You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/concepts-nexus-route-policies-overview.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ Route policies enable operators to control routes learned and distributed throug
15
15
16
16
Route policies are a set of rules that are applied to routes based on their specific attributes. These attributes include IP prefixes, community values, and extended community values. The primary function of these policies is to allow or deny routes and to modify their attributes as needed.
17
17
18
-
Route policies can be enforced at different endpoints in the network fabric. They can be applied at network-to-network interconnections (NNIs) or at different levels in a layer 3 isolation domain, such as external networks, internal networks, and connected subnets. Route policies are applied in the direction of egress or ingress, depending on whether they're export or import policies. Route policies for IPv4 and IPv6 are enforced separately.
18
+
Route policies can be enforced at different endpoints in the network fabric. They can be applied at network-to-network interconnections or at different levels in a layer 3 isolation domain, such as external networks, internal networks, and connected subnets. Route policies are applied in the direction of egress or ingress, depending on whether they're export or import policies. Route policies for IPv4 and IPv6 are enforced separately.
19
19
20
20
Route policies can be specified with combinations of conditions and actions. Conditions are based on IP prefixes, IP communities, and IP extended communities. Actions are based on discarding or permitting routes, and adding, removing, or overwriting community values and extended community values.
21
21
@@ -39,7 +39,7 @@ The conditions and actions of a route policy are specified by using the IP prefi
39
39
40
40
### IP prefix resource
41
41
42
-
This resource specifies the match conditions for route policies based on the IP prefix (IPv4 or IPv6) of the routes. It contains a list of prefixes with sequence numbers and actions (Permit or Deny).
42
+
This resource specifies the match conditions for route policies based on the IP prefix (IPv4 or IPv6) of the routes. It contains a list of prefixes with sequence numbers and actions (`Permit` or `Deny`).
43
43
44
44
### IP community resource
45
45
@@ -53,21 +53,21 @@ This resource specifies the match conditions and actions for route policies base
53
53
54
54
The condition property of a route policy statement defines how routes are matched to the policy:
55
55
56
-
-**And**: The policy matches any route that matches *all* the specified `ipPrefixIds`, `ipCommunityIds`, and `ipExtendedCommunityIds`.
57
-
-**Or**: The policy matches any route that matches *any* of the `ipPrefixIds`, `ipCommunityIds`, and `ipExtendedCommunityIds`.
56
+
-`And`: The policy matches any route that matches *all* the specified `ipPrefixIds`, `ipCommunityIds`, and `ipExtendedCommunityIds` properties.
57
+
-`Or`: The policy matches any route that matches *any* of the `ipPrefixIds`, `ipCommunityIds`, and `ipExtendedCommunityIds` properties.
58
58
59
59
The `ipPrefixId`, `ipCommunityId`, and `ipExtendedCommunityId` properties are arrays of strings that reference the IP prefix, IP community, and IP extended community resources that define the match criteria for the route attributes.
60
60
61
61
### Action property
62
62
63
-
The action property of a route policy statement defines the action to be taken when a route matches the policy:
63
+
The `action` property of a route policy statement defines the action to be taken when a route matches the policy:
64
64
65
-
-**Permit**: Permit the matching route and apply `ipCommunityProperties` to the route.
66
-
-**Deny**: Deny the matching route and stop the evaluation of the route policy.
67
-
-**Continue**: Apply `ipCommunityProperties` to the route and continue evaluating the route policy with the next statement.
65
+
-`Permit`: Permit the matching route and apply `ipCommunityProperties` to the route.
66
+
-`Deny`: Deny the matching route and stop the evaluation of the route policy.
67
+
-`Continue`: Apply `ipCommunityProperties` to the route and continue evaluating the route policy with the next statement.
68
68
69
69
### ipCommunityProperties property
70
70
71
71
The `ipCommunityProperties` property specifies how the policy affects the community values and extended community values of the route.
72
72
73
-
It has a Set property and a Delete property. The Set property specifies the IP community and IP extended community resources to add or overwrite to the routes. The Delete property specifies the IP community and IP extended community resources to remove from the routes.
73
+
It has a `set` property and a `delete` property. The `set` property specifies the IP community and IP extended community resources to add or overwrite to the routes. The `delete` property specifies the IP community and IP extended community resources to remove from the routes.
Copy file name to clipboardExpand all lines: articles/operator-nexus/reference-nexus-route-policy-config-examples.md
+15-15Lines changed: 15 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,12 +17,12 @@ This article gives examples of how to configure route policies for Azure Operato
17
17
18
18
The JSON format is a common way to define a route policy resource in Azure Operator Nexus. The JSON follows the schema of the route policy resource, which has the following properties:
19
19
20
-
-**id**: The ID of the route policy resource in the format `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}`.
21
-
-**type**: The type of the resource, which is `microsoft.managednetworkfabric/routepolicies`.
22
-
-**addressFamilyType**: The address family type of the route policy resource, which specifies the IP version of the route policy. It can be either IPv4 or IPv6.
23
-
-**statements**: An array of statements that define the routing behavior of the route policy resource. Each statement has a sequence number, a condition, and an action property.
24
-
-**defaultAction**: The default action of the route policy resource, which specifies the outcome for routes that don't match any statement in the route policy. It can be either Permit or Deny.
25
-
-**configurationState**: The configuration state of the route policy resource, which indicates whether the route policy was successfully applied or not. It can be either Succeeded, Failed, or Updating.
20
+
-`id`: The ID of the route policy resource in the format `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}`.
21
+
-`type`: The type of the resource, which is `microsoft.managednetworkfabric/routepolicies`.
22
+
-`addressFamilyType`: The address family type of the route policy resource, which specifies the IP version of the route policy. It can be either IPv4 or IPv6.
