Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Global



Service

Name

Scope: Private / Public

Matching criteria: 

Transport protocol: UDP/TCP/ICMP/GRE

Action:  Allow / Deny


PCLI

show fib router xxxxxxx


Global Servicepacket without a Tenant ( default bucket )


Tenants

Tenant is as the endpoints/users that need a similar set of
accesses to common set of services

Nmae = endpoint + service  >> control access to Network


subtenants

Hierarchical scope

subtenant.tenant   or   sub3.sub2.sub1.tenant

Apply ( 3 ways )to Network Interface

Neighborhoods:  subnet(s) – map to – tenant

dynamic: using hte metadata
PCLIshow tenant members router all


Security Policies




Local



Provisioning
ZTP or Zero-Touch Provisioning


Automated Provisioner