Nacm¶

Leafs

• denied_data_writes
• denied_notifications
• denied_operations
• enable_external_groups
• enable_nacm
• exec_default
• read_default
• write_default

Children

• groups
• rule_list

class ydk.models.ietf.ietf_netconf_acm.Nacm¶

Bases: Entity

Class Hierarchy: Nacm

This class represents configuration data.

Parameters for NETCONF Access Control Model.

enable_nacm¶

Enables or disables all NETCONF access control enforcement. If ‘true’, then enforcement is enabled. If ‘false’, then enforcement is disabled

type: bool

default value: true

read_default¶

Controls whether read access is granted if no appropriate rule is found for a particular read request

type: ActionType

default value: permit

write_default¶

Controls whether create, update, or delete access is granted if no appropriate rule is found for a particular write request

type: ActionType

default value: deny

exec_default¶

Controls whether exec access is granted if no appropriate rule is found for a particular protocol operation request

type: ActionType

default value: permit

enable_external_groups¶

Controls whether the server uses the groups reported by the NETCONF transport layer when it assigns the user to a set of NACM groups. If this leaf has the value ‘false’, any group names reported by the transport layer are ignored by the server

type: bool

default value: true

denied_operations¶

Number of times since the server last restarted that a protocol operation request was denied

type: int

range: 0..4294967295

mandatory: True

config: False

denied_data_writes¶

Number of times since the server last restarted that a protocol operation request to alter a configuration datastore was denied

type: int

range: 0..4294967295

mandatory: True

config: False

denied_notifications¶

Number of times since the server last restarted that a notification was dropped for a subscription because access to the event type was denied

type: int

range: 0..4294967295

mandatory: True

config: False

groups¶

NETCONF Access Control Groups

type: Groups

rule_list¶

An ordered collection of access control rules

type: list of RuleList