The system configuration which can be dynamically managed using rest api.
This object has no members.
AAR flow statistics collection frequency
Default value: 30
SDK attribute: AARFlowStatsInterval
AAR probe statistics collection frequency
Default value: 30
SDK attribute: AARProbeStatsInterval
Whether the various VRS license flavours be merged in one pool
Default value: false
SDK attribute: accumulateLicensesEnabled
Defines the domains allowed for access control list.
Format: free
Max length: 255
SDK attribute: ACLAllowOrigin
Timers in sec for undefined vms to be deleted(min =7200, max = 86400).
Format: free
Min value: 7200
Max value: 86400
SDK attribute: ADGatewayPurgeTime
Maximum alarms per object for example max distinct alarms for specific VM (min = 5, max =20)
Format: free
Min value: 5
Max value: 20
SDK attribute: alarmsMaxPerObject
Allow Enterprise Avatar to be populated on NSG Portal
Default value: true
SDK attribute: allowEnterpriseAvatarOnNSG
Defines the interval in seconds, before the expiry time, that can used to renew the apiKey by making me API call. Minimum value is 1 min and maximum is 5 min.
Format: free
Min value: 60
Max value: 300
SDK attribute: APIKeyRenewalInterval
Defines the apiKey validity duration in seconds. Default is 24 hours and minimum value is 10 min.
Format: free
Min value: 600
Max value: 86400
SDK attribute: APIKeyValidity
Autonomous System Number,Used for RT/RD auto-generation
Format: free
Max value: 4294967295
SDK attribute: ASNumber
Flag to attach/remove system generated probe to system generated NPM for IPSEC.
Default value: false
SDK attribute: attachProbeToIPsecNPM
Flag to attach/remove system generated probe to system generated NPM for VXLAN.
Default value: false
SDK attribute: attachProbeToVXLANNPM
Defines location where image files needs to be copied. Above URL should be configured to read the file from this location.
Format: free
Min length: 1
Max length: 255
SDK attribute: avatarBasePath
Defines the url to read the avatar image files
Format: free
Min length: 1
Max length: 255
SDK attribute: avatarBaseURL
Authentication method for csproot when local authentication is not used for CSP organization
Allowed values: LDAP, LOCAL
Default value: LOCAL
SDK attribute: csprootAuthenticationMethod
Customer id upper limit, system wide value
Format: free
Min value: 10000
Max value: 2147483647
SDK attribute: customerIDUpperLimit
Customer key associated with the licese
Format: free
SDK attribute: customerKey
Defines total DHCP options that can be set on a domain.
Format: free
SDK attribute: DHCPOptionSize
Default Domain Tunnel Type .Possible values are VXLAN,GRE Possible values are DC_DEFAULT, GRE, VXLAN, .
Allowed values: DC_DEFAULT, GRE, VLAN, VXLAN
Format: free
SDK attribute: domainTunnelType
Timers in sec for dynamic WAN Services to be considered not seen by 7X50.
Default value: 1
Min value: 1
Max value: 7200
SDK attribute: dynamicWANServiceDiffTime
System Default Equal-cost multi-path routing count,Every Domain derives ECMP count from this value unless specifically set for the domain
Format: free
Min value: 1
Max value: 8
SDK attribute: ECMPCount
EJBCA NSG Certificate Profile
Format: free
Min length: 1
Max length: 255
SDK attribute: ejbcaNSGCertificateProfile
EJBCA NSG End Entity Profile
Format: free
Min length: 1
Max length: 255
SDK attribute: ejbcaNSGEndEntityProfile
EJBCA OCSP Responder CommonName
Format: free
Min length: 1
Max length: 255
SDK attribute: ejbcaOCSPResponderCN
EJBCA OCSP Responder URI
Format: free
Min length: 1
Max length: 255
SDK attribute: ejbcaOCSPResponderURI
EJBCA VSP CA
Format: free
Min length: 1
Max length: 255
SDK attribute: ejbcaVspRootCa
Specifies the name of the Elastic Search Cluster.
