openconfig-acl

YANG Data Model Tree Structure

View YANG Source on GitHub →

📚 API Documentation & Navigation

📄 Swagger API Spec 📂 Browse OpenConfig APIs 🌳 All Trees

📋 Module Metadata

Namespace: http://openconfig.net/yang/openconfig-acl

Prefix: oc-acl

Related Modules:
openconfig-access-points
openconfig-alarms
openconfig-ap-manager

💡 Example Usage

# PUT configuration
curl -X PUT \
  -H "Content-Type: application/yang-data+json" \
  -u admin:password \
  --insecure \
  https://device-ip/restconf/data/openconfig-acl \
  -d @config.json

📚 External Documentation

💻 YANG Source📖 YANG Catalog🌍 OpenConfig Docs
module: openconfig-acl
  +--rw acl
     +--rw config
     +--ro state
     |  +--ro counter-capability?   identityref
     +--rw acl-sets
     |  +--rw acl-set* [name type]
     |     +--rw name           -> ../config/name
     |     +--rw type           -> ../config/type
     |     +--rw config
     |     |  +--rw name?          string
     |     |  +--rw type?          identityref
     |     |  +--rw description?   string
     |     +--ro state
     |     |  +--ro name?          string
     |     |  +--ro type?          identityref
     |     |  +--ro description?   string
     |     +--rw acl-entries
     |        +--rw acl-entry* [sequence-id]
     |           +--rw sequence-id        -> ../config/sequence-id
     |           +--rw config
     |           |  +--rw sequence-id?   uint32
     |           |  +--rw description?   string
     |           +--ro state
     |           |  +--ro sequence-id?       uint32
     |           |  +--ro description?       string
     |           |  +--ro matched-packets?   oc-yang:counter64
     |           |  +--ro matched-octets?    oc-yang:counter64
     |           +--rw l2
     |           |  +--rw config
     |           |  |  +--rw source-mac?             oc-yang:mac-address
     |           |  |  +--rw source-mac-mask?        oc-yang:mac-address
     |           |  |  +--rw destination-mac?        oc-yang:mac-address
     |           |  |  +--rw destination-mac-mask?   oc-yang:mac-address
     |           |  |  +--rw ethertype?              oc-pkt-match-types:ethertype-type
     |           |  +--ro state
     |           |     +--ro source-mac?             oc-yang:mac-address
     |           |     +--ro source-mac-mask?        oc-yang:mac-address
     |           |     +--ro destination-mac?        oc-yang:mac-address
     |           |     +--ro destination-mac-mask?   oc-yang:mac-address
     |           |     +--ro ethertype?              oc-pkt-match-types:ethertype-type
     |           +--rw ipv4
     |           |  +--rw config
     |           |  |  +--rw source-address?        oc-inet:ipv4-prefix
     |           |  |  +--rw destination-address?   oc-inet:ipv4-prefix
     |           |  |  +--rw dscp?                  oc-inet:dscp
     |           |  |  +--rw protocol?              oc-pkt-match-types:ip-protocol-type
     |           |  |  +--rw hop-limit?             uint8
     |           |  +--ro state
     |           |     +--ro source-address?        oc-inet:ipv4-prefix
     |           |     +--ro destination-address?   oc-inet:ipv4-prefix
     |           |     +--ro dscp?                  oc-inet:dscp
     |           |     +--ro protocol?              oc-pkt-match-types:ip-protocol-type
     |           |     +--ro hop-limit?             uint8
     |           +--rw ipv6
     |           |  +--rw config
     |           |  |  +--rw source-address?           oc-inet:ipv6-prefix
     |           |  |  +--rw source-flow-label?        oc-inet:ipv6-flow-label
     |           |  |  +--rw destination-address?      oc-inet:ipv6-prefix
     |           |  |  +--rw destination-flow-label?   oc-inet:ipv6-flow-label
     |           |  |  +--rw dscp?                     oc-inet:dscp
     |           |  |  +--rw protocol?                 oc-pkt-match-types:ip-protocol-type
     |           |  |  +--rw hop-limit?                uint8
     |           |  +--ro state
     |           |     +--ro source-address?           oc-inet:ipv6-prefix
     |           |     +--ro source-flow-label?        oc-inet:ipv6-flow-label
     |           |     +--ro destination-address?      oc-inet:ipv6-prefix
     |           |     +--ro destination-flow-label?   oc-inet:ipv6-flow-label
     |           |     +--ro dscp?                     oc-inet:dscp
     |           |     +--ro protocol?                 oc-pkt-match-types:ip-protocol-type
     |           |     +--ro hop-limit?                uint8
     |           +--rw transport
     |           |  +--rw config
