You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by bf...@apache.org on 2013/04/16 20:50:37 UTC
[26/50] [abbrv] git commit: updated
refs/heads/ui-mixed-zone-management to 5891f09
Squashed commit of the following:
commit 7ce45ea1087407b87ff14d0f9ae5a7647c3f3ccc
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 15 18:36:33 2013 +0530
Fixed indentation and line ending
commit 0232048f904b850700899d65ded089d8d7e7ab83
Merge: 735c4c8 97911e9
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 15 17:05:59 2013 +0530
Merge branch 'master' into cisco-vnmc-api-integration
Conflicts:
api/src/org/apache/cloudstack/api/ApiConstants.java
client/tomcatconf/commands.properties.in
setup/db/db/schema-410to420.sql
tools/marvin/marvin/integration/lib/base.py
commit 735c4c895515a7d3acd59c97d98de95cc5935353
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 15 15:20:37 2013 +0530
Fixed unit tests based on recent changes in the Vnmc resource code
commit f166f2d0bf9e341316c74ef8de4b52b3d5e14f4d
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 15 14:50:25 2013 +0530
added tests to register vnmc and asa appliance in cloudstack
commit f38be4810e2e1349260ee262b85db81f60252d9e
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 8 18:42:06 2013 +0530
Removed unwanted files
commit 902ce426c1ebba2d826744123edd971819f73763
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 8 17:59:30 2013 +0530
Fixed auto-wiring of components for Cisco Vnmc
commit 08467ee30709268b536e649b24ad029db792934c
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 8 16:04:54 2013 +0530
Fixed compilation issues, incorrect merges from last commit
commit 67f11d46ad8c13f371fe94c57fb287cb9d6005d1
Merge: 3422cee c9c68e1
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 8 15:11:10 2013 +0530
Merge branch 'master' into cisco-vnmc-api-integration
commit 3422ceefb6d1f5a92ec0868c1261a22e2cfbc54e
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 8 14:42:32 2013 +0530
Correctly associating nat, acl policy sets to edge security profile in VNMC
commit 9c1e193fca6f5e7687634fe27a98616362267fbf
Author: Koushik Das <ko...@citrix.com>
Date: Sun Apr 7 21:22:22 2013 +0530
Passing correct subnet mask while creating edge firewall in VNMC
commit 05e3d04b55549ef098a769509171b24ca4a62957
Author: Koushik Das <ko...@citrix.com>
Date: Tue Apr 2 17:50:57 2013 +0530
Added changes related to icmp
commit bcecb589de84caa570754c246565dfaa1cb1c2bf
Author: Koushik Das <ko...@citrix.com>
Date: Mon Apr 1 13:57:21 2013 +0530
Some xml file renames
commit 9c1ee93f2e74ea785ca06cb25f62fad4ad10c69e
Author: Koushik Das <ko...@citrix.com>
Date: Sat Mar 30 15:54:25 2013 +0530
Fixed PF and static NAT rule creation in VNMC
commit 7e6159fa054ec13c8f70fb58af2fdae2f55a0c70
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 27 18:53:49 2013 +0530
Added more unit tests for Cisco Vnmc element
commit fc0ed9adb6eaecbe5abbce1088eb80b98953f5cf
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 27 16:48:28 2013 +0530
Cleaning up VNMC config as part of network shutdown
commit 5a427d48e20f50260b80c57f6e4c3bc6d9057c3f
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 27 02:22:54 2013 +0530
Added unit test for Vnmc network element implement() method
commit 48cbf34d3bf44a5601842fa8bbc41be6beea3b07
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 27 02:20:45 2013 +0530
Passing correct gateway ip while creating vservice node and guest port profile in Nexus
commit 2c386c61ef48a7cf9b282952152ecb7cedd21977
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 22 13:50:52 2013 +0530
Nexus 1000v fix
commit 4d2168bfa980f1fa4b8a0d10aaf4bdd2395de7cf
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 22 00:30:01 2013 +0530
Egress firewall rule
commit e81ab3a2f443cf0c032a1fae6ed8e0697865b69e
Author: Koushik Das <ko...@citrix.com>
Date: Thu Mar 21 10:50:29 2013 +0530
More tests for VnmcResource class
commit 9e9c179212e8c0896972c1f19a3327f97832697e
Author: Koushik Das <ko...@citrix.com>
Date: Thu Mar 21 00:25:10 2013 +0530
Fixed build issue from master merge
commit f0c1af2b5c037bf49bfc2775108600e2fbdc720f
Merge: 4f305c2 873ec27
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 20 16:20:10 2013 +0530
Merge branch 'master' into cisco-vnmc-api-integration
Conflicts:
api/src/com/cloud/network/Network.java
api/src/org/apache/cloudstack/api/ApiConstants.java
client/tomcatconf/components-nonoss.xml.in
client/tomcatconf/nonossComponentContext.xml.in
plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/manager/VmwareManagerImpl.java
plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
setup/db/db/schema-410to420.sql
vmware-base/src/com/cloud/hypervisor/vmware/mo/HypervisorHostHelper.java
commit 4f305c2beb02f836b5ece4e897bf812cd1e03751
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 20 15:09:34 2013 +0530
Initial set of tests, will add more in subsequent commits
commit 50bfcc1f752e9ca9b8330d2c4e3b8c5c9dd33155
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 20 15:02:14 2013 +0530
Updated pom to copy xmls to target location during build
commit 45bc92b8262e715fdead9411666cbe3274d3ee02
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 20 14:58:59 2013 +0530
Fixed cpmpilation issue as missed out adding this file
commit 2ce7cdc756bd43adec006b877cb41da6f3e9dd57
Author: Koushik Das <ko...@citrix.com>
Date: Sun Mar 17 17:02:25 2013 +0530
Creating vservice node and associating it with port profile in nexus for guest VMs
commit 387545caff60541bda5eb67e7fd91e61df5fde3e
Author: Koushik Das <ko...@citrix.com>
Date: Sat Mar 16 11:14:43 2013 +0530
Added license headers to XML files
commit 43e29974215a73788b249f246d7e62825cf8b4e6
Author: Koushik Das <ko...@citrix.com>
Date: Wed Mar 13 11:51:59 2013 +0530
Changes related to instantiating the dao components
commit 99e88ecbf9980abe86fce89807b089a8c1a1a549
Author: Koushik Das <ko...@citrix.com>
Date: Tue Mar 12 23:40:35 2013 +0530
Fix build errors after merge from master
commit 7c20b120c294fec4456a7052b630207eb0383458
Author: Koushik Das <ko...@citrix.com>
Date: Tue Mar 12 23:31:46 2013 +0530
Fixing poms and other xmls
commit ee868759a8817ec66364ddd9f87b37b3fb8efd08
Merge: 9c94b6d a1b33ca
Author: Koushik Das <ko...@citrix.com>
Date: Tue Mar 12 14:44:59 2013 +0530
Merge branch 'master' into cisco-vnmc-api-integration
Conflicts:
api/src/com/cloud/network/Network.java
api/src/org/apache/cloudstack/api/ApiConstants.java
plugins/pom.xml
setup/db/create-schema.sql
commit 9c94b6d231d851c24e6605b6645931f39caff548
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 8 22:20:23 2013 +0530
Fixed XML to create static route in VNMC correctly
commit ef069b33235c9d9864749fcfec878c2c255b8c10
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 8 15:26:26 2013 +0530
Added logic for revoking ACL, PF and Static NAT rules
commit 4c65b70668bf994adc8c55096dfefde98eb18180
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 8 13:51:37 2013 +0530
Renamed delete-acl-rule -> delete-rule
commit aa94eca516836949da40f1c0672c0aad9699c759
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 8 00:38:52 2013 +0530
- Creating static routes in VNMC as part of edge firewall configuration
- Passing order parameter while creating rules so that they are evaluated in a specific order
- Added methods in VnmcResource for listing acl policies and rules belonging to variouos policies. This is used to compute order while creation of various rules in VNMC
commit cc824e8585dc011843125f070f9bbf8dbf985384
Author: Koushik Das <ko...@citrix.com>
Date: Thu Mar 7 12:16:29 2013 +0530
Adding appropriate ACL rules for PF and static NAT
commit fb23c503655b29d33c6206dbf4df1ed7f64ff5e2
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 1 17:21:45 2013 +0530
Added logic for deleting various VNMC artifacts. Added/updated relevant xmls as well.
