Nacm

Leafs

Children

class ydk.models.ietf.ietf_netconf_acm.Nacm

Bases: Entity

Class Hierarchy : Nacm

This class represents configuration data.

Parameters for NETCONF Access Control Model.

enable_nacm

Enables or disables all NETCONF access control enforcement. If ‘true’, then enforcement is enabled. If ‘false’, then enforcement is disabled

type: bool

default value: true

read_default

Controls whether read access is granted if no appropriate rule is found for a particular read request

type: ActionType

default value: permit

write_default

Controls whether create, update, or delete access is granted if no appropriate rule is found for a particular write request

type: ActionType

default value: deny

exec_default

Controls whether exec access is granted if no appropriate rule is found for a particular protocol operation request

type: ActionType

default value: permit

enable_external_groups

Controls whether the server uses the groups reported by the NETCONF transport layer when it assigns the user to a set of NACM groups. If this leaf has the value ‘false’, any group names reported by the transport layer are ignored by the server

type: bool

default value: true

denied_operations

Number of times since the server last restarted that a protocol operation request was denied

type: int

range: 0..4294967295

mandatory: True

config: False

denied_data_writes

Number of times since the server last restarted that a protocol operation request to alter a configuration datastore was denied

type: int

range: 0..4294967295

mandatory: True

config: False

denied_notifications

Number of times since the server last restarted that a notification was dropped for a subscription because access to the event type was denied

type: int

range: 0..4294967295

mandatory: True

config: False

groups

NETCONF Access Control Groups

type: Groups

rule_list

An ordered collection of access control rules

type: list of RuleList