Ttl = 0,
    Urg = false,
    PacketLengthOperator = "string",
    Vni = "string",
});
example, err := nxos.NewIpv4AccessListEntry(ctx, "ipv4AccessListEntryResource", &nxos.Ipv4AccessListEntryArgs{
	SequenceNumber:          pulumi.Int(0),
	Precedence:              pulumi.String("string"),
	Syn:                     pulumi.Bool(false),
	DestinationPort1:        pulumi.String("string"),
	DestinationPort2:        pulumi.String("string"),
	DestinationPortGroup:    pulumi.String("string"),
	DestinationPortMask:     pulumi.String("string"),
	DestinationPortOperator: pulumi.String("string"),
	DestinationPrefix:       pulumi.String("string"),
	DestinationPrefixLength: pulumi.String("string"),
	DestinationPrefixMask:   pulumi.String("string"),
	Device:                  pulumi.String("string"),
	Dscp:                    pulumi.Int(0),
	Est:                     pulumi.Bool(false),
	Fin:                     pulumi.Bool(false),
	Fragment:                pulumi.Bool(false),
	HttpOptionType:          pulumi.String("string"),
	IcmpCode:                pulumi.Int(0),
	IcmpType:                pulumi.Int(0),
	Logging:                 pulumi.Bool(false),
	Name:                    pulumi.String("string"),
	PacketLength1:           pulumi.String("string"),
	PacketLength2:           pulumi.String("string"),
	Vlan:                    pulumi.Int(0),
	DestinationAddressGroup: pulumi.String("string"),
	Redirect:                pulumi.String("string"),
	ProtocolMask:            pulumi.String("string"),
	Psh:                     pulumi.Bool(false),
	Protocol:                pulumi.String("string"),
	Remark:                  pulumi.String("string"),
	Rev:                     pulumi.Bool(false),
	Rst:                     pulumi.Bool(false),
	Action:                  pulumi.String("string"),
	SourceAddressGroup:      pulumi.String("string"),
	SourcePort1:             pulumi.String("string"),
	SourcePort2:             pulumi.String("string"),
	SourcePortGroup:         pulumi.String("string"),
	SourcePortMask:          pulumi.String("string"),
	SourcePortOperator:      pulumi.String("string"),
	SourcePrefix:            pulumi.String("string"),
	SourcePrefixLength:      pulumi.String("string"),
	SourcePrefixMask:        pulumi.String("string"),
	Ack:                     pulumi.Bool(false),
	TimeRange:               pulumi.String("string"),
	Ttl:                     pulumi.Int(0),
	Urg:                     pulumi.Bool(false),
	PacketLengthOperator:    pulumi.String("string"),
	Vni:                     pulumi.String("string"),
})
var ipv4AccessListEntryResource = new Ipv4AccessListEntry("ipv4AccessListEntryResource", Ipv4AccessListEntryArgs.builder()
    .sequenceNumber(0)
    .precedence("string")
    .syn(false)
    .destinationPort1("string")
    .destinationPort2("string")
    .destinationPortGroup("string")
    .destinationPortMask("string")
    .destinationPortOperator("string")
    .destinationPrefix("string")
    .destinationPrefixLength("string")
    .destinationPrefixMask("string")
    .device("string")
    .dscp(0)
    .est(false)
    .fin(false)
    .fragment(false)
    .httpOptionType("string")
    .icmpCode(0)
    .icmpType(0)
    .logging(false)
    .name("string")
    .packetLength1("string")
    .packetLength2("string")
    .vlan(0)
    .destinationAddressGroup("string")
    .redirect("string")
    .protocolMask("string")
    .psh(false)
    .protocol("string")
    .remark("string")
    .rev(false)
    .rst(false)
    .action("string")
    .sourceAddressGroup("string")
    .sourcePort1("string")
    .sourcePort2("string")
    .sourcePortGroup("string")
    .sourcePortMask("string")
    .sourcePortOperator("string")
    .sourcePrefix("string")
    .sourcePrefixLength("string")
    .sourcePrefixMask("string")
    .ack(false)
    .timeRange("string")
    .ttl(0)
    .urg(false)
    .packetLengthOperator("string")
    .vni("string")
    .build());
ipv4_access_list_entry_resource = nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource",
    sequence_number=0,
    precedence="string",
    syn=False,
    destination_port1="string",
    destination_port2="string",
    destination_port_group="string",
    destination_port_mask="string",
    destination_port_operator="string",
    destination_prefix="string",
    destination_prefix_length="string",
    destination_prefix_mask="string",
    device="string",
    dscp=0,
    est=False,
    fin=False,
    fragment=False,
    http_option_type="string",
    icmp_code=0,
    icmp_type=0,
    logging=False,
    name="string",
    packet_length1="string",
    packet_length2="string",
    vlan=0,
    destination_address_group="string",
    redirect="string",
    protocol_mask="string",
    psh=False,
    protocol="string",
