24 import "plugins/acl/acl_types.api";
31 define acl_plugin_get_version
43 define acl_plugin_get_version_reply
54 define acl_plugin_control_ping
66 define acl_plugin_control_ping_reply
79 define acl_plugin_get_conn_table_max_entries
89 define acl_plugin_get_conn_table_max_entries_reply
104 manual_print manual_endian define acl_add_replace
112 option vat_help =
"<acl-idx> [<ipv4|ipv6>] <permit|permit+reflect|deny|action N> [src IP/plen] [dst IP/plen] [sport X-Y] [dport X-Y] [proto P] [tcpflags FL MASK], ... , ...";
121 define acl_add_replace_reply
134 autoreply manual_print define acl_del
139 option vat_help =
"<acl-idx>";
153 autoreply manual_print define acl_interface_add_del
165 option vat_help =
"<intfc> | sw_if_index <if-idx> [add|del] [input|output] acl <acl-idx>";
177 autoreply manual_print define acl_interface_set_acl_list
185 option vat_help =
"<intfc> | sw_if_index <if-idx> input [acl-idx list] output [acl-idx list]";
204 option vat_help =
"[<acl-idx>]";
215 manual_endian manual_print define acl_details
230 define acl_interface_list_dump
235 option vat_help =
"[<intfc> | sw_if_index <if-idx>]";
246 define acl_interface_list_details
263 manual_endian manual_print define macip_acl_add
270 option vat_help =
"...";
279 define macip_acl_add_reply
295 manual_endian manual_print define macip_acl_add_replace
303 option vat_help =
"<acl-idx> [<ipv4|ipv6>] <permit|deny|action N> [count <count>] [src] ip <ipaddress/[plen]> mac <mac> mask <mac_mask>, ... , ...";
312 define macip_acl_add_replace_reply
325 autoreply manual_print define macip_acl_del
330 option vat_help =
"<acl-idx>";
341 autoreply manual_print define macip_acl_interface_add_del
349 option vat_help =
"<intfc> | sw_if_index <if-idx> [add|del] acl <acl-idx>";
358 define macip_acl_dump
363 option vat_help =
"[<acl-idx>]";
374 manual_endian manual_print define macip_acl_details
388 define macip_acl_interface_get
400 define macip_acl_interface_get_reply
413 define macip_acl_interface_list_dump
427 define macip_acl_interface_list_details
444 autoreply manual_print define acl_interface_set_etype_whitelist
452 option vat_help =
"<intfc> | sw_if_index <if-idx> input [ethertype list] output [ethertype list]";
461 define acl_interface_etype_whitelist_dump
466 option vat_help =
"[<intfc> | sw_if_index <if-idx>]";
477 define acl_interface_etype_whitelist_details
492 autoreply define acl_stats_intf_counters_enable
497 option vat_help =
"[disable]";
u64 conn_table_max_entries