Npol cli reference

npol interface clear

npol interface clear [interface | sw_if_index N]

Declaration: npol_interface_clear_cmd src/plugins/npol/npol_interface.c line 153

Implementation: npol_interface_clear_cmd_fn

npol interface configure

npol interface configure [interface | sw_if_index N] rx <num_rx> tx <num_tx> rx-policy-def <rx-policy-def> tx-policy-def <tx-policy-def> rx-profile-def <rx-profile-def> tx-profile-def <tx-profile-def> [invert] <policy_id> ...

Declaration: npol_interface_configure_cmd src/plugins/npol/npol_interface.c line 216

Implementation: npol_interface_configure_cmd_fn

npol ipset add

npol ipset add [prefix|proto ip port|ip]

Declaration: npol_ipsets_add_cmd src/plugins/npol/npol_ipset.c line 173

Implementation: npol_ipsets_add_cmd_fn

npol ipset add member

npol ipset add member [id] [prefix]

Declaration: npol_ipsets_add_member_cmd src/plugins/npol/npol_ipset.c line 272

Implementation: npol_ipsets_add_member_cmd_fn

npol ipset del

npol ipset del [id]

Declaration: npol_ipsets_del_cmd src/plugins/npol/npol_ipset.c line 213

Implementation: npol_ipsets_del_cmd_fn

npol ipset del member

npol ipset del member [id] [prefix]

Declaration: npol_ipsets_del_member_cmd src/plugins/npol/npol_ipset.c line 331

Implementation: npol_ipsets_del_member_cmd_fn

npol match

npol match [<interface>|sw_if_index <idx>] [ip4|ip6] [inbound|outbound] 1.1.1.1;65000->3.3.3.3;8080 tcp

Declaration: npol_match src/plugins/npol/npol.c line 79

Implementation: npol_match_fn

npol policy add

npol policy add [rx rule_id rule_id ...] [tx rule_id rule_id ...] [update [id]]

Declaration: npol_policies_add_cmd src/plugins/npol/npol_policy.c line 143

Implementation: npol_policies_add_cmd_fn

npol policy del

npol policy del [id]

Declaration: npol_policies_del_cmd src/plugins/npol/npol_policy.c line 184

Implementation: npol_policies_del_cmd_fn

npol rule add

npol rule add [allow|deny|log|pass][filter[==|!=]value][[src|dst][==|!=][prefix|set ID|[port-port]]]

Add a rule, with given filters and entries
filters can be `icmp-type`, `icmp-code` and `proto`

Declaration: npol_rules_add_cmd src/plugins/npol/npol_rule.c line 210

Implementation: npol_rules_add_cmd_fn

npol rule del

npol rule del [id]

Declaration: npol_rules_del_cmd src/plugins/npol/npol_rule.c line 254

Implementation: npol_rules_del_cmd_fn

show npol ipsets

show npol ipsets

Declaration: npol_ipsets_show_cmd src/plugins/npol/npol_ipset.c line 126

Implementation: npol_ipsets_show_cmd_fn

show npol policies

show npol policies [verbose]

Declaration: npol_policies_show_cmd src/plugins/npol/npol_policy.c line 96

Implementation: npol_policies_show_cmd_fn

show npol rules

show npol rules

Declaration: npol_rules_show_cmd src/plugins/npol/npol_rule.c line 160

Implementation: npol_rules_show_cmd_fn