NSXv¶
Header Format¶
The nsx header designation has the following format:
- section_name: specifies the name of the section all terms in this header apply to.
- inet: specifies that the resulting filter should only render IPv4 addresses.
- inet6: specifies that the resulting filter should only render IPv6 addresses.
- mixed: specifies that the resulting filter should render both IPv4 and IPv6 addresses.
- sectionId: specifies the Id for the section (optional)
- securitygroup: specifies that the appliedTo should be security group (optional)
- securitygroupId: specifies the Id of the security group (mandatory if securitygroup is given)
(Required keywords option and verbatim are not supported in NSX)
Term Format¶
-
for common keys see common.md
-
destination-exclude: Exclude one or more address tokens from the specified destination-address
- logging: Specify that this packet should be logged via syslog.
- source-exclude: exclude one or more address tokens from the specified source-address.
- verbatim: this specifies that the text enclosed within quotes should be rendered into the output without interpretation or modification. This is sometimes used as a temporary workaround while new required features are being added.
Sub Tokens¶
Actions¶
- accept
- deny
- reject
- reject-with-tcp-rst