config system sdn-connector

Configure connection to SDN Connector.

config system sdn-connector

Description: Configure connection to SDN Connector.

edit <name>

set status [disable|enable]

set type [aci|alicloud|...]

set use-metadata-iam [disable|enable]

set ha-status [disable|enable]

set verify-certificate [disable|enable]

set server {string}

set server-list <ip1>, <ip2>, ...

set server-port {integer}

set username {string}

set password {password_aes256}

set vcenter-server {string}

set vcenter-username {string}

set vcenter-password {password_aes256}

set access-key {string}

set secret-key {password}

set region {string}

set vpc-id {string}

config external-account-list

Description: Configure AWS external account list.

edit <role-arn>

set external-id {string}

set region-list <region1>, <region2>, ...

next

end

set tenant-id {string}

set client-id {string}

set client-secret {password}

set subscription-id {string}

set resource-group {string}

set login-endpoint {string}

set resource-url {string}

set azure-region [global|china|...]

config nic

Description: Configure Azure network interface.

edit <name>

config ip

Description: Configure IP configuration.

edit <name>

set public-ip {string}

set resource-group {string}

next

end

next

end

config route-table

Description: Configure Azure route table.

edit <name>

set subscription-id {string}

set resource-group {string}

config route

Description: Configure Azure route.

edit <name>

set next-hop {string}

next

end

next

end

set user-id {string}

set compartment-id {string}

set oci-region {string}

set oci-region-type [commercial|government]

set oci-cert {string}

set oci-fingerprint {string}

config external-ip

Description: Configure GCP external IP.

edit <name>

next

end

config route

Description: Configure GCP route.

edit <name>

next

end

config gcp-project-list

Description: Configure GCP project list.

edit <id>

set gcp-zone-list <name1>, <name2>, ...

next

end

config forwarding-rule

Description: Configure GCP forwarding rule.

edit <rule-name>

set target {string}

next

end

set service-account {string}

set private-key {user}

set secret-token {user}

set domain {string}

set group-name {string}

set api-key {password}

set compute-generation {integer}

set ibm-region [dallas|washington-dc|...]

set update-interval {integer}

next

end

config system sdn-connector

Parameter	Description	Type	Size	Default
status	Enable/disable connection to the remote SDN connector.	option	-	enable
	Option Description disable Disable connection to this SDN Connector. enable Enable connection to this SDN Connector.
type	Type of SDN connector.	option	-	aws
	Option Description aci Application Centric Infrastructure (ACI). alicloud AliCloud Service (ACS). aws Amazon Web Services (AWS). azure Microsoft Azure. gcp Google Cloud Platform (GCP). nsx VMware NSX. nuage Nuage VSP. oci Oracle Cloud Infrastructure. openstack OpenStack. kubernetes Kubernetes. vmware VMware vSphere (vCenter & ESXi). sepm Symantec Endpoint Protection Manager. aci-direct Application Centric Infrastructure (ACI Direct Connection). ibm IBM Cloud Infrastructure. nutanix Nutanix Prism Central. sap SAP Control.
use-metadata-iam	Enable/disable use of IAM role from metadata to call API.	option	-	disable
	Option Description disable Disable using IAM role to call API. enable Enable using IAM role to call API.
ha-status	Enable/disable use for FortiGate HA service.	option	-	disable
	Option Description disable Disable use for FortiGate HA service. enable Enable use for FortiGate HA service.
verify-certificate	Enable/disable server certificate verification.	option	-	enable
	Option Description disable Disable server certificate verification. enable Enable server certificate verification.
server	Server address of the remote SDN connector.	string	Not Specified
server-list <ip>	Server address list of the remote SDN connector. IPv4 address.	string	Maximum length: 15
server-port	Port number of the remote SDN connector.	integer	Minimum value: 0 Maximum value: 65535	0
username	Username of the remote SDN connector as login credentials.	string	Not Specified
password	Password of the remote SDN connector as login credentials.	password_aes256	Not Specified
vcenter-server	vCenter server address for NSX quarantine.	string	Not Specified
vcenter-username	vCenter server username for NSX quarantine.	string	Not Specified
vcenter-password	vCenter server password for NSX quarantine.	password_aes256	Not Specified
access-key	AWS / ACS access key ID.	string	Not Specified
secret-key	AWS / ACS secret access key.	password	Not Specified
region	AWS / ACS region name.	string	Not Specified
vpc-id	AWS VPC ID.	string	Not Specified
tenant-id	Tenant ID (directory ID).	string	Not Specified
client-id	Azure client ID (application ID).	string	Not Specified
client-secret	Azure client secret (application key).	password	Not Specified
subscription-id	Azure subscription ID.	string	Not Specified
resource-group	Azure resource group.	string	Not Specified
login-endpoint	Azure Stack login endpoint.	string	Not Specified
resource-url	Azure Stack resource URL.	string	Not Specified
azure-region	Azure server region.	option	-	global
	Option Description global Global Azure Server. china China Azure Server. germany Germany Azure Server. usgov US Government Azure Server. local Azure Stack Local Server.
user-id	User ID.	string	Not Specified
compartment-id	Compartment ID.	string	Not Specified
oci-region	OCI server region.	string	Not Specified
oci-region-type	OCI region type.	option	-	commercial
	Option Description commercial Commercial region. government Government region.
oci-cert	OCI certificate.	string	Not Specified
oci-fingerprint	OCI pubkey fingerprint.	string	Not Specified
service-account	GCP service account email.	string	Not Specified
private-key	Private key of GCP service account.	user	Not Specified
secret-token	Secret token of Kubernetes service account.	user	Not Specified
domain	Domain name.	string	Not Specified
group-name	Group name of computers.	string	Not Specified
api-key	IBM cloud API key or service ID API key.	password	Not Specified
compute-generation	Compute generation for IBM cloud infrastructure.	integer	Minimum value: 1 Maximum value: 2	2
ibm-region	IBM cloud region name.	option	-	dallas
	Option Description dallas US South (Dallas) Public Endpoint. washington-dc US East (Washington DC) Public Endpoint. london United Kingdom (London) Public Endpoint. frankfurt Germany (Frankfurt) Public Endpoint. sydney Australia (Sydney) Public Endpoint. tokyo Japan (Tokyo) Public Endpoint. osaka Japan (Osaka) Public Endpoint. toronto Canada (Toronto) Public Endpoint. sao-paulo Brazil (Sao Paulo) Public Endpoint.
update-interval	Dynamic object update interval .	integer	Minimum value: 0 Maximum value: 3600	60

config external-account-list

Parameter	Description	Type	Size	Default
external-id	AWS external ID.	string	Not Specified
region-list <region>	AWS region name list. AWS region name.	string	Maximum length: 31

config ip

Parameter	Description	Type	Size	Default
public-ip	Public IP name.	string	Not Specified
resource-group	Resource group of Azure public IP.	string	Not Specified

config route-table

Parameter	Description	Type	Size	Default
subscription-id	Subscription ID of Azure route table.	string	Not Specified
resource-group	Resource group of Azure route table.	string	Not Specified

config route

Parameter	Description	Type	Size	Default
next-hop	Next hop address.	string	Not Specified

config route

Parameter	Description	Type	Size	Default
next-hop	Next hop address.	string	Not Specified

config gcp-project-list

Parameter	Description	Type	Size	Default
gcp-zone-list <name>	Configure GCP zone list. GCP zone name.	string	Maximum length: 127

config forwarding-rule

Parameter	Description	Type	Size	Default
target	Target instance name.	string	Not Specified