NSX-T Data Center REST API

Associated URIs:

API Description API Path

List NSGroups


List the NSGroups in a paginated format. The page size is restricted
to 50 NSGroups so that the size of the response remains small even
in the worst case.
Optionally, specify valid member types as request parameter to filter NSGroups.
GET /api/v1/ns-groups (Deprecated)

Create NSGroup


Creates a new NSGroup that can group NSX resources - VIFs, Lports
and LSwitches as well as the grouping objects - IPSet, MACSet and other
NSGroups.
For NSGroups containing VM criteria(both static and dynamic), system VMs will
not be included as members. This filter applies at VM level only.
Exceptions are as follows:
1. LogicalPorts and VNI of System VMs will be included in NSGroup if the criteria
is based on LogicalPort, LogicalSwitch or VNI directly.
POST /api/v1/ns-groups (Deprecated)

Delete NSGroup


Deletes the specified NSGroup. By default, if the NSGroup is added to
another NSGroup, it won't be deleted. In such situations, pass
"force=true" as query param to force delete the NSGroup.
DELETE /api/v1/ns-groups/{ns-group-id} (Deprecated)

Read NSGroup


Returns information about the specified NSGroup.
GET /api/v1/ns-groups/{ns-group-id} (Deprecated)

Add NSGroup expression


Add/remove the expressions passed in the request body to/from the NSGroup
POST /api/v1/ns-groups/{ns-group-id} (Deprecated)

Update NSGroup


Updates the specified NSGroup. Modifiable parameters include the
description, display_name and members.
For NSGroups containing VM criteria(both static and dynamic), system VMs will
not be included as members. This filter applies at VM level only.
Exceptions are as follows.
1. LogicalPorts and VNI of system VMs will be included in NSGroup if the criteria
is based on LogicalPort, LogicalSwitch or VNI directly.
PUT /api/v1/ns-groups/{ns-group-id} (Deprecated)

Get consolidated Effective IPAddress translated from the NSGroup


Returns the consolidated effective IP address members of the specified NSGroup. This is applicable in the case of a
federated environment. The response includes a site-wise list of static and dynamically translated effective IP
address members. If the ns-group evaluation on a site is empty, the response will contain the site-id with empty list.
If an ns-group is a reference group on a site, then its consolidated effective IP response will contain the effective IPs
from other sites, and the response will contain an empty list of IPs for the sites where is it a reference group.

This API is applicable only for Global Groups that contain (either directly or via nesting) VirtualMachine,
VIF, Segment, SegmentPort, or IPSet member types. Please use the cursor value in the response to fetch the next page.
If there is no cursor value in the response, it indicates that it is the last page of results for the query.
GET /api/v1/ns-groups/{ns-group-id}/consolidated-effective-ip-address-members (Deprecated)

Get Effective Cloud Native Service Instances of the specified NSGroup.


Returns effective cloud native service instances of the specified NSGroup.
This API is applicable only for NSGroups containing CloudNativeServiceInstance member type.
For NSGroups containing other member types,it returns an empty list. target_id in response
is external_id of CloudNativeServiceInstance
GET /api/v1/ns-groups/{ns-group-id}/effective-cloud-native-service-instance-members (Deprecated)

Get Effective Directory Groups of the specified NSGroup.


Returns effective directory groups which are members of the specified NSGroup.
This API is applicable only for NSGroups containing DirectoryGroup member type.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-directory-group-members (Deprecated)

Get Effective IPAddress translated from the NSGroup


Returns effective ip address members of the specified NSGroup.
This API is applicable only for NSGroups containing either
VirtualMachine, VIF, LogicalSwitch, LogicalPort or IPSet member type.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-ip-address-members (Deprecated)

Get Effective IPSets of the specified NSGroup.


Returns effective IPSets which are members of the specified NSGroup.
This API is applicable only for NSGroups containing IPSet member type.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-ipset-members (Deprecated)

Get Effective Logical Ports translated from the NSgroup


Returns effective logical port members of the specified NSGroup.
This API is applicable only for NSGroups containing either VirtualMachines,
LogicalSwitch or LogicalPort member types.For NSGroups containing other
member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-logical-port-members (Deprecated)

Get Effective switch members translated from the NSGroup


Returns effective logical switch members of the specified NSGroup.
This API is applicable for NSGroups containing LogicalSwitch members.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-logical-switch-members (Deprecated)

Get Effective Physical Server Memebers of the specified NSGroup.


Returns effective physical server members of the specified NSGroup.
This API is applicable only for NSGroups containing Physical Server member type.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-physical-server-members (Deprecated)

Get effective transport node members translated from the NSGroup


Returns effective transport node members of the specified NSGroup.
This API is applicable only for NSGroups containing TransportNode member type.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-transport-node-members (Deprecated)

Get effective VIF members translated from the NSGroup


Returns effective VIF members of the specified NSGroup.
This API is applicable only for NSGroups containing either
VirtualMachines or VIF member type. For NSGroups containing other
member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-vif-members (Deprecated)

Get Effective Virtual Machine members of the specified NSGroup.


Returns effective virtual machine members of the specified NSGroup.
This API is applicable only for NSGroups containing VirtualMachine member type.
For NSGroups containing other member types,it returns an empty list.
GET /api/v1/ns-groups/{ns-group-id}/effective-virtual-machine-members (Deprecated)

Get member types from NSGroup


Returns member types for a specified NSGroup including child NSGroups.
This considers static members and members added via membership criteria only
GET /api/v1/ns-groups/{ns-group-id}/member-types (Deprecated)

Get services to which the given nsgroup belongs to


Returns information about services that are associated with the given NSGroup.
The service name is passed by service_type parameter
GET /api/v1/ns-groups/{nsgroup-id}/service-associations (Deprecated)

Get the list of all the virtual machines that are not a part of any existing NSGroup.


Get the list of all the virtual machines that are not a part of any existing NSGroup.
GET /api/v1/ns-groups/unassociated-virtual-machines (Deprecated)

Create NSProfile


Creates a new NSProfile which allows users to encapsulate attribute and
sub-attributes of network services.
Rules for using attributes and sub-attributes in single NSProfile
1. One type of attribute can't have multiple occurrences. ( Example -
Attribute type APP_ID can be used only once per NSProfile.)
2. Values for an attribute are mentioned as array of strings.
( Example - For type APP_ID , values can be mentioned as ["SSL","FTP"].)
3. If sub-attribtes are mentioned for an attribute, then only single
value is allowed for that attribute.
4. To get a list of supported
attributes and sub-attributes fire the following REST API
GET https://<nsx-mgr>/api/v1/ns-profiles/attributes
POST /api/v1/ns-profiles (Deprecated)