• 产品与解决方案
  • 行业解决方案
  • 服务
  • 支持
  • 合作伙伴
  • 关于我们

H3C Super Controller 操作日志信息参考-E64xx-5W400

手册下载

H3C Super Controller 操作日志信息参考-E64xx-5W400-整本手册.pdf  (878.11 KB)

  • 发布时间:2022/12/21 21:05:43
  • 浏览量:
  • 下载量:

H3C Super Controller

操作日志信息参考

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

资料版本:5W400-20221213

 

Copyright © 2022 新华三技术有限公司 版权所有,保留一切权利。

非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。

除新华三技术有限公司的商标外,本手册中出现的其它公司的商标、产品标识及商品名称,由各自权利人拥有。

本文档中的信息可能变动,恕不另行通知。


 

1 简介··· 1

1.1 查看操作日志·· 1

1.2 Syslog日志格式说明·· 1

1.3 文档使用说明·· 3

2 COS· 4

2.1 Add service· 5

2.2 Update service· 7

2.3 Delete service· 8

2.4 Upload package· 9

2.5 Delete package· 10

2.6 Upgrade service· 11

2.7 Update parameter settings· 12

2.8 Add SNMPv3 server 13

2.9 Update SNMPv3 server 15

2.10 Delete SNMPv3 server 16

2.11 Edit alarm severity mapping· 16

3 DATA_CONSISTENCY· 17

3.1 Audit data for a site· 17

3.2 Sync data for a site· 17

4 ICTOM·· 18

4.1 Import DC resource· 18

5 NSO_AUDIT· 19

5.1 Add network· 19

5.2 Update network· 20

5.3 Delete network· 21

5.4 Add router 22

5.5 Update router 23

5.6 Delete router 24

5.7 Add logical link· 25

5.8 Delete logical link· 26

5.9 Bound subnet to vRouter 27

5.10 Unbound subnet to vRouter 28

5.11 Add site· 29

5.12 Update site· 30

5.13 Delete site· 31

5.14 Add subnet 32

5.15 Update subnet 34

5.16 Delete subnet 35

5.17 Synchronized settings from sites· 36

5.18 Add tenant 37

5.19 Update tenant 38

5.20 Delete tenant 39

5.21 Add VNI 40

5.22 Update VNI 41

5.23 Delete VNI 41

5.24 Updated resource pool limit settings· 42

6 NSO_PROVISION·· 43

6.1 Add transit fabric· 44

6.2 Update transit fabric· 45

6.3 Delete transit fabric· 46

6.4 Add transit router 47

6.5 Update transit router 49

6.6 Delete transit router 50

6.7 Add VPC connection· 51

6.8 Update VPC connection· 54

6.9 Delete VPC connection· 55

6.10 Deploy transit fabric· 56

6.11 Add EBGP connection· 57

6.12 Delete EBGP connection· 59

6.13 Add border gateway access service· 60

6.14 Update border gateway access service· 62

6.15 Delete border gateway access service· 63

6.16 Add route entry· 64

6.17 Update route entry· 65

6.18 Delete route entry· 65

6.19 Add vPort 66

6.20 Update vPort 68

6.21 Delete vPort 69

6.22 Add floating IP· 70

6.23 Update floating IP· 72

6.24 Delete floating IP· 73

6.25 Add transit network· 74

6.26 Update transit network· 75

6.27 Delete transit network· 76

6.28 Add tenant network· 77

6.29 Update tenant network· 78

6.30 Delete tenant network· 79

6.31 Add transit router connection· 80

6.32 Update transit router connection· 83

6.33 Delete transit router connection· 84

6.34 Add IPsec profile· 85

6.35 Update IPsec profile· 89

6.36 Delete IPsec profile· 90

6.37 Add VPC VPN· 91

6.38 Update VPC VPN· 93

6.39 Delete VPC VPN· 93

6.40 Add public VIF· 94

6.41 Update public VIF· 96

6.42 Delete public VIF· 97

6.43 Add border port 98

6.44 Update border port 99

6.45 Delete border port 99

7 NSO_WAN·· 100

7.1 Add WAN controller 100

7.2 Update WAN controller 101

7.3 Delete WAN controller 102

7.4 Add WAN link· 103

7.5 Update WAN link· 104

7.6 Delete WAN link· 104

7.7 Add flow group· 105

7.8 Delete flow group· 105

7.9 Add east-west traffic application· 106

7.10 Update east-west traffic application· 108

7.11 Delete east-west traffic application· 109

8 PUBLIC_CLOUD·· 110

8.1 Add proxy· 110

8.2 Update proxy· 111

8.3 Delete proxy· 111

8.4 Add account 112

8.5 Update account 113

8.6 Delete account 114

8.7 Check account 115

8.8 Add VPC· 116

8.9 Update VPC· 118

8.10 Delete VPC· 119

8.11 Add VPC CIDR· 120

8.12 Delete VPC CIDR· 121

8.13 Add egress gateway· 122

8.14 Update egress gateway· 123

8.15 Delete egress gateway· 124

8.16 Add vRouter 125

8.17 Update vRouter 126

8.18 Delete vRouter 127

8.19 Add route entry· 128

8.20 Delete route entry· 129

8.21 Add subnet 130

8.22 Update subnet 132

8.23 Delete subnet 133

8.24 Add network ACL· 134

8.25 Update network ACL· 135

8.26 Delete network ACL· 136

8.27 Add ACL rule· 137

8.28 Delete ACL rule· 138

8.29 Add security group· 139

8.30 Delete security group· 139

8.31 Add security group rule· 140

8.32 Delete security group rule· 141

8.33 Add endpoint 142

8.34 Update endpoint 143

8.35 Delete endpoint 144

8.36 Sync public cloud resources· 144

8.37 Add transit gateway· 145

8.38 Update transit gateway· 146

8.39 Delete transit gateway· 147

8.40 Add transit router 148

8.41 Update transit router 149

8.42 Delete transit router 150

8.43 Add transit route entry· 151

8.44 Delete transit route entry· 152

8.45 Add transit gateway peering· 153

8.46 Update transit gateway peering· 154

8.47 Delete transit gateway peering· 155

8.48 Add vRouter access· 156

8.49 Update vRouter access· 158

8.50 Delete vRouter access· 159

8.51 Add direct connect gateway· 160

8.52 Update direct connect gateway· 161

8.53 Delete direct connect gateway· 162

8.54 Add direct connect gateway association· 163

8.55 Update direct connect gateway association· 164

8.56 Delete direct connect gateway association· 165

8.57 Add virtual interface· 166

8.58 Update virtual interface· 168

8.59 Delete virtual Interface· 169

8.60 Updated license usage info for public cloud service· 169

8.61 Add VPN connection· 170

8.62 Update VPN connection· 173

8.63 Delete VPN connection· 174

8.64 Add customer gateway· 175

8.65 Delete customer gateway· 176

8.66 Add route propagation· 177

8.67 Delete route propagation· 178


1 简介

操作日志记录的是用户进行的系统操作、配置更改等事件,例如应用操作(加载、启动、停止和卸载应用)、集群配置等。操作日志信息包含日志的操作描述、操作结果和失败原因等,为用户进行系统诊断和维护提供参考。

本文假设您已具备数据通信技术知识,并熟悉Super Controller产品。

1.1  查看操作日志

单击[系统/日志管理/操作日志列表]菜单项,进入操作日志视图。操作日志列表将分页显示系统生成的用户操作日志信息,如1-1所示。

图1-1 操作日志信息列表

 

表1-1 日志字段说明

字段

描述

日期/时间

生成操作日志信息的日期和时间

用户名称

触发生成操作日志的用户名称

用户IP

执行操作时,用户所在终端的IP地址

服务名称

生成操作日志的微服务名称

操作结果

用户操作的结果:成功或失败

操作描述

操作日志具体内容,描述用户进行的操作事件

失败原因

当用户操作失败时,将显示可能的具体失败原因

 

1.2  Syslog日志格式说明

Super Controller支持将操作日志通过Syslog协议发送至Syslog日志服务器。Syslog日志服务器的IP地址和端口号可以通过[系统/日志配置]页面中的操作日志页面进行设置。

缺省情况下,Super ControllerSyslog协议发送的操作日志信息格式如下:

<PRI>TIMESTAMP Hostname Service/severity/Keywords CONTENT

表1-2 Syslog日志字段说明

字段

描述

<PRI>

优先级标识符,优先级的计算公式为:facility×8severity

·     facility表示Syslog定义的程序模块,目前Super Controller发送Syslog日志的facility一般为user-level,取值为1

·     severity表示Syslog协议定义的日志严重等级,具体说明请参见1-4

TIMESTAMP

时间戳记录了日志信息产生的时间,方便用户查看和定位操作事件

Hostname

生成该日志信息的容器的名称

Service

生成该操作日志信息的微服务的名称

severity

Super Controller定义的操作日志信息的等级,具体说明请参见1-5,使用了Syslog协议定义的2个日志严重等级

Keywords

关键字,本字段为该日志信息的概述,用于搜索或助记

CONTENT

该日志的具体内容,格式如下:

User=用户名 IP=用户操作地址 Description=操作描述 Result=操作结果 Cause=失败原因

 

1-3列出了可能生成操作日志信息的业务模块。

表1-3 业务模块列表

业务模块名称

说明

COS

北向服务定制微服务模块

DATA_CONSISTENCY

数据一致性模块

ICTOM

ICTOM微服务模块

NSO_AUDI

NSO微服务模块

NSO_PROVISION

NSO模块Super Controller支持多DC互联

NSO_WAN

NSO模块Super Controller支持云网协同

PUBLIC_CLOUD

对接公有云管理和编排模块

 

Syslog协议定义的日志严重等级如1-4所示,各等级的严重性依照数值从07依次降低。

表1-4 Syslog日志严重等级说明

级别

严重等级

描述

0

Emergency

表示致命信息,可能导致系统不可用

1

Alert

表示必须立即修复的状态

2

Critical

表示严重信息

3

Error

表示错误信息

4

Warning

表示警告信息

5

Notice

表示正常出现但是重要的信息

6

Informational

表示需要记录的通知信息

7

Debug

表示调试过程产生的信息

 

Super Controller使用了Syslog协议定义的2个日志严重等级,如1-5所示。

表1-5 Super Controller操作日志等级说明

级别

严重等级

描述

6

Informational

操作成功时,操作日志信息的级别为Informational,表示该日志为需要记录的通知信息

4

Warning

操作失败时,操作日志信息的级别为Warning,表示该日志为警告信息

 

1.3  文档使用说明

本文将操作日志信息按照业务模块分类,以表格的形式对日志信息进行介绍。有关表中各项的含义请参考1-6

表1-6 日志信息表内容说明

表项

说明

举例

关键字

日志信息的概述,用于搜索或助记

ADD_AUTH_FREEIP_OP

日志内容

显示日志信息的具体内容

Added an authentication-free IP: $1.

参数解释

按照参数在日志中出现的顺序对参数进行解释

参数顺序用“$数字”表示,例如“$1”表示在该日志中出现的第一个参数

$1:免认证用户

举例

日志信息举例

Added an authentication-free IP: 192.168.56.13.

日志说明

描述日志所表达的操作事件

用户进行了增加免认证用户的操作

失败原因

列举操作失败时可能的原因

当操作失败时,可能的原因如下:

·     Invalid IP address:无效的IP地址

·     The IP address already exists该免认证IP已存在

·     Unable to read/write database:读/写数据库失败

·     Invalid role:无效的角色

·     Invalid domain:无效的域

·     Invalid description:无效的描述信息

 


2 COS

本节介绍COS微服务的操作日志信息。

2.1  Add service

关键字

ADD_COS_SERVICE_OP

日志内容

Added service: $1

参数解释

$1:北向服务请求体实体

举例

Added service:{

"service":{

"serviceName":"dddddddddddddddddsgfdgh",

"description":"",

"packageId":"a473fba9-3c88-48e9-b5d5-7fcf5fe4bce1",

"custom.json":"{\n    \"resourcePool\": \"XXG\"\n}"

}

}

日志说明

用户进行了添加北向服务的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid UUID:无效的UUID

·     The request body cannot be empty:请求体不能为空

·     The description can contain up to 512 characters:描述最长为512个字符

·     The custom.json cannot be emptycustom.json不能为空

·     The name can contain up to 64 characters:名称最长64个字符

·     Please specify a packageIdpackageId不能为空

·     Please specify a name:名称不能为空

·     The custom.json contains invalid contentscustom.json内容无效

·     The specified custom package file does not exist:指定的定制包不存在

·     The custom package file is in use:指定的定制包正在使用中

·     The custom.json file in the package contains invalid contents:定制包文件内custom.json内容无效

·     The custom.json file must contain all customized keys:定制参数配置(custom.json)中要包含全部定制包中custom.jsonkey

·     The regist-info.json file does not exist in the package:定制包文件内指定的regist-info.json不存在

·     The regist-info.json file in the package is invalid:定制包文件内指定的regist-info.json无效

·     The specified python script does not exist in the package.:定制包文件内指定的python脚本不存在

·     The name must be different in the regist-info.json file in the package:定制包文件regist-info.jsonname字段不能相同

·     The name and requestMethod cannot be same at the same time in the regist-info.json file in the package:定制包文件regist-infouri字段和requestMethod字段不能同时相同

·     The name is required in the regist-info.json file in the package:定制包文件regist-info.jsonname字段不能为空

·     The name cannot exceed 64 characters in the regist-info.json file in the package:定制包文件regist-info.jsonname字段最长64个字符

·     The pythonPath is required in the regist-info.json file in the package:定制包文件regist-info.jsonpythonPath字段不能为空

·     The pythonPath cannot exceed 512 characters in the regist-info.json file in the package:定制包文件regist-info.jsonpythonPath字段最长512个字符

·     The uri is required in the regist-info.json file in the package:定制包文件regist-info.jsonuri字段不能为空

·     The uri cannot exceed 512 characters in the regist-info.json file in the package:定制包文件regist-info.jsonuri字段最长512个字符

·     The requestMethod is required in the regist-info.json file in the package:定制包文件regist-info.jsonrequestMethod字段不能为空

·     The requestMethod cannot exceed 10 characters in the regist-info.json file in the package:定制包文件regist-info.jsonrequestMethod字段最长10个字符

·     The requestMethod is invalid in the regist-info.json file in the package:定制包文件regist-info.jsonrequestMethod字段无效

