NSX-T Data Center REST API

Deprecated Types

The following API types are deprecated in this version. Deprecated types continue to function, but may be removed in a future NSX version.

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

AddressBindingEntry (schema) (Deprecated)

Combination of IP-MAC-VLAN binding

An address binding entry is a combination of the IP-MAC-VLAN binding for
a logical port. The address bindings can be obtained via various methods
like ARP snooping, DHCP snooping etc. or by user configuration.

Name Description Type Notes
binding Combination of IP-MAC-VLAN binding PacketAddressClassifier
binding_timestamp Timestamp of binding

Timestamp at which the binding was discovered via snooping or manually
specified by the user
EpochMsTimestamp
source Address binding source

Source from which the address binding entry was obtained
AddressBindingSource Default: "UNKNOWN"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

AddressBindingSource (schema) (Deprecated)

Source from which the address binding is obtained

Name Description Type Notes
AddressBindingSource Source from which the address binding is obtained string Deprecated
Enum: INVALID, UNKNOWN, USER_DEFINED, ARP_SNOOPING, DHCP_SNOOPING, VM_TOOLS, ND_SNOOPING, DHCPV6_SNOOPING, VM_TOOLS_V6

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

BaseHostSwitchProfile (schema) (Deprecated)

This is an abstract type. Concrete child types:
ExtraConfigHostSwitchProfile
LldpHostSwitchProfile
NiocProfile
UplinkHostSwitchProfile

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
required_capabilities array of string Readonly
resource_type Must be set to the value BaseHostSwitchProfile HostSwitchProfileType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

BfdHealthMonitoringProfile (schema) (Deprecated)

Profile for BFD health monitoring

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Whether the heartbeat is enabled. A POST or PUT request with "enabled" false (with no probe intervals) will set (POST) or reset (PUT) the probe_interval to their default value. boolean Required
id Unique identifier of this resource string Sortable
latency_enabled Whether the latency is enabled.

The flag is to turn on/off latency. A POST or PUT request with "latency_enabled" true will enable NSX to send the networking latency data to thrid-party monitoring tools like vRNI.
boolean
probe_interval The time interval (in millisec) between probe packets for tunnels between transport nodes. integer Minimum: 300
Default: "1000"
resource_type Must be set to the value BfdHealthMonitoringProfile string Required
Enum: BfdHealthMonitoringProfile
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

BridgeHighAvailabilityClusterProfile (schema) (Deprecated)

Profile for BFD HA cluster setting

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
bfd_probe_interval the time interval (in millisec) between probe packets for heartbeat purpose integer Minimum: 300
Maximum: 60000
Default: "1000"
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enable whether the heartbeat is enabled boolean Default: "True"
id Unique identifier of this resource string Sortable
resource_type Must be set to the value BridgeHighAvailabilityClusterProfile ClusterProfileType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CdpStatusType (schema) (Deprecated)

Status types supported of the CrlDistributionPoint

Name Description Type Notes
CdpStatusType Status types supported of the CrlDistributionPoint string Deprecated
Enum: NOT_READY, FETCHING, READY, ERROR

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildCommunicationEntry (schema) (Deprecated)

Wrapper object for CommunicationEntry

Child wrapper object for CommunicationEntry, used in hierarchical API This type is deprecated. Use the type ChildRule instead.

Name Description Type Notes
CommunicationEntry CommunicationEntry

Contains the actual CommunicationEntry object.
CommunicationEntry Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildCommunicationEntry string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildCommunicationMap (schema) (Deprecated)

Wrapper object for CommunicationMap

Child wrapper object for CommunicationMap, used in hierarchical API This type is deprecated. Use the type ChildSecurityPolicy instead.

Name Description Type Notes
CommunicationMap CommunicationMap

Contains the actual CommunicationMap object.
CommunicationMap Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildCommunicationMap string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildDeploymentZone (schema) (Deprecated)

Wrapper object for DeploymentZone

Child wrapper object for DeploymentZone, used in hierarchical API

Name Description Type Notes
DeploymentZone DeploymentZone

Contains the actual DeploymentZone object
DeploymentZone Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildDeploymentZone string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildL2Vpn (schema) (Deprecated)

Wrapper object for L2Vpn

Child wrapper object for L2Vpn, used in hierarchical API.

Name Description Type Notes
L2Vpn L2Vpn

Contains the actual L2Vpn object.
L2Vpn Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildL2Vpn string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildL2VpnContext (schema) (Deprecated)

Wrapper object for L2VpnContext

Child wrapper object for L2VpnContext, used in hierarchical API.

Name Description Type Notes
L2VpnContext L2VpnContext

Contains the actual L2VpnContext object.
L2VpnContext Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildL2VpnContext string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildL3Vpn (schema) (Deprecated)

Wrapper object for L3Vpn

Child wrapper object for L3Vpn, used in hierarchical API.

Name Description Type Notes
L3Vpn L3Vpn

Contains the actual L3Vpn object.
L3Vpn Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildL3Vpn string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ChildL3VpnContext (schema) (Deprecated)

Wrapper object for L3VpnContext

Child wrapper object for L3VpnContext, used in hierarchical API.

Name Description Type Notes
L3VpnContext L3VpnContext

Contains the actual L3VpnContext object.
L3VpnContext Required
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
mark_for_override Indicates whether this object is the overridden intent object Global intent objects cannot be modified locally by the user. However, certain global intent objects can be overridden locally by use of this property. In such cases, the overridden local values take precedence over the globally defined values for the properties. boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

If this field is set to true, delete operation is triggered on the
intent tree. This resource along with its all children in intent tree
will be deleted. This is a cascade delete and should only be used if
intent object along with its all children are to be deleted. This does
not support deletion of single non-leaf node within the tree and should
be used carefully.
boolean Default: "False"
request_parameter Generic type for passing the API request parameters. PolicyRequestParameter
(Abstract type: pass one of the following concrete types)
PolicyRequestParameter
SegmentRequestParameter
TraceflowRequestParameter
resource_type Must be set to the value ChildL3VpnContext string Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ClasslessStaticRoute (schema) (Deprecated)

DHCP classless static route option

DHCP classless static route option.

Name Description Type Notes
network Destination in CIDR

Destination network in CIDR format.
IPElement Required
next_hop Router

IP address of next hop of the route.
IPAddress Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ClusterProfileTypeIdEntry (schema) (Deprecated)

Name Description Type Notes
profile_id key value string Required
resource_type ClusterProfileType

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationEntry (schema) (Deprecated)

A communication entry specifies the security policy between the workload groups

A communication entry indicates the action to be performed for various types of traffic flowing between workload groups. This type is deprecated. Use the type Rule instead.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
action Action

The action to be applied to all the services.
string Enum: ALLOW, DROP, REJECT
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
destination_groups Destination group paths

We need paths as duplicate names may exist for groups under different
domains.In order to specify all groups, use the constant "ANY". This
is case insensitive. If "ANY" is used, it should be the ONLY element
in the group array. Error will be thrown if ANY is used in conjunction
with other values.
array of string Maximum items: 128
direction Direction

Define direction of traffic.
string Enum: IN, OUT, IN_OUT
Default: "IN_OUT"
disabled Flag to deactivate the rule

Flag to deactivate the rule. Default is activated.
boolean Default: "False"
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
logged Enable logging flag

Flag to enable packet logging. Default is deactivated.
boolean Default: "False"
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
notes Text for additional notes on changes

Text for additional notes on changes.
string
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value CommunicationEntry string
scope The list of policy paths where the communication entry is applied
Edge/LR/T0/T1/LRP/CGW/MGW/etc. Note that a given rule can be applied
on multiple LRs/LRPs.
array of string Maximum items: 128
sequence_number Sequence number of the this CommunicationEntry

This field is used to resolve conflicts between multiple
CommunicationEntries under CommunicationMap for a Domain
If no sequence number is specified in the payload, a value of 0 is
assigned by default. If there are multiple communication entries with
the same sequence number then their order is not deterministic. If a
specific order of communication entry is desired, then one has to
specify unique sequence numbers or use the POST request on the
communication entry entity with a query parameter action=revise to let
the framework assign a sequence number
int
services Names of services

In order to specify all services, use the constant "ANY".
This is case insensitive. If "ANY" is used, it should
be the ONLY element in the services array. Error will be thrown
if ANY is used in conjunction with other values.
array of string Maximum items: 128
source_groups Source group paths

We need paths as duplicate names may exist for groups under different
domains. In order to specify all groups, use the constant "ANY". This
is case insensitive. If "ANY" is used, it should be the ONLY element
in the group array. Error will be thrown if ANY is used in conjunction
with other values.
array of string Maximum items: 128
tag Tag applied on the communication entry

User level field which will be printed in CLI and packet logs.
string Maximum length: 32
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationEntryInsertParameters (schema) (Deprecated)

Parameters to tell where communication entry needs to be placed

Parameters to let the admin specify a relative position of a communication
entry w.r.t to another one in the same communication map. If the
communication entry specified in the anchor_path belongs to another
communication map an error will be thrown
This type is deprecated. Use the type RuleInsertParameters instead.

Name Description Type Notes
anchor_path The communication map/communication entry path if operation is 'insert_after' or 'insert_before' string
operation Operation string Enum: insert_top, insert_bottom, insert_after, insert_before
Default: "insert_top"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationEntryListRequestParameters (schema) (Deprecated)

CommunicationEntry list request parameters

This type is deprecated. Use the type RuleListRequestParameters instead.

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
include_mark_for_delete_objects Include objects that are marked for deletion in results

If true, resources that are marked for deletion will be included
in the results. By default, these resources are not included.
boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result

Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.
string
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending If true, results are sorted in ascending order boolean
sort_by Field by which records are sorted string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationEntryListResult (schema) (Deprecated)

Paged Collection of CommunicationEntries

This type is deprecated. Use the type RuleListResult instead.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results CommunicationEntry list results array of CommunicationEntry Required
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationInsertParameters (schema) (Deprecated)

Parameters to tell where communication map/communication entry
needs to be placed

Parameters to let the admin specify a relative position of a communication
map or communication entry w.r.t to another one.
This type is deprecated. Use the type RuleInsertParameters instead.

