Source Guard

Supported HTTP Operations

The following HTTP operations are supported for the source-guard enable command at the VLAN level.

GET method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=610/config/source_guard_container
Request body: None
Response body:{
    "icx-openconfig-vlan-aug:source_guard_container": {
        "source_guard": true
    }
}

PUT method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=100/config/source_guard_container
Request body:
 { 
            "icx-openconfig-vlan-aug:source_guard_container": {
                "source_guard": false
            }
  }
Response body: None

PATCH method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=100/config/source_guard_container
Request body:
 { 
            "icx-openconfig-vlan-aug:source_guard_container": {
                "source_guard": true
            }
  }
Response body: None

POST method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=100/config
Request body:
 { 
            "icx-openconfig-vlan-aug:source_guard_container": {
                "source_guard": true
            }
  }
Response body: None

PATCH method for source guard at multi VLAN

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans
{
    "openconfig-network-instance:vlans": {
        "vlan": [
            {
                "vlan-id": 11,
                "config": {
                    "vlan-id": 11,
                    "icx-openconfig-vlan-aug:source_guard_container": {
                        "source_guard": true
                    }
                }
            },
            {
                "vlan-id": 12,
                "config": {
                    "vlan-id": 12,
                     "icx-openconfig-vlan-aug:source_guard_container": {
                        "source_guard": true
                    }
                }           
            }                                                          
        ]
    }
}

DELETE

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=610/config/source_guard_container
Request body: None    
Response body: None

The following HTTP operations are supported for the source-guard enable command at the interface level.

GET method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F40/config/source_guard_container
Request body: None
Response body: {
            "icx-openconfig-if-source-guard-aug:source_guard_container": {
                "source_guard_enable": true
            }
}

PUT method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F2/config/source_guard_container
Request body: {
            "icx-openconfig-if-source-guard-aug:source_guard_container": {
                "source_guard_enable": true
            }
}
Response body: None

PATCH method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F2/config/source_guard_container
Request body: {
            "icx-openconfig-if-source-guard-aug:source_guard_container": {
                "source_guard_enable": true
            }
}
Response body: None

POST method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F5/config
Request body: {
            "icx-openconfig-if-source-guard-aug:source_guard_container": {
                "source_guard_enable": true
            }
}
Response body: None

PATCH method for source guard enable for multiple physical interfaces

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces
{
	"openconfig-interfaces:interfaces": {
		"interface": [
			{
				"name": "ethernet 1/1/1",
				"config": {
					"name": "ethernet 1/1/1",
                                        "icx-openconfig-if-source-guard-aug:source_guard_container": {
                                            "source_guard_enable": true
                                    }
				}
			},
			{
				"name": "ethernet 1/1/2",
				"config": {
					"name": "ethernet 1/1/2",
                                        "icx-openconfig-if-source-guard-aug:source_guard_container": {
                                            "source_guard_enable": true
                                    }	
				}
			},
			{
				"name": "ethernet 1/1/3",
				"config": {
					"name": "ethernet 1/1/3",
                                        "icx-openconfig-if-source-guard-aug:source_guard_container": {
                                            "source_guard_enable": true
                      }
				}
			}
		]
	}
}
PATCH method for source guard enable for multiple LAG interfaces
URL: https://<host>/restconf/data/openconfig-interfaces:interfaces
{
    "openconfig-interfaces:interfaces": {
        "interface": [
            {
                "name": "lag 1",
                "config": {
                    "name": "lag 1",
                    "icx-openconfig-if-source-guard-aug:source_guard_container": {
                        "source_guard_enable": true
                    }
                }
            },
            {
                "name": "lag 2",
                "config": {
                    "name": "lag 2",
                     "icx-openconfig-if-source-guard-aug:source_guard_container": {
                        "source_guard_enable": true
                    }
                }
            }
        ]
    }
}
DELETE
URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F40/config/source_guard_container
Request body: None    
Response body: None

IPv6 Source Guard

The following HTTP operations are supported for the ipv6 source-guard enable command at the VLAN level.