commit 970c21a9a335a86c495553db3e1f86c3379bdb8e
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 1 01:54:10 2013 +0530
Added implementation for delete of asa and vnmc apis
commit 22e1455142690acd7d5c5faed443cfb263d09dd9
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 1 01:19:43 2013 +0530
List asa api to return guest network if associated. From this it can be inferred if asa is available or not
commit 32223736c9a52a73a3e401c301cf7dc3534639d2
Author: Koushik Das <ko...@citrix.com>
Date: Fri Mar 1 00:50:55 2013 +0530
Added Vmware cluster info along with asa1kv appliance.
This is used to select the correct n1kv vsm for configuring the guest network
commit deed3cc9510fee58a02d4f485e3625335f038a57
Author: Koushik Das <ko...@citrix.com>
Date: Mon Feb 25 18:03:59 2013 +0530
Added support for static NAT rules.
- Xmls for creating static nat rules in VNMC
- applyStaticNats implementation in VNMC network element
- handler for static nat in resource class
commit 681f0b7b509446d32fb326cd425cd6a8618fc45d
Author: Koushik Das <ko...@citrix.com>
Date: Mon Feb 25 10:44:13 2013 +0530
Added implementation for firewall and port forwarding rules in Cisco VNMC element class
commit 66b01a6589e0577ff6ba2a14f8df4f32f8c400fb
Author: Koushik Das <ko...@citrix.com>
Date: Fri Feb 22 19:19:44 2013 +0530
VNMC xml for deleting NAT policy
commit 5d9868676868c9f9555aa0e706a6f2f2430cd5cf
Author: Koushik Das <ko...@citrix.com>
Date: Fri Feb 22 19:16:41 2013 +0530
Added support for PF/DNAT rules.
Created methods in VNMCConnection class to create PF rules. Also moved out common code for PF and source NAT in methods.
Updated the corresponding VNMC resource class.
commit 8db2fbeb8f04b81399f0932a1f8fd782264fb181
Author: Koushik Das <ko...@citrix.com>
Date: Fri Feb 22 18:21:45 2013 +0530
Added xml for creating NAT policy set in VNMC
commit f2da0d50caf49efeb903b9abde9a4f996cf6cc1b
Author: Koushik Das <ko...@citrix.com>
Date: Fri Feb 22 18:17:53 2013 +0530
Added VNMC XMLs for supporting PF/DNAT rules.
Also moved out some XMLs related to source NAT to common files so that these can be used for both source NAT and DNAT
commit 124a48819d34547d5355396c151279a23899ff65
Author: Koushik Das <ko...@citrix.com>
Date: Thu Feb 21 17:53:12 2013 +0530
Separated out creation of ACL policy set and policy in VNMC
commit 1e38515f35f6e567e0118fbea1cdc0dc5ebf9965
Author: Koushik Das <ko...@citrix.com>
Date: Thu Feb 21 11:54:44 2013 +0530
Added changes to create ingress fw rules in VNMC
commit cb2fba9e7c331634893b4597841ea13784844a84
Author: Koushik Das <ko...@citrix.com>
Date: Thu Feb 14 16:23:05 2013 +0530
Source NAT in VNMC
commit 720fe2f908895f2102c1cb00698568f4ddd4b8cd
Author: Koushik Das <ko...@citrix.com>
Date: Wed Feb 13 14:16:47 2013 +0530
Fix Vnmc test file
commit d6dbe790c6a569dceff1a598bec2522760695bdc
Author: Koushik Das <ko...@citrix.com>
Date: Wed Feb 13 12:07:03 2013 +0530
Added db. tables for asa1kv devices and their mapping with guest network
commit 3fd7e30f6e84adb607c3d61be32ecb889cfa73b3
Author: Koushik Das <ko...@citrix.com>
Date: Wed Feb 13 11:52:12 2013 +0530
Changes:
- Added implementation for add/list asa1kv APIs
- Added agent command for associating asa1kv appliance with logical edge firewall in VNMC
- Added handler for the above agent command in VNMC resource class
- Updated VNMC element class to support the above
commit d08e2a1fafdc68ea1c7d6327829aee5aa4c2c38d
Author: Koushik Das <ko...@citrix.com>
Date: Wed Feb 13 11:40:58 2013 +0530
Added lifecycle APIs for Cisco Asa 1000v appliance.
Added corresponding Dao and VO classes.
Also added mapping Dao and VO for guest netwok and asa appliance
commit 6b999ec867bee2cd31aff5d495470b25af6d45f8
Author: Koushik Das <ko...@citrix.com>
Date: Tue Feb 12 00:05:39 2013 +0530
Changes:
a. Added handlers for CreateLogicalEdgeFirewall and ConfigureNexusVSMForASA commands
b. Logic for add/list vnmc device API
c. Partial implementation for network element implement()
commit 0656250308f3dd8a6991ee124a0fa3781214b327
Author: Koushik Das <ko...@citrix.com>
Date: Mon Feb 11 23:48:19 2013 +0530
Moved VNMC provider creation to Network.java. The plugin code would have been the ideal place to keep it but current state of the code doesn't allow it.