    remark="string",
    rev=False,
    rst=False,
    action="string",
    source_address_group="string",
    source_port1="string",
    source_port2="string",
    source_port_group="string",
    source_port_mask="string",
    source_port_operator="string",
    source_prefix="string",
    source_prefix_length="string",
    source_prefix_mask="string",
    ack=False,
    time_range="string",
    ttl=0,
    urg=False,
    packet_length_operator="string",
    vni="string")
const ipv4AccessListEntryResource = new nxos.Ipv4AccessListEntry("ipv4AccessListEntryResource", {
    sequenceNumber: 0,
    precedence: "string",
    syn: false,
    destinationPort1: "string",
    destinationPort2: "string",
    destinationPortGroup: "string",
    destinationPortMask: "string",
    destinationPortOperator: "string",
    destinationPrefix: "string",
    destinationPrefixLength: "string",
    destinationPrefixMask: "string",
    device: "string",
    dscp: 0,
    est: false,
    fin: false,
    fragment: false,
    httpOptionType: "string",
    icmpCode: 0,
    icmpType: 0,
    logging: false,
    name: "string",
    packetLength1: "string",
    packetLength2: "string",
    vlan: 0,
    destinationAddressGroup: "string",
    redirect: "string",
    protocolMask: "string",
    psh: false,
    protocol: "string",
    remark: "string",
    rev: false,
    rst: false,
    action: "string",
    sourceAddressGroup: "string",
    sourcePort1: "string",
    sourcePort2: "string",
    sourcePortGroup: "string",
    sourcePortMask: "string",
    sourcePortOperator: "string",
    sourcePrefix: "string",
    sourcePrefixLength: "string",
    sourcePrefixMask: "string",
    ack: false,
    timeRange: "string",
    ttl: 0,
    urg: false,
    packetLengthOperator: "string",
    vni: "string",
});
type: nxos:Ipv4AccessListEntry
properties:
    ack: false
    action: string
    destinationAddressGroup: string
    destinationPort1: string
    destinationPort2: string
    destinationPortGroup: string
    destinationPortMask: string
    destinationPortOperator: string
    destinationPrefix: string
    destinationPrefixLength: string
    destinationPrefixMask: string
    device: string
    dscp: 0
    est: false
    fin: false
    fragment: false
    httpOptionType: string
    icmpCode: 0
    icmpType: 0
    logging: false
    name: string
    packetLength1: string
    packetLength2: string
    packetLengthOperator: string
    precedence: string
    protocol: string
    protocolMask: string
    psh: false
    redirect: string
    remark: string
    rev: false
    rst: false
    sequenceNumber: 0
    sourceAddressGroup: string
    sourcePort1: string
    sourcePort2: string
    sourcePortGroup: string
    sourcePortMask: string
    sourcePortOperator: string
    sourcePrefix: string
    sourcePrefixLength: string
    sourcePrefixMask: string
    syn: false
    timeRange: string
    ttl: 0
    urg: false
    vlan: 0
    vni: string
Ipv4AccessListEntry Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Ipv4AccessListEntry resource accepts the following input properties:
- Sequence
Number int - Sequence number.
 - Ack bool
 - Match TCP ACK flag.
 - Action string
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - Destination
Address stringGroup  - Destination address group.
 - Destination
Port1 string - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port2 string - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringGroup  - Destination port group.
 - Destination
Port stringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Destination
Prefix string - Destination prefix.
 - Destination
Prefix stringLength  - Destination prefix length.
 - Destination
Prefix stringMask  - Destination prefix mask.
 - Device string
 - A device name from the provider configuration.
 - Dscp int
 - Match DSCP. - Range: 
0-63 - Est bool
 - Match TCP EST flag.
 - Fin bool
 - Match TCP FIN flag.
 - Fragment bool
 - Match non-initial fragment.
 - Http
Option stringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - Icmp
Code int - ICMP code. - Range: 
0-256- Default value:256 - Icmp
Type int - ICMP type. - Range: 
0-256- Default value:256 - Logging bool
 - Log matches against ACL entry. - Default value: 
false - Name string
 - Access list name.
 - Packet
Length1 string - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length2 string - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length stringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Precedence string
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - Protocol string
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Protocol
Mask string - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Psh bool
 - Match TCP PSH flag.