GET method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=102/config/ipv6_source_guard_container
Request body: None
Response body: {
    "icx-openconfig-vlan-aug:ipv6_source_guard_container": {
        "ipv6_source_guard": true
    }
}

PUT method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=102/config/ipv6_source_guard_container
Request body:
  { 
            "icx-openconfig-vlan-aug:ipv6_source_guard_container": {
                "ipv6_source_guard": true
            }
  }
Response body: None

PATCH method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=102/config/ipv6_source_guard_container
Request body:
 { 
            "icx-openconfig-vlan-aug:ipv6_source_guard_container": {
                "ipv6_source_guard": true
            }
  }
Response body: None

POST method

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=102/config
Request body:
 { 
            "icx-openconfig-vlan-aug:ipv6_source_guard_container": {
                "ipv6_source_guard": true
            }
  }
Response body: None

PATCH method for IPv6 source guard at multi VLAN

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans
{
    "openconfig-network-instance:vlans": {
        "vlan": [
            {
                "vlan-id": 11,
                "config": {
                    "vlan-id": 11,
                    "icx-openconfig-vlan-aug:ipv6_source_guard_container": {
                        "ipv6_source_guard": true
                    }
                }
            },
            {
                "vlan-id": 12,
                "config": {
                    "vlan-id": 12,
                      "icx-openconfig-vlan-aug:ipv6_source_guard_container": {
                        "ipv6_source_guard": true
                    }
                }           
            }                                                          
        ]
    }
}

DELETE

URL: https://<host>/restconf/data/network-instances/network-instance/default-vrf/vlans/vlan=610/config/ipv6_source_guard_container
Request body: None    
Response body: None

The following HTTP operations are supported for the ipv6 source-guard enable command at the interface level.

GET method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F39/config/ipv6_source_guard_container
Request body: None
Response body: {
    "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
        "ipv6_source_guard_enable": true
    }
}

PUT method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F40/config/ipv6_source_guard_container
Request body: {
            "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                "ipv6_source_guard_enable": true
            }
}
Response body: None

PATCH method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F40/config/ipv6_source_guard_container
Request body: {
            "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                "ipv6_source_guard_enable": true
            }
}
Response body: None

POST method

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F39/config
Request body: {
            "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                "ipv6_source_guard_enable": true
            }
}
Response body: None

PATCH method for IPv6 source guard enable for multiple physical interfaces

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces
{
	"openconfig-interfaces:interfaces": {
		"interface": [
			{
				"name": "ethernet 1/1/1",
				"config": {
					"name": "ethernet 1/1/1",
                                        "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                                            "ipv6_source_guard_enable": true
                                    }
				}
			},
			{
				"name": "ethernet 1/1/2",
				"config": {
					"name": "ethernet 1/1/2",
                                        "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                                            "ipv6_source_guard_enable": true
                                    }	
				}
			},
			{
				"name": "ethernet 1/1/3",
				"config": {
					"name": "ethernet 1/1/3",
                                        "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                                            "ipv6_source_guard_enable": true
                                    }
                            }
			}
		]
	}
}

PATCH method for IPv6 source guard enable for multiple LAG interfaces

URL: https://<host>/restconf/data/openconfig-interfaces:interfaces
{
    "openconfig-interfaces:interfaces": {
        "interface": [
            {
                "name": "lag 1",
                "config": {
                    "name": "lag 1",
                    "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                        "ipv6_source_guard_enable": true
                    }
                }
            },
            {
                "name": "lag 2",
                "config": {
                    "name": "lag 2",
                     "icx-openconfig-if-source-guard-aug:ipv6_source_guard_container": {
                        "ipv6_source_guard_enable": true
                    }
                }
            }
        ]
    }
}
DELETE
URL: https://<host>/restconf/data/openconfig-interfaces:interfaces/interface=ethernet%201%2F1%2F39/config/ipv6_source_guard_container
Request body: None    
Response body: None

Parent topic: Configuring ICX Using the RESTCONF Management Interface