commit dc402eaa7a67c1b457ccf2243a0e53371a0bcfa9
Author: Koushik Das <ko...@citrix.com>
Date: Mon Feb 11 23:35:19 2013 +0530
Added new commands for the following:
a. Logical edge firewall creation in VNMC
b. Asa1kv vservice node creation and updating asa1kv inside port profile with guest network vlan id in n1kv VSM
commit d6cdfe35f8bdb5a22759678da1cf6f1835debecc
Author: Koushik Das <ko...@citrix.com>
Date: Mon Feb 11 23:06:36 2013 +0530
Added helper method to create port profile in n1kv VSM with additional parameters VDC tenant and edge security profile
Added helper method to create a vservice node in n1kv VSM
commit db42da17e9d3cf7466e0f755d5046d710a5f5356
Author: Koushik Das <ko...@citrix.com>
Date: Mon Feb 11 22:44:01 2013 +0530
Added database table for storing VNMC devices
commit f991436335254eae4dc11a9f089a5c6e94403cd3
Author: Koushik Das <ko...@citrix.com>
Date: Fri Feb 8 16:00:15 2013 +0530
Added support for network offering creation with VNMC as provider for firewall, port forwarding, source nat
commit 74de210359396b1ac880aa0ffa3a38df6574e07d
Author: Koushik Das <ko...@citrix.com>
Date: Fri Feb 8 15:06:11 2013 +0530
Added name attribute for the VNMC lifecycle commands
commit 6ce25ef11dd7eb98b0ae999f9748e7ea907b7e10
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 16:44:28 2013 -0800
Fix licensing
commit 392cd8ed631009590c0001e88a82b17294af2c3e
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 16:38:19 2013 -0800
cisco-vnmc: Fix api to use new conventions
commit 6b142bbaabc1a00c94ec598bbd8e257274372d42
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:33:33 2013 -0800
WIP: configure ASA port profile
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 1ae21ea49a5535a3e839aba0ccfe95c7e9d9abbd
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:33:01 2013 -0800
WIP rename device to resource to better reflect nature of VNMC
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 84d218f972e48d5f92e6659282d6d1762070b108
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:32:54 2013 -0800
WIP: fixes for associating ASA1000v to tenant
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit d74c6a9ac2efc939aa98c466bf0cd9bcf5e5563c
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:32:45 2013 -0800
WIP: fixes for associating ASA1000v to tenant
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 9350d10849015c3bc710efff48045ca7bd9513f4
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:32:29 2013 -0800
WIP: admin commands for adding / listing VNMC
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit a8031a0cfed08f59b9e22f5b914f7bc205e04104
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:41 2013 -0800
WIP ASA 1000v listing"
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit f9cc674b9ce5a04f4cf1c17882c597fcc336b121
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:36 2013 -0800
WIP : edge firewall
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 6a0964af00437e2175c95f76e913683393ee8988
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:30 2013 -0800
WIP : edge security policy
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit e32295e8cf3baacb154b2a6cecf48dc3be74f505
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:24 2013 -0800
WIP : dhcp server policy
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 446a9b84919e8e3d0ed9f131c675726c42ed6a4f
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:18 2013 -0800
WIP : dhcp server policy
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit e35e0eb59ba3e011cad68155b06e96eaf257e91e
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:14 2013 -0800
Move unit test
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 2b43a3e74ef0e448eb407d3a967f9d8cf2a1d71b
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:30:08 2013 -0800
Move unit test
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
commit 11b804a8940c17e105b25ac7f9dfd87651e4c55a
Author: Chiradeep Vittal <ch...@apache.org>
Date: Wed Jan 16 15:29:54 2013 -0800
WIP: XML control of VNMC
Signed-off-by: Chiradeep Vittal <ch...@apache.org>
Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/e94c7025
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/e94c7025
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/e94c7025
Branch: refs/heads/ui-mixed-zone-management
Commit: e94c70254be7a593b9c30931948621a86b35455f
Parents: ae16f33
Author: Koushik Das <ko...@citrix.com>
Authored: Mon Apr 15 18:58:43 2013 +0530
Committer: Koushik Das <ko...@citrix.com>
Committed: Mon Apr 15 18:58:43 2013 +0530
----------------------------------------------------------------------
api/src/com/cloud/network/Network.java | 1 +
.../org/apache/cloudstack/api/ApiConstants.java | 1 +
.../network/ExternalNetworkDeviceManager.java | 1 +
client/pom.xml | 10 +
client/tomcatconf/commands.properties.in | 11 +
client/tomcatconf/nonossComponentContext.xml.in | 11 +
.../src/com/cloud/hypervisor/guru/VMwareGuru.java | 18 +-
.../vmware/manager/VmwareManagerImpl.java | 3 +-
.../hypervisor/vmware/resource/VmwareResource.java | 13 +-
plugins/network-elements/cisco-vnmc/pom.xml | 42 +
.../scripts/network/cisco/assoc-asa1000v.xml | 34 +
.../network/cisco/associate-acl-policy-set.xml | 37 +
.../network/cisco/associate-dhcp-policy.xml | 34 +
.../network/cisco/associate-dhcp-server.xml | 32 +
.../network/cisco/associate-nat-policy-set.xml | 35 +
.../network/cisco/associate-route-policy.xml | 33 +
.../network/cisco/create-acl-policy-ref.xml | 38 +
.../network/cisco/create-acl-policy-set.xml | 36 +
.../scripts/network/cisco/create-acl-policy.xml | 35 +
.../network/cisco/create-acl-rule-for-dnat.xml | 82 +
.../network/cisco/create-acl-rule-for-pf.xml | 156 ++
.../scripts/network/cisco/create-dhcp-policy.xml | 72 +
.../scripts/network/cisco/create-dnat-rule.xml | 91 +
.../network/cisco/create-edge-device-profile.xml | 32 +
.../cisco/create-edge-device-route-policy.xml | 30 +
.../network/cisco/create-edge-device-route.xml | 35 +
.../scripts/network/cisco/create-edge-firewall.xml | 89 +
.../network/cisco/create-edge-security-profile.xml | 41 +
.../network/cisco/create-egress-acl-rule.xml | 201 ++
.../cisco/create-generic-egress-acl-rule.xml | 122 ++
.../cisco/create-generic-ingress-acl-rule.xml | 121 ++
.../network/cisco/create-ingress-acl-rule.xml | 201 ++
.../scripts/network/cisco/create-ip-pool.xml | 58 +
.../network/cisco/create-nat-policy-ref.xml | 38 +
.../network/cisco/create-nat-policy-set.xml | 37 +
.../scripts/network/cisco/create-nat-policy.xml | 33 +
.../scripts/network/cisco/create-pf-rule.xml | 166 ++
.../scripts/network/cisco/create-port-pool.xml | 72 +
.../network/cisco/create-source-nat-pool.xml | 58 +
.../network/cisco/create-source-nat-rule.xml | 103 ++
.../scripts/network/cisco/create-tenant.xml | 29 +
.../scripts/network/cisco/create-vdc.xml | 30 +
.../network/cisco/delete-acl-policy-set.xml | 30 +
.../scripts/network/cisco/delete-acl-policy.xml | 33 +
.../scripts/network/cisco/delete-edge-firewall.xml | 30 +
.../network/cisco/delete-edge-security-profile.xml | 38 +
.../network/cisco/delete-nat-policy-set.xml | 30 +
.../scripts/network/cisco/delete-nat-policy.xml | 33 +
.../scripts/network/cisco/delete-rule.xml | 31 +
.../scripts/network/cisco/delete-tenant.xml | 30 +
.../scripts/network/cisco/delete-vdc.xml | 30 +
.../scripts/network/cisco/disassoc-asa1000v.xml | 30 +
.../scripts/network/cisco/list-acl-policies.xml | 31 +
.../scripts/network/cisco/list-children.xml | 27 +
.../scripts/network/cisco/list-nat-policies.xml | 31 +
.../network/cisco/list-policyrefs-in-policyset.xml | 31 +
.../scripts/network/cisco/list-tenants.xml | 26 +
.../network/cisco/list-unassigned-asa1000v.xml | 39 +