·     The service interface already exists:指定的服务接口已经存在

·     Failed to obtain gateway routes:查询网关路由失败

·     The URLs in the regist-info.json file cannot overlap with the existing gateway routesregist-info.json中的uri和已存在的网关路由路径冲突

·     Failed to register the gateway route:注册网关路由失败

·     Failed to register the authentication-free URL:注册免认证URL失败

·     Invalid cron field in the crontabs.json filecrontabs.jsoncron字段不合法

·     The crontabs.json contains invalid contentscrontabs.json内容无效

·     The site does not exist:站点不存在

·     Duplicate sites:站点存在重复

·     Failed to add the service:新增服务失败

·     Internal server error:服务器内部错误

·     A service already exists with the specified name:指定的服务名称已存在

·     In the regist-info.json custom package file, the value for the uri field must start with a slash (/), and you must specify a hierarchical path:定制包文件regist-info.jsonuri字段必须以/开头,层级路径不能为空

·     In the regist-info.json custom package file, the hierarchical path specified for the pythonPath field can contain digits, letters, underscores (_), and hyphens (-), and cannot contain spaces:定制包文件regist-info.jsonpythonPath字段层级路径仅支持数字、字母、下划线和连字符,不支持空格

·     You have no privilege to perform the operation. 当前用户无权限执行此操作

·     The background-process.json file in the package is invalid:定制包文件内指定的background-process.json无效

·     A name field value cannot exceed 64 characters in the background-process.json file in the package:定制包文件background-process.jsonname字段最长64个字符

·     The name field is required in the background-process.json file in the package:定制包文件background-process.jsonname字段不能为空

·     The pythonPath field is required in the background-process.json file in the package:定制包文件background-process.jsonpythonPath字段不能为空

·     A pythonPath field value cannot exceed 512 characters in the background-process.json file in the package:定制包文件background-process.jsonpythonPath字段最长512个字符

·     In the background-process.json custom package file, the hierarchical path specified for the pythonPath field can contain digits, letters, underscores (_), and hyphens (-), and cannot contain spaces:定制包文件background-process.jsonpythonPath字段层级路径仅支持数字、字母、下划线和连字符,不支持空格

·     The value of each pythonPath field must be unique in the background-process.json file in the package:定制包文件background-process.jsonpythonPath字段不能相同

·     An expression description can contain up to 512 characters:表达式说明最长512个字符

 

2.2  Update service

关键字

UPDATE_COS_SERVICE_OP

日志内容

Updated service: $1

参数解释

$1:北向服务的UUID

举例

Updated service: d6c1057d-bded-497d-892d-b6ba13a30892

日志说明

用户进行了修改北向服务的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid UUID:无效的UUID

·     The service does not exist:指定的服务不存在

·     The request body cannot be empty:请求体不能为空

·     The description can contain up to 512 characters:描述最长为512个字符

·     The custom.json cannot be emptycustom.json不能为空

·     The custom.json contains invalid contentscustom.json内容无效

·     The custom.json file must contain all customized keys.:定制参数配置(custom.json)中要包含全部定制包中custom.jsonkey

·     Invalid cron field in the crontabs.json filecrontabs.jsoncron字段不合法

·     The crontabs.json contains invalid contentscrontabs.json内容无效

·     The site does not exist:站点不存在

·     Duplicate sites:站点存在重复

·     Failed to update the service:更新服务失败

·     Internal server error:服务器内部错误

·     You have no privilege to perform the operation. 当前用户无权限执行此操作

 

2.3  Delete service

关键字

DEL_COS_SERVICE_OP

日志内容

Deleted service: $1

参数解释

$1:北向服务的UUID

举例

Deleted service: 25e0bdb3-7b52-4d4b-a8d8-8691a67d477e

日志说明

用户进行了删除北向服务的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid UUID:无效的UUID

·     The service does not exist:指定的服务不存在

·     Failed to delete the gateway route:删除网关路由失败

·     Failed to delete the authentication-free URL:删除免认证URL失败

·     Failed to delete the service:删除服务失败

·     Internal server error:服务器内部错误

·     You have no privilege to perform the operation. 当前用户无权限执行此操作

 

2.4  Upload package

关键字

UPLOAD_COS_PACKAGE_OP

日志内容

Uploaded package: $1

参数解释

$1:定制包的名称

举例

Uploaded package: SUPER_CONTROLLER_COS_OM-E3103P01.zip

日志说明

用户进行了上传定制包的操作

失败原因

当操作失败时,可能的原因如下:

·     The custom.json contains invalid contentscustom.json内容无效

·     The version.json contains invalid contentsversion.json内容无效

·     The custom package name cannot be empty:定制包文件名称不能为空

·     Invalid JSON format:无效的JSON格式

·     The custom package version is required in the version.json file in the package:定制包文件version.jsonversion字段不能为空

·     The custom package version cannot exceed 64 characters in the version.json file in the package:定制包文件version.jsonversion字段最长64个字符

·     The description cannot exceed 512 characters in the version.json file in the package:定制包文件version.jsondescription字段最长512个字符

·     The custom package name cannot exceed 64 characters in the version.json file in the package:定制包文件version.jsonname字段最长64个字符

·     Failed to upload the custom package file:上传定制包文件失败

·     The version.json cannot be emptyversion.json不能为空

·     The custom.json cannot be emptycustom.json不能为空

·     The custom.json file does not exist in the package:定制包文件内指定的custom.json不存在

·     The version.json file does not exist in the package:定制包文件内指定的version.json不存在

·     The name must start with a letter, digit, or underscore (_). The name can contain at signs (@), left parentheses ((), right parentheses ()), plus signs (+), minus signs (-), dots (.), equal signs (=), left braces ({), and right braces (}), and it cannot contain spaces. The name can contain up to 512 characters:定制包文件名称以字母、数字、下划线开头,可包含特殊符号@()+-.={},不可包含空格,最长512个字符

·     Invalid cron field in the crontabs.json filecrontabs.jsoncron字段不合法

·     The custom package must be in the ZIP format:定制包仅支持ZIP格式

·     Failed to serialize custom package file:定制包文件解析失败

·     Invalid custom package file:无效的定制包文件

·     Another custom package already exists with the specified name:指定的定制包已存在

·     Internal server error:服务器内部错误

·     You have no privilege to perform the operation. 当前用户无权限执行此操作

 

2.5  Delete package

关键字

DEL_COS_PACKAGE_OP

日志内容

Deleted package: $1

参数解释

$1:定制包的UUID

举例

Deleted package: 99e6a089-e51a-4a22-92d9-9f73d93902b6

日志说明

用户进行了删除定制包的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid UUID:无效的UUID

·     The specified custom package file does not exist:指定的定制包不存在

·     The custom package file is in use:指定的定制包正在使用中

·     Failed to delete the custom package file:删除指定的定制包失败

·     Internal server error:服务器内部错误

·     You have no privilege to perform the operation. 当前用户无权限执行此操作

 

2.6  Upgrade service

关键字

UPGRADE_SERVICE_OP

日志内容

Upgraded service: $1

参数解释

$1:定制包的UUID

举例

Upgraded service:{

"service":{

"id":" a123fba9-3c88-48e9-b5d5-7fcf5fe4bce1",

"packageId":"a473fba9-3c88-48e9-b5d5-7fcf5fe4bce1",

"custom.json":"{\n    \"resourcePool\": \"XXG\"\n}"

}

}

日志说明

用户进行了定制包的升级操作

失败原因

当操作失败时,可能的原因如下:

·     Please specify a service id:请指定服务的ID

·     The specified custom package file does not exist:指定的定制包不存在

·     The custom package file is in use:指定的定制包正在使用中

·     The custom package has been specified for the service指定的定制包已被当前服务使用

·     Failed to upgrade the service服务升级失败

·     Internal server error:服务器内部错误

·     You have no privilege to perform the operation.当前用户无权限执行此操作

·     The background-process.json file in the package is invalid:定制包文件内指定的background-process.json无效

·     A name field value cannot exceed 64 characters in the background-process.json file in the package:定制包文件background-process.jsonname字段最长64个字符

·     The name field is required in the background-process.json file in the package:定制包文件background-process.jsonname字段不能为空

·     The pythonPath field is required in the background-process.json file in the package:定制包文件background-process.jsonpythonPath字段不能为空

·     A pythonPath field value cannot exceed 512 characters in the background-process.json file in the package:定制包文件background-process.jsonpythonPath字段最长512个字符

·     In the background-process.json custom package file, the hierarchical path specified for the pythonPath field can contain digits, letters, underscores (_), and hyphens (-), and cannot contain spaces:定制包文件background-process.jsonpythonPath字段层级路径仅支持数字、字母、下划线和连字符,不支持空格

·     The value of each pythonPath field must be unique in the background-process.json file in the package:定制包文件background-process.jsonpythonPath字段不能相同

·     An expression description can contain up to 512 characters:表达式说明最长512个字符

 

2.7  Update parameter settings

关键字

UPDATE_PARAMETER_CONFIG_OP

日志内容

Updated parameter settings: $1

参数解释

$1:定制包的UUID

举例

Updated parameter settings: {

  "configs":[{

    "key": "sftpServerIP",

    "value":"192.158.50.9"

  } ]

}

日志说明

用户进行了修改参数设置的操作

失败原因

当操作失败时,可能的原因如下:

·     SFTP Server IP不符合IP格式。IPv4地址为点分十进制格式,IPv6地址为冒分十六进制格式:Invalid SFTP server IP address. An IPv4 address must be in dotted decimal notation, and an IPv6 address must be in colon hexadecimal notation

·     Invalid SFTP server portSFTP服务器端口范围仅支持165535的整数

·     SFTP server user name cannot be emptySFTP服务器的名称不能为空

·     The SFTP server password failed to be encryptedSFTP Server密码加密失败

·     Internal server error:服务器内部错误

·     You have no privilege to perform the operation当前用户无权限执行此操作

 

2.8  Add SNMPv3 server

关键字

ADD_SNMPv3_SERVER_OP

日志内容

Added SNMPv3 server: $1

参数解释

$1SNMPv3 server请求体实体

举例

Added SNMPv3 server: {

        "serverIp": "192.158.50.9",

        "serverPort":"162",

        "securityName":"admin",

        "authProtocol":"MD5",

        "authPassword":"":"********"",

        "privProtocol":"DES",

        "privPassword":"********"

 }

日志说明

用户进行了新增SNMPv3 server的操作

失败原因

当操作失败时,可能的原因如下:

·     Failed to add the SNMPv3 server:新增SNMPv3 Server失败

·     An SNMPv3 server already exists with the specified IP address:指定IP地址的SNMPV3 Server已存在

·     Please specify an IP addressserverIp不能为空

·     Invalid SNMPv3 server IP address. An IPv4 address must be in dotted decimal notation, and an IPv6 address must be in colon hexadecimal notationSNMPv3 Server IP不符合IP格式。IPv4地址为点分十进制格式,IPv6地址为冒分十六进制格式

·     Please specify a port numberserverPort不能为空

·     Please specify a security namesecurityName不能为空

·     The port number must be an integer in the range of 1 to 65535serverPort取值范围为1~65535的整数

·     The security name is a string up to 32 characters that can contain only letters, digits, and underscores (_)securityName最长32个字符,仅支持字母、数字和下划线

·     The encryption algorithm can only be DES, 3DES, AES128, AES192, or AES256privProtocol取值仅支持DES3DESAES128AES192AES256

·     The authentication algorithm can only be MD5, SHA-1, SHA-224, SHA-256, SHA-384, or SHA-512authProtocol取值仅支持 MD5SHA-1SHA-224SHA-256SHA-384SHA-512

·     The encryption password must be a string of 8 to 64 characters that cannot contain chinese characters, wavy lines(~), question marks (?), and spacesprivPassword有效长度为8~64位字符,不支持中文、~?和空格

·     The authentication password must be a string of 8 to 64 characters that cannot contain chinese characters, wavy lines(~), question marks (?), and spacesauthPassword有效长度为8~64位字符,不支持中文、~?和空格

·     The authentication algorithm has been specified. Please specify an authentication password:认证算法已配置,认证密码不能为空

·     The encryption algorithm has been specified. Please specify an encryption password:加密算法已配置,加密密码不能为空

·     You cannot specify an encryption password if no encryption algorithm is specified:加密算法为空时,加密密码必须为空

·     You cannot specify an authentication password if no authentication algorithm is specified:认证算法为空时,认证密码必须为空

·     You cannot specify an encryption algorithm if no authentication algorithm is specified:认证算法为空时,加密算法必须为空

·     You have no privilege to perform the operation:当前用户无权限执行此操作

 

2.9  Update SNMPv3 server

关键字

UPDATE_SNMPv3_SERVER_OP

日志内容

Updated SNMPv3 server: $1

参数解释

$1SNMPv3 server请求体实体

举例

Updated SNMPv3 server: {

"id":"e1aeb2f8-0463-40cc-bf8e-4c7e25a157b5",

"serverIp":"3.3.3.3",

"serverPort":"33",

"securityName":"fdsfds",

"authProtocol":"MD5",

"authPassword":"********",

"privProtocol":"AES128",

"privPassword":"********"

}

日志说明

用户进行了修改SNMPv3 server的操作

失败原因

当操作失败时,可能的原因如下:

·     Failed to edit the SNMPv3 server:修改SNMPv3 Server失败

·     The specified SNMPv3 server does not exist:指定的SNMPv3 Server不存在。

·     Please specify a port numberserverPort不能为空

·     Please specify a security namesecurityName不能为空

·     The port number must be an integer in the range of 1 to 65535serverPort取值范围为1~65535的整数

·     The security name is a string up to 32 characters that can contain only letters, digits, and underscores (_)securityName最长32个字符,仅支持字母、数字和下划线

·     The encryption algorithm can only be DES, 3DES, AES128, AES192, or AES256privProtocol取值仅支持DES3DESAES128AES192AES256

·     The authentication algorithm can only be MD5, SHA-1, SHA-224, SHA-256, SHA-384, or SHA-512authProtocol取值仅支持 MD5SHA-1SHA-224SHA-256SHA-384SHA-512

·     The encryption password must be a string of 8 to 64 characters that cannot contain chinese characters, wavy lines(~), question marks (?), and spacesprivPassword有效长度为8~64位字符,不支持中文、~?和空格

·     The authentication password must be a string of 8 to 64 characters that cannot contain chinese characters, wavy lines(~), question marks (?), and spacesauthPassword有效长度为8~64位字符,不支持中文、~?和空格

·     The authentication algorithm has been specified. Please specify an authentication password:认证算法已配置,认证密码不能为空

·     The encryption algorithm has been specified. Please specify an encryption password:加密算法已配置,加密密码不能为空

·     You cannot specify an encryption password if no encryption algorithm is specified:加密算法为空时,加密密码必须为空

·     You cannot specify an authentication password if no authentication algorithm is specified:认证算法为空时,认证密码必须为空

·     You cannot specify an encryption algorithm if no authentication algorithm is specified:认证算法为空时,加密算法必须为空

·     You have no privilege to perform the operation:当前用户无权限执行此操作

·     Invalid UUID:无效的UUID

 

2.10  Delete SNMPv3 server

关键字

DEL_SNMPv3_SERVER_OP

日志内容

Deleted SNMPv3 server: $1

参数解释

$1SNMPv3 serverUUID

举例

Deleted SNMPv3 server: d6c1057d-bded-497d-892d-b6ba13a30892

日志说明

用户进行了删除SNMPv3 server的操作

失败原因

当操作失败时,可能的原因如下:

·     Failed to delete the SNMPv3 server:删除SNMPv3 Server失败

·     The specified SNMPv3 server does not exist:指定的SNMPv3 Server不存在。

·     You have no privilege to perform the operation:当前用户无权限执行此操作

·     Invalid UUID:无效的UUID

 

2.11  Edit alarm severity mapping

关键字

ACTION_UPDATE_ALARM_SEVERITY_RENDER

日志内容

Edit alarm severity mapping: $1

参数解释

$1:告警转换对应信息

举例

Edit alarm severity mapping: [{

        "originSeverity": "1",

        "renderSeverity":"3"

 }]

日志说明

用户进行了告警信息转换变更的操作

失败原因

当操作失败时,可能的原因如下:

·     The value range for the original severity level is 0 to 21474836:原始告警级别范围为0~21474836

·     The value range for the mapped severity level is 0 to 21474836:映射告警级别范围为0~21474836

 

 


3 DATA_CONSISTENCY

本节介绍Super Controller对站点进行差异发现或差异修复的操作日志信息。

3.1  Audit data for a site

关键字

AUDIT_SITE_OP

日志内容

Audited data for site $1.