Name Description Type Notes
anchor_path The communication map/communication entry path if operation is 'insert_after' or 'insert_before' string
operation Operation string Enum: insert_top, insert_bottom, insert_after, insert_before
Default: "insert_top"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationMap (schema) (Deprecated)

Contains ordered list of CommunicationEntries

Ordered list of CommunicationEntries. This object is created by default
along with the Domain.
This type is deprecated. Use the type SecurityPolicy instead.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
category A way to classify a communication map, if needed.

- Distributed Firewall -
Policy framework for Distributed Firewall provides four pre-defined
categories for classifying a communication map. They are
"Emergency", "Infrastructure", "Environment" and "Application".
Amongst the layer 3 communication maps,there is a pre-determined
order in which the policy framework manages the priority of these
communication maps. Emergency category has the highest priority
followed by Infrastructure, Environment and then Application rules.
Administrator can choose to categorize a communication map into the
above categories or can choose to leave it empty. If empty it will
have the least precedence w.r.t the above four layer 3 categories.
string
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
(Abstract type: pass one of the following concrete types)
ChildCommunicationEntry
communication_entries CommunicationEntries that are a part of this CommunicationMap array of CommunicationEntry
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
precedence Precedence to resolve conflicts across Domains

This field is used to resolve conflicts between communication maps
across domains. In order to change the precedence of a communication
map one can fire a POST request on the communication map entity with
a query parameter action=revise
The precedence field will reflect the value of the computed precedence
upon execution of the above mentioned POST request.
For scenarios where the administrator is using a template to update
several communication maps, the only way to set the precedence is to
explicitly specify the precedence number for each communication map.
If no precedence is specified in the payload, a value of 0 is
assigned by default. If there are multiple communication maps with
the same precedence then their order is not deterministic. If a
specific order of communication map is desired, then one has to
specify a unique precedence or use the POST request on the
communication map entity with a query parameter action=revise to let
the framework assign a precedence
int
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value CommunicationMap string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationMapInsertParameters (schema) (Deprecated)

Parameters to tell where communication map needs to be placed

Parameters to let the admin specify a relative position of a communication
map w.r.t to another one.
This type is deprecated. Use the type SecurityPolicyInsertParameters instead.

Name Description Type Notes
anchor_path The communication map/communication entry path if operation is 'insert_after' or 'insert_before' string
operation Operation string Enum: insert_top, insert_bottom, insert_after, insert_before
Default: "insert_top"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationMapListRequestParameters (schema) (Deprecated)

CommunicationMap list request parameters

This type is deprecated. Use the type SecurityPolicyListRequestParameters instead.

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
include_mark_for_delete_objects Include objects that are marked for deletion in results

If true, resources that are marked for deletion will be included
in the results. By default, these resources are not included.
boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result

Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.
string
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending If true, results are sorted in ascending order boolean
sort_by Field by which records are sorted string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CommunicationMapListResult (schema) (Deprecated)

Paged Collection of Communication map

This type is deprecated. Use the type SecurityPolicyListResult instead.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results CommunicationMap list results array of CommunicationMap Required
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CrlDistributionPoint (schema) (Deprecated)

Reference to a CRL Distribution Point where to fetch a CRL

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
cdp_uri CDP URI

CRL Distribution Point URI where to fetch the CRL.
string Required
Readonly
Maximum length: 255
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
issuer Issuer

Issuer of the CRL, referring to the CA.
string Required
Readonly
Maximum length: 255
resource_type Must be set to the value CrlDistributionPoint string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CrlDistributionPointList (schema) (Deprecated)

CrlDistributionPoint query result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results CrlDistributionPoint list. array of CrlDistributionPoint Required
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CrlDistributionPointStatus (schema) (Deprecated)

Reference to a CRL Distribution Point where to fetch a CRL

Name Description Type Notes
error_message Error Message

Error message when fetching the CRL failed.
string Readonly
status Status

Status of the fetched CRL for this CrlDistributionPoint
CdpStatusType Required
Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

CrlPemRequestType (schema) (Deprecated)

Request Type to get a CRL's PEM file.

Name Description Type Notes
cdp_uri CDP URI

CRL Distribution Point URI where to fetch the CRL.
string Required
Readonly
Maximum length: 255

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DeploymentZone (schema) (Deprecated)

Deployment zone

Logical grouping of enforcement points.
This is a deprecated type. DeploymentZone has been renamed to Site.
Use Site.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
(Abstract type: pass one of the following concrete types)
ChildEnforcementPoint
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enforcement_points Logical grouping of enforcement points array of EnforcementPoint
id Unique identifier of this resource string Sortable
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value DeploymentZone string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DeploymentZoneListRequestParameters (schema) (Deprecated)

DeploymentZone list request parameters

DeploymentZone list request parameters.
This is a deprecated type. DeploymentZone has been renamed to Site.
Use SiteListRequestParameters.

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
include_mark_for_delete_objects Include objects that are marked for deletion in results

If true, resources that are marked for deletion will be included
in the results. By default, these resources are not included.
boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result

Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.
string
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending If true, results are sorted in ascending order boolean
sort_by Field by which records are sorted string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DeploymentZoneListResult (schema) (Deprecated)

Paged Collection of Deployment Zones

Paged Collection of Deployment Zones.
This is a deprecated type. DeploymentZone has been renamed to Site.
Use SiteListResult.

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Deployment Zones array of DeploymentZone Required
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DhcpDeleteLeaseRequestParameters (schema) (Deprecated)

Name Description Type Notes
ip IPAddress Required
mac MACAddress Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DhcpIpPoolUsage (schema) (Deprecated)

Name Description Type Notes
allocated_number allocated number. COULD BE INACCURATE, REFERENCE ONLY. integer
allocated_percentage allocated percentage. COULD BE INACCURATE, REFERENCE ONLY. integer
consumed_number Consumed Number

The consumed number is intended to display the total number of IP
addresses consumed by DHCP clients. However, it may not always
reflect an accurate count due to the asynchronous running DHCP
data path.
integer
dhcp_ip_pool_id uuid of dhcp ip pool string
pool_size pool size integer

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DhcpOption121 (schema) (Deprecated)

DHCP option 121

DHCP option 121 to define classless static route.

Name Description Type Notes
static_routes DHCP classless static routes

Classless static route of DHCP option 121.
array of ClasslessStaticRoute Required
Minimum items: 1
Maximum items: 27

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DhcpServerStatus (schema) (Deprecated)

Name Description Type Notes
active_node uuid of active transport node string
error_message Error message, if available string
service_status UP means the dhcp service is working fine on both active transport-node
and stand-by transport-node (if have), hence fail-over can work at this
time if there is failure happens on one of the transport-node;
DOWN means the dhcp service is down on both active transport-node and
stand-by node (if have), hence the dhcp-service will not repsonse any
dhcp request;
Error means error happens on transport-node(s) or no status is reported from
transport-node(s). The dhcp service may be working (or not working);
NO_STANDBY means dhcp service is working in one of the transport node while
not in the other transport-node (if have). Hence if the dhcp service in
the working transport-node is down, fail-over will not happen and the
dhcp service will go down.
string Enum: UP, DOWN, ERROR, NO_STANDBY
stand_by_node uuid of stand_by transport node. null if non-HA mode string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DhcpStatistics (schema) (Deprecated)

Name Description Type Notes
acks The total number of DHCP ACK packets integer
declines The total number of DHCP DECLINE packets integer
dhcp_server_id dhcp server uuid string
discovers The total number of DHCP DISCOVER packets integer
errors The total number of DHCP errors integer
informs The total number of DHCP INFORM packets integer
ip_pool_stats The DHCP ip pool usage statistics array of DhcpIpPoolUsage
nacks The total number of DHCP NACK packets integer
offers The total number of DHCP OFFER packets integer
releases The total number of DHCP RELEASE packets integer
requests The total number of DHCP REQUEST packets integer
timestamp timestamp of the statistics EpochMsTimestamp

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

DuplicateAddressBindingEntry (schema) (Deprecated)

Duplicate address binding information

Name Description Type Notes
binding Combination of IP-MAC-VLAN binding PacketAddressClassifier
binding_timestamp Timestamp of binding

Timestamp at which the binding was discovered via snooping or manually
specified by the user
EpochMsTimestamp
conflicting_port ID of logical port with the same address binding

Provides the ID of the port on which the same address bidning exists
string
source Address binding source

Source from which the address binding entry was obtained
AddressBindingSource Default: "UNKNOWN"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

EdgeHighAvailabilityProfile (schema) (Deprecated)

Profile for BFD HA cluster setting

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
bfd_allowed_hops BFD allowed hops integer Minimum: 1
Maximum: 255
Default: "255"
bfd_declare_dead_multiple Number of times a packet is missed before BFD declares the neighbor down. integer Minimum: 2
Maximum: 16
Default: "3"
bfd_probe_interval the time interval (in millisec) between probe packets for heartbeat purpose integer Minimum: 50
Maximum: 60000
Default: "500"
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
resource_type Must be set to the value EdgeHighAvailabilityProfile ClusterProfileType Required
standby_relocation_config Standby service contexts relocation setting StandbyRelocationConfig
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ExtraConfig (schema) (Deprecated)

Vendor specific configuration on logical switch or logical port

Extra config is intended for supporting vendor specific configuration on the
data path, it can be set as key value string pairs on either logical switch
or logical port.
If it was set on logical switch, it will be inherited automatically by logical
ports in it. Also logical port setting will override logical switch setting
if specific key was dual set on both logical switch and logical port.

