Focus

Prisma SD-WAN ION CLI Reference

dump network-policy config policy-rules

Table of Contents

dump network-policy config policy-rules

Use the dump network-policy config policy-rules command to display the path policy rule configuration for a device.

Information displayed includes the application name, policy rule, policy set, order number, network context, prefixes, service groups, and paths.

Command

dump network-policy config policy-rules ( all | application=
				application name or ID| app-wildcard | [enabled=true |enabled=false] | network-context=networkcontext ID | path-type= [path-type=direct | path-type=vpn] | path-label= path label or ID| policy-rule=
				policy-rule name | | policy-set=
				policy-set name | prefix=
				name of the prefix | service-context= Group ID)

Options

all	Enter all to display configuration of all path policy rules on the device.
application	Enter an application name or ID to display policy rules for the application.
app-wildcard	Choose this option to display policy rules which are not configured for any application.
enabled	Choose true or false to display policy rules which are either enabled or disabled.
network-context	Enter a network context ID to display policy rules for the network context.
path-type	Enter a path type to display information for the path. Path type is either direct or VPN.
path-label	Enter a path label or path ID to display policy rules for the path.
policy-rule	Enter a policy rule name or ID to display information for the policy rule.
policy-set	Enter a policy set name or ID to display policy rules in the policy set.
prefix	Enter a prefix name or ID to display policy rules for the prefix.
service-context	Enter a service group ID to display policy rules for the service group.

Command Notes

Role	Super, Read Only, Monitor
Related Commands	dump network-policy config policy-sets
Introduced in	Release 5.0.1

Example

dump network-policy config policy-rules all
Network Policy Rule 	: 1665722128500017628   : enterprise-default
  Policy Set        	: 1665722128442016828   : Default Path Simple Stack Default Rule Policy Set (Simple)
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: any
  UserGroups        	: any
  Destination Prefix	: 1665722013410012528   : EnterpriseGlobalPrefix
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : vpn
    Path Label  : private-*
    Path Type   : vpn
  Backup Paths:
    Path Label  : private-*
    Path Type   : direct
  L3 Failure Paths: none
  Service Contexts: none
 
Network Policy Rule 	: 1674657402598017628   : Test Specific User
  Policy Set        	: 1666172238228021828   : User ID Test
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: none     
  UserGroups:
   1675699201696006228  : CN=engineering,DC=sdwanamsteltest,DC=onmicrosoft,DC=com
   1675699201696005528  : CN=devops,DC=sdwanamsteltest,DC=onmicrosoft,DC=com
  Destination Prefix	: none
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : direct
    Path Label  : private-*
    Path Type   : direct
    Path Label  : public-*
    Path Type   : vpn
    Path Label  : private-*
    Path Type   : vpn
  Backup Paths: none
  L3 Failure Paths: none
  Service Contexts: none
 
Network Policy Rule 	: 1675854982005007228   : test2
  Policy Set        	: 1666172238228021828   : User ID Test
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: any
  UserGroups        	: any
  Destination Prefix	: none
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : direct
  Backup Paths: none
  L3 Failure Paths: none
  Service Contexts: none
 
Network Policy Rule 	: 1665722128450017028   : default
  Policy Set        	: 1665722128442016828   : Default Path Simple Stack Default Rule Policy Set (Simple)
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: any
  UserGroups        	: any
  Destination Prefix	: none
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : direct
    Path Label  : public-*
    Path Type   : vpn
    Path Label  : private-*
    Path Type   : direct
    Path Label  : private-*
    Path Type   : vpn
  Backup Paths: none
  L3 Failure Paths: none
  Service Contexts: none

dump nat summary

dump network-policy config policy-sets