参数解释

$1:站点ID

举例

Audited data for site "1dd6cb3f-3d55-ff1b-5ab0-0dd920dcb9b1".

日志说明

用户进行了站点的差异发现的操作

失败原因

当操作失败时,可能的原因如下:

·     The specified site does not exist:指定的站点不存在

·     The specified site is not reachable:站点不可达

·     The system is auditing or synchronizing data for the site. Please try again later.:指定的站点正在进行差异发现或差异修复,请稍后再试

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

3.2  Sync data for a site

关键字

SYNC_SITE_OP

日志内容

Synchronized data for site $1.

参数解释

$1:站点ID

举例

Synchronized data for site "1dd6cb3f-3d55-ff1b-5ab0-0dd920dcb9b1".

日志说明

用户进行了站点的差异修复的操作

失败原因

当操作失败时,可能的原因如下:

·     The specified site does not exist:指定的站点不存在

·     The specified site is not reachable:站点不可达

·     The system is auditing or synchronizing data for the site. Please try again later.:指定的站点正在进行差异发现或差异修复,请稍后再试

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 


4 ICTOM

本节介绍ICTOM微服务的操作日志信息。

4.1  Import DC resource

关键字

ACTION_IMPORT_DC_RESOURCE

日志内容

Imported DC resource: $1

参数解释

$1:站点的请求消息体

举例

Imported DC resource: {"siteId":"379c30f1-4059-41c4-b8ae-722d7d187378"}

日志说明

用户进行了导入数据中心站点资源的操作

失败原因

当操作失败时,可能的原因如下:

·     The site with the specified UUID does not exist:指定的站点不存在

·     Failed to connect to the site:指定的站点连接失败

·     The itom-cmdb-rs-svc service has exceptionsitom-cmdb-rs-svc服务存在异常

 


5 NSO_AUDIT

本节介绍NSO微服务的操作日志信息。

5.1  Add network

关键字

ADD_NSO_NETWORK_OP

日志内容

Added network “$1”, request: $2

参数解释

$1:虚拟链路层网络的ID

$2:虚拟链路层网络请求消息体

举例

Added network "2eeafe60-adf0-bab9-61d9-63bb481447d3", request: {"network":{"id":"2eeafe60-adf0-bab9-61d9-63bb481447d3","name":"network222","description":"","tenant_id":"edc2b3ec-ce4c-5576-470a-2813f24fcd46","position_x":104,"position_y":200,"network_type":"VXLAN","external":false}}

日志说明

用户进行了添加虚拟链路层网络的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The vNetwork name is required:虚拟链路层网络名称不能为空

·     The number of vNetworks has reached the limit specified in the resource pool:虚拟链路层网络数量已达到资源池数量最大值

·     Different vNetworks cannot use the same name:虚拟链路层网络名称不能重复

·     The specified tenant default logical network does not exist:租户默认逻辑网络不存在

·     VNI allocation failedVNI分配失败

·     Operation failed. The UUID already exists:创建失败,UUID已存在

·     Failed to add the resource:添加配置项失败

·     No available VNIsVNI已耗尽

·     The VNI has been usedVNI已被使用

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.2  Update network

关键字

UPDATE_NSO_NETWORK_OP

日志内容

Updated network “$1”, request: $2

参数解释

$1:虚拟链路层网络的ID

$2:虚拟链路层网络请求消息体

举例

Updated network "2eeafe60-adf0-bab9-61d9-63bb481447d3", request: {"network":{"id":"2eeafe60-adf0-bab9-61d9-63bb481447d3","name":"network2223","description":"","position_x":50,"position_y":200}}

日志说明

用户进行了修改虚拟链路层网络的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The UUID is requiredUUID不能为空

·     The External network parameter of a vNetwork cannot be modified:虚拟链路层的是否外部网络字段不允许修改

·     The network type of a vNetwork cannot be modified:虚拟链路层网络的网络类型不允许修改

·     The segment ID of a vNetwork cannot be modified:虚拟链路层网络的Segment ID不允许修改

·     The UUID of a tenant cannot be modified:租户的UUID不允许修改

·     Different vNetworks cannot use the same name:虚拟链路层网络名称不能重复

·     The resource does not exist:配置项不存在

·     Failed to modify the resource:修改配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     The specified resource does not exist:指定的资源不存在

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.3  Delete network

关键字

DEL_NSO_NETWORK_OP

日志内容

Deleted network “$1”.

参数解释

$1:虚拟链路层网络的ID

举例

Deleted network “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除虚拟链路层网络的操作

失败原因

当操作失败时,可能的原因如下:

·     The resource does not exist:配置项不存在

·     The vNetwork has vSubnets:该虚拟链路层网络存在虚拟子网

·     Internal error:内部错误

·     Failed to delete the resource:删除配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     The vNetwork has been bound to a Layer 2 site interconnection:虚拟链路层网络已绑定站点二层互联

·     The specified resource does not exist:指定的资源不存在

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.4  Add router

关键字

ADD_NSO_ROUTER_OP

日志内容

Added router “$1”, request: $2

参数解释

$1:虚拟路由器的ID

$2:虚拟路由器请求消息体

举例

Added router "31fd6250-8bcb-d2e5-7a01-8169c0a77674", request: {"router":{"id":"31fd6250-8bcb-d2e5-7a01-8169c0a77674","name":"vrouter","tenant_id":"0e2192de-27c6-40b1-8e9f-3136d2dcc208","position_x":310,"position_y":50}}

日志说明

用户进行了添加虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The vRouter name is required:虚拟路由器名称不能为空

·     The specified tenant default logical network does not exist:租户默认逻辑网络不存在

·     The number of vRouters has reached the limit specified in the resource pool:虚拟路由器数量已达到资源池数量最大值

·     Different vRouters cannot use the same name:虚拟路由器名称不能重复

·     Different CIDRs cannot overlapCIDR不能相互重叠

·     Failed to add the resource:添加配置项失败

·     Operation failed. The UUID already exists:创建失败,UUID已存在

·     No available VNIsVNI已耗尽

·     VNI allocation failedVNI分配失败

·     The VNI has been usedVNI已被使用

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.5  Update router

关键字

UPDATE_NSO_ROUTER_OP

日志内容

Updated router “$1”, request: $2

参数解释

$1:虚拟路由器的ID

$2:虚拟路由器请求消息体

举例

Updated router "31fd6250-8bcb-d2e5-7a01-8169c0a77674", request: {"router":{"id":"31fd6250-8bcb-d2e5-7a01-8169c0a77674","name":"vrouter","position_x":100,"position_y":50,"cidrs":[]}}

日志说明

用户进行了修改虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The UUID is requiredUUID不能为空

·     The tenant cannot be modified:租户不允许修改

·     The CIDR has been used by a vSubnetCIDR网段已被虚拟子网使用

·     Different CIDRs cannot overlapCIDR不能相互重叠

·     Different vRouters cannot use the same name:虚拟路由器名称不能重复

·     Internal error:内部错误

·     Failed to modify the resource:修改配置项失败

·     The resource does not exist:配置项不存在

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     The specified resource does not exist:指定的资源不存在

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.6  Delete router

关键字

DEL_NSO_ROUTER_OP

日志内容

Deleted router “$1”.

参数解释

$1:虚拟路由器的ID

举例

Deleted router “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     The resource does not exist:配置项不存在

·     The vRouter has been bound to vSubnets:该虚拟路由器已被虚拟子网使用

·     Failed to delete the resource:删除配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.7  Add logical link

关键字

ADD_NSO_LOGICALLINK_OP

日志内容

Added a logical link between vRouter $1 and vNetwork $2, request: $3

参数解释

$1:虚拟路由器的ID

$2:虚拟链路层网络的ID

$3:逻辑链路请求消息体

举例

Added a logical link between vRouter 1aa4547a-3e74-8922-b154-0c3f6b7d7a24 and vNetwork 42f5acef-31aa-c310-a1b4-d0c6f1102707, request: {"input":{"router_id":"1aa4547a-3e74-8922-b154-0c3f6b7d7a24","network_id":"42f5acef-31aa-c310-a1b4-d0c6f1102707"}}

日志说明

用户进行了添加逻辑链路的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The vRouter does not exist:虚拟路由不存在

·     The vNetwork does not exist:虚拟链路层网络不存在

·     The vNetwork does not have vSubnets:虚拟链路层网络下不存在虚拟子网

·     The vNetwork has been bound to a vRouter:虚拟链路层网络已绑定虚拟路由

·     The vSubnet has been bound to a vRouter:虚拟子网已绑定虚拟路由器

·     The vSubnet is not configured with a gateway IP:虚拟子网未配置网关IP地址

·     The vRouter and vSubnet does not belong to the same tenant虚拟路由器和虚拟子网不属于同一个租户

·     Subnets in the same vNetwork must be bound to the same vRouter:同一个虚拟链路层网络下的子网必须绑定同一虚拟路由器

·     The CIDRs of vSubnets bound to a vRouter cannot overlap:同一个虚拟路由器的虚拟子网CIDR不能重叠

·     The number of vRouters bound to the site has reached the limit:虚拟路由器数量已达到站点的最大数量

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.8  Delete logical link

关键字

DEL_NSO_LOGICALLINK_OP

日志内容

Deleted a logical link between vRouter $1 and vNetwork $2, request: $3

参数解释

$1:虚拟路由器的ID

$2:虚拟链路层网络的ID

$3:逻辑链路请求消息体

举例

Deleted a logical link between vRouter 1aa4547a-3e74-8922-b154-0c3f6b7d7a24 and vNetwork 42f5acef-31aa-c310-a1b4-d0c6f1102707, request: {"input":{"router_id":"1aa4547a-3e74-8922-b154-0c3f6b7d7a24","network_id":"42f5acef-31aa-c310-a1b4-d0c6f1102707"}}

日志说明

用户进行了删除逻辑链路的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The vRouter does not exist:虚拟路由不存在

·     The vNetwork does not exist:虚拟链路层网络不存在

·     The vNetwork is not bound to a vRouter:虚拟链路层网络未绑定该虚拟路由

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.9  Bound subnet to vRouter

关键字

BOUND_SUBNET_VROUTER_OP

日志内容

Bound subnet $1 to vRouter $2, request: $3

参数解释

$1:虚拟链路层网络的ID

$2:虚拟路由器的ID

$3:虚拟子网绑定至虚拟路由器请求消息体

举例

Bound subnet f374ec27-5da3-42f6-0c24-e58b05832cde to vRouter 1aa4547a-3e74-8922-b154-0c3f6b7d7a24, request: {"input":{"router_id":"1aa4547a-3e74-8922-b154-0c3f6b7d7a24","subnet_id":"f374ec27-5da3-42f6-0c24-e58b05832cde"}}

日志说明

用户进行了虚拟子网绑定至虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The vRouter does not exist:虚拟路由器不存在

·     The vSubnet does not exist:虚拟子网不存在

·     The vSubnet has been bound to a vRouter:虚拟子网已绑定虚拟路由器

·     The vSubnet is not configured with a gateway IP:虚拟子网未配置网关IP地址。

·     The vRouter and vSubnet does not belong to the same tenant虚拟路由器和虚拟子网不属于同一个租户

·     Subnets in the same vNetwork must be bound to the same vRouter:同一个虚拟链路层网络下的子网必须绑定同一虚拟路由器

·     The CIDRs of vSubnets bound to a vRouter cannot overlap:同一个虚拟路由器的虚拟子网CIDR不能重叠

·     The number of vRouters bound to the site has reached the limit:虚拟路由器数量已达到站点的最大数量

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.10  Unbound subnet to vRouter

关键字

UNBOUND_SUBNET_VROUTER_OP

日志内容

Unbound subnet $1 from vRouter $2, request: $3

参数解释

$1:虚拟链路层网络的ID

$2:虚拟路由器的ID

$3:虚拟子网解除绑定虚拟路由器请求消息体

举例

Unbound subnet f374ec27-5da3-42f6-0c24-e58b05832cde from vRouter 1aa4547a-3e74-8922-b154-0c3f6b7d7a24, request: {"input":{"router_id":"1aa4547a-3e74-8922-b154-0c3f6b7d7a24","subnet_id":"f374ec27-5da3-42f6-0c24-e58b05832cde"}}

日志说明

用户进行了虚拟子网解除绑定虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The vRouter does not exist:虚拟路由不存在

