NSX-T Data Center REST API

Add Vendor Template for a given Service

Adds a new vendor template. Vendor templates are service level objects,
registered to be used in Service Profiles.

Request:

Method:

POST

URI Path(s):

/api/v1/serviceinsertion/services/<service-id>/vendor-templates

Request Headers:

n/a

Query Parameters:

n/a

Request Body:

VendorTemplate+

VendorTemplate (schema)

Name	Description	Type	Notes
_create_time	Timestamp of resource creation	EpochMsTimestamp	Readonly Sortable
_create_user	ID of the user who created this resource	string	Readonly
_last_modified_time	Timestamp of last modification	EpochMsTimestamp	Readonly Sortable
_last_modified_user	ID of the user who last modified this resource	string	Readonly
_links	References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST.	array of ResourceLink	Readonly
_protection	Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.	string	Readonly
_revision	Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.	int
_schema	Schema for this resource	string	Readonly
_self	Link to this resource	SelfResourceLink	Readonly
_system_owned	Indicates system owned resource	boolean	Readonly
attributes	Vendor Template attributes List of attributes specific to a partner for which the vendor template is created. There attributes are passed on to the partner appliance and is opaque to the NSX Manager. Attributes are not supported by guest introspection service.	array of Attribute	Maximum items: 128
description	Description of this resource	string	Maximum length: 1024 Sortable
display_name	Identifier to use when displaying entity in logs or GUI Defaults to ID if not set	string	Maximum length: 255 Sortable
functionality	Functionality Type The capabilities provided by the services. Needs to be one of the following | NG_FW - Next Generation Firewall | IDS_IPS - Intrusion detection System / Intrusion Prevention System | NET_MON - Network Monitoring | HCX - Hybrid Cloud Exchange | BYOD - Bring Your Own Device | EPP - Endpoint Protection.(Third party AntiVirus partners using NXGI should use this functionality for the service) | MPS - Malware Prevention Solution	string	Enum: NG_FW, IDS_IPS, NET_MON, HCX, BYOD, EPP, MPS
id	Unique identifier of this resource	string	Sortable
redirection_action	Redirection action The redirection action represents if the packet is exclusively redirected to the service, or if a copy is forwarded to the service. Service profile inherits the redirection action specified at the vendor template and cannot override the action specified at the vendor template. Redirection action is not applicable to guest introspection service.	string	Enum: PUNT, COPY Default: "PUNT"
resource_type	Must be set to the value VendorTemplate	string
service_id	Service Id The service to which the vendor template belongs.	string	Readonly
tags	Opaque identifiers meaningful to the API user	array of Tag	Maximum items: 30
vendor_template_key	Vendor template key Different VMs in data center can have Different protection levels as specified by administrator in the policy. The identifier for the policy with which the partner appliance identifies this policy. This identifier will be passed to the partner appliance at runtime to specify which protection level is applicable for the VM being protected.	string

Example Request:

POST https://<nsx-mgr>/api/v1/serviceinsertion/services/103ca1c3-ef39-4473-aaec-9a8d764a9392/vendor-templates { "display_name": "VT1", "description": "VT for East-West Service Insertion", "attributes": [{ "attribute_type": "STRING", "display_name": "attribute1", "key": "key1" }, { "attribute_type": "STRING", "display_name": "attribute2", "key": "key2" } ] }

Successful Response:

Response Code:

200 OK

Response Headers:

Content-type: application/json

Response Body:

VendorTemplate+

VendorTemplate (schema)

Name	Description	Type	Notes
_create_time	Timestamp of resource creation	EpochMsTimestamp	Readonly Sortable
_create_user	ID of the user who created this resource	string	Readonly
_last_modified_time	Timestamp of last modification	EpochMsTimestamp	Readonly Sortable
_last_modified_user	ID of the user who last modified this resource	string	Readonly
_links	References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST.	array of ResourceLink	Readonly
_protection	Indicates protection status of this resource Protection status is one of the following: PROTECTED - the client who retrieved the entity is not allowed to modify it. NOT_PROTECTED - the client who retrieved the entity is allowed to modify it REQUIRE_OVERRIDE - the client who retrieved the entity is a super user and can modify it, but only when providing the request header X-Allow-Overwrite=true. UNKNOWN - the _protection field could not be determined for this entity.	string	Readonly
_revision	Generation of this resource config The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.	int
_schema	Schema for this resource	string	Readonly
_self	Link to this resource	SelfResourceLink	Readonly
_system_owned	Indicates system owned resource	boolean	Readonly
attributes	Vendor Template attributes List of attributes specific to a partner for which the vendor template is created. There attributes are passed on to the partner appliance and is opaque to the NSX Manager. Attributes are not supported by guest introspection service.	array of Attribute	Maximum items: 128
description	Description of this resource	string	Maximum length: 1024 Sortable
display_name	Identifier to use when displaying entity in logs or GUI Defaults to ID if not set	string	Maximum length: 255 Sortable
functionality	Functionality Type The capabilities provided by the services. Needs to be one of the following | NG_FW - Next Generation Firewall | IDS_IPS - Intrusion detection System / Intrusion Prevention System | NET_MON - Network Monitoring | HCX - Hybrid Cloud Exchange | BYOD - Bring Your Own Device | EPP - Endpoint Protection.(Third party AntiVirus partners using NXGI should use this functionality for the service) | MPS - Malware Prevention Solution	string	Enum: NG_FW, IDS_IPS, NET_MON, HCX, BYOD, EPP, MPS
id	Unique identifier of this resource	string	Sortable
redirection_action	Redirection action The redirection action represents if the packet is exclusively redirected to the service, or if a copy is forwarded to the service. Service profile inherits the redirection action specified at the vendor template and cannot override the action specified at the vendor template. Redirection action is not applicable to guest introspection service.	string	Enum: PUNT, COPY Default: "PUNT"
resource_type	Must be set to the value VendorTemplate	string
service_id	Service Id The service to which the vendor template belongs.	string	Readonly
tags	Opaque identifiers meaningful to the API user	array of Tag	Maximum items: 30
vendor_template_key	Vendor template key Different VMs in data center can have Different protection levels as specified by administrator in the policy. The identifier for the policy with which the partner appliance identifies this policy. This identifier will be passed to the partner appliance at runtime to specify which protection level is applicable for the VM being protected.	string

Example Response:

{ "attributes": [ { "key": "Key 2", "display_name": "attribute2", "attribute_type": "STRING" }, { "key": "Key 1", "display_name": "attribute1", "attribute_type": "STRING" } ], "service_id": "103ca1c3-ef39-4473-aaec-9a8d764a9392", "resource_type": "VendorTemplate", "id": "e8420012-6861-4c41-b13c-1aba8c98f007", "display_name": "ABC Company Vendor Template", "description": "ABC Company Vendor Template Description", "_create_user": "admin", "_create_time": 1546634201177, "_last_modified_user": "admin", "_last_modified_time": 1546634201177, "_system_owned": false, "_protection": "NOT_PROTECTED", "_revision": 0 }

Required Permissions:

crud

Feature:

service_insertion_config

Additional Errors:

• 301 Moved Permanently
• 307 Temporary Redirect
• 400 Bad Request
• 403 Forbidden
• 409 Conflict
• 412 Precondition Failed
• 500 Internal Server Error
• 503 Service Unavailable