.../cisco-vnmc/scripts/network/cisco/login.xml | 20 +
...AssociateAsaWithLogicalEdgeFirewallCommand.java | 53 +
.../api/CleanupLogicalEdgeFirewallCommand.java | 43 +
.../agent/api/ConfigureNexusVsmForAsaCommand.java | 95 +
.../api/CreateLogicalEdgeFirewallCommand.java | 94 +
.../api/commands/AddCiscoAsa1000vResourceCmd.java | 116 ++
.../api/commands/AddCiscoVnmcResourceCmd.java | 115 ++
.../commands/DeleteCiscoAsa1000vResourceCmd.java | 93 +
.../api/commands/DeleteCiscoVnmcResourceCmd.java | 93 +
.../commands/ListCiscoAsa1000vResourcesCmd.java | 110 ++
.../api/commands/ListCiscoVnmcResourcesCmd.java | 106 ++
.../response/CiscoAsa1000vResourceResponse.java | 88 +
.../api/response/CiscoVnmcResourceResponse.java | 75 +
.../cloud/network/cisco/CiscoAsa1000vDevice.java | 39 +
.../cloud/network/cisco/CiscoAsa1000vDeviceVO.java | 101 +
.../cloud/network/cisco/CiscoVnmcConnection.java | 196 ++
.../network/cisco/CiscoVnmcConnectionImpl.java | 1415 +++++++++++++++
.../cloud/network/cisco/CiscoVnmcController.java | 40 +
.../cloud/network/cisco/CiscoVnmcControllerVO.java | 102 ++
.../cloud/network/cisco/NetworkAsa1000vMap.java | 31 +
.../cloud/network/cisco/NetworkAsa1000vMapVO.java | 73 +
.../com/cloud/network/dao/CiscoAsa1000vDao.java | 33 +
.../cloud/network/dao/CiscoAsa1000vDaoImpl.java | 63 +
.../src/com/cloud/network/dao/CiscoVnmcDao.java | 32 +
.../com/cloud/network/dao/CiscoVnmcDaoImpl.java | 51 +
.../cloud/network/dao/NetworkAsa1000vMapDao.java | 28 +
.../network/dao/NetworkAsa1000vMapDaoImpl.java | 61 +
.../network/element/CiscoAsa1000vService.java | 43 +
.../cloud/network/element/CiscoVnmcElement.java | 928 ++++++++++
.../network/element/CiscoVnmcElementService.java | 42 +
.../cloud/network/resource/CiscoVnmcResource.java | 780 ++++++++
.../contrib/ssl/EasySSLProtocolSocketFactory.java | 232 +++
.../contrib/ssl/EasyX509TrustManager.java | 114 ++
.../network/cisco/CiscoVnmcConnectionTest.java | 248 +++
.../network/element/CiscoVnmcElementTest.java | 401 ++++
.../network/resource/CiscoVnmcResourceTest.java | 285 +++
plugins/pom.xml | 1 +
server/src/com/cloud/api/ApiResponseHelper.java | 4 +-
.../configuration/ConfigurationManagerImpl.java | 4 +-
setup/db/db/schema-410to420.sql | 38 +-
test/integration/component/test_asa1000v_fw.py | 134 ++
tools/marvin/marvin/integration/lib/base.py | 65 +-
.../cloud/utils/cisco/n1kv/vsm/NetconfHelper.java | 22 +
.../com/cloud/utils/cisco/n1kv/vsm/VsmCommand.java | 213 +++
.../hypervisor/vmware/mo/HypervisorHostHelper.java | 45 +-
103 files changed, 9751 insertions(+), 36 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/api/src/com/cloud/network/Network.java
----------------------------------------------------------------------
diff --git a/api/src/com/cloud/network/Network.java b/api/src/com/cloud/network/Network.java
index c0b0117..ffe70d1 100644
--- a/api/src/com/cloud/network/Network.java
+++ b/api/src/com/cloud/network/Network.java
@@ -137,6 +137,7 @@ public interface Network extends ControlledEntity, StateObject<Network.State>, I
public static final Provider None = new Provider("None", false);
// NiciraNvp is not an "External" provider, otherwise we get in trouble with NetworkServiceImpl.providersConfiguredForExternalNetworking
public static final Provider NiciraNvp = new Provider("NiciraNvp", false);
+ public static final Provider CiscoVnmc = new Provider("CiscoVnmc", true);
private String name;
private boolean isExternal;
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/api/src/org/apache/cloudstack/api/ApiConstants.java
----------------------------------------------------------------------
diff --git a/api/src/org/apache/cloudstack/api/ApiConstants.java b/api/src/org/apache/cloudstack/api/ApiConstants.java
index b08e992..37cb59f 100755
--- a/api/src/org/apache/cloudstack/api/ApiConstants.java
+++ b/api/src/org/apache/cloudstack/api/ApiConstants.java
@@ -476,6 +476,7 @@ public class ApiConstants {
public static final String AFFINITY_GROUP_IDS = "affinitygroupids";
public static final String AFFINITY_GROUP_NAMES = "affinitygroupnames";
public static final String DEPLOYMENT_PLANNER = "deploymentplanner";
+ public static final String ASA_INSIDE_PORT_PROFILE = "insideportprofile";
public enum HostDetails {
all, capacity, events, stats, min;
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/api/src/org/apache/cloudstack/network/ExternalNetworkDeviceManager.java
----------------------------------------------------------------------
diff --git a/api/src/org/apache/cloudstack/network/ExternalNetworkDeviceManager.java b/api/src/org/apache/cloudstack/network/ExternalNetworkDeviceManager.java
index aeed81d..29ce2e3 100644
--- a/api/src/org/apache/cloudstack/network/ExternalNetworkDeviceManager.java
+++ b/api/src/org/apache/cloudstack/network/ExternalNetworkDeviceManager.java
@@ -43,6 +43,7 @@ public interface ExternalNetworkDeviceManager extends Manager {
public static final NetworkDevice F5BigIpLoadBalancer = new NetworkDevice("F5BigIpLoadBalancer", Network.Provider.F5BigIp.getName());
public static final NetworkDevice JuniperSRXFirewall = new NetworkDevice("JuniperSRXFirewall", Network.Provider.JuniperSRX.getName());
public static final NetworkDevice NiciraNvp = new NetworkDevice("NiciraNvp", Network.Provider.NiciraNvp.getName());
+ public static final NetworkDevice CiscoVnmc = new NetworkDevice("CiscoVnmc", Network.Provider.CiscoVnmc.getName());
public NetworkDevice(String deviceName, String ntwkServiceprovider) {
_name = deviceName;
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/client/pom.xml
----------------------------------------------------------------------
diff --git a/client/pom.xml b/client/pom.xml
index 08946b6..743cd36 100644
--- a/client/pom.xml
+++ b/client/pom.xml
@@ -455,6 +455,11 @@
file="${basedir}/target/generated-webapp/WEB-INF/web.xml"
match="classpath:componentContext.xml"
replace="classpath:nonossComponentContext.xml" byline="true" />
+ <exec executable="cp">
+ <arg value="-r" />
+ <arg value="${basedir}/../plugins/network-elements/cisco-vnmc/scripts" />
+ <arg value="${basedir}/target/generated-webapp/WEB-INF/classes/" />
+ </exec>
</target>
</configuration>
</execution>
@@ -639,6 +644,11 @@
<artifactId>cloud-vmware-base</artifactId>
<version>${project.version}</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.cloudstack</groupId>
+ <artifactId>cloud-plugin-network-cisco-vnmc</artifactId>
+ <version>${project.version}</version>
+ </dependency>
</dependencies>
</profile>
</profiles>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/client/tomcatconf/commands.properties.in
----------------------------------------------------------------------
diff --git a/client/tomcatconf/commands.properties.in b/client/tomcatconf/commands.properties.in
index 798d226..10fcfe3 100644
--- a/client/tomcatconf/commands.properties.in
+++ b/client/tomcatconf/commands.properties.in
@@ -577,3 +577,14 @@ deleteAffinityGroup=15
listAffinityGroups=15
updateVMAffinityGroup=15
listAffinityGroupTypes=15
+
+#### Cisco Vnmc commands
+addCiscoVnmcResource=1
+deleteCiscoVnmcResource=1
+listCiscoVnmcResources=1
+
+#### Cisco Asa1000v commands
+addCiscoAsa1000vResource=1
+deleteCiscoAsa1000vResource=1
+listCiscoAsa1000vResources=1
+
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/client/tomcatconf/nonossComponentContext.xml.in
----------------------------------------------------------------------
diff --git a/client/tomcatconf/nonossComponentContext.xml.in b/client/tomcatconf/nonossComponentContext.xml.in
index 3ede263..aac3b89 100644
--- a/client/tomcatconf/nonossComponentContext.xml.in
+++ b/client/tomcatconf/nonossComponentContext.xml.in
@@ -137,6 +137,16 @@
</bean>
<!--
+ Cisco VNMC support components
+ -->