·     The vSubnet does not exist:虚拟子网不存在

·     The vSubnet is not bound to a vRouter:虚拟子网未绑定该虚拟路由

·     The subnet has been bound to a Layer 3 site interconnection:虚拟子网已绑定站点三层互联

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.11  Add site

关键字

ADD_NSO_SIET_OP

日志内容

Added site “$1”, request: $2

参数解释

$1:站点的ID

$2:站点请求消息体

举例

Added site "1dd6cb3f-3d55-ff1b-5ab0-0dd920dcb9b1", request:

{"site":{"id":"1dd6cb3f-3d55-ff1b-5ab0-0dd920dcb9b1","name":"site","description":"","url":"192.168.132.81",

"user_name":"admin","pass_word":"*********","position_x":417,"position_y":199,"driver_id":"F124E6AC-0C3E-4413-88B4-6258F2948FEA","custom_property":"[]"}}

日志说明

用户进行了添加站点的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The site name is required:站点名称不能为空

·     The URL is required:站点的URL不能为空

·     The username is required:站点的用户名不能为空

·     The password is required:站点的用户密码不能为空

·     The driver type is required:站点的Driver类型不能为空

·     The license capacity is insufficientLicense不足

·     Invalid request:无效的请求

·     Internal error内部错误

·     Failed to add the resource添加配置项失败

·     Operation failed. The UUID already exists:创建失败,UUID已存在

·     The site name has been used:站点名称已被占用

·     The url has been used:该URL对应的站点已存在

·     Failed to deploy site resources to the DriverManager microservice:向插件下发站点资源失败

·     Invalid site address:无效的站点地址

·     The URL format is http(s)://IPv4 address|[IPv6 address]:port number. The IPv4 address is in dotted decimal notation and cannot be a broadcast, loopback, multicast, or reserved IP address. The IPv6 address is in colon hexadecimal notation and must be a global unicast address. The port number is an integer in the range of 1 to 65535http(s):// IPv4|[IPv6]:端口,IPv4地址为点分十进制格式,不支持广播地址、环回地址、组播地址和保留地址;IPv6地址为冒分十六进制格式,仅支持全球单播地址;端口范围为165535的整数

·     Failed to apply for the license:申请授权失败

·     Operation failed, because license is not enough:操作失败,License不足

 

5.12  Update site

关键字

UPDATE_NSO_SIET_OP

日志内容

Updated site “$1”, request: $2

参数解释

$1:站点的ID

$2:站点请求消息体

举例

Updated site "1dd6cb3f-3d55-ff1b-5ab0-0dd920dcb9b1", request: {"site":{"url":"192.168.132.81","user_name":"admin1","id":"1dd6cb3f-3d55-ff1b-5ab0-0dd920dcb9b1","custom_property":"[]"}}

日志说明

用户进行了修改站点的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The UUID is requiredUUID不能为空

·     The site name cannot be modified:站点名称不允许修改

·     The custom settings of a site cannot be modified:站点的自定义配置不允许修改

·     Invalid request:无效的请求

·     The site has been bound to tenants:该站点已被租户使用

·     The site has been bound to tenants:该站点已被租户使用

·     Failed to update site resources on the DriverManager microservice:向插件更新站点资源失败

·     Internal error:内部错误

·     The resource does not exist:配置项不存在

·     The url has been used:该URL对应的站点已存在

·     The maximum number of vRouters that can be bound to the site is smaller than the number of existing vRouters bound to the site:站点的虚拟路由最大数量小于当前已使用数量

·     The maximum number of vNetworks that can be bound to the site is smaller than the number of existing vNetworks bound to the site:站点的虚拟链路层网络最大数量小于当前已使用数量

·     The maximum number of vSubnets that can be bound to the site is smaller than the number of existing vSubnets bound to the site:站点的虚拟子网最大数量小于当前已使用数量

·     The site has been synchronized. The URL cannot be modified:该站点已经被纳管,URL不可修改

·     Failed to modify the resource:修改配置项失败

·     Synchronizing settings from sites正在进行反向纳管操作

·     The specified resource does not exist:指定的资源不存在

·     Invalid site address:无效的站点地址

·     The URL format is http(s)://IPv4 address|[IPv6 address]:port number. The IPv4 address is in dotted decimal notation and cannot be a broadcast, loopback, multicast, or reserved IP address. The IPv6 address is in colon hexadecimal notation and must be a global unicast address. The port number is an integer in the range of 1 to 65535http(s):// IPv4|[IPv6]:端口,IPv4地址为点分十进制格式,不支持广播地址、环回地址、组播地址和保留地址;IPv6地址为冒分十六进制格式,仅支持全球单播地址;端口范围为165535的整数

 

5.13  Delete site

关键字

DEL_NSO_SIET_OP

日志内容

Deleted site “$1”.

参数解释

$1:站点的ID

举例

Deleted site “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除站点的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid request:无效的请求

·     The site has been bound to tenants:该站点已被租户使用

·     The resource does not exist:配置项不存在

·     Failed to delete the resource:删除配置项失败

·     Synchronizing settings from sites正在进行反向纳管操作

·     The site has been used to create a site connection:该站点已创建站点连接

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete site resources from the DriverManager microservice:向插件删除站点资源失败

 

5.14  Add subnet

关键字

ADD_NSO_SUBNET_OP

日志内容

Added subnet “$1”, request: $2

参数解释

$1:虚拟子网的ID

$2:虚拟子网请求消息体

举例

Added subnet "b87dc586-dcf6-dd52-d3e5-f5dbc521179d", request: {"subnet":

{"id":"b87dc586-dcf6-dd52-d3e5-f5dbc521179d","name":"subnet231","network_id":"b82247b8-7b0c-a729-fa48-e6aa7ecce4d8","cidr":"22.3.3.3/16","ip_version":"ipv4","position_x":344,"position_y":350,

"enable_dhcp":false,"gateway_ip":"22.3.3.3","siteResources":["zjt-transit"]}}

日志说明

用户进行了增加虚拟子网的操作

失败原因

当操作失败时,可能的原因如下:

·     The vSubnet name is required:虚拟子网名称不能为空

·     The vNetwork UUID is required:虚拟链路层网络UUID不能为空

·     The IP version is requiredIP版本不能为空

·     Invalid JSON format:无效的JSON格式

·     Different vSubnets cannot use the same name:虚拟子网名称不能重复

·     Internal error:内部错误

·     The specified vNetwork does not exist:指定的虚拟链路层网络不存在

·     Failed to add the resource:添加配置项失败

·     Operation failed. The UUID already exists:创建失败,UUID已存在

·     The gateway IP address is required when the vNetwork is an external network:虚拟链路层网络为外部网络时,网关IP地址不能为空

·     The gateway IP address doesn’t belong to the subnet:网关IP地址与子网不在同一网段

·     The CIDR overlaps with another CIDR in the same vNetworkCIDR与虚拟链路层网络下的其他CIDR重叠

·     Invalid DHCP address pool:无效的DHCP地址池

·     Only sites specified for the tenant are available:站点列表必须是在租户的站点范围内

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     The gateway IP address is required when the DHCP is enabled:启用DHCP时,网关IP地址不能为空

·     The gateway IP address conflicts with the subnet broadcast address:网关IP地址和子网广播IP地址冲突

·     An IPv4 subnet cannot be configured with the IPv6 address mode or the IPv6 RA modeIPv4版本的子网不允许配置IPv6地址模式和IPv6 RA模式

·     The IPv6 address mode and the IPv6 RA mode must be the sameIPv6地址模式和IPv6 RA模式不一致

·     When the IPv6 address mode is SLAAC or Stateless DHCPv6, the subnet mask must be 64IPv6地址模式为SLAAC和无状态DHCPv6类型时,子网掩码必须是为64

·     When the IPv6 address mode is Stateful DHCPv6, Stateless DHCPv6 or SLAAC, DHCP must be enabledIPv6地址模式为有状态DHCPv6,无状态DHCPv6SLAAC时,必须使能DHCP

·     The gateway IP address conflicts with the subnet address:网关IP地址和子网IP地址冲突

·     Invalid CIDR:无效的CIDR

·     The number of vSubnets has reached the limit specified in the resource pool:虚拟子网数量已达到资源池数量最大值

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.15  Update subnet

关键字

UPDATE_NSO_SUBNET_OP

日志内容

Updated subnet “$1”, request: $2

参数解释

$1:虚拟子网的ID

$2:虚拟子网请求消息体

举例

Updated subnet "cc2450f7-4184-a904-7bca-2d99093b4e63", request: {"subnet":{"id":"cc2450f7-4184-a904-7bca-2d99093b4e63","name":"subnet2311","gateway_ip":"203.3.3.6","position_x":100,

"position_y":350,"siteResources":["zjt-transit"]}}

日志说明

用户进行了修改虚拟子网的操作

失败原因

当操作失败时,可能的原因如下:

·     The UUID is requiredUUID不能为空

·     Cannot change the tenant of a vSubnet:不允许修改虚拟子网所属的租户

·     Cannot change the link layer network of a vSubnet:不允许修改虚拟子网所属的链路层网络

·     The CIDR can be modified only when the subnet is undeployed仅当子网处于未部署状态时才可修改CIDR

·     The IP version can be modified only when the subnet is undeployed仅当子网处于未部署状态时才可修改IP版本

·     The DHCP state can be modified only when the subnet is undeployed仅当子网处于未部署状态时才可修改DHCP状态

·     The address pool can be modified only when the subnet is undeployed仅当子网处于未部署状态时才可修改分配地址池

·     The resource does not exist:配置项不存在

·     Internal error:内部错误

·     Different vSubnets cannot use the same name:虚拟子网名称不能重复

·     Cannot modify the gateway IP address for the subnet, because the subnet is bound a vRouter:该子网已被虚拟路由器绑定,不允许修改网关IP地址

·     The gateway IP address doesn’t belong to the subnet:网关IP地址与子网不在同一网段

·     The number of sites bound to a vSubnet cannot be reduced when the vSubnet has vPorts:虚拟子网下有虚拟端口时,站点资源不允许缩减

·     The specified site does not exist:指定的站点资源不存在

·     Failed to modify the resource:修改配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     The gateway IP address conflicts with the subnet broadcast address:网关IP地址和子网广播IP地址冲突

·     The IPv6 RA mode can be modified only when the subnet is undeployed仅当子网处于未部署状态时才可修改IPv6RA模式

·     The IPv6 address mode can be modified only when the subnet is undeployed仅当子网处于未部署状态时才可修改IPv6的地址模式

·     The gateway IP address conflicts with the subnet address:网关IP地址和子网IP地址冲突

·     The vSubnet has vPorts该虚拟子网已被虚拟端口使用

·     The subnet has been bound to a Layer 3 site interconnection:虚拟子网已绑定站点三层互联

·     The vNetwork to which the subnet belongs has been bound to a Layer 2 site interconnection:虚拟子网所属的虚拟链路层网络已绑定站点二层互联

·     You cannot delete the gateway IP address for the subnet, because the subnet has been bound to a vRouter:已绑定虚拟路由器的子网不允许删除网关IP地址

·     The specified resource does not exist:指定的资源不存在

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.16  Delete subnet

关键字

DEL_NSO_SUBNET_OP

日志内容

Deleted subnet “$1”.

参数解释

$1:虚拟子网的ID

举例

Deleted subnet “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除虚拟子网的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid request:无效的请求

·     The resource does not exist:配置项不存在

·     Internal error:内部错误

·     The vSubnet has been bound to a vRouter:该虚拟子网已被虚拟路由器绑定

·     The vSubnet has vPorts:该虚拟子网已被虚拟端口使用

·     Failed to delete the resource:删除配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     The vNetwork to which the subnet belongs has been bound to a Layer 2 site interconnection:虚拟子网所属的虚拟链路层网络已绑定站点二层互联

·     The specified resource does not exist:指定的资源不存在

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.17  Synchronized settings from sites

关键字

CONTROLLED_NSO_SITE_OP

日志内容

Synchronized settings from sites "$1".

参数解释

$1:站点名称

举例

Synchronized settings from sites "site1".

日志说明

用户进行了反向纳管站点的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     Internal error:内部错误

·     Site 'site_name' does not exist:站点'站点名称'不存在

·     Settings of site 'site_name' has been synchronized:站点'站点名称'已被纳管

·     Synchronization failed. Tenant name conflict occurs on site 'site_name'纳管失败,站点'站点名称'上存在相同名称的租户

·     Synchronization failed. vRouter 'vRouter_name' of site 'site_name' is not configured with a segment ID纳管失败,站点'站点名称'的虚拟路由器'虚拟路由器名称'未配置Segment ID

·     The VNI has been usedVNI已被使用

·     VNI allocation failedVNI分配失败

·     DriverManager microservice processing failed:插件处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     Synchronizing settings from sites正在进行反向纳管操作

·     Synchronization failed. The parameters of the subnet “subnet_info” on the site “site_info” is invalid:纳管失败,站点“站点信息”的子网“子网信息”参数不合法

·     Synchronization failed. The name of the subnet on the site “site_info” cannot exceed 255 characters:纳管失败,站点“站点信息”的子网名称不能超过255个字符

·     Synchronization failed. The parameters of the vNetwork “network_info” on the site “site_info” is invalid:纳管失败,站点“站点信息”的虚拟链路层网络“虚拟链路层网络信息”参数不合法

·     Synchronization failed. The name of the vNetwork on the site “site_info” cannot exceed 255 characters:纳管失败,站点“站点信息”的虚拟链路层网络名称不能超过255个字符

·     Synchronization failed. The parameters of the vRouter “router_info” on the site “site_info” is invalid:纳管失败,站点“站点信息”的虚拟路由器“虚拟路由器信息”参数不合法

·     Synchronization failed. The name of the vRouter on the site “site_info” cannot exceed 255 characters:纳管失败,站点“站点信息”的虚拟路由器名称不能超过255个字符

·     Failed to process the request. Please check whether the plugin matches the version of Super Controller:请求处理失败,请检查插件与Super Controller版本是否配套

 

5.18  Add tenant

关键字

ADD_NSO_TENANT_OP

日志内容

Added tenant “$1”, request: $2

参数解释

$1:租户的ID

$2:租户请求消息体

举例

Added tenant "e1bace90-5972-db07-b4d6-56471fba2148", request: {"tenant":{"id":"e1bace90-5972-db07-b4d6-56471fba2148","name":"tenant-zjt4","description":"","siteResources":["zjt-transit"],"tenant_type":"local-create"}}

