Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 7 Next »


Global



Service

Name

Scope: Private / Public

Matching criteria: 

Transport protocol: UDP/TCP/ICMP/GRE

Action:  Allow / Deny


PCLI

show fib router xxxxxxx


Global Servicepacket without a Tenant ( default bucket )


Tenants

Tenant is as the endpoints/users that need a similar set of
accesses to common set of services

Nmae = endpoint + service  >> control access to Network


subtenants

Hierarchical scope

subtenant.tenant   or   sub3.sub2.sub1.tenant

Apply ( 3 ways )to Network Interface

Neighborhoods:  subnet(s) – map to – tenant

dynamic: using hte metadata
PCLIshow tenant members router all


Security Policies




Local



Router Provisioning

ZTP or Zero-Touch Provisioningsalt-minion call the salt-master on the Conductor
OTP or One-Touch Provisioning
Automated ProvisionerConductor provisioning




  • No labels