ACLRuleProps

Properties for defining a ACLRule.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-sag-aclrule

Initializer

using AlibabaCloud.SDK.ROS.CDK.Sag;
new ACLRuleProps {
    object AclId,
    object DestCidr,
    object DestPortRange,
    object Direction,
    object IpProtocol,
    object Policy,
    object SourceCidr,
    object SourcePortRange,
    object Description = null,
    object DpiGroupIds = null,
    object DpiSignatureIds = null,
    object Name = null,
    object Priority = null,
    object Type = null
};

Properties

AclId^Required

public object AclId { get; set; }

• Type: object

Property aclId: Access control ID.

DestCidr^Required

public object DestCidr { get; set; }

• Type: object

Property destCidr: Destination address, CIDR format and IP address range in IPv4 format.

DestPortRange^Required

public object DestPortRange { get; set; }

• Type: object

Property destPortRange: The destination port range.

Valid values: -1 and 1 to 65535. Use the format 1/200 or 80/80. A value of -1/-1 means all ports.

Direction^Required

public object Direction { get; set; }

• Type: object

Property direction: The direction of traffic to which the ACL rule applies.

Valid values:

• in: inbound. Traffic from an external network to the local branch where the SAG instance is deployed.
• out: outbound. Traffic from the local branch where the SAG instance is deployed to an external network.

IpProtocol^Required

public object IpProtocol { get; set; }

• Type: object

Property ipProtocol: Protocol, not case sensitive.

Policy^Required

public object Policy { get; set; }

• Type: object

Property policy: Access: accept|drop.

SourceCidr^Required

public object SourceCidr { get; set; }

• Type: object

Property sourceCidr: Source address, CIDR format and IP address range in IPv4 format.

SourcePortRange^Required

public object SourcePortRange { get; set; }

• Type: object

Property sourcePortRange: The source port range.

Valid values: -1 and 1 to 65535. Use the format 1/200 or 80/80. A value of -1/-1 means all ports.

Description^Optional

public object Description { get; set; }

• Type: object

Property description: Rule description information, ranging from 1 to 512 characters.

DpiGroupIds^Optional

public object DpiGroupIds { get; set; }

• Type: object

Property dpiGroupIds: The ID of the application group.

You can enter at most 100 application group IDs at a time. You can call the ListDpiGroups operation to query application group IDs and information about the applications.

DpiSignatureIds^Optional

public object DpiSignatureIds { get; set; }

• Type: object

Property dpiSignatureIds: The ID of the application.

You can enter at most 100 application IDs at a time. You can call the ListDpiSignatures operation to query application IDs and information about the applications.

Name^Optional

public object Name { get; set; }

• Type: object

Property name: The name of the ACL rule.

The name must be 2 to 100 characters in length, start with a letter, and can contain digits, periods (.), underscores (_), and hyphens (-).

Priority^Optional

public object Priority { get; set; }

• Type: object

Property priority: The priority of the ACL rule.

A smaller value indicates a higher priority. If multiple rules have the same priority, the rule that is first delivered to the Smart Access Gateway device takes precedence. Valid values: 1 to 100. Default value: 1.

Type^Optional

public object Type { get; set; }

• Type: object

Property type: The type of the ACL rule: Valid values: LAN: The ACL rule controls traffic of private IP addresses.

This is the default value. WAN: The ACL rule controls traffic of public IP addresses.