     |           |  |  +--rw source-port?        oc-pkt-match-types:port-num-range
     |           |  |  +--rw destination-port?   oc-pkt-match-types:port-num-range
     |           |  |  +--rw tcp-flags*          identityref
     |           |  +--ro state
     |           |     +--ro source-port?        oc-pkt-match-types:port-num-range
     |           |     +--ro destination-port?   oc-pkt-match-types:port-num-range
     |           |     +--ro tcp-flags*          identityref
     |           +--rw input-interface
     |           |  +--rw config
     |           |  +--ro state
     |           |  +--rw interface-ref
     |           |     +--rw config
     |           |     |  +--rw interface?      -> /oc-if:interfaces/interface/name
     |           |     |  +--rw subinterface?   -> /oc-if:interfaces/interface[oc-if:name=current()/../interface]/subinterfaces/subinterface/index
     |           |     +--ro state
     |           |        +--ro interface?      -> /oc-if:interfaces/interface/name
     |           |        +--ro subinterface?   -> /oc-if:interfaces/interface[oc-if:name=current()/../interface]/subinterfaces/subinterface/index
     |           +--rw actions
     |              +--rw config
     |              |  +--rw forwarding-action    identityref
     |              |  +--rw log-action?          identityref
     |              +--ro state
     |                 +--ro forwarding-action    identityref
     |                 +--ro log-action?          identityref
     +--rw interfaces
        +--rw interface* [id]
           +--rw id                  -> ../config/id
           +--rw config
           |  +--rw id?   oc-if:interface-id
           +--ro state
           |  +--ro id?   oc-if:interface-id
           +--rw interface-ref
           |  +--rw config
           |  |  +--rw interface?      -> /oc-if:interfaces/interface/name
           |  |  +--rw subinterface?   -> /oc-if:interfaces/interface[oc-if:name=current()/../interface]/subinterfaces/subinterface/index
           |  +--ro state
           |     +--ro interface?      -> /oc-if:interfaces/interface/name
           |     +--ro subinterface?   -> /oc-if:interfaces/interface[oc-if:name=current()/../interface]/subinterfaces/subinterface/index
           +--rw ingress-acl-sets
           |  +--rw ingress-acl-set* [set-name type]
           |     +--rw set-name       -> ../config/set-name
           |     +--rw type           -> ../config/type
           |     +--rw config
           |     |  +--rw set-name?   -> ../../../../../../acl-sets/acl-set/config/name
           |     |  +--rw type?       -> ../../../../../../acl-sets/acl-set[name=current()/../set-name]/config/type
           |     +--ro state
           |     |  +--ro set-name?   -> ../../../../../../acl-sets/acl-set/config/name
           |     |  +--ro type?       -> ../../../../../../acl-sets/acl-set[name=current()/../set-name]/config/type
           |     +--ro acl-entries
           |        +--ro acl-entry* [sequence-id]
           |           +--ro sequence-id    -> ../state/sequence-id
           |           +--ro state
           |              +--ro sequence-id?       -> /acl/acl-sets/acl-set[name=current()/../../../../set-name][type=current()/../../../../type]/acl-entries/acl-entry/sequence-id
           |              +--ro matched-packets?   oc-yang:counter64
           |              +--ro matched-octets?    oc-yang:counter64
           +--rw egress-acl-sets
              +--rw egress-acl-set* [set-name type]
                 +--rw set-name       -> ../config/set-name
                 +--rw type           -> ../config/type
                 +--rw config
                 |  +--rw set-name?   -> ../../../../../../acl-sets/acl-set/config/name
                 |  +--rw type?       -> ../../../../../../acl-sets/acl-set[name=current()/../set-name]/config/type
                 +--ro state
                 |  +--ro set-name?   -> ../../../../../../acl-sets/acl-set/config/name
                 |  +--ro type?       -> ../../../../../../acl-sets/acl-set[name=current()/../set-name]/config/type
                 +--ro acl-entries
                    +--ro acl-entry* [sequence-id]
                       +--ro sequence-id    -> ../state/sequence-id
                       +--ro state
                          +--ro sequence-id?       -> /acl/acl-sets/acl-set[name=current()/../../../../set-name][type=current()/../../../../type]/acl-entries/acl-entry/sequence-id
                          +--ro matched-packets?   oc-yang:counter64
                          +--ro matched-octets?    oc-yang:counter64