Default value: nuage_elasticsearch
Format: free
Min length: 1
Max length: 255
SDK attribute: elasticClusterName
Specify if scope of entity is Data center or Enterprise level
Allowed values: ENTERPRISE, GLOBAL
SDK attribute: entityScope
ESI ID offset
Format: free
Min value: 1
Max value: 40000
SDK attribute: esiID
Cleanup task run interval in seconds.
Min value: 3600
Max value: 86400
SDK attribute: eventLogCleanupInterval
Maximum age in days for cleanup of the eventlog entries. On every periodic interval run, any eventlog entries older than this max age will be deleted.
Min value: 1
Max value: 180
SDK attribute: eventLogEntryMaxAge
Defines time interval in milliseconds when events collected for a client should be processed.
Min value: 250
SDK attribute: eventProcessorInterval
Defines the maximum number of events to be collected in case of events burst.
Min value: 100
Max value: 500
SDK attribute: eventProcessorMaxEventsCount
Defines the maximum time period in milliseconds for the Rest server to wait before sending the events from the system.
Min value: 25000
Max value: 100000
SDK attribute: eventProcessorTimeout
Autonomous System Number,Used for EVPNBGPCommunityTag auto-generation
Max value: 4294967295
SDK attribute: EVPNBGPCommunityTagASNumber
EVPNBGPCommunityTag lower limit
Max value: 4294967294
SDK attribute: EVPNBGPCommunityTagLowerLimit
EVPNBGPCommunityTag upper limit
Min value: 1
Max value: 4294967295
SDK attribute: EVPNBGPCommunityTagUpperLimit
External object ID. Used for integration with third party systems
Format: free
SDK attribute: externalID
Enables flow statistics collection. It is needed for the VSS feature, and requires a valid VSS license. This option requires 'statisticsEnabled'.
SDK attribute: flowCollectionEnabled
the MAC Address to use for those subnets that have the useGlobalMAC flag enabled.
Format: free
SDK attribute: globalMACAddress
Google Maps API Key used to display maps on Nuage UI applications
Format: free
Max length: 255
SDK attribute: googleMapsAPIKey
Group Key Encryption Profile Default Seed Generation Interval
Format: free
SDK attribute: groupKeyDefaultSeedGenerationInterval
Group Key Encryption Profile Default Seed Lifetime
Format: free
SDK attribute: groupKeyDefaultSeedLifetime
Group Key Encryption Profile Default Seed Payload Authentication Algorithm.
Allowed values: HMAC_SHA1, HMAC_SHA256, HMAC_SHA512
SDK attribute: groupKeyDefaultSeedPayloadAuthenticationAlgorithm
Group Key Encryption Profile Default Seed Payload Encryption Algorithm.
Allowed values: AES_128_CBC, AES_256_CBC, TRIPLE_DES_CBC
SDK attribute: groupKeyDefaultSeedPayloadEncryptionAlgorithm
Group Key Encryption Profile Default Seed Payload Signature Algorithm.
Allowed values: SHA1withRSA, SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA
SDK attribute: groupKeyDefaultSeedPayloadSigningAlgorithm
Group Key Encryption Profile Default SEK Generation Interval
Format: free
SDK attribute: groupKeyDefaultSEKGenerationInterval
Group Key Encryption Profile Default SEK Lifetime
Format: free
SDK attribute: groupKeyDefaultSEKLifetime
Group Key Encryption Profile Default Sek Payload Encryption Algorithm.
Allowed values: RSA_1024
SDK attribute: groupKeyDefaultSEKPayloadEncryptionAlgorithm
Group Key Encryption Profile Default Sek Payload Signing Algorithm.
Allowed values: SHA1withRSA, SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA
SDK attribute: groupKeyDefaultSEKPayloadSigningAlgorithm
Group Key Encryption Profile Default Traffic Authentication Algorithm.
Allowed values: HMAC_MD5, HMAC_SHA1, HMAC_SHA256, HMAC_SHA384, HMAC_SHA512
SDK attribute: groupKeyDefaultTrafficAuthenticationAlgorithm
Group Key Encryption Profile Default Traffic Encryption Algorithm.