日志说明

用户进行了添加租户的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The tenant name is required:租户名称不能为空

·     Invalid request:无效的请求

·     The specified site does not exist:指定的站点资源不存在

·     Failed to add the resource:添加配置项失败

·     Invalid tenant type:无效的租户类型

·     Operation failed. The UUID already exists:创建失败,UUID已存在

·     The tenant name has been used:租户名称已被占用

·     Before creating tenants, you must create sites创建租户前请先创建站点

·     The number of tenant has reached the limit specified in the resource pool:租户数量已达到资源池数量最大值

·     DriverManager microservice processing failed:插件处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     You cannot create a tenant named default不允许创建名称为default的租户

·     Failed to process the request. Please check whether the plugin matches the version of Super Controller:请求处理失败,请检查插件与Super Controller版本是否配套

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.19  Update tenant

关键字

UPDATE_NSO_TENANT_OP

日志内容

Updated tenant “$1”, request: $2

参数解释

$1:租户的ID

$2:租户请求消息体

举例

Updated tenant "e1bace90-5972-db07-b4d6-56471fba2148", request: {"tenant":{"id":"e1bace90-5972-db07-b4d6-56471fba2148","name":"tenant-zjt4","description":"2222","siteResources":["zjt-transit"]}}

日志说明

用户进行了修改租户的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     The UUID is requiredUUID不能为空

·     The tenant type cannot be modified:租户类型不允许修改

·     The username of the tenant administrator cannot be modified:租户管理员名称不允许修改

·     The password of the tenant administrator cannot be modified:租户管理员密码不允许修改

·     Invalid request:无效的请求

·     The specified site does not exist:指定的站点资源不存在

·     The resource does not exist:配置项不存在

·     The tenant name has been used:租户名称已被占用

·     Failed to modify the resource:修改配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     You cannot delete this site, because it has device groups incorporated on the transit fabric and tenants bound to transit vRouters站点的设备组已被Transit Fabric纳管,并且站点上的租户已被Transit Router绑定,不允许删除该站点

·     The specified resource does not exist:指定的资源不存在

·     You cannot remove the tenant from the specified site, because the tenant is used by a tenant router access service:指定站点的租户已被租户Router接入使用,不允许从指定站点移除

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     You cannot edit the name of the default tenantdefault类型租户的名称不允许修改

·     Failed to process the request. Please check whether the plugin matches the version of Super Controller:请求处理失败,请检查插件与Super Controller版本是否配套

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     You cannot update a tenant named default:租户名称不允许修改为default

 

5.20  Delete tenant

关键字

DEL_NSO_TENANT_OP

日志内容

Deleted tenant “$1”, request: $2

参数解释

$1:租户的ID

$2:租户请求消息体

举例

Deleted tenant "acd1062f-2685-bc0f-2517-cac834373b24", request: {"id":"acd1062f-2685-bc0f-2517-cac834373b24","suc_only":true}

日志说明

用户进行了删除租户的操作

失败原因

当操作失败时,可能的原因如下:

·     The tenant has vPorts:该租户已被虚拟端口使用

·     Invalid request:无效的请求

·     The resource does not exist:配置项不存在

·     Failed to delete the resource:删除配置项失败

·     DriverManager microservice processing failed:插件处理失败

·     Cannot reach site “site_info:站点“站点信息”不可达

·     Site “site_info” processing failed:站点“站点信息”处理失败

·     The tenant has transit routers:该租户已被Transit Router使用

·     The specified resource does not exist:指定的资源不存在

·     You cannot delete the tenant, because the tenant is used by a tenant router access service:租户已被租户Router接入使用,不允许删除

·     While the system is deleting a tenant or unbinding a tenant from sites, do not perform any operations on the tenant or its resources:当执行删除租户或租户解绑站点操作时,不允许操作该租户和租户下的资源

·     Failed to process the request. Please check whether the plugin matches the version of Super Controller:请求处理失败,请检查插件与Super Controller版本是否配套

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

5.21  Add VNI

关键字

ADD_NSO_VNI_OP

日志内容

Added VNI “$1”, request: $2

参数解释

$1:全局资源池的ID

$2:全局资源池请求消息体

举例

Added VNI "8ce6420d-a74e-51df-ce8d-78607a3df794", request: {"vni":{"id":"8ce6420d-a74e-51df-ce8d-78607a3df794","name":"vni2","description":"","vni_type":"VXLAN","range"

:[{"start_seg_id":"2000","end_seg_id":"3000"}]}}

日志说明

用户进行了新增全局资源池的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     Invalid request:无效的请求

·     The VNI name is requiredVNI名称不能为空

·     The VNI range is requiredVNI范围不能为空

·     Invalid VNI range:无效的VNI范围

·     Internal error:内部错误

·     Failed to add the resource:添加配置项失败

·     Operation failed. The UUID already exists:创建失败,UUID已存在

·     The VNI name has been usedVNI名称已被占用

 

5.22  Update VNI

关键字

UPDATE_NSO_VNI_OP

日志内容

Updated VNI “$1”, request: $2

参数解释

$1:全局资源池的ID

$2:全局资源池请求消息体

举例

Updated VNI "8ce6420d-a74e-51df-ce8d-78607a3df794", request: {"vni":{"id":"8ce6420d-a74e-51df-ce8d-78607a3df794","range":[{"start_seg_id":2000,"end_seg_id":"3001"}]}}

日志说明

用户进行了修改全局资源池的操作

失败原因

当操作失败时,可能的原因如下:

·     The UUID is requiredUUID不能为空

·     The VNI name cannot be modifiedVNI名称不允许修改

·     The VNI type cannot be modifiedVNI类型不允许修改

·     Invalid JSON format:无效的JSON格式

·     Invalid request:无效的请求

·     The resource does not exist:配置项不存在

·     Internal error:内部错误

·     Invalid VNI range:无效的VNI范围

·     The VNI has been used and cannot be modifiedVNI已被使用,不允许修改

·     Different VNI ranges cannot overlapVNI范围不能重叠

·     Failed to modify the resource:修改配置项失败

·     The specified resource does not exist:指定的资源不存在

 

5.23  Delete VNI

关键字

DEL_NSO_VNI_OP

日志内容

Deleted VNI “$1”.

参数解释

$1:全局资源池的ID

举例

Deleted VNI “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除全局资源池的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid request:无效的请求

·     The resource does not exist:配置项不存在

·     Internal error:内部错误

·     Failed to delete the resource:删除配置项失败

·     The specified resource does not exist:指定的资源不存在

 

5.24  Updated resource pool limit settings

关键字

UPDATE_NSO_CONFIG_OP

日志内容

Updated resource pool limit settings, request: $1.

参数解释

$1:资源池数量最大值信息

举例

Updated resource pool limit settings, request: {"webresourcelimitsetting":{"limit_setting": [{"setting-type":"ROUTER","setting-value":1000}, {"setting-type":"PORT","setting-value":500},{"setting-type":"SUBNET","setting-value":500}, {"setting-type":"TENANT","setting-value":500}, {"setting-type":"NETWORK","setting-value":500}]}}.

日志说明

用户进行了修改资源池数量最大值的操作

失败原因

当操作失败时,可能的原因如下:

·     Invalid JSON format:无效的JSON格式

·     Invalid request:无效的请求

·     Internal error:内部错误

·     The value must be an integer greater than or equal to -1:最大值必须大于等于-1

 


6 NSO_PROVISION

本节介绍NSO模块Super Controller支持多DC互联功能的操作日志信息。

6.1  Add transit fabric

关键字

ADD_TRANSIT_FABRIC_OP

日志内容

Added transit fabric, request: $1

参数解释

$1Transit fabric的请求消息体

举例

Added transit fabric, request: {

         "transit_fabric":{

                   "name":"2",

                   "description":"2",

                   "device_groups":[

                   ]

         }

}

日志说明

用户进行了增加Transit fabric的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     Please specify a transit fabric nameTransit Fabric名称不能为空

·     A transit fabric already exists with the specified name:指定的Transit Fabric名称已存在

·     Please specify a site ID for the device group:设备组对应的站点ID不能为空

·     Failed to find a device group with the specified device group ID in the transit fabric:根据Transit Fabric中的设备组ID无法找到指定设备组

·     The specified site ID does not match that of the device group with the specified device group ID in the transit fabric:根据Transit Fabric中设备组ID找到的Site ID与当前填写的Site ID不一致

·     The site bound to the device group does not exist:设备组绑定的站点不存在

·     The specified device group does not exist:指定的设备组不存在

·     The description cannot exceed 255 characters描述最长255个字符

·     Please specify a device group IDdevice_group_id不能为空

·     Please specify a site ID for the device groupdevice_group_site_id不能为空

·     Failed to add the resource:添加资源失败

·     You can create up to one transit fabricTransit Fabric至多创建一个

·     Make sure at least one of the selected device groups is used for DC interconnect已选设备组中必须存在网络位置是DC间互联的设备组

·     A transit fabric name must be a string of up to 64 characters without spacesTransit Fabric名称最长64个字符,不支持空格

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.2  Update transit fabric

关键字

UPDATE_TRANSIT_FABRIC_OP

日志内容

Updated transit fabric “$1”, request: $2

参数解释

$1Transit fabricID

$2Transit fabric的请求消息体

举例

Updated transit fabric "c6bfd1a0-67ff-4699-b300-b9732f408772", request: {

         "transit_fabric":{

                   "description":"1",

                   "device_groups":[

                            {

                                 "id":"c6bfd1a0-67ff-4699-b300-b9732f408772",

                                 "site_id":"98390f34-8169-0d14-0d7d-b5245a42e225"

                            }

                   ]

         }

}

日志说明

用户进行了修改Transit fabric的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     The specified device group does not exist:指定的设备组不存在

·     The specified transit fabric does not exist:指定的Transit Fabric不存在

·     The description cannot exceed 255 characters:描述最长255个字符

·     Please specify a device group IDdevice_group_id不能为空

·     Please specify a site ID for the device groupdevice_group_site_id不能为空

·     Failed to modify the resource:修改资源失败

·     You cannot edit the transit fabric nameTransit Fabric名称不允许修改

·     Make sure at least one of the selected device groups is used for DC interconnect已选设备组中必须存在网络位置是DC间互联的设备组

·     You cannot edit the name of the transit fabric or its device group settings, because it has completed service orchestration已进行业务编排的Transit Fabric,其名称和设备组不允许修改

·     The site of the device group has been bound to a tenant router access:设备组的站点已被租户Router接入绑定

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.3  Delete transit fabric

关键字

DEL_TRANSIT_FABRIC_OP

日志内容

Deleted transit fabric $1

参数解释

$1Transit fabricID

举例

Deleted transit fabric edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除Transit fabric的操作

·     失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete the resource:删除资源失败

·     You cannot delete the transit fabric, because it has completed service orchestration:已进行业务编排的Transit Fabric不允许删除

·     You cannot delete this device group, because the site of the device group has been bound to a border gateway access service:设备组的站点已被出口网关接入绑定

·     This feature is not supported by the current version of the controller当前控制组件版本不支持该功能

·     You cannot delete the transit fabric, because it contains border ports:指定Transit Fabric下存在专线端口,不允许删除

 

6.4  Add transit router

关键字

ADD_NSO_TRANSIT_ROUTER_OP

日志内容

Added transit router, request: $1

参数解释

$1Transit router的请求消息体

举例

Added transit router, request: {

         "transit_router":{

                   "name":"TR-1",

                   "description":"654",

                   "tenant_id":"d960e576-cb33-453e-96ba-77aceb5be7fd",

                   "vrf_mode":"MANUAL",

                   "vrf_name":"654",

                   "vni_mode":"MANUAL",

                   "l3_vni":"100002",

                   "transit_site_id":"23340cb1-8a95-4bd3-b081-67b480d71824"

         }

}

日志说明

用户进行了增加Transit router的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     VNI allocation failedVNI分配失败

·     The VNI has been usedVNI已被使用

·     VNI allocation failure: No VNIs availableVNI分配失败:VNI已耗尽

·     The description cannot exceed 255 characters:描述最长255个字符

·     The specified transit fabric does not exist:指定的Transit Fabric不存在

·     A transit router name must be a case-sensitive string of up to 255 characters and cannot be all spacesTransit Router名称最长255个字符,区分大小写,不支持全为空格

·     A transit router already exists with the specified name:指定的Transit Router名称已存在

·     A VRF name must be a case-sensitive string of up to 31 characters. Valid characters are letters and digitsVRF名称最长31个字符,区分大小写,仅支持字母和数字

·     The specified tenant does not exist:指定的租户不存在

·     Please specify a VRF modevrf_mode必填

·     You do not need to specify a VRF name when the value for the vrf_mode field is autovrf_mode取值为auto时无需设置VRF名称

·     You must specify a VRF name when the value for the vrf_mode field is manualvrf_mode取值为manual时需设置VRF名称

·     The value for the vrf_mode field can only be auto or manualvrf_mode仅支持automanual

·     A VRF already exists with the specified name:指定的VRF名称已存在

·     The operation type is invalid:无效的操作类型

·     Failed to add the resource:添加资源失败

·     Please specify the vni_mode fieldvni_mode必填

·     The value for the vni_mode field can only be auto or manualvni_mode仅支持automanual

·     You do not need to specify an L3VNI when the value for the vni_mode field is autovni_mode取值为auto时无需设置l3_vni

·     You must specify an L3VNI when the value for the vni_mode field is manualvni_mode取值为manual时需设置l3_vni

·     Please specify this parameter参数必填

·     The specified tenant must exist on all sites of the specified transit fabric指定租户需要在指定Transit Fabric的所有站点上存在

·     The specified transit fabric does not have device groups指定Transit Fabric不存在设备组

·     The automatically generated VRF name and the existing VRF name cannot be the same. Please specify the VRF name manually自动生成的VRF名称与已存在的VRF名称重复,请手动指定VRF名称

·     The specified transit fabric does not exist指定的Transit Fabric不存在

·     The value range of L3VNI is an integer from 1 to 16777215L3VNI的取值范围为1~16777215的整数

·     Invalid transit router type:无效的Transit Router类型

·     Please specify external CIDRsexternal cidrs必填

·     Invalid external CIDRs:无效的外部网段

·     The destination subnets overlap:目的网段重叠

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.5  Update transit router

关键字

UPDATE_NSO_TRANSIT_ROUTER_OP

日志内容

Updated transit router, request: $1

参数解释

$1Transit router的请求消息体

举例

Updated transit router, request: {

         "transit_router":{

                   "operation":null

         }

}

日志说明

用户进行了修改Transit router的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist指定的资源不存在

·     The operation type is invalid:无效的操作类型

·     Please specify the operation fieldoperation字段必填

·     Failed to modify the resource:修改资源失败

·     You cannot edit the %s parameter:参数(%s)不能被修改

·     To predelete the transit router, make sure all tenant router accesses bound to the transit router have been predeleted:预删除的Transit Router下必须全为预删除的租户Router接入或不存在租户Router接入

·     You cannot delete the destination subnet from the transit router, because the destination subnet has been specified for a route entry. The route entry might still exist or have been pre-deletedTransit Router的目的网段已被路由表项使用(路由表项存在或者被删除但未进行配置发放),不允许删除

·     To predelete the transit router, make sure no border gateway access services are bound to the transit router or all gateway access services bound to the transit router have been predeleted:预删除的Transit Router下必须全为预删除的出口网关接入或不存在出口网关接入

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Remote CIDRs specified for the transit router links associated with the transit router of Service B. Remote CIDRs specified for the transit router links inherits the destination subnets specified for the remote transit router租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的对端网段不能重叠。指定Transit Router连接的对端网段继承对端Transit Router的目的网段

 

6.6  Delete transit router

关键字

DEL_NSO_TRANSIT_ROUTER_OP

日志内容

Deleted transit router “$1”.

