You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/reference-nexus-route-policy-config-examples.md
+48-51Lines changed: 48 additions & 51 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,12 +16,12 @@ This article gives examples of how to configure route policies for Azure Operato
16
16
17
17
The JSON format is a common way to define a route policy resource in Azure Operator Nexus. The JSON follows the schema of the route policy resource, which has the following properties:
18
18
19
-
-**id**: The ID of the route policy resource in the format `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}`.
20
-
-**type**: The type of the resource, which is `microsoft.managednetworkfabric/routepolicies`.
21
-
-**addressFamilyType**: The address family type of the route policy resource, which specifies the IP version of the route policy. It can be either IPv4 or IPv6.
22
-
-**statements**: An array of statements that define the routing behavior of the route policy resource. Each statement has a sequence number, a condition, and an action property.
23
-
-**defaultAction**: The default action of the route policy resource, which specifies the outcome for routes that don't match any statement in the route policy. It can be either Permit or Deny.
24
-
-**configurationState**: The configuration state of the route policy resource, which indicates whether the route policy was successfully applied or not. It can be either Succeeded, Failed, or Updating.
19
+
-**id**: The ID of the route policy resource in the format `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}`.
20
+
-**type**: The type of the resource, which is `microsoft.managednetworkfabric/routepolicies`.
21
+
-**addressFamilyType**: The address family type of the route policy resource, which specifies the IP version of the route policy. It can be either IPv4 or IPv6.
22
+
-**statements**: An array of statements that define the routing behavior of the route policy resource. Each statement has a sequence number, a condition, and an action property.
23
+
-**defaultAction**: The default action of the route policy resource, which specifies the outcome for routes that don't match any statement in the route policy. It can be either Permit or Deny.
24
+
-**configurationState**: The configuration state of the route policy resource, which indicates whether the route policy was successfully applied or not. It can be either Succeeded, Failed, or Updating.
25
25
26
26
Here's an example of a route policy resource specified in JSON format:
27
27
@@ -75,11 +75,8 @@ To use the Azure CLI commands or the REST API methods, you need to have an Azure
75
75
Here are some examples of the Azure CLI commands or the REST API methods to create and manage route policy resources:
76
76
77
77
- To create a route policy resource, you can use the `az networkfabric routepolicy create` command or the PUT method with the `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}` URI.
78
-
79
78
- To show the details of a route policy resource, you can use the `az networkfabric routepolicy show` command or the GET method with the `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}` URI.
80
-
81
79
- To update a route policy resource, you can use the `az networkfabric routepolicy update` command or the PATCH method with the `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}` URI.
82
-
83
80
- To delete a route policy resource, you can use the `az networkfabric routepolicy delete` command or the DELETE method with the `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/routePolicies/{routePolicyName}` URI.
84
81
85
82
## Use the Permit, Deny, and Continue actions in the route policy
@@ -88,59 +85,59 @@ The Permit, Deny, and Continue actions are used in the route policy to control
88
85
89
86
- The Permit action allows the matching routes and applies the IP community properties to the routes. The IP community properties specify how to add, remove, or overwrite community values and extended community values of the routes.
90
87
91
-
For example, the operator can use the following statement to permit any route that has an IP prefix equal to the IP prefix resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipPrefixes/{ipPrefixName}` and add the IP community value from the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName}`.
88
+
For example, the operator can use the following statement to permit any route that has an IP prefix equal to the IP prefix resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipPrefixes/{ipPrefixName}` and add the IP community value from the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName}`.
- The Deny action rejects the matching routes and stops the evaluation of the route policy.
113
110
114
-
For example, the operator can use the following statement to deny any route that has an IP community value equal to the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName}`.
For example, the operator can use the following statement to deny any route that has an IP community value equal to the IP community resource with the ID `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedNetworkFabric/ipCommunities/{ipCommunityName}`.
- The Continue action continues the evaluation of the route policy with the next statement and applies the IP community properties to the routes. The IP community properties specify how to add, remove, or overwrite community values and extended community values of the routes.
129
126
130
-
For example, the operator can use the following statement to continue the evaluation of the route policy with the next statement:
127
+
For example, the operator can use the following statement to continue the evaluation of the route policy with the next statement:
0 commit comments