Allowed values: AES_128_CBC, AES_192_CBC, AES_256_CBC, TRIPLE_DES_CBC
SDK attribute: groupKeyDefaultTrafficEncryptionAlgorithm
Group Key Encryption Profile Default Traffic Encryption Key Lifetime
Format: free
SDK attribute: groupKeyDefaultTrafficEncryptionKeyLifetime
Time in seconds before new keys will be generated in the case of a forced re-key event
SDK attribute: groupKeyGenerationIntervalOnForcedReKey
Time in seconds before new keys will be generated in the case of a revoke event
SDK attribute: groupKeyGenerationIntervalOnRevoke
Group Key Encryption Profile Default Seed Generation Interval
Format: free
SDK attribute: groupKeyMinimumSeedGenerationInterval
Group Key Encryption Profile Default Seed Lifetime
SDK attribute: groupKeyMinimumSeedLifetime
Group Key Encryption Profile Minimum SEK Generation Interval
SDK attribute: groupKeyMinimumSEKGenerationInterval
Group Key Encryption Profile Minimum SEK Lifetime
SDK attribute: groupKeyMinimumSEKLifetime
Group Key Encryption Profile Minimum TEK Lifetime
SDK attribute: groupKeyMinimumTrafficEncryptionKeyLifetime
Version of the current imported SaaS Application Type Master List.
Format: free
SDK attribute: importedSaaSApplicationsVersion
Defines the inactive timeout for the client. If the client is inactive for more than timeout, server clears off all the cache/information regarding the client. This value should be greater than event processor max timeout
Format: free
Min value: 25000
SDK attribute: inactiveTimeout
Autonomous System Number, Used for Infrastructure BGP PE_CE.
Default value: 65500
Max value: 4294967295
SDK attribute: infrastructureBGPASNumber
Enable the keyserver debug monitor (ie. ksmon command)
SDK attribute: keyServerMonitorEnabled
KeyServer time in seconds between full resyncs of VSD data (just in case of missed events)
SDK attribute: keyServerVSDDataSynchronizationInterval
ID of the user who last updated the object.
Format: free
SDK attribute: lastUpdatedBy
LDAP Sync-Up task interval in seconds.
Min value: 600
Max value: 86400
SDK attribute: LDAPSyncInterval
Location of the truststore which is need to store LDAP server certificates. Default is cacerts located in java.home/lib/security/cacerts. Uncomment below setting if you need to use a different file
Format: free
SDK attribute: LDAPTrustStoreCertifcate
Password to access the truststore. Uncomment below line to change its value.
Format: free
SDK attribute: LDAPTrustStorePassword
LRU Map size per subnet (to hold the deleted vm's ip addresses).
Min value: 32
Max value: 256
SDK attribute: LRUCacheSizePerSubnet
Maximum failed login attempts before the account is locked (min = 5, max = 10). 0 = not enforced (unlimited attempts). This is not enforced if LDAP is used for authorization
Format: free
Max value: 10
SDK attribute: maxFailedLogins
Defines maximum results returned by the REST call (allowed max=5000).
Format: free
Min value: 1
SDK attribute: maxResponse
NSG Bootstrap Endpoint
Format: free
Min length: 1
Max length: 255
SDK attribute: nsgBootstrapEndpoint
NSG Config Endpoint
Format: free
Min length: 1
Max length: 255
SDK attribute: nsgConfigEndpoint
NSG Local UI URL - will be redirected on NSG to localhost
Format: free
Min length: 1
Max length: 255
SDK attribute: nsgLocalUiUrl
In case of a dual-uplink NSG, the hold down time in seconds, after which an uplink connection that recovered from failure is re-used.
Default value: 5
Max value: 30
SDK attribute: NSGUplinkHoldDownTimer
Customer id offset, this value has to be set before jboss starts , after that any change of value is ignored (minexclusive = 0, max = 20000) system wide value
Format: free
Min value: 10000
Max value: 2147483646
SDK attribute: offsetCustomerID
Service id offset, this value has to be set before jboss starts during install time, after that any change of value is ignored (minexclusive = 0, max = 40000) system wide value
Format: free
Min value: 20001
Max value: 2148007977
SDK attribute: offsetServiceID
Defines upper bound for the page size. Configured or input page size should be less than this max page size.
Default value: 500
Min value: 5
Max value: 1000
SDK attribute: pageMaxSize
Defines the page size for the results returned by the REST call.
