Configuring IP Discovery segment profiles on a group allows a Security Administrator to configure IP discovery profile parameters, and apply them to group members.
Configuring The following static and dynamic group members are supported:
- Segment
- Segment Port
- VM
- Groups
- Mix of the above
Profiles on groups only apply if the default profile is applied to the segment or segment port:
| Custom Group Profile |
Custom Profile on Segment (S) and Segment Port(SP) |
Effective Profile on Port |
| Custom |
Default (S), Default (SP) |
Custom |
| Custom 1 |
Default (S), Custom 2 (SP) |
Custom 2 |
| Custom 1 |
Custom 2 (S), Default (SP) |
Custom 2 |
| Custom 1 |
Custom 2 (S), Custom 3 (SP) |
Custom 3 |
Each time a profile is applied to a group a sequence number is specified. If a member is present in multiple groups, the group with the lower sequence number has higher priority.
Discovery Profile Binding Map API
| Method |
API |
Resource Type |
| PUT, PATCH, GET, DELETE |
/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps/<binding-map-id> |
DiscoveryProfileBindingMap |
| GET |
/infra/domains/<domain-id>/groups/<group-id>/discovery-profile-binding-maps |
DiscoveryProfileBindingMapListResult |
Parameters for DiscoveryProfileBindingMap
| Field |
Type |
Description |
| profile_path |
Policy Path |
Required |
| sequence_number |
Integer |
Required. Sequence number is used to resolve conflicts when two profiles are applied to the same segment or segment port. The low sequence number has higher precedence. |
API for Segments and Ports
| Method |
API |
Resource Type |
| GET |
/infra/tier-1s/<tier-1-id>/segments/<segment-id>/effective-profiles/infra/segments/<segment-id>/effective-profiles/infra/segments/<segment-id>/effective-profiles/infra/segments/<segment-id>/ports/<port-id> |
EffectiveProfilesResponse |
Example Request
POST https://{{policy-ip}}/policy/api/v1/infra/domains/default/groups/TestGroup/discovery-profile-binding-maps/ipdmap
{
"profile_path" : "/infra/ip-discovery-profiles/ip-discovery-custom-profile-1",
"sequence_number" :"10"
}