Name Description Type Notes
config_pair Key value pair in string for the configuration UnboundedKeyValuePair Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ExtraConfigHostSwitchProfile (schema) (Deprecated)

Profile for extra configs in host switch

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
extra_configs list of extra configs array of ExtraConfig
id Unique identifier of this resource string Sortable
required_capabilities array of string Readonly
resource_type Must be set to the value ExtraConfigHostSwitchProfile HostSwitchProfileType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

GenericDhcpOption (schema) (Deprecated)

Generic DHCP option

Define DHCP options other than option 121.

Name Description Type Notes
code DHCP option code, [0-255]

Code of the dhcp option.
integer Required
Minimum: 0
Maximum: 255
values DHCP option value

Value of the option.
array of string Required
Minimum items: 1
Maximum items: 10

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

GroupDeleteRequestParameters (schema) (Deprecated)

Group delete request parameters

Name Description Type Notes
fail_if_subtree_exists Do not delete if the group subtree has any entities

Check if the group sub-tree has any entities. These primarily include the
binding maps that point to various profiles. If this flag is passed as true,
the group delete fails if any binding maps exist in the group sub-tree.
By default, this flag is false, which means that the group is deleted
along with the group sub-tree.
boolean Default: "False"
force Force delete the resource even if it is being used somewhere

If true, deleting the resource succeeds even if it is being
referred as a resource reference.
boolean Default: "False"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

HostInfraTrafficType (schema) (Deprecated)

Enumerate all types of traffic

The traffic_name specifies the infrastructure traffic type and it
must be one of the following system-defined types:
FAULT_TOLERANCE is traffic for failover and recovery.
HBR is traffic for Host based replication.
ISCSI is traffic for Internet Small Computer System Interface.
MANAGEMENT is traffic for host management.
NFS is traffic related to file transfer in network file system.
VDP is traffic for vSphere data protection.
VIRTUAL_MACHINE is traffic generated by virtual machines.
VMOTION is traffic for computing resource migration.
VSAN is traffic generated by virtual storage area network.
The dynamic_res_pool_name provides a name for the resource pool.
It can be any arbitrary string.
Either traffic_name or dynamic_res_pool_name must be set.
If both are specified or omitted, an error will be returned.

Name Description Type Notes
dynamic_res_pool_name Dynamic resource pool traffic name string
traffic_name Traffic types string Enum: FAULT_TOLERANCE, HBR, ISCSI, MANAGEMENT, NFS, VDP, VIRTUAL_MACHINE, VMOTION, VSAN

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

HostSwitchInfo (schema) (Deprecated)

Information of host switch participating in transport zone

Name Description Type Notes
host_switch_id Unique ID of a host switch string Required
Readonly
host_switch_mode Mode of host switch string Required
Readonly
Enum: STANDARD, ENS, ENS_INTERRUPT, LEGACY
host_switch_name Name of a host switch string Required
Readonly
host_switch_type Type of a host switch string Required
Readonly
Enum: NVDS, VDS

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

HostSwitchProfileListParameters (schema) (Deprecated)

HostSwitchProfile List Parameters

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
deployment_type Deployment type of EdgeNode or PublicCloudGatewayNode

If the node_type is specified, then deployment_type may be specified to filter uplink profiles applicable to only PHYSICAL_MACHINE or VIRTUAL_MACHINE deployments of these nodes.
EdgeDeploymentType
hostswitch_profile_type Type of host switch profile HostSwitchProfileType
include_system_owned Whether the list result contains system resources boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result

Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.
string
node_type Fabric node type for which uplink profiles are to be listed

The fabric node type is the resource_type of the Node such as EdgeNode and PublicCloudGatewayNode. If a fabric node type is given, uplink profiles that apply for nodes of the given type will be returned.
string Enum: EdgeNode, PublicCloudGatewayNode
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending If true, results are sorted in ascending order boolean
sort_by Field by which records are sorted string
uplink_teaming_policy_name The host switch profile's uplink teaming policy name

If populated, only UplinkHostSwitchProfiles with the specified uplink teaming policy name are returned. Otherwise, any HostSwitchProfile can be returned.
string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

HostSwitchProfileType (schema) (Deprecated)

Supported HostSwitch profiles.

Name Description Type Notes
HostSwitchProfileType Supported HostSwitch profiles. string Deprecated
Enum: UplinkHostSwitchProfile, LldpHostSwitchProfile, NiocProfile, ExtraConfigHostSwitchProfile, VtepHAHostSwitchProfile, HighPerformanceHostSwitchProfile

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

HostSwitchProfileTypeIdEntry (schema) (Deprecated)

Name Description Type Notes
key HostSwitchProfileType
value key value string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

HostSwitchProfilesListResult (schema) (Deprecated)

HostSwitch Profile queries result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results HostSwitch Profile Results array of BaseHostSwitchProfile
(Abstract type: pass one of the following concrete types)
ExtraConfigHostSwitchProfile
LldpHostSwitchProfile
NiocProfile
UplinkHostSwitchProfile
Readonly
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

IPSecVPNTrafficCounters (schema) (Deprecated)

IPSec VPN traffic counters

Provides the following traffic statistics for IPSec VPN tunnels since the time the tunnels are UP:

- Incoming packet count.
- Outgoing packet count.
- Dropped packet count.

Name Description Type Notes
bytes_in Bytes in

Total number of traffic bytes received on inbound security association.
integer Readonly
bytes_out Bytes out

Total number of traffic bytes sent on outbound security association.
integer Readonly
dropped_packets_in Dropped incoming packets

Total number of incoming packets dropped on inbound security association.
integer Readonly
dropped_packets_out Dropped outgoing packets

Total number of outgoing packets dropped on outbound security association.
integer Readonly
packets_in Packets in

Total number of packets received on inbound security association.
integer Readonly
packets_out Packets out

Total number of packets sent on outbound security association.
integer Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

IntelligenceClusterNodeVMFormFactor (schema) (Deprecated)

Supported VM form factor for NSX-Intelligence cluster nodes

Specifies the desired "size" of the VM. Affects number of virtual CPUs
and/or memory size given to the new cluster node VM. Enum value SMALL, LARGE and
EXTRA_LARGE will be deprecated.

Name Description Type Notes
IntelligenceClusterNodeVMFormFactor Supported VM form factor for NSX-Intelligence cluster nodes

Specifies the desired "size" of the VM. Affects number of virtual CPUs
and/or memory size given to the new cluster node VM. Enum value SMALL, LARGE and
EXTRA_LARGE will be deprecated.
string Deprecated
Enum: EVALUATION, STANDARD, ADVANCED, SMALL, LARGE, EXTRA_LARGE

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

IpInfo (schema) (Deprecated)

Only support IP address or subnet. Its type can be of
IPv4 or IPv6. It will be converted to subnet when netmask
is specified(e.g., 192.168.1.3/24 => 192.168.1.0/24,
2008:12:12:12::2/64 => 2008:12:12:12::/64).
This type is deprecated. Please use the type NetworkInfo instead.

Name Description Type Notes
dst_ip The destination IP address or subnet

The destination IP can be an IP address or a subnet.
IPElement
src_ip The source IP address or subnet

The source IP can be an IP address or a subnet.
IPElement

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

IpMacPair (schema) (Deprecated)

IP and MAC pair.

Name Description Type Notes
ip IP address IPAddress Required
mac MAC address MACAddress

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L2Vpn (schema) (Deprecated)

L2 Virtual Private Network Configuration

Contains information necessary to configure L2Vpn.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enable L2Vpn

Enable to extend all the associated segments.
boolean Default: "True"
id Unique identifier of this resource string Sortable
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value L2Vpn string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
transport_tunnels List of paths referencing transport tunnels

List of paths referencing transport tunnels.
array of string Required
Minimum items: 1
Maximum items: 1
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L2VpnContext (schema) (Deprecated)

L2Vpn Context

L2Vpn Context provides meta-data information about the parent Tier-0.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enable_hub Enable to act as hub

If enabled, the tier-0 acts as a Hub and replicates traffic received from
peer to all other peers. If disabled, the tier-0 acts as a Spoke and
replicates only the local.
boolean Default: "False"
id Unique identifier of this resource string Sortable
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value L2VpnContext string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L3Vpn (schema) (Deprecated)

L3 Virtual Private Network Configuration

Contains information necessary to configure IPSec VPN.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
dh_groups DH group

Diffie-Hellman group to be used if PFS is enabled. Default group is GROUP14.
array of PolicyDHGroup Maximum items: 1
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enable_perfect_forward_secrecy Enable perfect forward secrecy

If true, perfect forward secrecy (PFS) is enabled.
boolean Default: "True"
enabled Enable L3Vpn

Flag to enable L3Vpn. Default is enabled.
boolean Default: "True"
id Unique identifier of this resource string Sortable
ike_digest_algorithms Digest Algorithm for IKE

Algorithm to be used for message digest during Internet Key Exchange(IKE)
negotiation. Default is SHA2_256.
array of PolicyIKEDigestAlgorithm Maximum items: 1
ike_encryption_algorithms Encryption algorithm for IKE

Algorithm to be used during Internet Key Exchange(IKE) negotiation.
Default is AES_128.
array of PolicyIKEEncryptionAlgorithm Maximum items: 1
ike_version IKE version

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds
to both IKE-V1 and IKE-V2.
PolicyIKEVersion Default: "IKE_V2"
l3vpn_session L3Vpn Session L3VpnSession
(Abstract type: pass one of the following concrete types)
PolicyBasedL3VpnSession
RouteBasedL3VpnSession
Required
local_address IPv4 address of local gateway IPv4Address Required
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
passphrases List of IPSec pre-shared keys

List of IPSec pre-shared keys used for IPSec authentication. If not
specified, the older passphrase values are retained if there are any.
array of secure_string Maximum items: 1
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
remote_private_address Identifier of the remote site

This field is used to resolve conflicts in case of a remote site being
behind NAT as remote public ip address is not enough. If it is not the
case the remote public address should be provided here. If not provided,
the value of this field is set to remote_public_address.
string
remote_public_address Public IPv4 address of remote gateway IPv4Address Required
resource_type Must be set to the value L3Vpn string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
tunnel_digest_algorithms Digest Algorithm for Tunnel Establishment