 - Redirect string
 - Redirect action.
 - Remark string
 - ACL comment.
 - Rev bool
 - Match TCP REV flag.
 - Rst bool
 - Match TCP RST flag.
 - Source
Address stringGroup  - Source address group.
 - Source
Port1 string - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port2 string - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringGroup  - Source port group.
 - Source
Port stringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Source
Prefix string - Source prefix.
 - Source
Prefix stringLength  - Source prefix length.
 - Source
Prefix stringMask  - Source prefix mask.
 - Syn bool
 - Match TCP SYN flag.
 - Time
Range string - Time range name.
 - Ttl int
 - TTL. - Range: 
0-255- Default value:0 - Urg bool
 - Match TCP URG flag.
 - Vlan int
 - VLAN ID. - Range: 
0-4095- Default value:4095 - Vni string
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- Sequence
Number int - Sequence number.
 - Ack bool
 - Match TCP ACK flag.
 - Action string
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - Destination
Address stringGroup  - Destination address group.
 - Destination
Port1 string - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port2 string - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringGroup  - Destination port group.
 - Destination
Port stringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Destination
Prefix string - Destination prefix.
 - Destination
Prefix stringLength  - Destination prefix length.
 - Destination
Prefix stringMask  - Destination prefix mask.
 - Device string
 - A device name from the provider configuration.
 - Dscp int
 - Match DSCP. - Range: 
0-63 - Est bool
 - Match TCP EST flag.
 - Fin bool
 - Match TCP FIN flag.
 - Fragment bool
 - Match non-initial fragment.
 - Http
Option stringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - Icmp
Code int - ICMP code. - Range: 
0-256- Default value:256 - Icmp
Type int - ICMP type. - Range: 
0-256- Default value:256 - Logging bool
 - Log matches against ACL entry. - Default value: 
false - Name string
 - Access list name.
 - Packet
Length1 string - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length2 string - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length stringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Precedence string
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - Protocol string
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Protocol
Mask string - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Psh bool
 - Match TCP PSH flag.
 - Redirect string
 - Redirect action.
 - Remark string
 - ACL comment.
 - Rev bool
 - Match TCP REV flag.
 - Rst bool
 - Match TCP RST flag.
 - Source
Address stringGroup  - Source address group.
 - Source
Port1 string - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port2 string - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringGroup  - Source port group.
 - Source
Port stringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Source
Prefix string - Source prefix.
 - Source
Prefix stringLength  - Source prefix length.
 - Source
Prefix stringMask  - Source prefix mask.
 - Syn bool
 - Match TCP SYN flag.
 - Time
Range string - Time range name.
 - Ttl int
 - TTL. - Range: 
0-255- Default value:0 - Urg bool
 - Match TCP URG flag.
 - Vlan int
 - VLAN ID. - Range: 
0-4095- Default value:4095 - Vni string
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- sequence
Number Integer - Sequence number.
 - ack Boolean
 - Match TCP ACK flag.
 - action String
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination
Address StringGroup  - Destination address group.
 - destination
Port1 String - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port2 String - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringGroup  - Destination port group.
 - destination
Port StringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination
Prefix String - Destination prefix.
 - destination
Prefix StringLength  - Destination prefix length.
 - destination
Prefix StringMask  - Destination prefix mask.
 - device String
 - A device name from the provider configuration.
 - dscp Integer
 - Match DSCP. - Range: 
0-63 - est Boolean
 - Match TCP EST flag.
 - fin Boolean
 - Match TCP FIN flag.
 - fragment Boolean
 - Match non-initial fragment.
 - http
Option StringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp
Code Integer - ICMP code. - Range: 
0-256- Default value:256 - icmp
Type Integer - ICMP type. - Range: 
0-256- Default value:256 - logging Boolean
 - Log matches against ACL entry. - Default value: 
false - name String
 - Access list name.
 - packet
Length1 String - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length2 String - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length StringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence String
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol String
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol
Mask String - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh Boolean
 - Match TCP PSH flag.
 - redirect String
 - Redirect action.
 - remark String
 - ACL comment.
 - rev Boolean
 - Match TCP REV flag.
 - rst Boolean
 - Match TCP RST flag.
 - source
Address StringGroup  - Source address group.
 - source
Port1 String - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port2 String - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringGroup  - Source port group.
 - source
Port StringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source
Prefix String - Source prefix.
 - source
Prefix StringLength  - Source prefix length.
 - source
Prefix StringMask  - Source prefix mask.
 - syn Boolean
 - Match TCP SYN flag.
 - time
Range String - Time range name.