+ <bean id="ciscoVnmcDaoImpl" class="com.cloud.network.dao.CiscoVnmcDaoImpl" />
+ <bean id="ciscoAsa1000vDaoImpl" class="com.cloud.network.dao.CiscoAsa1000vDaoImpl" />
+ <bean id="networkAsa1000vMapDaoImpl" class="com.cloud.network.dao.NetworkAsa1000vMapDaoImpl" />
+ <bean id="CiscoVNMC" class="com.cloud.network.element.CiscoVnmcElement">
+ <property name="name" value="CiscoVNMC"/>
+ </bean>
+
+ <!--
BigSwitch support components
-->
<bean id="bigSwitchVnsDaoImpl" class="com.cloud.network.dao.BigSwitchVnsDaoImpl" />
@@ -324,6 +334,7 @@
<ref bean="Netscaler"/>
<ref bean="F5BigIP"/>
<ref bean="CiscoNexus1000vVSM"/>
+ <ref bean="CiscoVNMC"/>
<ref bean="NiciraNvp" />
<ref bean="MidoNetElement" />
<ref bean="bigSwitchVnsElement"/>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/hypervisors/vmware/src/com/cloud/hypervisor/guru/VMwareGuru.java
----------------------------------------------------------------------
diff --git a/plugins/hypervisors/vmware/src/com/cloud/hypervisor/guru/VMwareGuru.java b/plugins/hypervisors/vmware/src/com/cloud/hypervisor/guru/VMwareGuru.java
index f6f0923..122ba3b 100644
--- a/plugins/hypervisors/vmware/src/com/cloud/hypervisor/guru/VMwareGuru.java
+++ b/plugins/hypervisors/vmware/src/com/cloud/hypervisor/guru/VMwareGuru.java
@@ -52,7 +52,9 @@ import com.cloud.hypervisor.HypervisorGuru;
import com.cloud.hypervisor.HypervisorGuruBase;
import com.cloud.hypervisor.vmware.manager.VmwareManager;
import com.cloud.hypervisor.vmware.mo.VirtualEthernetCardType;
+import com.cloud.network.Network.Provider;
import com.cloud.network.NetworkModel;
+import com.cloud.network.Network.Service;
import com.cloud.network.Networks.TrafficType;
import com.cloud.network.dao.NetworkDao;
import com.cloud.network.dao.NetworkVO;
@@ -143,13 +145,23 @@ public class VMwareGuru extends HypervisorGuruBase implements HypervisorGuru {
details.put(VmDetailConstants.ROOK_DISK_CONTROLLER, _vmwareMgr.getRootDiskController());
}
}
-
+
+ List<NicProfile> nicProfiles = vm.getNics();
+
+ for(NicProfile nicProfile : nicProfiles) {
+ if(nicProfile.getTrafficType() == TrafficType.Guest) {
+ if(_networkMgr.isProviderSupportServiceInNetwork(nicProfile.getNetworkId(), Service.Firewall, Provider.CiscoVnmc)) {
+ details.put("ConfigureVServiceInNexus", Boolean.TRUE.toString());
+ }
+ break;
+ }
+ }
+
to.setDetails(details);
if(vm.getVirtualMachine() instanceof DomainRouterVO) {
- List<NicProfile> nicProfiles = vm.getNics();
- NicProfile publicNicProfile = null;
+ NicProfile publicNicProfile = null;
for(NicProfile nicProfile : nicProfiles) {
if(nicProfile.getTrafficType() == TrafficType.Public) {
publicNicProfile = nicProfile;
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/manager/VmwareManagerImpl.java
----------------------------------------------------------------------
diff --git a/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/manager/VmwareManagerImpl.java b/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/manager/VmwareManagerImpl.java
index b2e3768..eb09af0 100755
--- a/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/manager/VmwareManagerImpl.java
+++ b/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/manager/VmwareManagerImpl.java
@@ -317,8 +317,7 @@ public class VmwareManagerImpl extends ManagerBase implements VmwareManager, Vmw
}
s_logger.info("Preparing network on host " + hostMo.getContext().toString() + " for " + privateTrafficLabel);
- HypervisorHostHelper.prepareNetwork(vSwitchName, "cloud.private", hostMo, vlanId, null, null, 180000, false);
-
+ HypervisorHostHelper.prepareNetwork(vSwitchName, "cloud.private", hostMo, vlanId, null, null, 180000, false);
}
@Override
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
----------------------------------------------------------------------
diff --git a/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java b/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
index f569595..3dc23cc 100755
--- a/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
+++ b/plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
@@ -1329,7 +1329,7 @@ public class VmwareResource implements StoragePoolResource, ServerResource, Vmwa
NicTO nicTo = cmd.getNic();
VirtualDevice nic;
- Pair<ManagedObjectReference, String> networkInfo = prepareNetworkFromNicInfo(vmMo.getRunningHost(), nicTo);
+ Pair<ManagedObjectReference, String> networkInfo = prepareNetworkFromNicInfo(vmMo.getRunningHost(), nicTo, false);
if (VmwareHelper.isDvPortGroup(networkInfo.first())) {
String dvSwitchUuid;
ManagedObjectReference dcMor = hyperHost.getHyperHostDatacenter();
@@ -1571,7 +1571,7 @@ public class VmwareResource implements StoragePoolResource, ServerResource, Vmwa
vmMo.getRunningHost(), vlanId, null, null, this._ops_timeout, true);
} else {
networkInfo = HypervisorHostHelper.prepareNetwork(this._publicTrafficInfo.getVirtualSwitchName(), "cloud.public",
- vmMo.getRunningHost(), vlanId, null, null, this._ops_timeout, vSwitchType, _portsPerDvPortGroup);
+ vmMo.getRunningHost(), vlanId, null, null, this._ops_timeout, vSwitchType, _portsPerDvPortGroup, null, false);
}
int nicIndex = allocPublicNicIndex(vmMo);
@@ -2304,7 +2304,8 @@ public class VmwareResource implements StoragePoolResource, ServerResource, Vmwa
for (NicTO nicTo : sortNicsByDeviceId(nics)) {
s_logger.info("Prepare NIC device based on NicTO: " + _gson.toJson(nicTo));
- Pair<ManagedObjectReference, String> networkInfo = prepareNetworkFromNicInfo(vmMo.getRunningHost(), nicTo);
+ boolean configureVServiceInNexus = (nicTo.getType() == TrafficType.Guest) && (vmSpec.getDetails().containsKey("ConfigureVServiceInNexus"));
+ Pair<ManagedObjectReference, String> networkInfo = prepareNetworkFromNicInfo(vmMo.getRunningHost(), nicTo, configureVServiceInNexus);
if (VmwareHelper.isDvPortGroup(networkInfo.first())) {
String dvSwitchUuid;
ManagedObjectReference dcMor = hyperHost.getHyperHostDatacenter();
@@ -2504,7 +2505,7 @@ public class VmwareResource implements StoragePoolResource, ServerResource, Vmwa
return defaultVlan;
}
- private Pair<ManagedObjectReference, String> prepareNetworkFromNicInfo(HostMO hostMo, NicTO nicTo) throws Exception {
+ private Pair<ManagedObjectReference, String> prepareNetworkFromNicInfo(HostMO hostMo, NicTO nicTo, boolean configureVServiceInNexus) throws Exception {
Pair<String, String> switchName;
TrafficType trafficType;
VirtualSwitchType switchType;
@@ -2534,7 +2535,7 @@ public class VmwareResource implements StoragePoolResource, ServerResource, Vmwa
}
else {
networkInfo = HypervisorHostHelper.prepareNetwork(switchName.first(), namePrefix, hostMo, getVlanInfo(nicTo, switchName.second()),
- nicTo.getNetworkRateMbps(), nicTo.getNetworkRateMulticastMbps(), _ops_timeout, switchType, _portsPerDvPortGroup);
+ nicTo.getNetworkRateMbps(), nicTo.getNetworkRateMulticastMbps(), _ops_timeout, switchType, _portsPerDvPortGroup, nicTo.getGateway(), configureVServiceInNexus);
}
return networkInfo;
@@ -3024,7 +3025,7 @@ public class VmwareResource implements StoragePoolResource, ServerResource, Vmwa
NicTO[] nics = vm.getNics();
for (NicTO nic : nics) {
// prepare network on the host
- prepareNetworkFromNicInfo(new HostMO(getServiceContext(), _morHyperHost), nic);
+ prepareNetworkFromNicInfo(new HostMO(getServiceContext(), _morHyperHost), nic, false);
}
String secStoreUrl = mgr.getSecondaryStorageStoreUrl(Long.parseLong(_dcId));
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/pom.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/pom.xml b/plugins/network-elements/cisco-vnmc/pom.xml
new file mode 100644
index 0000000..1ac6bd8
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/pom.xml
@@ -0,0 +1,42 @@