Algorithm to be used for message digest during tunnel establishment.
Default algorithm is empty.
array of PolicyTunnelDigestAlgorithm Maximum items: 1
tunnel_encryption_algorithms Encryption algorithm for Tunnel Establishement

Encryption algorithm to encrypt/decrypt the messages exchanged between
IPSec VPN initiator and responder during tunnel negotiation. Default is
AES_GCM_128.
array of PolicyTunnelEncryptionAlgorithm Maximum items: 1
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L3VpnContext (schema) (Deprecated)

L3Vpn Context

L3Vpn Context provides the configuration context that different L3Vpns can consume.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
available_local_addresses IPv4 addresses of the local gateway

Local gateway IPv4 addresses available for configuration of each L3Vpn.
array of PolicyIPAddressInfo
bypass_rules List of Bypass L3VpnRules

Bypass L3Vpn rules that will be shared across L3Vpns. Only Bypass action is
supported on these L3Vpn rules.
array of L3VpnRule
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enable L3 Virtual Private Network (VPN) service

If true, enable L3Vpn Service for given tier-0. Enabling/disabling this
service affects all L3Vpns under the given tier-0.
boolean Default: "True"
id Unique identifier of this resource string Sortable
ike_log_level Internet key exchange (IKE) log level

Log level for internet key exchange (IKE).
string Enum: DEBUG, INFO, WARN, ERROR, EMERGENCY
Default: "INFO"
label Policy path referencing Label

Policy path referencing Label. A label is used as a mechanism to group
route-based L3Vpns in order to apply edge firewall rules on members' VTIs.
string
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value L3VpnContext string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L3VpnRule (schema) (Deprecated)

L3Vpn Rule

For policy-based L3Vpn sessions, a rule specifies as its action the vpn tunnel to be used
for transit traffic that meets the rule's match criteria.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
action Action to apply to the traffic transiting through the L3Vpn

Action to exchange data with or without protection.
PROTECT - Allows to exchange data with ipsec protection. Protect rules are defined per
L3Vpn.
BYPASS - Allows to exchange data without ipsec protection. Bypass rules are defined per
L3VpnContext and affects all policy based L3Vpns. Bypass rules are prioritized over
protect rules.
string Enum: PROTECT, BYPASS
Default: "PROTECT"
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
destinations List of remote subnets

List of remote subnets used in policy-based L3Vpn.
array of L3VpnSubnet Required
Minimum items: 1
Maximum items: 128
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
resource_type Must be set to the value L3VpnRule string
sequence_number Sequence number of the L3VpnRule

This field is used to resolve conflicts between multiple L3VpnRules associated with a
single L3Vpn or L3VpnContext.
int
sources List of local subnets

List of local subnets used in policy-based L3Vpn.
array of L3VpnSubnet Required
Minimum items: 1
Maximum items: 128
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L3VpnSession (schema) (Deprecated)

L3Vpn Session

Contains information about L3Vpn session.
This is an abstract type. Concrete child types:
PolicyBasedL3VpnSession
RouteBasedL3VpnSession

Name Description Type Notes
resource_type L3VpnSessionResourceType Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L3VpnSessionResourceType (schema) (Deprecated)

Resource type of L3Vpn Session

- A Policy Based L3Vpn is a configuration in which protect rules to match local
and remote subnet needs to be defined. Tunnel is established for each pair of
local and remote subnet defined in protect rules.
- A Route Based L3Vpn is more flexible, more powerful and recommended over policy
based. IP Tunnel subnet is created and all traffic routed through tunnel subnet
(commonly known as VTI) is sent over tunnel. Routes can be learned through BGP.
A route based L3Vpn is required when using redundant L3Vpn.

Name Description Type Notes
L3VpnSessionResourceType Resource type of L3Vpn Session

- A Policy Based L3Vpn is a configuration in which protect rules to match local
and remote subnet needs to be defined. Tunnel is established for each pair of
local and remote subnet defined in protect rules.
- A Route Based L3Vpn is more flexible, more powerful and recommended over policy
based. IP Tunnel subnet is created and all traffic routed through tunnel subnet
(commonly known as VTI) is sent over tunnel. Routes can be learned through BGP.
A route based L3Vpn is required when using redundant L3Vpn.
string Deprecated
Enum: PolicyBasedL3VpnSession, RouteBasedL3VpnSession

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

L3VpnSubnet (schema) (Deprecated)

Subnet used in L3Vpn Rule

Used to specify subnets in L3Vpn rule.

Name Description Type Notes
subnet Subnet

Subnet used in L3Vpn Rule.
IPv4CIDRBlock Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

LBServiceApplianceNodeCapacity (schema) (Deprecated)

The load balancer capacity status for a Service Appliance node

The capacity contains remaining available load balancer numbers
and pool member number for the given Service Appliance node.

Name Description Type Notes
form_factor Deployment form factor

Form factor in use for deployment.
string Readonly
Enum: SMALL_VIRTUAL_MACHINE, MEDIUM_VIRTUAL_MACHINE, LARGE_VIRTUAL_MACHINE, XLARGE_VIRTUAL_MACHINE
node_path The node path

The property identifies the node path.
For example, node_path=/infra/sites/default/enforcement-points/default/
edge-clusters/46a3612a-85ac-4545-ba3c-2dbaa4f0b48c/edge-nodes/1.
string Required
remaining_large_load_balancer_count The remaining capacity of large load balancers

The remaining large load balancer count means maximum number of large
load balancers which could be configured in the given node.
integer Readonly
remaining_medium_load_balancer_count The remaining capacity of medium load balancers

The remaining medium load balancer count means maximum number of medium
load balancers which could be configured in the given node.
integer Readonly
remaining_small_load_balancer_count The remaining capacity of small load balancers

The remaining small load balancer count means maximum number of small
load balancers which could be configured in the given node.
integer Readonly
remaining_xlarge_load_balancer_count The remaining capacity of xlarge load balancers

The remaining xlarge load balancer count means maximum number of xlarge
load balancers which could be configured in the given node.
integer Readonly
resource_type Must be set to the value LBServiceApplianceNodeCapacity string Required
service_cluster_path Service cluster path

The service cluster path can be the policy path of the edge cluster or
virtual network appliance cluster.
string Readonly
remaining_pool_member_count The remaining capacity of pool members

This is a deprecated property. There will be no LB pool member limit
per edge node and per virtual network appliance anymore.
For backward compatible consideration, for edge node, the property
value is set as the remaining configurable pool member number for the
edge node, and the capacity is the max configurable pool member number
of the largest supported LB size on the edge node. For virtual network
appliance, the property is not set anymore.
integer Deprecated
Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

Lag (schema) (Deprecated)

LACP group

Name Description Type Notes
id unique id string Readonly
load_balance_algorithm LACP load balance Algorithm string Required
Enum: SRCMAC, DESTMAC, SRCDESTMAC, SRCDESTIPVLAN, SRCDESTMACIPPORT
mode LACP group mode string Required
Enum: ACTIVE, PASSIVE
name Lag name string Required
number_of_uplinks number of uplinks int Required
Minimum: 2
Maximum: 32
timeout_type LACP timeout type string Enum: SLOW, FAST
Default: "SLOW"
uplinks uplink names array of Uplink Readonly
Maximum items: 32

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

LldpHostSwitchProfile (schema) (Deprecated)

Host Switch for LLDP

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
required_capabilities array of string Readonly
resource_type Must be set to the value LldpHostSwitchProfile HostSwitchProfileType Required
send_enabled Enabled or disabled sending LLDP packets boolean Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

NamedTeamingPolicy (schema) (Deprecated)

Uplink Teaming Policy with a name that can be referenced by logical switches

Name Description Type Notes
active_list List of Uplinks used in active list array of Uplink Required
name The name of the uplink teaming policy

An uplink teaming policy of a given name defined in UplinkHostSwitchProfile. The names of all NamedTeamingPolicies in an UplinkHostSwitchProfile must be different, but a name can be shared by different UplinkHostSwitchProfiles. Different TransportNodes can use different NamedTeamingPolicies having the same name in different UplinkHostSwitchProfiles to realize an uplink teaming policy on a logical switch. An uplink teaming policy on a logical switch can be any policy defined by a user; it does not have to be a single type of FAILOVER or LOADBALANCE. It can be a combination of types, for instance, a user can define a policy with name "MyHybridTeamingPolicy" as "FAILOVER on all ESX TransportNodes and LOADBALANCE on all KVM TransportNodes". The name is the key of the teaming policy and can not be changed once assigned.
string Required
Maximum length: 136
policy Teaming policy string Required
Enum: FAILOVER_ORDER, LOADBALANCE_SRCID, LOADBALANCE_SRC_MAC
rolling_order Flag for preemptive mode boolean
standby_list List of Uplinks used in standby list array of Uplink

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

NatCounters (schema) (Deprecated)

NAT statistics count

Provides the following statistics for the NAT rules:

- Current number of active traffic sessions matching the NAT rules.
- Total number of bytes processed on the NAT rules since the time the rules
were created.
- Total number of packets processed on the NAT rules since the time the rules
were created.

Name Description Type Notes
active_sessions Active sessions

Provides the current number of active traffic sessions matching the NAT rules.
integer Readonly
total_bytes Total bytes

Provides the total number of bytes processed on the NAT rules since the time the
rules were created.
integer Readonly
total_packets Total packets

Provides the total number of packets processed on the NAT rules since the time
the rules were created.
integer Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

NiocProfile (schema) (Deprecated)

Profile for Nioc

This profile is created for Network I/O Control(NIOC).

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enabled status of NIOC feature

The enabled property specifies the status of NIOC feature.
When enabled is set to true, NIOC feature is turned on and
the bandwidth allocations specified for the traffic resources
are enforced. When enabled is set to false, NIOC feature
is turned off and no bandwidth allocation is guaranteed.
By default, enabled will be set to true.
boolean Default: "True"
host_infra_traffic_res Resource allocation associated with NiocProfile

host_infra_traffic_res specifies bandwidth allocation for
various traffic resources.
array of ResourceAllocation
id Unique identifier of this resource string Sortable
required_capabilities array of string Readonly
resource_type Must be set to the value NiocProfile HostSwitchProfileType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PacketAddressClassifier (schema) (Deprecated)

Address classifications for a packet

A packet is classified to have an address binding, if its address
configuration matches with all user specified properties.