Default value: 50
Min value: 1
SDK attribute: pageSize
None
Default value: false
SDK attribute: perDomainVlanIdEnabled
performance Path Selection Virtual Network ID
SDK attribute: performancePathSelectionVNID
Lower limit for the policy group id.
Default value: 65536
Min value: 65536
Max value: 2147483646
SDK attribute: PGIDLowerLimit
Upper limit for the policy group id.
Default value: 2147483647
Min value: 65537
Max value: 2147483647
SDK attribute: PGIDUpperLimit
Post processor thread count.
Format: free
Min value: 1
SDK attribute: postProcessorThreadsCount
route distinguisher lower limit
Format: free
Max value: 4294967294
SDK attribute: RDLowerLimit
route distinguisher public network lower limit
Max value: 4294967294
SDK attribute: RDPublicNetworkLowerLimit
route distinguisher public network upper limit
Min value: 1
Max value: 4294967295
SDK attribute: RDPublicNetworkUpperLimit
route distinguisher upper limit
Format: free
Min value: 1
Max value: 4294967295
SDK attribute: RDUpperLimit
route target lower limit
Format: free
Max value: 4294967294
SDK attribute: RTLowerLimit
route target public network lower limit
Max value: 4294967294
SDK attribute: RTPublicNetworkLowerLimit
route target public network upper limit
Min value: 1
Max value: 4294967295
SDK attribute: RTPublicNetworkUpperLimit
route target upper limit
Format: free
Min value: 1
Max value: 4294967295
SDK attribute: RTUpperLimit
Determines the time that saas applications were imported in VSD.
SDK attribute: SaaSApplicationsPublishDate
Service id upper limit system wide value
Format: free
Min value: 20002
Max value: 2148007978
SDK attribute: serviceIDUpperLimit
True to enable stacktrace in the REST call.
Format: free
SDK attribute: stackTraceEnabled
Defines the timeout in seconds for stateful ACLs that are not of type TCP.
Min value: 10
Max value: 86400
SDK attribute: statefulACLNonTCPTimeout
Defines the timeout in seconds for stateful ACLs that are of type TCP.
Min value: 10
Max value: 86400
SDK attribute: statefulACLTCPTimeout
Timers in sec for unreacheable static WAN Services to be deleted.
Min value: 3600
Max value: 7200
SDK attribute: staticWANServicePurgeTime
This flag is used to indicate if statistics is enabled in the system. CSProot is expected to activate this through the enable statistics script.
Format: free
SDK attribute: statisticsEnabled
Specify the ip address(es) of the stats collector.
Format: free
Min length: 1
Max length: 255
SDK attribute: statsCollectorAddress
Specify the port number(s) of the stats collector.
Format: free
SDK attribute: statsCollectorPort
Specify the protobuf port number(s) of the stats collector.
Format: free
SDK attribute: statsCollectorProtoBufPort
Specifies the maximum number of data points to support.
Format: free
Min value: 1
SDK attribute: statsMaxDataPoints
Default minimum duration for statistics to be displayed in UI is 30 days in seconds.
Default value: 2592000
SDK attribute: statsMinDuration
Specifies number of data points.
Min value: 1
SDK attribute: statsNumberOfDataPoints
Specifies the TSDB server location.
Format: free
Min length: 1
Max length: 255
SDK attribute: statsTSDBServerAddress
sticky ECMP Idle Timeout in seconds
Default value: 0
Max value: 300
SDK attribute: stickyECMPIdleTimeout
After resync on a subnet , another resync on the same subnet is allowed based on the below value subnet resync complete wait time in min.
Default value: 10
Min value: 5
Max value: 15
SDK attribute: subnetResyncInterval
Outstanding subnet resync interval (in secs). System wide value.
Min value: 10
Max value: 50
SDK attribute: subnetResyncOutstandingInterval
Specifies the remote syslog destination host
Format: free
Min length: 1
Max length: 255
SDK attribute: syslogDestinationHost
Specified the remote syslog destination port
Format: free
SDK attribute: syslogDestinationPort
Sysmon cleanup task run interval in seconds.
Min value: 10
Max value: 3600
SDK attribute: sysmonCleanupTaskInterval
Time interval in seconds at which sysmon messages are reported by controller.
