From a2ead5e4781ed729e3e6968b83bd4ec76cfc67aa Mon Sep 17 00:00:00 2001
From: Marek Gradzki <mgradzki@cisco.com>
Date: Mon, 15 Aug 2016 15:03:10 +0200
Subject: HONEYCOMB-139: yang model for ietf-acl draft revision 8

Change-Id: I9250e07f3811036f483959aa841897380bcb7669
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
---
 v3po/api/src/main/yang/v3po.yang | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

(limited to 'v3po/api/src/main/yang/v3po.yang')

diff --git a/v3po/api/src/main/yang/v3po.yang b/v3po/api/src/main/yang/v3po.yang
index 9ef133979..e99da965c 100644
--- a/v3po/api/src/main/yang/v3po.yang
+++ b/v3po/api/src/main/yang/v3po.yang
@@ -28,6 +28,9 @@ module v3po {
   import vpp-classifier {
     prefix "vpp-classifier";
   }
+  import ietf-access-control-list {
+    prefix "acl";
+  }
 
   typedef bridge-domain-ref {
     type leafref {
@@ -424,6 +427,31 @@ module v3po {
     }
   }
 
+  grouping ietf-acl-base-attributes {
+    description
+      "Provides limited support for ietf-acl model.";
+
+    container access-lists {
+      description
+        "Defines references to ietf-acl lists. Before assignment to interface,
+        ACL lists are merged into 3 type of acls (eth0, ip4 and ip6) that are supported by vpp.
+        Then corresponding tables and sessions are created and assigned to the interface.
+
+        Assignment update/delete removes all created tables and sessions and repeats process described above.
+        Update/delete of ACL lists referenced here is not permitted (assignment needs to be removed first).
+
+        Read is supported only for acls that were created and assigned by Honeycomb agent
+        (corresponding metadata are present).";
+      list acl {
+        key "reference";
+
+        leaf reference {
+          type acl:access-control-list-ref;
+        }
+      }
+    }
+  }
+
   augment /if:interfaces/if:interface {
     ext:augment-identifier "vpp-interface-augmentation";
 
@@ -481,6 +509,10 @@ module v3po {
     container acl {
       uses acl-base-attributes;
     }
+
+    container ietf-acl {
+      uses ietf-acl-base-attributes;
+    }
   }
 
   container vpp {
@@ -553,6 +585,10 @@ module v3po {
     container acl {
       uses acl-base-attributes;
     }
+
+    container ietf-acl {
+      uses ietf-acl-base-attributes;
+    }
   }
 
   augment /if:interfaces-state/if:interface/if:statistics {
-- 
cgit 1.2.3-korg