Name Description Type Notes
ip_address A single IP address or a subnet, e.g. x.x.x.x or x.x.x.x/y IPElement
mac_address A single MAC address MACAddress
vlan VlanID

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

Pnic (schema) (Deprecated)

Physical NIC specification

Name Description Type Notes
device_name device name or key string Required
uplink_name Uplink name for this Pnic. This name will be used to reference this Pnic in other configurations. string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyBasedL3VpnSession (schema) (Deprecated)

Policy based L3Vpn Session

A Policy-based L3Vpn session is a configuration in which a specific vpn tunnel is
referenced in a policy whose action is set as tunnel.

Name Description Type Notes
resource_type Must be set to the value PolicyBasedL3VpnSession L3VpnSessionResourceType Required
rules L3Vpn Rules

L3Vpn rules that are specific to the L3Vpn. Only L3Vpn rules with PROTECT action
are supported.
array of L3VpnRule

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyDHGroup (schema) (Deprecated)

Diffie-Hellman groups

Diffie-Hellman groups represent algorithm used to derive shared keys between
IPSec VPN initiator and responder over an unsecured network.
GROUP2 uses 1024-bit Modular Exponentiation (MODP) group.
GROUP5 uses 1536-bit MODP group.
GROUP14 uses 2048-bit MODP group.
GROUP15 uses 3072-bit MODP group.
GROUP16 uses 4096-bit MODP group.

Name Description Type Notes
PolicyDHGroup Diffie-Hellman groups

Diffie-Hellman groups represent algorithm used to derive shared keys between
IPSec VPN initiator and responder over an unsecured network.
GROUP2 uses 1024-bit Modular Exponentiation (MODP) group.
GROUP5 uses 1536-bit MODP group.
GROUP14 uses 2048-bit MODP group.
GROUP15 uses 3072-bit MODP group.
GROUP16 uses 4096-bit MODP group.
string Deprecated
Enum: GROUP2, GROUP5, GROUP14, GROUP15, GROUP16

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyIKEDigestAlgorithm (schema) (Deprecated)

Digest Algorithms used in IKE negotiations

The IKEDigestAlgorithms are used to verify message integrity during IKE negotiation.
SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.

Name Description Type Notes
PolicyIKEDigestAlgorithm Digest Algorithms used in IKE negotiations

The IKEDigestAlgorithms are used to verify message integrity during IKE negotiation.
SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.
string Deprecated
Enum: SHA1, SHA2_256, SHA2_384, SHA2_512

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyIKEEncryptionAlgorithm (schema) (Deprecated)

Encryption algorithms used in IKE

IKEEncryption algorithms are used to ensure confidentiality of the messages
exchanged during IKE negotiations. AES stands for Advanced Encryption Standards.
AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and
decryption. AES_128 and AES_256 use CBC mode of encryption. AES_GCM stands for
Advanced Encryption Standard(AES) in Galois/Counter Mode(GCM) and is used to
provide both confidentiality and data origin authentication. AES_GCM composed
of two separate functions one for encryption(AES) and one for authentication(GMAC).
AES_GCM algorithms will be available with IKE_V2 version only.
AES_GMAC_128 uses 128-bit keys.
AES_GMAC_192 uses 192-bit keys.
AES_GMAC_256 uses 256-bit keys.

Name Description Type Notes
PolicyIKEEncryptionAlgorithm Encryption algorithms used in IKE

IKEEncryption algorithms are used to ensure confidentiality of the messages
exchanged during IKE negotiations. AES stands for Advanced Encryption Standards.
AES_128 uses 128-bit keys whereas AES_256 uses 256-bit keys for encryption and
decryption. AES_128 and AES_256 use CBC mode of encryption. AES_GCM stands for
Advanced Encryption Standard(AES) in Galois/Counter Mode(GCM) and is used to
provide both confidentiality and data origin authentication. AES_GCM composed
of two separate functions one for encryption(AES) and one for authentication(GMAC).
AES_GCM algorithms will be available with IKE_V2 version only.
AES_GMAC_128 uses 128-bit keys.
AES_GMAC_192 uses 192-bit keys.
AES_GMAC_256 uses 256-bit keys.
string Deprecated
Enum: AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyIKEVersion (schema) (Deprecated)

IKE version

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds
to both IKE-V1 and IKE-V2.

Name Description Type Notes
PolicyIKEVersion IKE version

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds
to both IKE-V1 and IKE-V2.
string Deprecated
Enum: IKE_V1, IKE_V2, IKE_FLEX

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyIPAddressInfo (schema) (Deprecated)

IP address information

Used to specify the display name and value of the IPv4Address.

Name Description Type Notes
address_value Value of the IPv4Address

Value of the IPv4Address.
IPv4Address Required
display_name Display name of the IPv4Address

Display name used to help identify the IPv4Address.
string
next_hop Next Hop of the IPv4Address

Next hop used in auto-plumbing of static route. If a value is not
provided, static route will not be auto-plumbed.
IPv4Address

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyNiocProfile (schema) (Deprecated)

Profile for Nioc

This profile is created for Network I/O Control(NIOC).

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
children Subtree for this type within policy tree

Subtree for this type within policy tree containing nested elements. Note that
this type is applicable to be used in Hierarchical API only.
array of ChildPolicyConfigResource
Children are not allowed for this type
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
enabled Enabled status of NIOC feature

The enabled property specifies the status of NIOC feature.
When enabled is set to true, NIOC feature is turned on and
the bandwidth allocations specified for the traffic resources
are enforced. When enabled is set to false, NIOC feature
is turned off and no bandwidth allocation is guaranteed.
By default, enabled will be set to true.
boolean Default: "True"
host_infra_traffic_res Resource allocation associated with NiocProfile

host_infra_traffic_res specifies bandwidth allocation for
various traffic resources.
array of PolicyPolicyResourceAllocation
id Unique identifier of this resource string Sortable
marked_for_delete Indicates whether the intent object is marked for deletion

Intent objects are not directly deleted from the system when a delete
is invoked on them. They are marked for deletion and only when all the
realized entities for that intent object get deleted, the intent object
is deleted. Objects that are marked for deletion are not returned in
GET call. One can use the search API to get these objects.
boolean Readonly
Default: "False"
origin_site_id A unique identifier assigned by the system for knowing which site owns an object

This is a UUID generated by the system for knowing which site owns an object.
This is used in NSX+.
string Readonly
overridden Indicates whether this object is the overridden intent object

Global intent objects cannot be modified locally by the user.
However, certain global intent objects can be overridden locally by use
of this property. In such cases, the overridden local values take
precedence over the globally defined values for the properties.
boolean Readonly
Default: "False"
owner_id A unique identifier assigned by the system for the ownership of an object

This is a UUID generated by the system for knowing who owns this object.
This is used in NSX+.
string Readonly
parent_path Path of its parent

Path of its parent
string Readonly
path Absolute path of this object

Absolute path of this object
string Readonly
realization_id A unique identifier assigned by the system for realizing intent

This is a UUID generated by the system for realizing the entity object.
In most cases this should be same as 'unique_id' of the entity. However,
in some cases this can be different because of entities have migrated their
unique identifier to NSX Policy intent objects later in the timeline and did
not use unique_id for realization. Realization id is helpful for users to
debug data path to correlate the configuration with corresponding intent.
string Readonly
relative_path Relative path of this object

Path relative from its parent
string Readonly
remote_path Path of the object on the remote end.

This path is populated only in case of multi-site scenario. Currently it is supported only for LM objects.
When LM is onboarded to multi-site platform like NAPP or GM, remote_path will be set to
the globally unique path across multi-site topology . It is generated based on local site-name and uses /org tree namespace.
Note: It is populated only for LM objects. Not supported on the GM.
string Readonly
required_capabilities array of string Readonly
resource_type Must be set to the value PolicyNiocProfile PolicyHostSwitchProfileType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
unique_id A unique identifier assigned by the system

This is a UUID generated by the GM/LM to uniquely identify
entities in a federated environment. For entities that are
stretched across multiple sites, the same ID will be used
on all the stretched sites.
string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyTunnelDigestAlgorithm (schema) (Deprecated)

Digest Algorithms used in tunnel establishment

The TunnelDigestAlgorithms are used to verify message integrity during tunnel establishment.
SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.

Name Description Type Notes
PolicyTunnelDigestAlgorithm Digest Algorithms used in tunnel establishment

The TunnelDigestAlgorithms are used to verify message integrity during tunnel establishment.
SHA1 produces 160 bits hash and SHA2_XXX produces XXX bit hash.
string Deprecated
Enum: SHA1, SHA2_256, SHA2_384, SHA2_512

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PolicyTunnelEncryptionAlgorithm (schema) (Deprecated)

Encryption algorithm used in tunnel

TunnelEncryption algorithms are used to ensure confidentiality of the messages exchanged
during Tunnel negotiations. AES stands for Advanced Encryption Standards. AES_128 uses
128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_128
and AES_256 use CBC mode of encryption. AES_GCM stands for Advanced Encryption Standard(AES)
in Galois/Counter Mode (GCM) and is used to provide both confidentiality and data origin
authentication.