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <artifactId>cloud-plugin-network-cisco-vnmc</artifactId>
+ <name>Apache CloudStack Plugin - Cisco VNMC</name>
+ <parent>
+ <groupId>org.apache.cloudstack</groupId>
+ <artifactId>cloudstack-plugins</artifactId>
+ <version>4.2.0-SNAPSHOT</version>
+ <relativePath>../../pom.xml</relativePath>
+ </parent>
+ <dependencies>
+ <dependency>
+ <groupId>org.apache.cloudstack</groupId>
+ <artifactId>cloud-plugin-hypervisor-vmware</artifactId>
+ <version>${project.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.cloudstack</groupId>
+ <artifactId>cloud-vmware-base</artifactId>
+ <version>${project.version}</version>
+ </dependency>
+ </dependencies>
+</project>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/assoc-asa1000v.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/assoc-asa1000v.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/assoc-asa1000v.xml
new file mode 100644
index 0000000..b0249db
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/assoc-asa1000v.xml
@@ -0,0 +1,34 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMo
+ dn=""
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfig>
+ <fwResourceBinding
+ assignedToDn="%fwdn%"
+ dn="%binddn%"
+ status="created"/>
+ </inConfig>
+</configConfMo>
+
+<!--
+ assignedToDn="fw/inst-1007"
+ dn="org-root/org-TenantD/org-VDC-TenantD/efw-ASA-1000v-TenantD/binding"
+-->
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-acl-policy-set.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-acl-policy-set.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-acl-policy-set.xml
new file mode 100755
index 0000000..e3113ae
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-acl-policy-set.xml
@@ -0,0 +1,37 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%espdn%">
+ <policyVirtualNetworkEdgeProfile
+ connTimeoutRef=""
+ descr="%descr%"
+ dn="%espdn%"
+ egressAclPsetRef="%egresspolicysetname%"
+ ingressAclPsetRef="%ingresspolicysetname%"
+ inspectRef=""
+ name="%name%"
+ natPsetRef="%natpolicysetname%"
+ status="modified"
+ vpnRef=""/>
+ </pair>
+ </inConfigs>
+</configConfMos>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-policy.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-policy.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-policy.xml
new file mode 100644
index 0000000..e866f51
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-policy.xml
@@ -0,0 +1,34 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%dhcpdn%">
+ <policyDhcpPolicyAssoc
+ dn="%dhcpdn%"
+ interfaceName="%insideintf%"
+ policyRef=""
+ status="created"
+ type="server"/>
+ </pair>
+ </inConfigs>
+</configConfMos>
+
+<!--dn="org-root/org-TestTenant3/org-Tenant3-VDC/edsp-Tenant3-Edge-Device-Profile/dhcp-Edge_Inside"-->
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-server.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-server.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-server.xml
new file mode 100644
index 0000000..930e4ec
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-dhcp-server.xml
@@ -0,0 +1,32 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%dhcpdn%">
+ <policyDhcpPolicyAssoc
+ dn="%dhcpdn%"
+ interfaceName="%insideintf%"
+ policyRef="%dhcpserverpolicyname%"
+ status="modified"
+ type="server"/>
+ </pair>
+ </inConfigs>
+</configConfMos>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-nat-policy-set.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-nat-policy-set.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-nat-policy-set.xml
new file mode 100644
index 0000000..6d67c31
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-nat-policy-set.xml
@@ -0,0 +1,35 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%espdn%">
+ <policyVirtualNetworkEdgeProfile
+ connTimeoutRef=""
+ descr="%descr%"
+ dn="%espdn%"
+ inspectRef=""
+ name="%name%"
+ natPsetRef="%natpolicysetname%"
+ status="modified"
+ vpnRef=""/>
+ </pair>
+ </inConfigs>
+</configConfMos>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-route-policy.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-route-policy.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-route-policy.xml
new file mode 100644
index 0000000..8884a1b
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/associate-route-policy.xml
@@ -0,0 +1,33 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMo
+ dn=""
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfig>
+ <policyEdgeDeviceServiceProfile
+ addrTranslationTimeout="10800"
+ dn="%dn%"
+ ipAudit=""
+ name="%name%"
+ routing="%routepolicyname%"
+ status="modified"
+ vpn=""/>
+ </inConfig>
+</configConfMo>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-ref.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-ref.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-ref.xml
new file mode 100755
index 0000000..c534c32
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-ref.xml
@@ -0,0 +1,38 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+
+ <inConfigs>
+ <pair key="%aclpolicyrefdn%">
+ <policyPolicyNameRef
+ dn="%aclpolicyrefdn%"
+ order="%order%"
+ policyName="%aclpolicyname%"
+ status="created"/>
+ </pair>
+
+ </inConfigs>
+</configConfMos>
+
+<!--
+ aclpolicyrefdn="org-root/org-vlan-123/org-VDC-vlan-123/pset-Ingress-ACL-Policy-Set-vlan-123/polref-aaa"
+ aclpolicyname="aaa"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-set.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-set.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-set.xml
new file mode 100755
index 0000000..b475d2c
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy-set.xml
@@ -0,0 +1,36 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%aclpolicysetdn%">
+ <policyPolicySet
+ descr="%descr%"
+ dn="%aclpolicysetdn%"
+ name="%aclpolicysetname%"
+ status="created"/>
+ </pair>
+ </inConfigs>
+</configConfMos>
+
+<!--
+ aclpolicysetdn="org-root/org-vlan-123/org-VDC-vlan-123/pset-foo"
+ aclpolicysetname="foo"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy.xml
new file mode 100755
index 0000000..e71cd42
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-policy.xml
@@ -0,0 +1,35 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMo
+ dn=""
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfig>
+ <policyRuleBasedPolicy
+ descr=""
+ dn="%aclpolicydn%"
+ name="%aclpolicyname%"
+ status="created"/>
+ </inConfig>
+</configConfMo>
+
+<!--
+ aclpolicydn="org-root/org-vlan-123/org-VDC-vlan-123/pol-test_policy"
+ aclpolicyname="test_policy"
+--!>
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-dnat.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-dnat.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-dnat.xml
new file mode 100755
index 0000000..5b6aaa3
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-dnat.xml
@@ -0,0 +1,82 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+
+ <pair key="%aclruledn%">
+ <policyRule
+ descr="%descr%"
+ dn="%aclruledn%"
+ name="%aclrulename%"
+ order="%order%"
+ status="created"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-action-0">
+ <fwpolicyAction
+ actionType="%actiontype%"
+ dn="%aclruledn%/rule-action-0"
+ id="0"
+ status="created"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-2">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-2"
+ id="2"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-2/nw-expr2"
+ id="2"
+ opr="eq"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="destination"
+ dn="%aclruledn%/rule-cond-2/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2/nw-ip-2">
+ <policyIPAddress
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-2/nw-expr2/nw-ip-2"
+ id="2"
+ name=""
+ placement="none"
+ status="created"
+ value="%ip%"/>
