Cisco Cisco Prime Network Services Controller 3.2 Developer's Guide
Page 96
OL-30968-01
VPN
Peer Authentication Policy
The following example creates a VPN peer authentication policy with the name auth-policy-01 and adds peer
configurations to it.
configurations to it.
Request
POST URL: https://10.193.33.221/xmlIM/policy-mgr
XML API payload:
<configConfMos
cookie=“<real_cookie>“
inHierarchical="false">
inHierarchical="false">
<inConfigs>
<pair key="org-root/peer-auth-pol-auth-policy-01">
<vpnpolicyPeerAuthPolicy
descr=""
dn="org-root/peer-auth-pol-auth-policy-01"
intId="none"
name="auth-policy-01"
status="created"/>
dn="org-root/peer-auth-pol-auth-policy-01"
intId="none"
name="auth-policy-01"
status="created"/>
</pair>
<pair key="org-root/peer-auth-pol-auth-policy-01/peer-auth-peer1">
<pair key="org-root/peer-auth-pol-auth-policy-01/peer-auth-peer1">
<vpnpolicyPeerAuth
dn="org-root/peer-auth-pol-auth-policy-01/peer-auth-peer1"
isKeySet="no"
isV2LocalKeySet="no"
isV2RemoteKeySet="no"
peer="peer1"
status="created"/>
isKeySet="no"
isV2LocalKeySet="no"
isV2RemoteKeySet="no"
peer="peer1"
status="created"/>
</pair>
</inConfigs>
</configConfMos>
Response
<configConfMos
cookie=“<real_cookie>“
commCookie="7/12/0/12e"
srcExtSys="10.193.33.221"
destExtSys="10.193.33.221"
srcSvc="sam_extXMLApi"
destSvc="policy-mgr_dme"
response="yes">
commCookie="7/12/0/12e"
srcExtSys="10.193.33.221"
destExtSys="10.193.33.221"
srcSvc="sam_extXMLApi"
destSvc="policy-mgr_dme"
response="yes">
<outConfigs>
<pair key="org-root/peer-auth-pol-auth-policy-01">
<vpnpolicyPeerAuthPolicy
descr=""
dn="org-root/peer-auth-pol-auth-policy-01"
intId="10540"
name="auth-policy-01"
status="created"/>
dn="org-root/peer-auth-pol-auth-policy-01"
intId="10540"
name="auth-policy-01"
status="created"/>
</pair>
<pair key="org-root/peer-auth-pol-auth-policy-01/peer-auth-peer1">
<pair key="org-root/peer-auth-pol-auth-policy-01/peer-auth-peer1">
<vpnpolicyPeerAuth
dn="org-root/peer-auth-pol-auth-policy-01/peer-auth-peer1"
isKeySet="no"
isV2LocalKeySet="no"
isV2RemoteKeySet="no"
peer="peer1"
status="created"/>
isKeySet="no"
isV2LocalKeySet="no"
isV2RemoteKeySet="no"
peer="peer1"
status="created"/>