Name Description Type Notes
PolicyTunnelEncryptionAlgorithm Encryption algorithm used in tunnel

TunnelEncryption algorithms are used to ensure confidentiality of the messages exchanged
during Tunnel negotiations. AES stands for Advanced Encryption Standards. AES_128 uses
128-bit keys whereas AES_256 uses 256-bit keys for encryption and decryption. AES_128
and AES_256 use CBC mode of encryption. AES_GCM stands for Advanced Encryption Standard(AES)
in Galois/Counter Mode (GCM) and is used to provide both confidentiality and data origin
authentication.
string Deprecated
Enum: AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PortAttacher (schema) (Deprecated)

VM or vmknic entity attached to LogicalPort

Name Description Type Notes
entity Reference to the attached entity

This is a vmknic name if the attacher is vmknic. Otherwise, it is
full path of the attached VM's config file
string Required
host TransportNode on which the attacher resides string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PreconfiguredEndpoint (schema) (Deprecated)

Tunnel endpoint configuration of preconfigured host switch

Name Description Type Notes
device_name Name of the virtual tunnel endpoint string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PreconfiguredHostSwitch (schema) (Deprecated)

Preconfigured host switch

Preconfigured host switch is used for manually configured transport node.

Name Description Type Notes
endpoints List of virtual tunnel endpoints which are preconfigured on this host switch array of PreconfiguredEndpoint Maximum items: 1
host_switch_id External Id of the preconfigured host switch. string Required
transport_zone_endpoints Transport zone endpoints.

List of TransportZones that are to be associated with specified host switch.
array of TransportZoneEndPoint

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

PreconfiguredHostSwitchSpec (schema) (Deprecated)

Specification of transport node preconfigured host switch

Preconfigured host switch specification is used for manually configured transport node. It is user's responsibility to ensure correct configuration is provided to NSX. This type is only valid for supported KVM fabric nodes.

Name Description Type Notes
host_switches Preconfigured Transport Node host switches array of PreconfiguredHostSwitch Required
Maximum items: 1
resource_type Must be set to the value PreconfiguredHostSwitchSpec string Required
Enum: StandardHostSwitchSpec, PreconfiguredHostSwitchSpec

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

ResourceAllocation (schema) (Deprecated)

Resource allocation information for a host infrastructure traffic type

Specify limit, shares and reservation for all kinds of traffic.
Values for limit and reservation are expressed in percentage. And for shares,
the value is expressed as a number between 1-100.
The overall reservation among all traffic types should not exceed 75%.
Otherwise, the API request will be rejected.

Name Description Type Notes
limit Maximum bandwidth percentage

The limit property specifies the maximum bandwidth allocation for a given
traffic type and is expressed in percentage. The default value for this
field is set to -1 which means the traffic is unbounded for the traffic
type. All other negative values for this property is not supported
and will be rejected by the API.
number Required
Minimum: -1
Maximum: 100
Default: "-1.0"
reservation Minimum guaranteed bandwidth percentage number Required
Minimum: 0
Maximum: 75
Default: "0.0"
shares Shares int Required
Minimum: 1
Maximum: 100
Default: "50"
traffic_type Resource allocation traffic type HostInfraTrafficType Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

RouteBasedL3VpnSession (schema) (Deprecated)

Route based L3Vpn Session

A Route Based L3Vpn is more flexible, more powerful and recommended over policy based.
IP Tunnel subnet is created and all traffic routed through tunnel subnet is sent over
tunnel. Routes can be learned through BGP. A route based L3Vpn is required when using
redundant L3Vpn.

Name Description Type Notes
default_rule_logging Enable logging for whitelisted rule for the VTI interface

Indicates if logging should be enabled for the default whitelisting
rule for the VTI interface.
boolean Default: "False"
force_whitelisting Flag to add default whitelisting FW rule for the VTI interface.

The default firewall rule Action is set to DROP if true otherwise set to ALLOW.
boolean Default: "False"
resource_type Must be set to the value RouteBasedL3VpnSession L3VpnSessionResourceType Required
tunnel_subnets Virtual Tunnel Interface (VTI) IP subnets

Virtual tunnel interface (VTI) port IP subnets to be used to configure
route-based L3Vpn session. A max of one tunnel subnet is allowed.
array of TunnelSubnet Required
Minimum items: 1
Maximum items: 1
routing_config_path Routing configuration policy path

This is a deprecated field. Any specified value is not saved and will be ignored.
string Deprecated

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

SessionLoginCredential (schema) (Deprecated)

A login credential specifying session_id

Details of session based login credential to login to server.

Name Description Type Notes
credential_type Must be set to the value SessionLoginCredential string Required
session_id The session_id to login to server

The session_id to login to server.
secure_string
thumbprint Thumbprint of the login server

Thumbprint of the login server.
string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

Snmpv3User (schema) (Deprecated)

SNMP v3 user

This object contains properties for a SNMP v3 user that can be used to receive SNMP traps/notifications from NSX and/or poll NSX nodes over SNMP.

Name Description Type Notes
access Type of access

Access permissions for polling NSX nodes over SNMP v3.
string Enum: READ_ONLY
Default: "READ_ONLY"
auth_password Authentication password

Authentication password used for SNMP v3 communication. This field is required when adding a user. When updating a user, do not include this field in the request. If this field is present in an update request, it will be considered as a new value for authentication password.
secure_string
priv_password Privacy password

Privacy password used for SNMP v3 communication. This field is required when adding a user. When updating a user, do not include this field in the request. If this field is present in an update request, it will be considered as a new value for privacy password.
secure_string
security_level Security level

Security level indicates whether SNMP communication involves authentication and privacy protocols for this user. Value "AUTH_PRIV" indicates both authentication and privacy protocols will be used for SNMP communication.
string Enum: AUTH_PRIV
Default: "AUTH_PRIV"
user_id User ID

Unique SNMP v3 user id.
string Required
Minimum length: 1
Maximum length: 32

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

StandbyRelocationConfig (schema) (Deprecated)

Standby service contexts relocation setting

Name Description Type Notes
standby_relocation_threshold Standby service context relocation wait time

The time interval (in minutes) to wait before starting the standby
service context relocation process. In some cases, the standby
relocation trigger may take more time than what is set in threshold
because of multiple different reasons, as listed below
A. Standby relocation process runs as a background task which poll edge
clusters at pre-defined interval of 5 minutes, to check for standby relocation.
If during one cycle of standby relocation, an edge is found to be down, and the
time remaining to threshold expiry in less then 5 minutes (for example 2 minute),
than this relocation will be picked up in next cycle of standby relocation
after 5 minutes, and not after 2 minutes.
B. If edge becomes down at X time, then edge might take few seconds or
minutes for all services to completely go down and report that they are
down. So actual time when unified appliance knows edge is down may be X + delta.
This delta time adds to the actual standby relocation threshold expiry,
and once the [standby relocation threshold time + delta time] is complete for an
edge node, and the edge is still down, than the standby relocation task will be
performed for this edge node in the next cycle, that may be due to run anytime
within next 5 minutes.
integer Minimum: 10
Maximum: 20000
Default: "30"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

StaticIpListSpec (schema) (Deprecated)

IP assignment specification for Static IP List.

Name Description Type Notes
default_gateway Gateway IP IPAddress Required
ip_list List of IPs for transport node host switch virtual tunnel endpoints array of IPAddress Required
Maximum items: 32
resource_type Must be set to the value StaticIpListSpec string Required
Enum: StaticIpPoolSpec, StaticIpListSpec, AssignedByDhcp, StaticIpMacListSpec, NoIpv4, FromEsxiVmknic
subnet_mask Subnet mask IPAddress Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

StaticIpMacListSpec (schema) (Deprecated)

IP and MAC assignment specification for Static IP List.

Name Description Type Notes
default_gateway Gateway IP IPAddress Required
ip_mac_list List of IPs and MACs for transport node host switch virtual tunnel endpoints array of IpMacPair Required
Maximum items: 32
resource_type Must be set to the value StaticIpMacListSpec string Required
Enum: StaticIpPoolSpec, StaticIpListSpec, AssignedByDhcp, StaticIpMacListSpec, NoIpv4, FromEsxiVmknic
subnet_mask Subnet mask IPAddress Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

StaticIpv4MacList (schema) (Deprecated)

IP and MAC assignment specification for Static IP List.

Name Description Type Notes
default_gateway Gateway IP IPv4Address Required
ip_assignment_type Must be set to the value StaticIpv4MacList string Required
Enum: StaticIpv4, StaticIpv4Pool, StaticIpv4List, Dhcpv4, StaticIpv6, StaticIpv6Pool, StaticIpv6List, StaticIpv6MacList, StaticIpv4MacList, Dhcpv6, AutoConf, NoAssignment
ip_mac_list List of IPs and MACs for transport node host switch virtual tunnel endpoints array of IpMacPair Required
Maximum items: 32
subnet_mask Subnet mask IPv4Address Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

StaticIpv4Pool (schema) (Deprecated)

IP assignment specification for Static IPv4 Pool.

Name Description Type Notes
ip_assignment_type Must be set to the value StaticIpv4Pool string Required
Enum: StaticIpv4, StaticIpv4Pool, StaticIpv4List, Dhcpv4, StaticIpv6, StaticIpv6Pool, StaticIpv6List, StaticIpv6MacList, StaticIpv4MacList, Dhcpv6, AutoConf, NoAssignment
ip_pool Input can be MP ip pool UUID or policy path of IP pool.
string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

StaticIpv6MacList (schema) (Deprecated)

IP and MAC assignment specification for Static IPv6 List.

Name Description Type Notes
default_gateway Gateway IP IPv6Address Required
ip_assignment_type Must be set to the value StaticIpv6MacList string Required
Enum: StaticIpv4, StaticIpv4Pool, StaticIpv4List, Dhcpv4, StaticIpv6, StaticIpv6Pool, StaticIpv6List, StaticIpv6MacList, StaticIpv4MacList, Dhcpv6, AutoConf, NoAssignment
ip_mac_list List of IPs and MACs for transport node host switch virtual tunnel endpoints array of Ipv6MacPair Required
Maximum items: 32
prefix_length Prefix Length string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

SwitchingProfileType (schema) (Deprecated)

Supported switching profiles.

Supported switching profiles.
'PortMirroringSwitchingProfile' is deprecated, please turn to
"Troubleshooting And Monitoring: Portmirroring" and use
PortMirroringSession API for port mirror function.

Name Description Type Notes
SwitchingProfileType Supported switching profiles.