Min value: 600
Max value: 86400
SDK attribute: sysmonNodePresenceTimeout
Probe response timeout in seconds.
Min value: 5
Max value: 60
SDK attribute: sysmonProbeResponseTimeout
CSP Avatar Data
Format: free
SDK attribute: systemAvatarData
None
Allowed values: BASE64, COMPUTEDURL, URL
SDK attribute: systemAvatarType
Two Factor Code Expiry in Seconds
Format: free
Min value: 60
Max value: 604800
SDK attribute: twoFactorCodeExpiry
Two Factor Code Length
Min value: 4
Max value: 10
SDK attribute: twoFactorCodeLength
Two Factor Seed length in bytes
Max value: 255
SDK attribute: twoFactorCodeSeedLength
If VCIN Active/Standby is enabled, this needs to be the load-balancer IP which sits in front of the Active and Standby VCIN nodes. The VRS will make its API calls to this load-balancer
Format: free
SDK attribute: vcinLoadBalancerIP
Enable Virtual Firewall Rule creation and management. This will be available only with VSS license
Default value: false
SDK attribute: virtualFirewallRulesEnabled
None
SDK attribute: VLANIDLowerLimit
None
SDK attribute: VLANIDUpperLimit
LRU Map size for vm, this value has to set based on memory given to VSD jvm not finalized.
Default value: 5000
Min value: 1000
Max value: 100000
SDK attribute: VMCacheSize
Timers in sec for undefined vms to be deleted.
Default value: 60
Min value: 60
Max value: 600
SDK attribute: VMPurgeTime
After resync on vm , if no controller returns with a VM request with in the below timeframe then it will get deleted deletion wait time in minutes.
Default value: 2
Min value: 1
Max value: 5
SDK attribute: VMResyncDeletionWaitTime
Outstanding VM resync interval (in secs). System wide value.
Default value: 1000
Min value: 500
Max value: 2000
SDK attribute: VMResyncOutstandingInterval
Timers in sec for unreachable VMs for cleanup.
Default value: 7200
Min value: 3600
Max value: 86400
SDK attribute: VMUnreachableCleanupTime
Timers in sec for unreachable VMs.
Default value: 3600
Min value: 1800
Max value: 7200
SDK attribute: VMUnreachableTime
Timeout for VNF task for nsg agent
Default value: 3600
Min value: 300
Max value: 10000
SDK attribute: VNFTaskTimeout
Virtual network ID offset
Format: free
Min value: 1
Max value: 1048574
SDK attribute: VNIDLowerLimit
Virtual network ID public network lower limit
Min value: 1
Max value: 1048574
SDK attribute: VNIDPublicNetworkLowerLimit
Virtual network ID public network upper limit
Min value: 2
Max value: 1048575
SDK attribute: VNIDPublicNetworkUpperLimit
Virtual network ID upper limit
Format: free
Min value: 2
Max value: 1048575
SDK attribute: VNIDUpperLimit
Defines the timeout in seconds for vport initialization to stateful. Default value is 300 secs and the timeout should be between 0 to 86400 seconds.
Default value: 300
Max value: 86400
SDK attribute: VPortInitStatefulTimer
This flag is used to indicate that whether VSC is on the same version as VSD or not.
SDK attribute: VSCOnSameVersionAsVSD
True means VSD readonly mode enabled. False means VSD readonly mode disabled
Format: free
SDK attribute: VSDReadOnlyMode
This flag is used to indicate that whether VSD upgrade is complete,it is expected that csproot will set to true,after VSD upgrade is complete and also making sure that all VSC's audits and Gateway audits with VSD are done
Format: free
SDK attribute: VSDUpgradeIsComplete
VSS statistics collection frequency
Default value: 30
SDK attribute: VSSStatsInterval
Whether the NSG should auto bootstrap using ZFB
Format: free
SDK attribute: ZFBBootstrapEnabled
Retry time for the ZFB daemon to recheck ZFBRequest Status in seconds
Default value: 30
Format: free
Min value: 15
Max value: 240
SDK attribute: ZFBRequestRetryTimer
Time for the ZFB scheduler to wait in seconds before deleting a stale request
Min value: 1
Max value: 10080
SDK attribute: ZFBSchedulerStaleRequestTimeout