 - ttl Integer
 - TTL. - Range: 
0-255- Default value:0 - urg Boolean
 - Match TCP URG flag.
 - vlan Integer
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni String
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- sequence
Number number - Sequence number.
 - ack boolean
 - Match TCP ACK flag.
 - action string
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination
Address stringGroup  - Destination address group.
 - destination
Port1 string - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port2 string - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port stringGroup  - Destination port group.
 - destination
Port stringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port stringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination
Prefix string - Destination prefix.
 - destination
Prefix stringLength  - Destination prefix length.
 - destination
Prefix stringMask  - Destination prefix mask.
 - device string
 - A device name from the provider configuration.
 - dscp number
 - Match DSCP. - Range: 
0-63 - est boolean
 - Match TCP EST flag.
 - fin boolean
 - Match TCP FIN flag.
 - fragment boolean
 - Match non-initial fragment.
 - http
Option stringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp
Code number - ICMP code. - Range: 
0-256- Default value:256 - icmp
Type number - ICMP type. - Range: 
0-256- Default value:256 - logging boolean
 - Log matches against ACL entry. - Default value: 
false - name string
 - Access list name.
 - packet
Length1 string - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length2 string - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length stringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence string
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol string
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol
Mask string - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh boolean
 - Match TCP PSH flag.
 - redirect string
 - Redirect action.
 - remark string
 - ACL comment.
 - rev boolean
 - Match TCP REV flag.
 - rst boolean
 - Match TCP RST flag.
 - source
Address stringGroup  - Source address group.
 - source
Port1 string - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port2 string - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port stringGroup  - Source port group.
 - source
Port stringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port stringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source
Prefix string - Source prefix.
 - source
Prefix stringLength  - Source prefix length.
 - source
Prefix stringMask  - Source prefix mask.
 - syn boolean
 - Match TCP SYN flag.
 - time
Range string - Time range name.
 - ttl number
 - TTL. - Range: 
0-255- Default value:0 - urg boolean
 - Match TCP URG flag.
 - vlan number
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni string
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- sequence_
number int - Sequence number.
 - ack bool
 - Match TCP ACK flag.
 - action str
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination_
address_ strgroup  - Destination address group.
 - destination_
port1 str - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination_
port2 str - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination_
port_ strgroup  - Destination port group.
 - destination_
port_ strmask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination_
port_ stroperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination_
prefix str - Destination prefix.
 - destination_
prefix_ strlength  - Destination prefix length.
 - destination_
prefix_ strmask  - Destination prefix mask.
 - device str
 - A device name from the provider configuration.
 - dscp int
 - Match DSCP. - Range: 
0-63 - est bool
 - Match TCP EST flag.
 - fin bool
 - Match TCP FIN flag.
 - fragment bool
 - Match non-initial fragment.
 - http_
option_ strtype  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp_
code int - ICMP code. - Range: 
0-256- Default value:256 - icmp_
type int - ICMP type. - Range: 
0-256- Default value:256 - logging bool
 - Log matches against ACL entry. - Default value: 
false - name str
 - Access list name.
 - packet_
length1 str - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet_
length2 str - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet_
length_ stroperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence str
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol str
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol_
mask str - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh bool
 - Match TCP PSH flag.
 - redirect str
 - Redirect action.
 - remark str
 - ACL comment.
 - rev bool
 - Match TCP REV flag.
 - rst bool
 - Match TCP RST flag.
 - source_
address_ strgroup  - Source address group.
 - source_
port1 str - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source_
port2 str - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source_
port_ strgroup  - Source port group.
 - source_
port_ strmask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source_
port_ stroperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source_
prefix str - Source prefix.
 - source_
prefix_ strlength  - Source prefix length.
 - source_
prefix_ strmask  - Source prefix mask.
 - syn bool
 - Match TCP SYN flag.
 - time_
range str - Time range name.
 - ttl int
 - TTL. - Range: 
0-255- Default value:0 - urg bool
 - Match TCP URG flag.
 - vlan int
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni str
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- sequence
Number Number - Sequence number.
 - ack Boolean
 - Match TCP ACK flag.
 - action String
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination
Address StringGroup  - Destination address group.
 - destination
Port1 String - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port2 String - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringGroup  - Destination port group.
 - destination
Port StringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination
Prefix String - Destination prefix.
 - destination
Prefix StringLength  - Destination prefix length.
 - destination
Prefix StringMask  - Destination prefix mask.
 - device String
 - A device name from the provider configuration.
 - dscp Number
 - Match DSCP. - Range: 
0-63 - est Boolean
 - Match TCP EST flag.
