Policy groups are collections of VPorts that are used as building blocks for security policies encompassing multiple end-points. One or more vports can be added to a policy group using this interface.


  • evpn_community_tag: Assigned by VSD. An extended community or other similar BGP attribute to the specific EVPN / IP-VPN NLRI where the VM or network macro is being advertised.
  • name (Mandatory): Name of the policy group
  • last_updated_by: ID of the user who last updated the object.
  • template_id: Determines which template ID this policy group belongs to.
  • description: Describes this policy group
  • entity_scope: Specify if scope of entity is Data center or Enterprise level
  • entity_state: Intermediate State of L2 Domain.
  • policy_group_id: PG ID for the subnet. This is unique per domain and will be in the range 1-4095
  • assoc_policy_group_category_id: UUID of the associated Policy Group Category for contextual filtering of policy groups.
  • assoc_policy_group_category_name: Name of the Policy Group Category used for contextual filtering of policy groups.
  • external: Indicates whether this PG is internal to VSP or not.
  • external_id: External object ID. Used for integration with third party systems
  • type (Mandatory): Type of policy group.


class fetcher
numetadata.NUMetadata metadatas
nuglobalmetadata.NUGlobalMetadata global_metadatas
nupolicygroupcategory.NUPolicyGroupCategory policy_group_categories
nuvport.NUVPort vports
nueventlog.NUEventLog event_logs