Supported switching profiles.
'PortMirroringSwitchingProfile' is deprecated, please turn to
"Troubleshooting And Monitoring: Portmirroring" and use
PortMirroringSession API for port mirror function.
string Deprecated
Enum: QosSwitchingProfile, PortMirroringSwitchingProfile, IpDiscoverySwitchingProfile, SpoofGuardSwitchingProfile, SwitchSecuritySwitchingProfile, MacManagementSwitchingProfile, RealTimeEthernetSwitchingProfile

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

SwitchingProfileTypeIdEntry (schema) (Deprecated)

Name Description Type Notes
key SwitchingProfileType
value key value string Required

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TeamingPolicy (schema) (Deprecated)

Uplink Teaming Policy

Name Description Type Notes
active_list List of Uplinks used in active list array of Uplink Required
policy Teaming policy string Required
Enum: FAILOVER_ORDER, LOADBALANCE_SRCID, LOADBALANCE_SRC_MAC
rolling_order Flag for preemptive mode boolean
standby_list List of Uplinks used in standby list array of Uplink

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportNodeDeleteParameters (schema) (Deprecated)

Parameters that affect how delete operations are processed

Name Description Type Notes
force Force delete the resource even if it is being used somewhere

If true, deleting the resource succeeds even if it is being
referred as a resource reference.
boolean Default: "False"
unprepare_host Uninstall NSX components from host while deleting boolean Default: "True"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportNodeDeploymentProgressState (schema) (Deprecated)

Deployment progress of transport node

Deployment progress state of transport node. Object has current deployment step title and progress in percentage.

Name Description Type Notes
current_step Deployment step string Readonly
Enum: DEPLOYMENT_PROGRESS_EDGE_BEGIN_VM_DEPLOY, DEPLOYMENT_PROGRESS_EDGE_DEPLOY_IN_PROGRESS, DEPLOYMENT_PROGRESS_EDGE_POWERING_ON, DEPLOYMENT_PROGRESS_EDGE_POWER_ON_DONE, DEPLOYMENT_PROGRESS_EDGE_REGISTRATION_IN_PROGRESS, DEPLOYMENT_PROGRESS_EDGE_REGISTRATION_DONE, DEPLOYMENT_PROGRESS_EDGE_DELETE_IN_PROGRESS, DEPLOYMENT_PROGRESS_EDGE_UNREGISTER_IN_PROGRESS, DEPLOYMENT_PROGRESS_EDGE_POWERING_OFF_VM, DEPLOYMENT_PROGRESS_EDGE_DELETING_VM, DEPLOYMENT_PROGRESS_EDGE_VMDELETED, DEPLOYMENT_PROGRESS_EDGE_BEGIN_REDEPLOY, DEPLOYMENT_PROGRESS_TN_CREATE_BEGIN_TN_CONFIG, DEPLOYMENT_PROGRESS_TN_CREATE_PREPARE_CONFIG, DEPLOYMENT_PROGRESS_TN_CREATE_SENDING_HOST_CONFIG, DEPLOYMENT_PROGRESS_TN_CREATE_WAITING_FOR_HOST_CONFIG_REPLY, DEPLOYMENT_PROGRESS_TN_CREATE_HANDLING_APP_INIT, DEPLOYMENT_PROGRESS_TN_CREATE_SYNCING_LS, DEPLOYMENT_PROGRESS_TN_CREATE_VDS_FOLDER_REALISATION, DEPLOYMENT_PROGRESS_TN_CREATE_UPDATING_STATE, DEPLOYMENT_PROGRESS_TN_CREATE_SUCCESS, DEPLOYMENT_PROGRESS_TN_DELETE_BEGIN_TN_CONFIG, DEPLOYMENT_PROGRESS_TN_DELETE_PREPARE_CONFIG, DEPLOYMENT_PROGRESS_TN_DELETE_SENDING_HOST_CONFIG, DEPLOYMENT_PROGRESS_TN_DELETE_WAITING_FOR_HOST_CONFIG_REPLY, DEPLOYMENT_PROGRESS_TN_DELETE_HANDLING_APP_INIT, DEPLOYMENT_PROGRESS_TN_DELETE_SYNCING_LS, DEPLOYMENT_PROGRESS_TN_DELETE_VDS_FOLDER_REALISATION, DEPLOYMENT_PROGRESS_TN_DELETE_UPDATING_STATE, DEPLOYMENT_PROGRESS_TN_DELETE_SUCCESS
current_step_title Deployment step title string Readonly
progress Percentage of deployment completed integer Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportNodeMemberInfo (schema) (Deprecated)

Information about participating transport nodes

Name Description Type Notes
compute_collection_id Id of the compute collection to which this transport node belongs. Empty if this is standalone transport node or non ESX type node. string Readonly
host_switches List of host switches using the transport zone array of HostSwitchInfo Readonly
transport_node_display_name Display name of the transport node which has one or more host switches which belong to associated transport zone. string Readonly
transport_node_id Id of the transport node which has one or more host switches which belong to associated transport zone. string Required
Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportNodeProfile (schema) (Deprecated)

Transport Node Profile

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
host_switch_spec Transport node host switch specification

The HostSwitchSpec is the base class for standard and preconfigured
host switch specifications. Only standard host switches are supported
in the transport node profile.
HostSwitchSpec
(Abstract type: pass one of the following concrete types)
PreconfiguredHostSwitchSpec
StandardHostSwitchSpec
id Unique identifier of this resource string Sortable
ignore_overridden_hosts Determines if cluster-level configuration should be applied on overridden hosts

Transport Node Profiles specify the configuration that is applied to all
hosts in a cluster. The user has the ability to update the configuration
on individual hosts within a cluster which will cause the host configuration
to differ from the Transport Node Profile and results in the host to be
marked as overridden. If a Transport Node Profile is edited or a new
Transport Node Profile is applied on a Transport Node Collection, by default,
the host configuration will be overwritten with the Transport Node Profile
configuration and the overridden flag will be reset to false. This flag
should be used when hosts that are set as overridden should not adopt the
Transport Node Profile configuration when it is being updated or a new one
is applied to the Transport Node Collection. In other words, when this flag is
set to the default value of false and configuration is applied at the cluster
level, the configuration will be applied on all hosts regardless if overridden
or not. When this flag is set to true, all hosts that are set as overridden, i.e.,
have been updated invidivually, will be ignored and the cluster-level configuration
will not be applied.
Note, Transport Node Profiles can be applied on multiple clusters. This field will
dictate the behavior followed by all clusters using this Transport Node Profile.
boolean Default: "False"
resource_type Must be set to the value TransportNodeProfile string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportNodeProfileListResult (schema) (Deprecated)

Transport Node Profile queries result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results TransportNodeProfile Results array of TransportNodeProfile Readonly
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportNodeUpdateParameters (schema) (Deprecated)

Transport node update parameters

Transport node update parameters are mainly used for migrating ESX VMkernel (vmk) interfaces and VM NICs into or out-of logical switches. The 'esx_mgmt_if_migration_dest' and 'if_id' must be used as a pair to migrate vmk interfaces; they can not be used to migrate VM NICs. NSX manager will auto-create logical ports and vif ids for the vmk interfaces when they are used to migrate vmks into logical switches. The 'vnic' and 'vnic_migration_dest' must also be used as a pair; they can be used to migrate both vmk interfaces and VM NICs. When they are used to migrate interfaces into logical switches, logical ports and vif ids must be created in advance because 'vnic_migration_dest' must contain existing vif ids. These two paires can not be specified together.

Name Description Type Notes
esx_mgmt_if_migration_dest The network ids to which the ESX vmk interfaces will be migrated

A comma separated list of network ids. When migrating vmks into logical
switches, the ids are the logical switches's ids. When migrating out of
logical switches, the ids are vSphere Standard Switch portgroup names
in a single vSphere Standard Switch, or distributed virtual portgroup
names in a single distributed virtual switch (DVS).
This property can only used together with 'if_id'.
string
if_id The ESX vmk interfaces to migrate

A comma separated list of vmk interfaces (for example, vmk0,vmk1).
This property can only used along with 'esx_mgmt_if_migration_dest'.
If all vmk interfaces will be migrated into the same logical switch or
DV portgroup, the 'esx_mgmt_if_migration_dest' can be just one logical
switch id or DV portgroup name. Otherwise the number of vmks in this
list must equal the number of ids in 'esx_mgmt_if_migration_dest' list,
and the orders of the two lists are important because the vmks match
the network ids one by one in the same order.
string
override_nsx_ownership Override NSX Ownership

Flag indicating whether the NSX ownership constraints (on Managed Objects like Host/Cluster/DVS) should be
overridden/bypassed.
Note:
Overriding/bypassing NSX ownership constraints is not recommended at all. This indicates, you want to use/configure/own
certain Managed Objects (like Cluster, Host or DVS) which seem to be already in use/configured/owned by some other NSX instance.
This option should be used with caution. It should only be used to come out of situations where:
a. The other NSX instance no longer intends to use the Managed Objects (and has already unconfigured NSX
configurations) but the ownership still lies with it (incorrectly) and you want those Managed Objects to be
used/configured/owned by this NSX instance.
b. The other NSX instance has crashed or decommisioned but the ownership still lies with it and you want those
Managed Objects to be used/configured/owned by this NSX instance.
Enabling this option, while the Managed Objects affected by this operation are actively used by other NSX, can
lead to problematic states on both the NSX instances. For example, if a TN is forcefully reconfigured by this NSX instance
(using override_nsx_ownership=true), while it was already configured and in use by the other NSX instance, it could
corrupt the HostSwitch configurations pushed down by the other NSX instance.
boolean Default: "False"
ping_ip IP Addresses to ping right after ESX vmk interfaces were migrated.