参数解释

$1Transit routerID

举例

Deleted transit router “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除Transit router的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist指定的资源不存在

·     Failed to delete the resource:删除资源失败

·     You cannot directly delete resources specified in a configuration deployment配置下发过的资源不允许直接删除

·     You cannot delete the specified transit router, because it is bound to a tenant router access:已绑定租户Router接入的Transit Router不允许删除

·     You cannot delete the transit router, because it has been bound to border gateway access services已绑定出口网关接入的Transit Router不允许删除

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     You cannot delete the transit router, because it has been used by a VPC VPN:指定的Transit Router已被VPC专线使用,不允许删除

 

6.7  Add VPC connection

关键字

ADD_VPC_CONNECT_OP

日志内容

Added VPC connection, request: $1

参数解释

$1:租户Router接入的请求消息体

举例

Added VPC connection, request: {

         "vpc_connection":{

                   "transit_router_id":"41dfff94-8a96-43eb-af0e-7b325a8505d1",

                   "site_id":"98390f34-8169-0d14-0d7d-b5245a42e225",

                   "tenant_id":"d960e576-cb33-453e-96ba-77aceb5be7fd",

                   "router_id":"5e761ce1-c87d-4efc-b1fa-f2f480fc5289",

                   "fw_enable":false,

                   "is_local_all":true,

                   "is_peer_all":true,

                   "local_subnets":[

                           

                   ],

                   "local_cidrs":[

                           

                   ],

                   "peer_cidrs":[

                           

                   ],

                   "transit_site_id":"23340cb1-8a95-4bd3-b081-67b480d71824"

         }

}

日志说明

用户进行了增加租户Router接入的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The specified transit fabric does not exist:指定的Transit Fabric不存在

·     No transit routers exist in the transit fabric:当前Transit Fabric下不存在Transit Router

·     The specified resource does not exist in the specified fabric:指定的资源在站点上不存在

·     Please specify a peer CIDRpeer_cidr必填

·     The site in the tenant router access is not in the specified transit fabric:租户Router接入的站点不在指定Transit Fabric

·     The specified site does not exist:指定的站点不存在

·     The tenant list is empty in the specified site in the tenant router access:租户Router接入指定的站点下,租户列表为空

·     The specified site does not have the tenant bound to the tenant router access:租户Router接入绑定的租户不在指定站点中

·     The vRouter bound to the tenant router access does not belong to the specified tenant:租户Router接入绑定的虚拟路由器不在指定租户下

·     The specified subnet is not attached to the vRouter bound to the tenant router access:租户Router接入绑定的虚拟路由器中不存在指定的子网

·     The specified vSubnet of tenant router access does not exist:租户Router接入指定的虚拟子网不存在

·     The specified device group does not exist:指定的设备组不存在

·     The operation type is invalid:无效的操作类型

·     The specified tenant does not exist:指定的租户不存在

·     Please specify the is_local_all fieldis_local_all必填

·     Please specify the is_peer_all fieldis_peer_all必填

·     Please specify either the local_subnets field or local_cidrs field, or both本端子网和本端网段至少填写一项

·     You must specify both local CIDRs and remote CIDRs, because the firewall feature is disabled for the tenant router access租户Router接入不开启防火墙时,不支持只指定对端

·     You cannot bind the transit vRouter to the tenant router access, because the transit vRouter has been bound to another tenant router access using the same tenant router租户Router接入选择相同租户Router时,不允许绑定相同的Transit Router

·     The transit fabric has not incorporated the device groups used in the gateway for the specified tenant router指定租户Router网关,其成员设备组不在Transit Fabric纳管的设备组中

·     The vRouter to be bound to the tenant router access does not exist租户Router接入绑定的虚拟路由器不存在

·     The transit router to be bound to the tenant router access does not exist租户Router接入绑定的Transit router不存在

·     A tenant router access already exists between the specified vRouter and transit router指定的虚拟路由器与指定的Transit router已建立租户Router接入

·     The VRF name of the tenant router access cannot be the same as that of the transit routers in the same transit fabric租户Router接入的VRF名称不可与同一个Transit Fabric下的Transit RouterVRF相同

·     For tenant router accesss attached to the same transit router in the site, enable all of them to pass through the firewall or disable the setting for them:相同站点下的租户Router接入,若连接同一个Transit Router,要求都过墙或者都不过墙

·     Failed to add the resource:添加资源失败

·     Please specify this parameter:参数必填

·     Invalid local CIDR:无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

·     The specified tenant of tenant router access does not exist:租户Router接入指定的租户不存在

·     The transit fabric has not incorporated the device groups used in the gateway for the specified vRouter:指定虚拟路由器上的网关,其成员设备组不在Transit Fabric纳管的设备组中

·     Different local CIDR cannot overlap:本端网段不能相互重叠

·     The remote CIDRs cannot overlap:对端网段不能相互重叠

·     The specified transit fabric does not have device groups:指定Transit Fabric不存在设备组

·     A tenant router access already exists with the specified name指定的租户Router接入名称已存在

·     A tenant router access name must be a case-sensitive string of up to 255 characters and cannot be all spaces:租户Router接入名称最长255个字符,区分大小写,不支持全为空格

·     The tenant of the transit router does not exist on the site of the tenant router accessTransit Router的租户在租户Router接入指定的站点上不存在

·     Please specify a transit router IDTransit RouterID不能为空

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     The transit vRouter is the border gateway group type. You cannot both connect a tenant vRouter to and configure a transit vRouter link for it:外部网关组类型的Transit Router不能连接一个租户Router的同时配置一个Transit Router连接

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Local CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的本端网段不能重叠

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Remote CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的对端网段不能重叠

 

6.8  Update VPC connection

关键字

UPDATE_VPC_CONNECT_OP

日志内容

Updated VPC connection, request: $1

参数解释

$1:租户Router接入的请求消息体

举例

Updated VPC connection, request: {

         "vpc_connection":{

                   "operation":"UPDATE"

         }

}

日志说明

用户进行了修改租户Router接入的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     The operation type is invalid:无效的操作类型

·     Invalid UUID:无效的UUID

·     The specified resource does not exist in the specified site:指定的资源在站点上不存在

·     Please specify the operation fieldoperation字段必填

·     You cannot change the transit router bound to the tenant router access租户Router接入绑定的Transit router不能被修改

·     Failed to modify the resource:修改资源失败

·     You cannot edit the %s parameter:参数(%s)不能被修改

·     Invalid local CIDR无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

·     Different local CIDR cannot overlap本端网段不能相互重叠

·     The remote CIDRs cannot overlap:对端网段不能相互重叠

·     To predelete the transit router, make sure all tenant router accesses bound to the transit router have been predeleted预删除的Transit Router下必须全为预删除的租户Router接入或不存在租户Router接入

·     The tenant of the transit router does not exist on the site of the tenant router accessTransit Router的租户在租户Router接入指定的站点上不存在

·     Please specify a transit router IDTransit RouterID不能为空

·     Please predelete all tenant router access services bound to the transit router first先删除Transit Router下非预删除状态的租户Router接入

·     If remote firewall is enabled, the transit router type must be border gateway group:租户router接入对端防火墙开启时,Transit Router的互通类型必须为外部网关组

·     If local firewall is enabled and the transit router type is border gateway group, you cannot specify remote CIDRs:租户Router接入本端防火墙开启时,Transit Router的互通类型为外部网关组,不能指定对端

·     If local firewall is enabled and the transit router type is east-west, you must specify remote CIDRs:租户Router接入本端防火墙开启时,Transit Router的互通类型为东西向,必须指定对端

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Local CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的本端网段不能重叠

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Remote CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的对端网段不能重叠

 

6.9  Delete VPC connection

关键字

DEL_VPC_CONNECT_OP

日志内容

Deleted VPC connection “$1”

参数解释

$1:租户Router接入的ID

举例

Deleted VPC connection "60ede326-144e-4949-a186-65891ae70bf0"

日志说明

用户进行了删除租户Router接入的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete the resource:删除资源失败

·     You cannot directly delete resources specified in a configuration deployment配置下发过的资源不允许直接删除

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.10  Deploy transit fabric

关键字

DEPLOY_TRANSIT_FABRIC_OP

日志内容

Deployed transit fabric “$1”

参数解释

$1Transit fabricID

举例

Deployed transit fabric "60ede326-144e-4949-a186-65891ae70bf0"

日志说明

用户进行了配置发放部署的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的Transit Fabric不存在

·     No transit routers exist in the transit fabric当前Transit Fabric下不存在Transit Router

·     The transit fabric does not have resources to be deployedTransit Fabric中不存在要发放的配置

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.11  Add EBGP connection

关键字

ADD_NSO_EBGP_CONNECTION_OP

日志内容

Added an EBGP connection, request: $1

参数解释

$1EBGP connection的请求消息体

举例

Added an EBGP connection, request: {

    "ebgp_connection": {

        "transit_fabric_id": "9029f283-39ed-4b4e-9db0-4f2b42c74dd9",

        "local_device_info": {

            "site_id": "d633b903-bf47-80e3-f83e-b23656175437",

            "group_id": "a28ad0cf-adf5-465d-bb10-ea1dc58094ee",

            "device_id": "1872f0ab-8229-4434-804d-ce34790f6f2f",

            "dci_vtep_ip": "2.3.4.12",

            "as_number": "4294967295"

        },

        "peer_device_info": {

            "site_id": "19290154-3cd0-f8d2-f9a7-59831a48e984",

            "group_id": "973c512b-d802-4b6f-91dc-ece8a8d633a9",

            "device_id": "f873a1af-8bf0-49fd-a7fa-efa9358cb83a",

            "dci_vtep_ip": "55.3.2.5",

            "as_number": "22"

        }

    }

}

日志说明

用户进行了增加EBGP connection的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The specified resource does not exist:指定的资源不存在

·     The specified transit fabric does not exist:指定的Transit Fabric不存在

·     The page_size value must be an integer in the range of 1 to 100:输入的page_size不合法

·     The page value must be an integer in the range of 1 to 21474836:输入的page不合法

·     Please specify complete local device information:本端设备的信息不完整

·     Please specify complete remote device information:对端设备的信息不完整

·     The local site is not incorporated:本端站点未被纳管

·     The remote site is not incorporated:对端站点未被纳管

·     The local device group is not in the specified transit fabric:指定Transit Fabric未绑定本端设备组

·     The remote device group is not in the specified transit fabric:指定Transit Fabric未绑定对端设备组

·     The specified device group is not in the transit fabric:指定设备组未被Transit Fabric绑定

·     The device groups in the local site are not on the transit fabric:本端站点的设备组未被Transit Fabric绑定

·     The device groups in the remote site are not on the transit fabric:对端站点的设备组未被Transit Fabric绑定

·     The local site is not on the transit fabric:本端站点未被Transit Fabric绑定

·     The remote site is not on the transit fabric:对端站点未被Transit Fabric绑定

·     No border devices found in the local site:本端站点未获取到边界设备

·     No border devices found in the remote site:对端站点未获取到边界设备

·     The local device group is not in the specified site:本端设备组不在指定站点中

·     The remote device group is not in the specified site:对端设备组不在指定站点中

·     The local device is not in the device group:本端设备不在该设备组中

·     The remote device is not in the device group:对端设备不在该设备组中

·     The local device is not in the site or is not a border device:本端设备不在该站点中或不是边界设备

·     The remote device is not in the site or is not a border device:对端设备不在该站点中或不是边界设备

·     The specified VTEP IP is different from that of the local device:指定的VTEP IP与本端设备的不一致

·     The specified VTEP IP is different from that of the remote device:指定的VTEP IP与对端设备的不一致

·     The VTEP IP of the local device does not exist本端设备上的VTEP IP不存在

·     The VTEP IP of the remote device does not exist:对端设备上的VTEP IP不存在

·     The specified AS number is different from that of the local device:指定的AS号与本端设备的不一致

·     The specified AS number is different from that of the remote device:指定的AS号与对端设备的不一致

·     Please specify a transit fabric IDTransit FabricID不能为空

·     The AS number of the local device does not exist:本端设备上的AS号不存在

·     The AS number of the remote device does not exist:对端设备上的AS号不存在

·     The local site and the remote site must be different:本端和对端站点不能相同

·     The specified BGP neighbor already exists:指定的BGP邻居关系已经存在

·     Invalid AS number:无效的AS

·     You cannot delete the transit fabric, because it has BGP neighbors configured:指定Transit Fabric下已存在BGP邻居关系,不允许删除

·     You cannot delete the device group from the transit fabric, because the border devices in the device group have BGP neighbors:指定设备组的边界设备已创建BGP邻居关系,不允许从Transit Fabric中删除

·     No DCI VTEP IP is configured for the local device:本端设备未配置DCI VTEP IP

·     No DCI VTEP IP is configured for the remote device:对端设备未配置DCI VTEP IP

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.12  Delete EBGP connection

关键字

DEL_NSO_EBGP_CONNECTION_OP

日志内容

Deleted EBGP connection $1

参数解释

$1EBGP connectionID

举例

Deleted EBGP connection "827e594e-3234-4dee-8195-e6a8f23ccfb3"