 - fin Boolean
 - Match TCP FIN flag.
 - fragment Boolean
 - Match non-initial fragment.
 - http
Option StringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp
Code Number - ICMP code. - Range: 
0-256- Default value:256 - icmp
Type Number - ICMP type. - Range: 
0-256- Default value:256 - logging Boolean
 - Log matches against ACL entry. - Default value: 
false - name String
 - Access list name.
 - packet
Length1 String - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length2 String - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length StringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence String
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol String
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol
Mask String - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh Boolean
 - Match TCP PSH flag.
 - redirect String
 - Redirect action.
 - remark String
 - ACL comment.
 - rev Boolean
 - Match TCP REV flag.
 - rst Boolean
 - Match TCP RST flag.
 - source
Address StringGroup  - Source address group.
 - source
Port1 String - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port2 String - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringGroup  - Source port group.
 - source
Port StringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source
Prefix String - Source prefix.
 - source
Prefix StringLength  - Source prefix length.
 - source
Prefix StringMask  - Source prefix mask.
 - syn Boolean
 - Match TCP SYN flag.
 - time
Range String - Time range name.
 - ttl Number
 - TTL. - Range: 
0-255- Default value:0 - urg Boolean
 - Match TCP URG flag.
 - vlan Number
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni String
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
Outputs
All input properties are implicitly available as output properties. Additionally, the Ipv4AccessListEntry resource produces the following output properties:
- Id string
 - The provider-assigned unique ID for this managed resource.
 
- Id string
 - The provider-assigned unique ID for this managed resource.
 
- id String
 - The provider-assigned unique ID for this managed resource.
 
- id string
 - The provider-assigned unique ID for this managed resource.
 
- id str
 - The provider-assigned unique ID for this managed resource.
 
- id String
 - The provider-assigned unique ID for this managed resource.
 
Look up Existing Ipv4AccessListEntry Resource
Get an existing Ipv4AccessListEntry resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: Ipv4AccessListEntryState, opts?: CustomResourceOptions): Ipv4AccessListEntry@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ack: Optional[bool] = None,
        action: Optional[str] = None,
        destination_address_group: Optional[str] = None,
        destination_port1: Optional[str] = None,
        destination_port2: Optional[str] = None,
        destination_port_group: Optional[str] = None,
        destination_port_mask: Optional[str] = None,
        destination_port_operator: Optional[str] = None,
        destination_prefix: Optional[str] = None,
        destination_prefix_length: Optional[str] = None,
        destination_prefix_mask: Optional[str] = None,
        device: Optional[str] = None,
        dscp: Optional[int] = None,
        est: Optional[bool] = None,
        fin: Optional[bool] = None,
        fragment: Optional[bool] = None,
        http_option_type: Optional[str] = None,
        icmp_code: Optional[int] = None,
        icmp_type: Optional[int] = None,
        logging: Optional[bool] = None,
        name: Optional[str] = None,
        packet_length1: Optional[str] = None,
        packet_length2: Optional[str] = None,
        packet_length_operator: Optional[str] = None,
        precedence: Optional[str] = None,
        protocol: Optional[str] = None,
        protocol_mask: Optional[str] = None,
        psh: Optional[bool] = None,
        redirect: Optional[str] = None,
        remark: Optional[str] = None,
        rev: Optional[bool] = None,
        rst: Optional[bool] = None,
        sequence_number: Optional[int] = None,
        source_address_group: Optional[str] = None,
        source_port1: Optional[str] = None,
        source_port2: Optional[str] = None,
        source_port_group: Optional[str] = None,
        source_port_mask: Optional[str] = None,
        source_port_operator: Optional[str] = None,
        source_prefix: Optional[str] = None,
        source_prefix_length: Optional[str] = None,
        source_prefix_mask: Optional[str] = None,
        syn: Optional[bool] = None,
        time_range: Optional[str] = None,
        ttl: Optional[int] = None,
        urg: Optional[bool] = None,
        vlan: Optional[int] = None,
        vni: Optional[str] = None) -> Ipv4AccessListEntryfunc GetIpv4AccessListEntry(ctx *Context, name string, id IDInput, state *Ipv4AccessListEntryState, opts ...ResourceOption) (*Ipv4AccessListEntry, error)public static Ipv4AccessListEntry Get(string name, Input<string> id, Ipv4AccessListEntryState? state, CustomResourceOptions? opts = null)public static Ipv4AccessListEntry get(String name, Output<String> id, Ipv4AccessListEntryState state, CustomResourceOptions options)resources:  _:    type: nxos:Ipv4AccessListEntry    get:      id: ${id}- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- resource_name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 
- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- Ack bool
 - Match TCP ACK flag.