+ </pair>
+
+ </inConfigs>
+</configConfMos>
+
+<!--
+ aclruledn="org-root/org-vlan-123/org-VDC-vlan-123/pol-test_policy/rule-dummy"
+ aclrulename="dummy"
+ descr=value
+ actiontype="drop" or "permit"
+ ip="public ip at destination"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-pf.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-pf.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-pf.xml
new file mode 100755
index 0000000..1a1d9cb
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-acl-rule-for-pf.xml
@@ -0,0 +1,156 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+
+ <pair key="%aclruledn%">
+ <policyRule
+ descr="%descr%"
+ dn="%aclruledn%"
+ name="%aclrulename%"
+ order="%order%"
+ status="created"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-action-0">
+ <fwpolicyAction
+ actionType="%actiontype%"
+ dn="%aclruledn%/rule-action-0"
+ id="0"
+ status="created"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-2">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-2"
+ id="2"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-2/nw-expr2"
+ id="2"
+ opr="eq"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2/nw-protocol-2">
+ <policyProtocol
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-2/nw-expr2/nw-protocol-2"
+ id="2"
+ name=""
+ placement="none"
+ status="created"
+ value="%protocolvalue%"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-3">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-3"
+ id="3"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-3/nw-expr2"
+ id="2"
+ opr="eq"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="destination"
+ dn="%aclruledn%/rule-cond-3/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2/nw-ip-2">
+ <policyIPAddress
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-3/nw-expr2/nw-ip-2"
+ id="2"
+ name=""
+ placement="begin"
+ status="created"
+ value="%ip%"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-4">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-4"
+ id="4"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-4/nw-expr2"
+ id="2"
+ opr="range"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="destination"
+ dn="%aclruledn%/rule-cond-4/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2/nw-port-2">
+ <policyNetworkPort
+ appType="Other"
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-4/nw-expr2/nw-port-2"
+ id="2"
+ name=""
+ placement="begin"
+ status="created"
+ value="%startport%"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2/nw-port-3">
+ <policyNetworkPort
+ appType="Other"
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-4/nw-expr2/nw-port-3"
+ id="3"
+ name=""
+ placement="end"
+ status="created"
+ value="%endport%"/>
+ </pair>
+
+ </inConfigs>
+</configConfMos>
+
+<!--
+ aclruledn="org-root/org-vlan-123/org-VDC-vlan-123/pol-test_policy/rule-dummy"
+ aclrulename="dummy"
+ descr=value
+ actiontype="drop" or "permit"
+ protocolvalue="TCP" or "UDP"
+ ip="public ip at destination"
+ startport="start port at destination"
+ endport="end port at destination"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dhcp-policy.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dhcp-policy.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dhcp-policy.xml
new file mode 100644
index 0000000..5bb4abc
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dhcp-policy.xml
@@ -0,0 +1,72 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+
+ <pair key="%dhcpserverdn%">
+ <policyDhcpServerPolicy
+ descr="%dhcpserverdescr%"
+ dn="%dhcpserverdn%"
+ dnsDomainRef=""
+ leaseTime="1036799"
+ name="%dhcpservername%"
+ pingTimeout="50"
+ status="created"/>
+ </pair>
+
+ <pair key="%iprangedn%">
+ <policyIPAddressRange
+ dn="%iprangedn%"
+ endip="%endip%"
+ name="iprange"
+ startip="%startip%"
+ status="created"
+ subnet="%subnet%"/>
+ </pair>
+
+ <pair key="%dnsservicedn%">
+ <commDns
+ descr=""
+ dn="%dnsservicedn%"
+ domain="%domain%"
+ name="%dnsservicename%"
+ status="created"/>
+ </pair>
+
+ <pair key="%nameserverdn%">
+ <commDnsProvider
+ descr=""
+ dn="%nameserverdn%"
+ hostip="%nameserverip%"
+ order="100"
+ status="created"/>
+ </pair>
+
+ </inConfigs>
+</configConfMos>
+
+<!--
+ "org-root/org-TestTenant3/org-Tenant3-VDC/dhcp-server-Tenant3-DHCP-Policy"
+ "org-root/org-TestTenant3/org-Tenant3-VDC/dhcp-server-Tenant3-DHCP-Policy/ip-range-iprange"
+ "org-root/org-TenantC/org-VDC-TenantC/dhcp-server-TenantC-Dhcp-Policy/ip-range-iprange"
+ "org-root/org-TestTenant3/org-Tenant3-VDC/dhcp-server-Tenant3-DHCP-Policy/dns-svc-Tenant3-DNS"
+ "org-root/org-TestTenant3/org-Tenant3-VDC/dhcp-server-Tenant3-DHCP-Policy/dns-svc-Tenant3-DNS/dns-8.8.8.8"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dnat-rule.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dnat-rule.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dnat-rule.xml
new file mode 100755
index 0000000..bd8dbff
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-dnat-rule.xml
@@ -0,0 +1,91 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+
+ <pair key="%natruledn%">
+ <policyRule
+ descr="%descr%"
+ dn="%natruledn%"
+ name="%natrulename%"
+ order="%order%"
+ status="created"/>
+ </pair>
+
+ <pair key="%natruledn%/nat-action">
+ <natpolicyNatAction
+ actionType="static"
+ destTranslatedIpPool="%ippoolname%"
+ destTranslatedPortPool=""
+ dn="%natruledn%/nat-action"
+ id="0"
+ isBidirectionalEnabled="yes"
+ isDnsEnabled="no"
+ isNoProxyArpEnabled="no"
+ isRoundRobinIpEnabled="no"
+ srcTranslatedIpPatPool=""
+ srcTranslatedIpPool=""
+ srcTranslatedPortPool=""
+ status="created"/>
+ </pair>
+
+ <pair key="%natruledn%/rule-cond-2">
+ <policyRuleCondition
+ dn="%natruledn%/rule-cond-2"
+ id="2"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%natruledn%/rule-cond-2/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="destination"
+ dn="%natruledn%/rule-cond-2/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%natruledn%/rule-cond-2/nw-expr2">
+ <policyNetworkExpression
+ dn="%natruledn%/rule-cond-2/nw-expr2"
+ id="2"
+ opr="eq"
+ status="created"/>
+ </pair>
+ <pair key="%natruledn%/rule-cond-2/nw-expr2/nw-ip-2">
+ <policyIPAddress
+ dataType="string"
+ descr=""
+ dn="%natruledn%/rule-cond-2/nw-expr2/nw-ip-2"
+ id="2"
+ name=""
+ placement="none"
+ status="created"
+ value="%ip%"/>
+ </pair>
+
+ </inConfigs>
+</configConfMos>
+
+<!--
+ natruledn="org-root/org-vlan-123/org-VDC-vlan-123/natpol-aaa/rule-bbb"
+ natrulename="bbb"
+ descr=value
+ ippoolname="ccc"
+ ip="10.147.30.230"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-profile.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-profile.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-profile.xml
new file mode 100644
index 0000000..c4bdd02
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-profile.xml
@@ -0,0 +1,32 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMo
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfig>
+ <policyEdgeDeviceServiceProfile
+ addrTranslationTimeout="10800"
+ descr="%descr%"
+ dn="%dn%"
+ name="%name%"
+ status="created"
+ vpn=""/>
+ </inConfig>
+</configConfMo>
+<!-- dn="org-root/org-TestTenant3/org-Tenant3-VDC/edsp-Tenant3-Edge-Device-Profile" -->
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route-policy.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route-policy.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route-policy.xml
new file mode 100644
index 0000000..69f4a5f
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route-policy.xml
@@ -0,0 +1,30 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMo
+ dn=""
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfig>
+ <routeRoutingPolicy
+ descr="%descr%"