日志说明

用户进行了删除EBGP connection的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete the resource:删除资源失败

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.13  Add border gateway access service

关键字

ADD_GATEWAY_ACCESS_OP

日志内容

Added a border gateway access service, request: $1

参数解释

$1Border gateway access service的请求消息体

举例

Added a border gateway access service, request: {

         "gateway_access": {

                   "name": "GW-0",

                   "description": "",

                   "transit_router_id": "d28c4a13-2a30-407a-9931-9646f28f0148",

                   "site_id": "fcedab4b-3527-4462-bf98-4840cf77fef9",

                   "gateway_id": "5898d22f-9358-41fe-9a63-177a0d3fd043",

                   "role": "Master",

                   "firewall_enable": false,

                   "subnets": [{

                            "id": "9d90c3df-c7d6-4a3c-b7b1-f8d27c6c4f68"

                   }, {

                            "id": "567ff798-e7b5-4600-80c2-1b40c71ec21a"

                   }],

                   "transit_fabric_id": "7085f455-4e04-4c0b-9c20-7fb624849d60"

         }

}

日志说明

用户进行了增加出口网关接入的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The specified border gateway does not exist on the specified transit router for the site:指定的出口网关在该站点的指定Transit Router下不存在

·     Invalid border gateway access role:无效的出口网关接入角色

·     The tenant of the transit router does not exist on the site specified for the border gateway access serviceTransit Router的租户在出口网关接入指定的站点上不存在

·     The external network does not exist on the specified site:该外部网络在指定的站点上不存在

·     The subnet does not exist in the specified site:该子网在指定的站点不存在

·     The subnet does not exist in the specified external network该子网在指定的外部网络上不存在

·     The transit router to be bound to the border gateway access service does not exist出口网关接入绑定的Transit Router不存在

·     A border gateway access service already exists with the specified name:指定的出口网关接入名称已存在

·     A border gateway access service name must be a case-sensitive string of up to 255 characters and cannot contain only spaces:出口网关接入名称最长255个字符,区分大小写,不支持全为空格

·     The external network type must be exclusive when the firewall is disabled:防火墙关闭时外部网络仅支持独享类型

·     The tenant of the specified transit router does not exist指定的Transit Router的租户不存在

·     The transit router bound to the border gateway access service must be the border gateway group type:出口网关接入中的Transit Router类型必须是外部网关组类型

·     You cannot configure the border gateway access service role as secondary, because no primary border gateway access service has been configured for the transit router:该Transit Router未配置主出口网关接入,当前出口网关接入的角色不能配置为备

·     The transit router already has a primary border gateway access service:该Transit Router已有一主出口网关接入

·     The transit router already has a primary border gateway access service and a secondary one:该Transit Router已有一主一备出口网关接入

·     Only transit routers of the border gateway group type support border gateway access services:只有外部网关组类型的Transit Router支持配置出口网关接入

·     Please specify a firewall, because the firewall feature is enabled防火墙开启时,必须指定防火墙

·     Please specify a firewall service, because the firewall feature is enabled防火墙开启时,必须指定防火墙服务

·     Please specify an external network, because the firewall feature is enabled防火墙开启时,必须指定外部网络

·     The border gateway access services bound to the same transit router cannot belong to the same site同一个Transit Router下的出口网关接入不能属于同个站点

·     The specified firewall does not exist at the site指定的防火墙在站点上不存在

·     The specified firewall service does not exist at the site指定的防火墙服务在站点上不存在

·     The mode setting for the firewall must be CGSR防火墙的mode参数必须为CGSR

·     When the firewall feature is enabled, the operating mode for the external network can only be indirectly connected防火墙开启时外部网络仅支持共享类型

·     The firewall must be enabled or disabled on both the primary and secondary border gateway access services主出口网关接入和备出口网关接入的防火墙开关状态必须相同

·     Make sure the primary and secondary border gateway access services are bound to the same subnet and use the same gateway IP address主出口网关接入和备出口网关接入关联的子网网段及网关IP不一致

·     Please specify the type as VFW and the family as CGSR for the firewall service防火墙服务的type参数必须是VFWfamily参数必须为CGSR

·     Please specify an external network subnet外部网络的子网为空

·     The specified site does not exist指定的站点不存在

·     You cannot create the border gateway access service, because the transit router has predelete border gateway access service:当Transit Router下有出口网关接入处于预删除时,不允许创建出口网关接入

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     The border gateway specified for a border gateway access service cannot be a tenant-exclusive border gateway:出口网关接入所选的出口网关不能为租户独占类型的出口网关

 

6.14  Update border gateway access service

关键字

UPDATE_GATEWAY_ACCESS_OP

日志内容

Updated border gateway access service, request: $1

参数解释

$1Border gateway access service的请求消息体

举例

Updated border gateway access service, request: {

         "gateway_access": {

                  "description": "extgw1"

         }

}

日志说明

用户进行了修改出口网关接入的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified border gateway access service does not exist:指定的出口网关接入不存在

·     Invalid border gateway access role:无效的出口网关接入角色

·     The operation type is invalid无效的操作类型

·     You cannot restore the secondary border gateway access service when the primary border gateway access service is waiting to be deleted:主出口网关接入处于预删除时,不允许恢复备出口网关接入

·     You cannot update the primary border gateway access service, because the secondary border gateway access service has been predeleted:当备出口网关接入处于预删除时,不允许更新主出口网关接入

·     Please bind border gateway access services that are not predeleted to the transit router first先为Transit Router绑定非预删除状态的出口网关接入

 

6.15  Delete border gateway access service

关键字

DEL_GATEWAY_ACCESS_OP

日志内容

Deleted border gateway access service “$1”

参数解释

$1Border gateway access serviceID

举例

Deleted border gateway access service “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”

日志说明

用户进行了删除出口网关接入的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified border gateway access service does not exist:指定的出口网关接入不存在

·     You cannot delete the primary border gateway access service when the secondary border gateway access service exists备出口网关接入存在时,不允许删除主出口网关接入

·     Failed to delete the border gateway access service, because the transit router have tenant router accesses:删除出口网关接入时,Transit Router下不能存在租户router接入

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.16  Add route entry

关键字

ADD_NSO_ROUTE_ENTRY_OP

日志内容

Added a route entry, request: $1

参数解释

$1Route entry的请求消息体

举例

Added a route entry, request: {

         "route": {

                  "gateway_access_id": "8f6cd217-0313-434d-846e-4b8cb137c15f",

                  "destination_cidr": "10.1.1.0/24",

                  "next_hop_type": "IPv4",

                  "next_hop_ip": "20.1.1.1"

         }

}

日志说明

用户进行了增加路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     Invalid next hop type for the route entry无效的路由表项下一跳类型

·     Invalid next hop type for the IPv4 route entry无效的IPv4路由表项下一跳

·     Invalid next hop type for the IPv6 route entry无效的IPv6路由表项下一跳

·     Please specify an ID for the border gateway access service出口网关接入ID必填

·     Please specify CIDRsCIDR地址必填

·     Please specify the destination subnet for the transit router bound to the border gateway access service出口网关接入中Transit Router的目的网段不能为空

·     Invalid CIDRs无效的CIDR地址

·     Please specify the next hop type for the route entry路由表项下一跳类型必填

·     Please specify the next hop for the route entry路由表项下一跳必填

·     The route entry already exists该路由表项已存在

·     The specified manual NQA profile does not exist:指定的手动NQA策略不存在

 

6.17  Update route entry

关键字

UPDATE_ NSO_ROUTE_ENTRY_OP

日志内容

Updated route entry “$1”, request: $2

参数解释

$1Route entryID

$2Route entry的请求消息体

举例

Updated route entry "c6bfd1a0-67ff-4699-b300-b9732f408772", request: {

         " route": {

                 "operation": "UPDATE"

         }

}

日志说明

用户进行了修改路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定资源不存在

·     The specified border gateway access service does not exist:指定的出口网关接入不存在

·     The operation type is invalid无效的操作类型

·     The specified manual NQA profile does not exist:指定的手动NQA策略不存在

 

6.18  Delete route entry

关键字

DEL_NSO_ROUTE_ENTRY_OP

日志内容

Deleted route entry $1

参数解释

$1Route entryID

举例

Deleted route entry edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

 

6.19  Add vPort

关键字

ADD_VPORT_OP

日志内容

Added a vPort, request: $1

参数解释

$1vPort的请求消息体

举例

Added a vPort, request: {

     "port": {

                   "gateway_access_id": "8f6cd217-0313-434d-846e-4b8cb137c15f",

                   "external_network_id": "edd60212-54b7-4382-865a-16036a35da64",

                   "fixed_ips": [{

                            "ip_address": "16.16.16.160"

                   }],

                   "operation": "CREATE",

                   "binding:profile": {

                            "enable_snat": true,

                            "external_snat_ips": [

                                     "16.16.16.100"

                            ]

                   }

         } }

日志说明

用户进行了增加虚拟端口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     Please specify an IP address for the vPort虚拟端口的IP地址不能为空

·     You can specify a maximum of two IP addresses for the vPort虚拟端口的IP地址最多为2

·     Invalid vPort IP address虚拟端口的IP地址无效

·     The extended SNAT IP address cannot be the same as a vPort IP address扩展SNAT IP地址与虚拟端口IP地址存在冲突

·     The subnet for the extended SNAT IP address was not found未找到扩展SNAT IP地址对应的子网

·     The extended SNAT IP address of the extended external vPort must be in the same subnet as a vPort IP address扩展外网端口的扩展SNAT IP地址必须与虚拟端口IP地址在同一网段

·     Invalid extended SNAT IP address无效的扩展SNAT IP地址

·     The subnet of the vPort IP address does not exist虚拟端口IP地址所在的子网不存在

·     Please specify the border gateway access ID出口网关接入ID必填

·     You can configure vPort settings only when the firewall feature is enabled for the border gateway access service仅出口网关接入开启防火墙时,需要配置虚拟端口

·     You cannot configure extended SNAT IP addresses for a vPort, because the vPort does not have an IPv4 address虚拟端口不包含IPv4类型地址时,不支持配置扩展SNAT IP地址

·     The vPort IP address cannot be the same as the gateway IP address虚拟端口IP地址和网关IP地址冲突

·     The extended SNAT IP address cannot be the same as the gateway IP address扩展SNAT IP地址和网关IP地址冲突

·     Make sure the vPort IP addresses belong to different subnets不同虚拟端口的IP地址不能在同一子网网段下

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.20  Update vPort

关键字

UPDATE_VPORT_OP

日志内容

Updated port “$1”, request: $2

参数解释

$1vPortID

$2vPort的请求消息体

举例

Updated port "c3f8e282-342e-4ab8-b7bb-8bbdca9adc73", request: {

         "port": {

                   "id": "c3f8e282-342e-4ab8-b7bb-8bbdca9adc73",

                   "gateway_access_id": "b2fcd6e5-a1f5-4c19-aa6b-f454f86a08cf",

                   "external_network_id": "e3092c89-bf16-4627-b197-690f63fb1f5d",

                   "external_network_name": "zjt0628",

                   "operation": "UPDATE",

                   "fixed_ips": [{

                            "ip_address": "12::22"

                   }, {

                            "ip_address": "12.0.0.16"

                   }],

                   "binding:profile": {

                            "enable_snat": false,

                            "fw_enabled": true,

                            "external_snat_ips": ["13.0.0.33"]

                   },

                   "dataStatus": "modified",

                   "modify": true

         }

}

日志说明

用户进行了修改虚拟端口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定资源不存在

·     The operation type is invalid. 无效的操作类型

·     You cannot configure extended SNAT IP addresses for a vPort, because the vPort does not have an IPv4 address:虚拟端口不包含IPv4类型地址时,不支持配置扩展SNAT IP地址

·     The external network does not exist on the specified site:该外部网络在指定的站点上不存在

·     The extended SNAT IP address cannot be the same as the gateway IP address:扩展SNAT IP地址和网关IP地址冲突

·     The subnet for the extended SNAT IP address was not found:未找到扩展SNAT IP地址对应的子网

·     Please specify an external network subnet:外部网络的子网为空

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.21  Delete vPort

关键字

DEL_VPORT_OP

日志内容

Deleted vPort $1

参数解释

$1vPortID

举例

Deleted vPort edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除虚拟端口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     The operation type is invalid:无效的操作类型

 

6.22  Add floating IP

关键字

ADD_FLOATING_IP_OP

日志内容

Added a floating IP, request: $1

参数解释

$1:浮动IP的请求消息体

举例

Added a floating IP, request: {

         "floatingip": {

"external_network_id": "edd60212-54b7-4382-865a-16036a35da64",

                   "subnet_id": "edd60212-54b7-4382-865a-16036a35da64",     

                   "floating_ip_address": "22.22.22.18",

                   "port_number": null,

                   "fixed_ip_address": "22.22.22.16",

                   "local_port_number": null,

                   "exclude_ports": [{

                            "protocol": "TCP",

                            "dest_portrange_min": "0",

                            "dest_portrange_max": "65535"

                   }],

                   "dataStatus": "added",

                   "gateway_access_id": "f17f8479-de6e-4604-af2e-3d0dfc87966e"

         }

}

日志说明

用户进行了增加浮动IP的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The operation type is invalid:无效的操作类型

·     Please specify an ID for the border gateway access service:出口网关接入ID必填

·     The specified border gateway access service does not exist:指定的出口网关接入不存在

·     The floating IP address is not in the specified subnet segment:该浮动IP地址不在指定的子网网段范围内

·     You can create a floating IP only when the edge device to external network for the transit router is firewall:创建浮动IP时,Transit Router的外部出口设备必须是防火墙类型

·     Invalid network protocol type:无效的网络协议类型

·     Invalid internal IP address:无效的内网IP地址

·     The internal IP address conflicts with another floating IP address:内网IP地址和其他浮动IP冲突

·     The port number must be an integer in the range of 1 to 65535:浮动IP的端口号取值范围必须是165535的整数

·     Invalid internal port number:无效的内网端口号

·     After you specify an internal port number, the network protocol type must be TCP or UDP:当配置了内网端口号时,浮动IP的协议类型必须是TCPUDP

·     Invalid floating IP address:无效的浮动IP地址

·     You cannot specify both protocol type and excluded ports for a floating IP address:浮动IP的协议类型和浮动IP拒绝服务的端口不能同时配置