23
+
-`statements`: An array of statements that define the routing behavior of the route policy resource. Each statement has a sequence number, a condition, and an action property.
24
+
-`defaultAction`: The default action of the route policy resource, which specifies the outcome for routes that don't match any statement in the route policy. It can be either `Permit` or `Deny`.
25
+
-`configurationState`: The configuration state of the route policy resource, which indicates whether the route policy was successfully applied or not. It can be either `Succeeded`, `Failed`, or `Updating`.
26
26
27
27
Here's an example of a route policy resource specified in JSON format:
28
28
@@ -82,9 +82,9 @@ Here are some examples of the Azure CLI commands or the REST API methods to crea
82
82
83
83
## Use the Permit, Deny, and Continue actions in the route policy
84
84
85
-
The Permit, Deny, and Continue actions are used in the route policy to control the routing behavior.
85
+
The `Permit`, `Deny`, and `Continue` actions are used in the route policy to control the routing behavior.
86
86
87
-
- The Permit action allows the matching routes and applies the IP community properties to the routes. The IP community properties specify how to add, remove, or overwrite community values and extended community values of the routes.
87
+
- The `Permit` action allows the matching routes and applies the IP community properties to the routes. The IP community properties specify how to add, remove, or overwrite community values and extended community values of the routes.
88
88
89
89
For example, the operator can use the following statement to permit any route that has an IP prefix equal to the IP prefix resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipPrefixes/{ipPrefixName}` and add the IP community value from the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName}`.
90
90
@@ -107,7 +107,7 @@ The Permit, Deny, and Continue actions are used in the route policy to control
107
107
}
108
108
```
109
109
110
-
- The Deny action rejects the matching routes and stops the evaluation of the route policy.
110
+
- The `Deny` action rejects the matching routes and stops the evaluation of the route policy.
111
111
112
112
For example, the operator can use the following statement to deny any route that has an IP community value equal to the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName}`.
113
113
@@ -123,7 +123,7 @@ The Permit, Deny, and Continue actions are used in the route policy to control
123
123
}
124
124
```
125
125
126
-
- The Continue action continues the evaluation of the route policy with the next statement and applies the IP community properties to the routes. The IP community properties specify how to add, remove, or overwrite community values and extended community values of the routes.
126
+
- The `Continue` action continues the evaluation of the route policy with the next statement and applies the IP community properties to the routes. The IP community properties specify how to add, remove, or overwrite community values and extended community values of the routes.
127
127
128
128
For example, the operator can use the following statement to continue the evaluation of the route policy with the next statement:
129
129
@@ -142,11 +142,11 @@ The Permit, Deny, and Continue actions are used in the route policy to control
142
142
143
143
## Use the IP community properties to add, remove, or overwrite community values and extended community values of the routes
144
144
145
-
- The IP community properties of the action property specify how to add, remove, or overwrite community values and extended community values of the routes. The IP community properties have a Set property and a Delete property. The Set property specifies the IP community and IP extended community resources to add or overwrite to the routes. The Delete property specifies the IP community and IP extended community resources to remove from the routes.
146
-
- The Set property has an `ipCommunityIds` property and an `ipExtendedCommunityIds` property. The `ipCommunityIds` property is an array of strings that reference IP community resources that define the community values to add or overwrite to the routes. The `ipExtendedCommunityIds` property is an array of strings that reference IP extended community resources that define the extended community values to add or overwrite to the routes.
147
-
- The Delete property has an `ipCommunityIds` property and an `ipExtendedCommunityIds` property. The `ipCommunityIds` property is an array of strings that reference IP community resources that define the community values to remove from the routes. The `ipExtendedCommunityIds` property is an array of strings that reference IP extended community resources that define the extended community values to remove from the routes.
148
-
- The Add property has an `ipCommunityIds` property and an `ipExtendedCommunityIds` property. The `ipCommunityIds` property is an array of strings that reference IP community resources that define the community values to add to the routes. The `ipExtendedCommunityIds` property is an array of strings that reference IP extended community resources that define the extended community values to remove from the routes.
149
-
- If the Set property is used, the Add and Delete properties can't be used.
145
+
- The IP community properties of the action property specify how to add, remove, or overwrite community values and extended community values of the routes. The IP community properties have a `set` property and a `delete` property. The `set` property specifies the IP community and IP extended community resources to add or overwrite to the routes. The `delete` property specifies the IP community and IP extended community resources to remove from the routes.
146
+
- The `set` property has an `ipCommunityIds` property and an `ipExtendedCommunityIds` property. The `ipCommunityIds` property is an array of strings that reference IP community resources that define the community values to add or overwrite to the routes. The `ipExtendedCommunityIds` property is an array of strings that reference IP extended community resources that define the extended community values to add or overwrite to the routes.
147
+
- The `delete` property has an `ipCommunityIds` property and an `ipExtendedCommunityIds` property. The `ipCommunityIds` property is an array of strings that reference IP community resources that define the community values to remove from the routes. The `ipExtendedCommunityIds` property is an array of strings that reference IP extended community resources that define the extended community values to remove from the routes.
148
+
- The `add` property has an `ipCommunityIds` property and an `ipExtendedCommunityIds` property. The `ipCommunityIds` property is an array of strings that reference IP community resources that define the community values to add to the routes. The `ipExtendedCommunityIds` property is an array of strings that reference IP extended community resources that define the extended community values to remove from the routes.
149
+
- If the `set` property is used, the `add` and `delete` properties can't be used.
150
150
- For example, the operator can use the following statement to permit any route that has an IP prefix equal to the IP prefix resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipPrefixes/{ipPrefixName}` and add the IP community value from the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName1}` and overwrite the IP extended community value with the IP extended community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipExtendedCommunities/{ipExtendedCommunityName2}`.
0 commit comments