+ dn="%routepolicydn%"
+ name="%name%"
+ status="created"/>
+ </inConfig>
+</configConfMo>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route.xml
new file mode 100644
index 0000000..126c188
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-device-route.xml
@@ -0,0 +1,35 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%routepolicydn%/sroute-2">
+ <routeStaticRoute
+ dn="%routepolicydn%/sroute-2"
+ id="2"
+ ipAddress="%destination%"
+ ipSubnet="%netmask%"
+ nextHopGWIp="%nexthop%"
+ nextHopIntf="%nexthopintf%"
+ routeMetric="1"
+ status="created"/>
+ </pair>
+ </inConfigs>
+</configConfMos>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-firewall.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-firewall.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-firewall.xml
new file mode 100644
index 0000000..e5447e3
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-firewall.xml
@@ -0,0 +1,89 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+ <pair key="%edgefwdn%" >
+ <fwEdgeFirewall
+ haMode="standalone"
+ descr="%edgefwdescr%"
+ dn="%edgefwdn%"
+ name="%edgefwname%"
+ status="created"/>
+ </pair>
+
+ <pair key="%insideintfdn%">
+ <fwDataInterface
+ descr="ASA Inside Interface"
+ dn="%insideintfdn%"
+ ipAddressPrimary="%insideip%"
+ ipAddressSecondary="0.0.0.0"
+ ipSubnet="%insidesubnet%"
+ isIpViaDHCP="no"
+ name="%insideintfname%"
+ role="inside"
+ status="created"/>
+ </pair>
+
+ <pair key="%outsideintfdn%">
+ <fwDataInterface
+ descr="ASA Outside interface "
+ dn="%outsideintfdn%"
+ ipAddressPrimary="%publicip%"
+ ipAddressSecondary="0.0.0.0"
+ ipSubnet="%outsidesubnet%"
+ isIpViaDHCP="no"
+ name="%outsideintfname%"
+ role="outside"
+ status="created"/>
+ </pair>
+
+ <pair key="%outsideintfsp%" >
+ <logicalInterfaceServiceProfileAssociation
+ descr=""
+ dn="%outsideintfsp%"
+ name=""
+ profileRef="%secprofileref%"
+ status="created"/>
+ </pair>
+
+ <pair key="%deviceserviceprofiledn%" >
+ <logicalDeviceServiceProfileAssociation
+ descr=""
+ dn="%deviceserviceprofiledn%"
+ name=""
+ profileRef="%deviceserviceprofile%"
+ status="created"/>
+ </pair>
+ </inConfigs>
+</configConfMos>
+
+<!--
+ edgefwdn="org-root/org-TenantD/org-VDC-TenantD/efw-ASA-1000v-TenantD"
+ insideintfdn="org-root/org-TenantD/org-VDC-TenantD/efw-ASA-1000v-TenantD/interface-Edge_Inside"
+ descr="%edgefwdescr%"
+ ipAddressPrimary="%insideip%"
+ ipSubnet="%insidesubnet%"
+ name="%insideintfname%"
+ outsideintfdn="%outsideintfdn%"
+ ipAddressPrimary="%publicip%"
+ ipSubnet="%outsidesubnet%"
+ name="%outsideintfname%
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-security-profile.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-security-profile.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-security-profile.xml
new file mode 100644
index 0000000..e2f5eaf
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-edge-security-profile.xml
@@ -0,0 +1,41 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMo
+ dn=""
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfig>
+ <policyVirtualNetworkEdgeProfile
+ descr="%descr%"
+ dn="%espdn%"
+ egressAclPsetRef="%egressref%"
+ ingressAclPsetRef="%ingressref%"
+ name="%name%"
+ status="created"
+ vpnRef=""/>
+ </inConfig>
+</configConfMo>
+
+<!--
+ descr="Edge Security Profile for Tenant3"
+ dn="org-root/org-TestTenant3/org-Tenant3-VDC/vnep-Tenant3-ESSP"
+ egressAclPsetRef="default-egress"
+ ingressAclPsetRef="default-ingress"
+ name="Tenant3-ESSP"
+--!>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e94c7025/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-egress-acl-rule.xml
----------------------------------------------------------------------
diff --git a/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-egress-acl-rule.xml b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-egress-acl-rule.xml
new file mode 100755
index 0000000..930272e
--- /dev/null
+++ b/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-egress-acl-rule.xml
@@ -0,0 +1,201 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configConfMos
+ cookie="%cookie%"
+ inHierarchical="false">
+ <inConfigs>
+
+ <pair key="%aclruledn%">
+ <policyRule
+ descr="%descr%"
+ dn="%aclruledn%"
+ name="%aclrulename%"
+ order="%order%"
+ status="created"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-action-0">
+ <fwpolicyAction
+ actionType="%actiontype%"
+ dn="%aclruledn%/rule-action-0"
+ id="0"
+ status="created"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-2">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-2"
+ id="2"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-2/nw-expr2"
+ id="2"
+ opr="eq"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-2/nw-expr2/nw-protocol-2">
+ <policyProtocol
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-2/nw-expr2/nw-protocol-2"
+ id="2"
+ name=""
+ placement="none"
+ status="created"
+ value="%protocolvalue%"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-3">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-3"
+ id="3"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-3/nw-expr2"
+ id="2"
+ opr="range"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="destination"
+ dn="%aclruledn%/rule-cond-3/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2/nw-ip-2">
+ <policyIPAddress
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-3/nw-expr2/nw-ip-2"
+ id="2"
+ name=""
+ placement="begin"
+ status="created"
+ value="%deststartip%"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-3/nw-expr2/nw-ip-3">
+ <policyIPAddress
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-3/nw-expr2/nw-ip-3"
+ id="3"
+ name=""
+ placement="end"
+ status="created"
+ value="%destendip%"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-4">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-4"
+ id="4"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-4/nw-expr2"
+ id="2"
+ opr="eq"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="source"
+ dn="%aclruledn%/rule-cond-4/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-4/nw-expr2/nw-ip-2">
+ <policyIPAddress
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-4/nw-expr2/nw-ip-2"
+ id="2"
+ name=""
+ placement="none"
+ status="created"
+ value="%sourceip%"/>
+ </pair>
+
+ <pair key="%aclruledn%/rule-cond-5">
+ <policyRuleCondition
+ dn="%aclruledn%/rule-cond-5"
+ id="5"
+ order="unspecified"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-5/nw-expr2">
+ <policyNetworkExpression
+ dn="%aclruledn%/rule-cond-5/nw-expr2"
+ id="2"
+ opr="range"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-5/nw-expr2/nw-attr-qual">
+ <policyNwAttrQualifier
+ attrEp="source"
+ dn="%aclruledn%/rule-cond-5/nw-expr2/nw-attr-qual"
+ status="created"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-5/nw-expr2/nw-port-2">
+ <policyNetworkPort
+ appType="Other"
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-5/nw-expr2/nw-port-2"
+ id="2"
+ name=""
+ placement="begin"
+ status="created"
+ value="%sourcestartport%"/>
+ </pair>
+ <pair key="%aclruledn%/rule-cond-5/nw-expr2/nw-port-3">
+ <policyNetworkPort
+ appType="Other"
+ dataType="string"
+ descr=""
+ dn="%aclruledn%/rule-cond-5/nw-expr2/nw-port-3"
+ id="3"
+ name=""
+ placement="end"
+ status="created"
+ value="%sourceendport%"/>
+ </pair>
+
+ </inConfigs>
+</configConfMos>
+
+<!--
+ aclruledn="org-root/org-vlan-123/org-VDC-vlan-123/pol-test_policy/rule-dummy"
+ aclrulename="dummy"
+ descr=value
+ actiontype="drop" or "permit"
+ protocolvalue = "TCP" or "UDP"
+ deststartip="destination start ip"
+ destendip="destination end ip"
+ sourcestartport="start port at source"
+ sourceendport="end port at source"
+ sourceip="source ip"
+--!>