tenant.contract.subject

A subject is a sub-application running behind an endpoint group (for example, an Exchange server). A subject is parented by the contract, which can encapsulate multiple subjects.

ACI class	vzSubj
RN	subj-{name}
Cursor	ContractSubjectCursor
Parent	tenant.contract
Atomic	—

Attributes

Accepted as keyword arguments of .subject(name) and of .set(**attrs) on this cursor. Enum parameters also accept the plain string.

parameter	wire	type	values	default	description
name (positional)	name	str	—	—	The name of a sub application running behind an endpoint group, such as an Exchange server. This name can be up to 64 alphanumeric characters. Note that you cannot change this name after the object has been saved.
consumer_label_match_type	consMatchT	VzMatchT	All, AtleastOne, AtmostOne, None	AtleastOne	The subject match criteria across consumers.
description	descr	str	—	—	Specifies the description of a policy component.
qos_class_id	prio	QosTenantPrio	level1, level2, level3, level4, level5, level6, unspecified	unspecified	The priority level of a sub application running behind an endpoint group, such as an Exchange server.
provider_label_match_type	provMatchT	VzMatchT	All, AtleastOne, AtmostOne, None	AtleastOne	The subject match criteria across consumers.
reverse_filter_ports	revFltPorts	bool	—	True	Enables the filter to apply on both ingress and egress traffic.
subject_level_dscp	targetDscp	int	—	unspecified	The target differentiated services code point (DSCP) of the path attached to the layer 3 outside profile.

Children

maker	creates	position
.in_term(**attrs)	vzInTerm	tenant.contract.subject.in_term
.out_term(**attrs)	vzOutTerm	tenant.contract.subject.out_term
.exception(name, **attrs)	vzException	tenant.contract.subject.exception
.provider_subject_label(name, **attrs)	vzProvSubjLbl	tenant.contract.subject.provider_subject_label
.consumer_subject_label(name, **attrs)	vzConsSubjLbl	tenant.contract.subject.consumer_subject_label

Bind aliases

Lazy references, resolved closed-world at push time.

alias	target	flavor	relation
filter=	vzFilter	name	vzRsSubjFiltAtt
service_graph=	vnsAbsGraph	name	vzRsSubjGraphAtt

APIC diagnostics

States the APIC can flag on this class — it accepts the configuration and reports the inconsistency afterwards.

Config issues

code	meaning
any-to-prov-shared-service	Private Network Cannot be a Provider in Shared Service Scenario
filter-not-present	Filter Not Present
subject-not-in-use-due-to-label	No EPG Has Label For This Subject
taboo-has-no-filter	Taboo Not associated to Any Filter

Faults

code	condition
F1339	fltVzSubjConfigurationMissing