 - Action string
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - Destination
Address stringGroup  - Destination address group.
 - Destination
Port1 string - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port2 string - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringGroup  - Destination port group.
 - Destination
Port stringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Destination
Prefix string - Destination prefix.
 - Destination
Prefix stringLength  - Destination prefix length.
 - Destination
Prefix stringMask  - Destination prefix mask.
 - Device string
 - A device name from the provider configuration.
 - Dscp int
 - Match DSCP. - Range: 
0-63 - Est bool
 - Match TCP EST flag.
 - Fin bool
 - Match TCP FIN flag.
 - Fragment bool
 - Match non-initial fragment.
 - Http
Option stringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - Icmp
Code int - ICMP code. - Range: 
0-256- Default value:256 - Icmp
Type int - ICMP type. - Range: 
0-256- Default value:256 - Logging bool
 - Log matches against ACL entry. - Default value: 
false - Name string
 - Access list name.
 - Packet
Length1 string - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length2 string - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length stringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Precedence string
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - Protocol string
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Protocol
Mask string - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Psh bool
 - Match TCP PSH flag.
 - Redirect string
 - Redirect action.
 - Remark string
 - ACL comment.
 - Rev bool
 - Match TCP REV flag.
 - Rst bool
 - Match TCP RST flag.
 - Sequence
Number int - Sequence number.
 - Source
Address stringGroup  - Source address group.
 - Source
Port1 string - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port2 string - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringGroup  - Source port group.
 - Source
Port stringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Source
Prefix string - Source prefix.
 - Source
Prefix stringLength  - Source prefix length.
 - Source
Prefix stringMask  - Source prefix mask.
 - Syn bool
 - Match TCP SYN flag.
 - Time
Range string - Time range name.
 - Ttl int
 - TTL. - Range: 
0-255- Default value:0 - Urg bool
 - Match TCP URG flag.
 - Vlan int
 - VLAN ID. - Range: 
0-4095- Default value:4095 - Vni string
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- Ack bool
 - Match TCP ACK flag.
 - Action string
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - Destination
Address stringGroup  - Destination address group.
 - Destination
Port1 string - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port2 string - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringGroup  - Destination port group.
 - Destination
Port stringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Destination
Port stringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Destination
Prefix string - Destination prefix.
 - Destination
Prefix stringLength  - Destination prefix length.
 - Destination
Prefix stringMask  - Destination prefix mask.
 - Device string
 - A device name from the provider configuration.
 - Dscp int
 - Match DSCP. - Range: 
0-63 - Est bool
 - Match TCP EST flag.
 - Fin bool
 - Match TCP FIN flag.
 - Fragment bool
 - Match non-initial fragment.
 - Http
Option stringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - Icmp
Code int - ICMP code. - Range: 
0-256- Default value:256 - Icmp
Type int - ICMP type. - Range: 
0-256- Default value:256 - Logging bool
 - Log matches against ACL entry. - Default value: 
false - Name string
 - Access list name.
 - Packet
Length1 string - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length2 string - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - Packet
Length stringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Precedence string
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - Protocol string
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Protocol
Mask string - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - Psh bool
 - Match TCP PSH flag.
 - Redirect string
 - Redirect action.
 - Remark string
 - ACL comment.
 - Rev bool
 - Match TCP REV flag.
 - Rst bool
 - Match TCP RST flag.
 - Sequence
Number int - Sequence number.
 - Source
Address stringGroup  - Source address group.
 - Source
Port1 string - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port2 string - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringGroup  - Source port group.
 - Source
Port stringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - Source
Port stringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - Source
Prefix string - Source prefix.
 - Source
Prefix stringLength  - Source prefix length.
 - Source
Prefix stringMask  - Source prefix mask.
 - Syn bool
 - Match TCP SYN flag.
 - Time
Range string - Time range name.
 - Ttl int
 - TTL. - Range: 
0-255- Default value:0 - Urg bool
 - Match TCP URG flag.
 - Vlan int
 - VLAN ID. - Range: 
0-4095- Default value:4095 - Vni string
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- ack Boolean
 - Match TCP ACK flag.
 - action String
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination
Address StringGroup  - Destination address group.
 - destination
Port1 String - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port2 String - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringGroup  - Destination port group.
 - destination
Port StringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination
Prefix String - Destination prefix.
 - destination
Prefix StringLength  - Destination prefix length.
 - destination
Prefix StringMask  - Destination prefix mask.
 - device String
 - A device name from the provider configuration.
