InlineSegmentSecurityProfile1

InlineSegmentSecurityProfile1

JSON Example

{
    "isBpduFilterEnabled": false,
    "bpduFilterAllowList": [
        "string"
    ],
    "isDhcpClientBlockV4Enabled": false,
    "isDhcpClientBlockV6Enabled": false,
    "isDhcpServerBlockV4Enabled": false,
    "isDhcpServerBlockV6Enabled": false,
    "isNonIpTrafficBlockEnabled": false,
    "isRaGuardEnabled": false,
    "isRateLimitingEnabled": false,
    "rateLimits": {
        "rxBroadcast": 0,
        "rxMulticast": 0,
        "txBroadcast": 0,
        "txMulticast": 0
    }
}

boolean

isBpduFilterEnabled

Optional

Whether BPDU filter is enabled.

array of string

bpduFilterAllowList

Optional

Pre-defined list of allowed MAC addresses to be excluded from BPDU filtering.

boolean

isDhcpClientBlockV4Enabled

Optional

Whether DHCP Client block IPv4 is enabled. This filters DHCP Client IPv4 traffic.

boolean

isDhcpClientBlockV6Enabled

Optional

Whether DHCP Client block IPv6 is enabled. This filters DHCP Client IPv6 traffic.

boolean

isDhcpServerBlockV4Enabled

Optional

Whether DHCP Server block IPv4 is enabled. This filters DHCP Server IPv4 traffic.

boolean

isDhcpServerBlockV6Enabled

Optional

Whether DHCP Server block IPv6 is enabled. This filters DHCP Server IPv6 traffic.

boolean

isNonIpTrafficBlockEnabled

Optional

Whether non IP traffic block is enabled. If true, it blocks all traffic except IP/(G)ARP/BPDU.

boolean

isRaGuardEnabled

Optional

Whether Router Advertisement Guard is enabled. This filters DHCP Server IPv6 traffic.

boolean

isRateLimitingEnabled

Optional

Whether Rate Limiting is enabled.

TrafficRateLimitConfig

rateLimits

Optional

Enables traffic limit for incoming/outgoing broadcast and multicast packets for a Segment Security Profile. Use 0 to disable rate limiting for a specific traffic type.

Used By

SegmentSecurityProfile