A comma separated list of IP addresses that match the vmk interfaces
given in property 'if_id" or 'vnic' one-by-one in the same order.
'0.0.0.0' is a special IP that indicates the pre-migration gateway of
the vmk will be pinged post-migration. If a VMK does not need the ping
ip or a VM NIC is given inside 'vnic', the ping ip must be skipped but
the comma has to stay. For example, '0.0.0.0,,10.1.1.1' indicates the
vmk or VM NIC at the 2nd position does not need ping post-migration.
Right after all ESX vmk interfaces are migrated, ping packets will be
sent through each vmk to its given ping_ip to check if the migraton
will break the network connectivity or not. If any vmk_ping fails, the
whole migration of all vmks will be rolled back and transport-node will
be in failed state.
string
skip_validation Whether to skip front-end validation for vmk/vnic/pnic migration

If this property is set true, all front-end validation for vmk, vnic,
and/or pnic migration will be skipped. This is useful when the remote
host becomes unreachable as a result of a migration; in which case
the front-end validation will always fail because data from the remote
host is no longer available. Skipping the validation will allow user
to undo the migration by updating the transport node first and then
restoring the host network connectivity.
boolean Default: "False"
vnic The ESX vmk interfaces and/or VM NIC to migrate

A comma separated list of vmk interfaces and/or one VM NIC. Only one VM
NIC is allowed in the list; the format must be vmInstanceUuid:DeviceId
like '50ca5f2d-1fa2-432d-991e-f01e0e16d182:4000'. An example list is
'vmk0,vmk1,50ca5f2d-1fa2-432d-991e-f01e0e16d182:4000'.
The property can only be used along with 'vnic_migration_dest'.
string
vnic_migration_dest The migration destinations of ESX vmk interfaces and/or VM NIC

A comma separated list of vif ids, or port group names. When migrating
into logical switches, the ids are vif ids in the logical ports created
in the logical switches. When migrating out of logical switches, the
ids are vSphere Standard Switch portgroup names in a single vSphere
Standard Switch, or distributed virtual portgroup names in a single
distributed virtual switch (DVS).
The property can only be used in combination with property 'vnic'. The
number of vnic interfaces in 'vnic' must equal the number of vif ids or
port-group names in this list. The items in the two lists match by the
the order.
string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportType (schema) (Deprecated)

Name Description Type Notes
TransportType string Deprecated
Enum: OVERLAY, VLAN

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZone (schema) (Deprecated)

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
authorized_vlans Authorized VLAN ids for this TransportZone

This field lists vlan ids allowed on logical network entities, eg. Segments, bridges, etc. created under this transport zone. Can be empty, VLAN id or a range of VLAN ids specified with '-' in between. An empty list allows all vlan ids.
array of string
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
is_default Flag to indicate if the transport zone is the default one.

Only one transport zone can be the default one for a given transport zone type. APIs that need transport zone can choose to use the default transport zone if a transport zone is not given. This is allowed only when the system created default transport zone has the flag is_default set to true for a given transport zone type which is being requested.
boolean Default: "False"
nested_nsx Flag to indicate if all transport nodes in this transport zone are connected through nested NSX.

This flag should be set to true in nested NSX environment. When the "allow_changing_vdr_mac_in_use" property in the global config object RoutingGlobalConfig is false, this flag can not be changed if this transport zone is OVERLAY and the change will make any transport node in this transport zone to change the VDR MAC used in any host switch. When this flag is true and this transport zone is OVERLAY, all host switches in this transport zone will use the VDR MAC in the "vdr_mac_nested" property in the global config object RoutingGlobalConfig.
boolean Default: "False"
origin_id The host switch id generated by the system.

This field is populated only if the transport zone was created by NSX system to support security on vSphere Distributed Switch (vDS). The origin_id will refer to the identifier of corresponding vDS from it's parent vCenter server.
string Readonly
resource_type Must be set to the value TransportZone string
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
transport_type The transport type of this transport zone. TransportType Required
transport_zone_profile_ids Identifiers of the transport zone profiles associated with this TransportZone. array of TransportZoneProfileTypeIdEntry
uplink_teaming_policy_names Names of the switching uplink teaming policies that are supported by this transport zone.

The names of switching uplink teaming policies that all transport nodes in this transport zone must support. An exception will be thrown if a transport node within the transport zone does not support a named teaming policy. The user will need to first ensure all trasnport nodes support the desired named teaming policy before assigning it to the transport zone. If the field is not specified, the host switch's default teaming policy will be used.
array of string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneEndPoint (schema) (Deprecated)

This object associates TransportNode to a certain TransportZone

Specify which HostSwitch from this TransportNode is used handle traffic for given TransportZone

Name Description Type Notes
transport_zone_id Unique ID identifying the transport zone for this endpoint

For MP APIs provide UUID of transport zone. For Policy APIs provide policyPath of transport zone.
string Required
transport_zone_profile_ids Identifiers of the transport zone profiles associated with this transport zone endpoint on this transport node.

For MP APIs provide UUID of transport zone profiles. For Policy APIs provide policyPath of transport zone profiles.
array of TransportZoneProfileTypeIdEntry

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneListParameters (schema) (Deprecated)

Transport Zone list parameters

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
display_name The transport zone's display name

If set, all transport zones with matching display name will be returned.
string
include_system_owned Filter to indicate whether to include system owned Transport Zones. boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result

Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.
string
is_default Filter to choose if default transport zones will be returned

If set to true, only the default transport zones will be returned. If set to false, all transport zones except the default ones will be returned. If unset, all transport zones will be returned.
boolean
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
sort_ascending If true, results are sorted in ascending order boolean
sort_by Field by which records are sorted string
transport_type Filter to choose the type of transport zones to return

If set, only transport zones of the given type will be returned; otherwise transport zones of all types will be returned.
TransportType
uplink_teaming_policy_name The transport zone's uplink teaming policy name

All transport zone's with the specified uplink teaming policy name. Otherwise, transport zones with any uplink teaming policy will be returned.
string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneListResult (schema) (Deprecated)

Transport zone queries result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Transport Zone Results array of TransportZone Required
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneProfile (schema) (Deprecated)

This is an abstract type. Concrete child types:
BfdHealthMonitoringProfile

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
resource_type Must be set to the value TransportZoneProfile string Required
Enum: BfdHealthMonitoringProfile
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneProfileListParameters (schema) (Deprecated)

Transport zone profile list parameters

Name Description Type Notes
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string
include_system_owned Whether the list result contains system resources boolean Default: "False"
included_fields Comma separated list of fields that should be included in query result

Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.
string
page_size Maximum number of results to return in this page (server may return fewer) integer Minimum: 0
Maximum: 1000
Default: "1000"
resource_type comma-separated list of transport zone profile types, e.g. ?resource_type=BfdHealthMonitoringProfile string
sort_ascending If true, results are sorted in ascending order boolean
sort_by Field by which records are sorted string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneProfileListResult (schema) (Deprecated)

Transport zone profile queries result

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
cursor Opaque cursor to be used for getting next page of records (supplied by current result page) string Readonly
result_count Count of results found (across all pages), set only on first page integer Readonly
results Transport zone profile results array of TransportZoneProfile
(Abstract type: pass one of the following concrete types)
BfdHealthMonitoringProfile
Required
Readonly
sort_ascending If true, results are sorted in ascending order boolean Readonly
sort_by Field by which records are sorted string Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneProfileType (schema) (Deprecated)

Supported transport zone profiles.

Name Description Type Notes
TransportZoneProfileType Supported transport zone profiles. string Deprecated
Enum: BfdHealthMonitoringProfile

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneProfileTypeIdEntry (schema) (Deprecated)

Name Description Type Notes
profile_id profile id of the resource type string Required
resource_type Selects the type of the transport zone profile TransportZoneProfileType

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TransportZoneStatus (schema) (Deprecated)

Transport zone runtime status information

Name Description Type Notes
num_logical_ports Count of logical ports in the transport zone int Required
Readonly
num_logical_switches Count of logical switches in the transport zone int Required
Readonly
num_transport_nodes Count of transport nodes in the transport zone int Required
Readonly
transport_node_members Information about transport nodes which are part of this transport zone array of TransportNodeMemberInfo Readonly
transport_zone_id Unique ID identifying the transport zone string Required
Readonly

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

TunnelSubnet (schema) (Deprecated)

Name Description Type Notes
ip_addresses Subnet ip addresses array of IPv4Address Required
Minimum items: 1
Maximum items: 1
prefix_length Subnet Prefix Length integer Required
Minimum: 1
Maximum: 31

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

UplinkHostSwitchProfile (schema) (Deprecated)

Profile for uplink policies

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
id Unique identifier of this resource string Sortable
lags list of LACP group array of Lag Maximum items: 64
mtu Maximum Transmission Unit used for uplinks int Minimum: 1280
named_teamings List of named uplink teaming policies that can be used by logical switches array of NamedTeamingPolicy Maximum items: 32
overlay_encap The protocol used to encapsulate overlay traffic string Enum: VXLAN, GENEVE
Default: "GENEVE"
required_capabilities array of string Readonly
resource_type Must be set to the value UplinkHostSwitchProfile HostSwitchProfileType Required
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
teaming Default TeamingPolicy associated with this UplinkProfile TeamingPolicy Required
transport_vlan VLAN used for tagging Overlay traffic of associated HostSwitch VlanID Default: "0"

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

UsernamePasswordLoginCredential (schema) (Deprecated)

A login credential specifying a username and password

Name Description Type Notes
credential_type Must be set to the value UsernamePasswordLoginCredential string Required
password The authentication password for login secure_string
thumbprint Thumbprint of the login server string
username The username for login string

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

VmknicNetwork (schema) (Deprecated)

Vmknic network specification

Mapping of all vmk interfaces to destination networks

Name Description Type Notes
destination_network The network id to which the ESX vmk interface will be migrated.

When migrating vmks to N-VDS/logical switches, the id is the logical switch id. When migrating out of N-VDS/logical switches, the id is the vSphere Switch portgroup name in a single vSphere Standard Switch (VSS), or distributed virtual portgroup name in a single distributed virtual switch (DVS).
string Required
device_name ESX vmk interface name

The vmk interface name, e.g., vmk0, vmk1; the id assigned by vCenter.
string Required