 - dscp Integer
 - Match DSCP. - Range: 
0-63 - est Boolean
 - Match TCP EST flag.
 - fin Boolean
 - Match TCP FIN flag.
 - fragment Boolean
 - Match non-initial fragment.
 - http
Option StringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp
Code Integer - ICMP code. - Range: 
0-256- Default value:256 - icmp
Type Integer - ICMP type. - Range: 
0-256- Default value:256 - logging Boolean
 - Log matches against ACL entry. - Default value: 
false - name String
 - Access list name.
 - packet
Length1 String - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length2 String - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length StringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence String
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol String
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol
Mask String - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh Boolean
 - Match TCP PSH flag.
 - redirect String
 - Redirect action.
 - remark String
 - ACL comment.
 - rev Boolean
 - Match TCP REV flag.
 - rst Boolean
 - Match TCP RST flag.
 - sequence
Number Integer - Sequence number.
 - source
Address StringGroup  - Source address group.
 - source
Port1 String - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port2 String - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringGroup  - Source port group.
 - source
Port StringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source
Prefix String - Source prefix.
 - source
Prefix StringLength  - Source prefix length.
 - source
Prefix StringMask  - Source prefix mask.
 - syn Boolean
 - Match TCP SYN flag.
 - time
Range String - Time range name.
 - ttl Integer
 - TTL. - Range: 
0-255- Default value:0 - urg Boolean
 - Match TCP URG flag.
 - vlan Integer
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni String
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- ack boolean
 - Match TCP ACK flag.
 - action string
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination
Address stringGroup  - Destination address group.
 - destination
Port1 string - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port2 string - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port stringGroup  - Destination port group.
 - destination
Port stringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port stringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination
Prefix string - Destination prefix.
 - destination
Prefix stringLength  - Destination prefix length.
 - destination
Prefix stringMask  - Destination prefix mask.
 - device string
 - A device name from the provider configuration.
 - dscp number
 - Match DSCP. - Range: 
0-63 - est boolean
 - Match TCP EST flag.
 - fin boolean
 - Match TCP FIN flag.
 - fragment boolean
 - Match non-initial fragment.
 - http
Option stringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp
Code number - ICMP code. - Range: 
0-256- Default value:256 - icmp
Type number - ICMP type. - Range: 
0-256- Default value:256 - logging boolean
 - Log matches against ACL entry. - Default value: 
false - name string
 - Access list name.
 - packet
Length1 string - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length2 string - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length stringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence string
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol string
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol
Mask string - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh boolean
 - Match TCP PSH flag.
 - redirect string
 - Redirect action.
 - remark string
 - ACL comment.
 - rev boolean
 - Match TCP REV flag.
 - rst boolean
 - Match TCP RST flag.
 - sequence
Number number - Sequence number.
 - source
Address stringGroup  - Source address group.
 - source
Port1 string - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port2 string - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port stringGroup  - Source port group.
 - source
Port stringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port stringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source
Prefix string - Source prefix.
 - source
Prefix stringLength  - Source prefix length.
 - source
Prefix stringMask  - Source prefix mask.
 - syn boolean
 - Match TCP SYN flag.
 - time
Range string - Time range name.
 - ttl number
 - TTL. - Range: 
0-255- Default value:0 - urg boolean
 - Match TCP URG flag.
 - vlan number
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni string
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- ack bool
 - Match TCP ACK flag.
 - action str
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination_
address_ strgroup  - Destination address group.
 - destination_
port1 str - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination_
port2 str - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination_
port_ strgroup  - Destination port group.
 - destination_
port_ strmask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination_
port_ stroperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination_
prefix str - Destination prefix.
 - destination_
prefix_ strlength  - Destination prefix length.
 - destination_
prefix_ strmask  - Destination prefix mask.
 - device str
 - A device name from the provider configuration.
 - dscp int
 - Match DSCP. - Range: 
0-63 - est bool
 - Match TCP EST flag.
 - fin bool
 - Match TCP FIN flag.
 - fragment bool
 - Match non-initial fragment.
 - http_
option_ strtype  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp_
code int - ICMP code. - Range: 
0-256- Default value:256 - icmp_
type int - ICMP type. - Range: 
0-256- Default value:256 - logging bool
 - Log matches against ACL entry. - Default value: 
false - name str
 - Access list name.
 - packet_
length1 str - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet_
length2 str - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet_
length_ stroperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence str
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol str
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol_
mask str - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh bool
 - Match TCP PSH flag.
 - redirect str
 - Redirect action.
 - remark str
 - ACL comment.
 - rev bool
 - Match TCP REV flag.
 - rst bool
 - Match TCP RST flag.
 - sequence_
number int - Sequence number.
 - source_
address_ strgroup  - Source address group.
 - source_
port1 str - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source_
port2 str - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source_
port_ strgroup  - Source port group.
 - source_
port_ strmask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source_
port_ stroperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source_
prefix str - Source prefix.
 - source_
prefix_ strlength  - Source prefix length.
 - source_
prefix_ strmask  - Source prefix mask.
 - syn bool
 - Match TCP SYN flag.
 - time_
range str - Time range name.
 - ttl int
 - TTL. - Range: 
0-255- Default value:0 - urg bool
 - Match TCP URG flag.
 - vlan int
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni str
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
- ack Boolean
 - Match TCP ACK flag.
 - action String
 - Action. - Choices: 
invalid,permit,deny- Default value:invalid - destination
Address StringGroup  - Destination address group.
 - destination
Port1 String - First destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port2 String - Second destination port number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringGroup  - Destination port group.
 - destination
Port StringMask  - Destination port mask number or name. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - destination
Port StringOperator  - Destination port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - destination
Prefix String - Destination prefix.
 - destination
Prefix StringLength  - Destination prefix length.
 - destination
Prefix StringMask  - Destination prefix mask.
 - device String
 - A device name from the provider configuration.
 - dscp Number
 - Match DSCP. - Range: 
0-63 - est Boolean
 - Match TCP EST flag.
 - fin Boolean
 - Match TCP FIN flag.
 - fragment Boolean
 - Match non-initial fragment.
 - http
Option StringType  - HTTP option method. - Choices: 
invalid,get,put,head,post,delete,trace,connect- Default value:invalid - icmp
Code Number - ICMP code. - Range: 
0-256- Default value:256 - icmp
Type Number - ICMP type. - Range: 
0-256- Default value:256 - logging Boolean
 - Log matches against ACL entry. - Default value: 
false - name String
 - Access list name.
 - packet
Length1 String - First packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length2 String - Second packet length. Either 
invalidor a number between 19 and 9210. - Default value:invalid - packet
Length StringOperator  - Packet length operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - precedence String
 - Precedence. Either 
unspecifiedor a number between 0 and 7. - Default value:unspecified - protocol String
 - Protocol name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - protocol
Mask String - Protocol mask name or number. - Choices: 
ip,icmp,igmp,tcp,udp,gre,esp,ahp,eigrp,ospf,nos,pim,pcp,udf - psh Boolean
 - Match TCP PSH flag.
 - redirect String
 - Redirect action.
 - remark String
 - ACL comment.
 - rev Boolean
 - Match TCP REV flag.
 - rst Boolean
 - Match TCP RST flag.
 - sequence
Number Number - Sequence number.
 - source
Address StringGroup  - Source address group.
 - source
Port1 String - First source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port2 String - Second source port name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringGroup  - Source port group.
 - source
Port StringMask  - Source port mask name or number. - Choices: 
echo,discard,daytime,chargen,ftp-data,ftp,telnet,smtp,time,nameserver,whois,tacacs,domain,bootps,bootpc,tftp,gopher,finger,www,hostname,pop2,pop3,sunrpc,ident,nntp,ntp,netbios-ns,netbios-dgm,netbios-ss,snmp,snmptrap,xdmcp,bgp,irc,dnsix,mobile-ip,pim-auto-rp,isakmp,biff,exec,who,login,syslog,cmd,lpd,talk,rip,uucp,klogin,kshell,drip,non500-isakmp - source
Port StringOperator  - Source port operator. - Choices: 
none,lt,gt,eq,neq,range- Default value:none - source
Prefix String - Source prefix.
 - source
Prefix StringLength  - Source prefix length.
 - source
Prefix StringMask  - Source prefix mask.
 - syn Boolean
 - Match TCP SYN flag.
 - time
Range String - Time range name.
 - ttl Number
 - TTL. - Range: 
0-255- Default value:0 - urg Boolean
 - Match TCP URG flag.
 - vlan Number
 - VLAN ID. - Range: 
0-4095- Default value:4095 - vni String
 - NVE VNI ID. Either 
invalidor a number between 0 and 16777216. - Default value:invalid 
Import
 $ pulumi import nxos:index/ipv4AccessListEntry:Ipv4AccessListEntry example "sys/acl/ipv4/name-[ACL1]/seq-[10]"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
 - nxos lbrlabs/pulumi-nxos
 - License
 - Apache-2.0
 - Notes
 - This Pulumi package is based on the 
nxosTerraform Provider.