·     The excluded transport protocol type is invalid:浮动IP拒绝服务的端口协议类型无效

·     Both the maximum port number and the minimum port number in an excluded port range must be an integer in the range of 0 to 65535:浮动IP拒绝服务的端口范围必须是065535的整数

·     The minimum port number cannot be greater than the maximum port number in an excluded port range:浮动IP拒绝服务的端口的最小值必须小于等于最大值

·     The excluded port ranges added for a floating IP cannot be exactly the same:同一个浮动IP下的拒绝服务的端口配置不能完全相同

·     You must enter a floating IP address:浮动IP地址不能为空

·     The floating IP address conflicts with another floating IP address:浮动IP地址和其他浮动IP冲突

·     The external network does not exist on the specified site:该外部网络在指定的站点上不存在

·     Please specify an external network subnet:外部网络的子网为空

·     The subnet to which the floating IP address belongs does not exist:浮动IP地址对应的子网不存在

·     The floating IP address conflicts with the gateway IP address of the corresponding subnet:浮动IP地址与对应子网的网关IP地址冲突

·     The specified site does not exist:指定的站点不存在

·     Make sure the two border gateway access services are bound to the same subnet and use the same gateway IP address:两个出口网关接入关联的子网网段和网关IP不一致

·     If you specify a port number for a floating IP, the network protocol type must be TCP or UDP:当配置浮动IP的端口号时,浮动IP的网络协议类型必须是TCPUDP

·     The specified QoS policy does not exist in the site:指定的QoS策略在站点上不存在

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.23  Update floating IP

关键字

UPDATE_FLOATING_IP_OP

日志内容

Updated floating IP $1, request: $2

参数解释

$1:浮动IPID

$2:浮动IP的请求消息体

举例

Updated floating IP "71aa63cd-4e96-4a56-a91c-06e8e370e04c", request: {

         "floatingip": {

                   "id": "71aa63cd-4e96-4a56-a91c-06e8e370e04c",

                   "gateway_access_id": "f17f8479-de6e-4604-af2e-3d0dfc87966e",

"external_network_id": "edd60212-54b7-4382-865a-16036a35da64",

                   "subnet_id": "edd60212-54b7-4382-865a-16036a35da64",     

                   "qos_id": "b0710ea7-0b80-45d7-8128-1246ccbe9ffa",

                   "qos_name": "2qos",

                   "floating_ip_address": "22.22.22.18",

                   "protocol": null,

                   "port_number": null,

                   "fixed_ip_address": "22.22.22.16",

                   "local_port_number": null,

                   "exclude_ports": [{

                            "protocol": "TCP",

                            "dest_portrange_min": "2231",

                            "dest_portrange_max": "65535"

                   }],

                   "operation": "CREATE",

                   "dataStatus": "modified"

         }

}

日志说明

用户进行了修改浮动IP的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定资源不存在

·     The operation type is invalid:无效的操作类型

·     The specified border gateway access service does not exist:指定的出口网关接入不存在

·     You cannot specify both protocol type and excluded ports for a floating IP address:浮动IP的协议类型和浮动IP拒绝服务的端口不能同时配置

·     The excluded transport protocol type is invalid:浮动IP拒绝服务的端口协议类型无效

·     Both the maximum port number and the minimum port number in an excluded port range must be an integer in the range of 0 to 65535:浮动IP拒绝服务的端口范围必须是065535的整数

·     The minimum port number cannot be greater than the maximum port number in an excluded port range:浮动IP拒绝服务的端口的最小值必须小于等于最大值

·     The excluded port ranges added for a floating IP cannot be exactly the same:同一个浮动IP下的拒绝服务的端口配置不能完全相同

·     The specified QoS policy does not exist in the site:指定的QoS策略在站点上不存在

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.24  Delete floating IP

关键字

DEL_FLOATING_IP_OP

日志内容

Deleted floating IP $1

参数解释

$1:浮动IPID

举例

Deleted floating IP edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除浮动IP的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     The operation type is invalid:无效的操作类型

·     You cannot directly delete resources specified in a configuration deployment:配置下发过的资源不允许直接删除

·     The specified border gateway access service does not exist:指定的出口网关接入不存在

 

6.25  Add transit network

关键字

ADD_TRANSIT_ NETWORK _OP

日志内容

Added transit network, request: $1

参数解释

$1Transit network的请求消息体

举例

Added transit network, request: {

    "transit_network": {

        "name": "TN-0",

        "description": "765",

        "transit_fabric_id": "8f4d7c4a-09f6-4032-9e66-7f13fe4d4cc4",

        "vni_mode": "MANUAL",

        "vni": 100,

        "import_rts": [

            "0:100"

        ],

        "export_rts": [

            "0:100"

        ]

    }

}

日志说明

用户进行了增加Transit network的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     VNI allocation failedVNI分配失败

·     The VNI has been usedVNI已被使用

·     VNI allocation failure: No VNIs availableVNI分配失败:VNI已耗尽

·     The description cannot exceed 255 characters:描述最长255个字符

·     The specified transit fabric does not exist:指定的Transit Fabric不存在

·     A transit network name must be a case-sensitive string of up to 255 characters and cannot be all spacesTransit Network名称最长255个字符,区分大小写,不支持全为空格

·     A transit network already exists with the specified name:指定的Transit Network名称已存在

·     The operation type is invalid:无效的操作类型

·     Failed to add the resource:添加资源失败

·     Please specify the vni_mode fieldvni_mode必填

·     The value for the vni_mode field can only be AUTO or MANUALvni_mode仅支持automanual

·     You do not need to specify a VNI when the value for the vni_mode field is AUTOvni_mode取值为AUTO时无需设置vni

·     You must specify a VNI when the value for the vni_mode field is MANUALvni_mode取值为MANUAL时需设置vni

·     The transit network name is requiredTransit Network的名称必填

·     The value range of VNI is an integer from 1 to 16777215: vni的取值范围为1~16777215的整数

 

6.26  Update transit network

关键字

UPDATE_ TRANSIT_NETWORK_OP

日志内容

Updated transit network, request: $1

参数解释

$1Transit network的请求消息体

举例

Updated transit network, request: {

         "transit_network ":{

                   "operation":null

         }

}

日志说明

用户进行了修改Transit network的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist指定的资源不存在

·     The operation type is invalid:无效的操作类型

·     Please specify the operation fieldoperation字段必填

·     Failed to edit the resource:修改资源失败

·     You cannot edit the %s parameter:参数(%s)不能被修改

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     The description cannot exceed 255 characters:描述最长255个字符

·     A transit network name must be a case-sensitive string of up to 255 characters and cannot be all spacesTransit Network名称最长255个字符,区分大小写,不支持全为空格

·     A transit network already exists with the specified name:指定的Transit Network名称已存在

 

6.27  Delete transit network

关键字

DEL_TRANSIT_NETWORK_OP

日志内容

Deleted transit network $1

参数解释

$1Transit networkID

举例

Deleted transit network edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除Transit network的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist指定的资源不存在

·     Failed to delete the resource:删除资源失败

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     You cannot delete the specified transit network, because it is bound to a tenant network:已绑定租户NetworkTransit Network不允许删除

 

6.28  Add tenant network

关键字

ADD_TENANT_NETWORK_OP

日志内容

Added tenant network, request: $1

参数解释

$1Tenant network的请求消息体

举例

Added tenant network, request: {

    " tenant_network": {

         "name": "TntN-1",

         "description": "",

         "site_id": "69a17205-6c32-4498-b5a9-1fa51f277251",

         "tenant_id": "10ec8773-8b45-46d1-92c3-3c279758f9c5",

         "network_id": "eeea49fa-3580-4d7f-a20f-78e8ee22aa4a",

         "transit_network_id": "1d1ffb84-e792-474d-adf8-1d8decbe3ce5",

         "transit_fabric_id": "4be3cb06-b215-4700-aec4-cc632493aeff"

}

}

日志说明

用户进行了增加Tenant network的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The value for the sortOrder field can only be asc or descsortOrder取值必须为ascdesc

·     The operation type is invalid:无效的操作类型

·     You cannot directly delete resources specified in a configuration deployment:配置下发过的资源不允许直接删除

·     The specified transit fabric does not exist: 指定的Transit Fabric不存在

·     Please specify a transit fabric IDTransit FabricID不能为空

·     The specified vNetwork does not exist:指定的虚拟链路层网络不存在

·     The UUID of network is requirednetwork id必填

·     The UUID of transit network is requiredtransit network id必填

·     The specified transit network does not exist:指定的Transit Network不存在

·     The specified tenant network does not exist:指定的Tenant Network不存在

·     The tenant network name is requiredTenant Network的名称必填

·     A tenant network name must be a case-sensitive string of up to 255 characters and cannot be all spacesTenant Network的名称最长255个字符,区分大小写,不支持全为空格

·     A tenant network description must be string of up to 255 charactersTenant Network的描述最长255个字符

·     A tenant network already exists with the specified name:指定的Tenant Network名称已存在

·     The site of the tenant network is not in the specified transit fabric:租户Network的站点不在指定Transit Fabric

·     The tenant to which the tenant network is bound is not in the specified site:租户Network绑定的租户不在指定站点中

·     The vNetwork to which the tenant network is bound does not belong to the specified tenant:租户Network绑定的虚拟链路层网络不在指定租户下

·     The transit network to which the tenant network is bound does not belong to the specified transit fabric:租户Network绑定的Transit Network不在指定Transit Fabric

·     The sites of tenant networks on the same transit network cannot be the same:同一个Transit Network下,租户Network的站点不能相同

·     The transit network to which the tenant network is bound does not exist:租户Network绑定的Transit Network不存在

 

6.29  Update tenant network

关键字

UPDATE_TENANT_NETWORK_OP

日志内容

Updated tenant network, request: $1

参数解释

$1Tenant network的请求消息体

举例

Updated tenant network, request: {

         "transit_network ":{

                   "operation":null

         }

}

日志说明

用户进行了修改Tenant network的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     The operation type is invalid:无效的操作类型

·     Please specify the operation fieldoperation字段必填

·     Failed to edit the resource:修改资源失败

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

·     A tenant network description must be string of up to 255 charactersTenant Network的描述最长255个字符

·     To predelete the transit network, make sure all tenant network bound to the transit network have been predeleted:不能将Transit Network修改为预删除,因为Transit Network下面至少有一个不是预删除的租户Network

·     You cannot change the transit network bound to the tenant network:租户Network绑定的Transit Network不能被修改

 

6.30  Delete tenant network

关键字

DEL_TENANT_NETWORK_OP

日志内容

Deleted tenant network $1

参数解释

$1Tenant networkID

举例

Deleted tenant network edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除Tenant network的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete the resource:删除资源失败

·     This feature is not supported by the current version of the controller:当前控制组件版本不支持该功能

 

6.31  Add transit router connection

关键字

ADD_TRANSIT_ROUTER_CONNECTION_OP

日志内容

Added a transit router connection, request: $1

参数解释

$1Transit Router连接的请求消息体

举例

Added a transit router connection, request: {

         "transit_router_connection": {

                   "name": "LINK-0",

                   "description": "",

                   "local_transit_router_id": "b83199c5-db63-43f5-a32b-af01585963c1",

                   "peer_transit_router_id": "7456cd3b-2abd-4f38-8526-7f2f142e07b4",

                   "transit_fabric_id": "91fbe806-8505-4d1e-b37d-ec970b42c5d7",

                   "local_cidrs": ["26.0.0.0/16"],

                   "peer_cidrs": ["15.0.0.0/16"],

                   "master_site_id": "8fa2eb09-b3b7-4751-91a1-4bb97911dca8",

                   "master_site_name": "118.198",

                   "master_firewall_service_id": "d8dbb854-5a37-46ec-89d8-5be49e87d241",

                   "master_firewall_service_name": "1"

         }

}

日志说明

用户进行了增加Transit Router连接的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The operation type is invalid:无效的操作类型

·     The name of a transit router link must be a case-sensitive string of up to 255 characters and cannot contain only spacesTransit Router连接最长255个字符,区分大小写,不支持全为空格

·     The description cannot exceed 255 characters:描述最长255个字符

·     The local transit router and the remote transit router cannot be the same:本端和对端Transit Router不能相同

·     The primary and secondary firewall services cannot be in the same site:主备防火墙服务所在的站点不能相同

·     Please specify local CIDRs:本端网段必须配置

·     Please specify remote CIDRs:对端网段必须配置

·     Invalid local CIDRs:无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

·     The local CIDRs cannot overlap:本端CIDR存在交叠

·     The remote CIDRs cannot overlap:对端CIDR存在交叠

·     A transit router link already exists with the specified name:指定的Transit Router连接名称已存在

·     The tenant router accesses associated with the transit router cannot be enabled with the firewall service:指定Transit Router下的租户Router接入已开启防火墙

·     When two transit router links use the same local transit router, they must use the same firewall services:当两个Transit Router连接的本端Transit Router相同时,选择的防火墙服务也必须相同

·     The specified transit routers already have established a transit router link:指定的两个Transit Router已创建Transit Router连接

·     The specified transit fabric does not exist:指定的Transit Fabric不存在

·     Please specify a transit fabric IDTransit FabricID不能为空

·     The specified transit router does not exist:指定的Transit Router不存在

·     The intercommunication type of the local transit router must be east-west:本端Transit Router的互通类型必须是东西向

·     Please specify a local transit router ID:本端Transit RouterID不能为空

·     The specified transit router does not exist:指定的Transit Router不存在

·     The edge device to external network must be border device for the transit routerTransit Router的外网出口设备必须是边界设备

·     When you specify a site to select the primary or secondary firewall service, make sure the site is not bound to any border gateway access associated with the remote transit router:主备防火墙服务所在的站点不能和对端Transit Router下出口网关接入绑定的站点相同

·     Please specify a remote transit router ID:对端Transit RouterID不能为空

·     The site to which the primary firewall service belongs does not exist:主防火墙服务指定的站点不存在

·     Please specify a site ID before configuring the primary firewall service:主防火墙服务指定的站点ID不能为空

·     The site to which the secondary firewall service belongs does not exist:备防火墙服务指定的站点不存在

·     Please specify a primary firewall service ID:主防火墙服务ID不能为空

·     Please first specify the site in which the secondary firewall service exists before specifying the secondary firewall service:指定备防火墙服务时,所在的站点ID不能为空

·     For two transit vRouter links with the same local transit vRouter, make sure their remote CIDRs do not overlap:指定相同本端Transit RouterTransit Router连接,对端网段不能重叠

·     The transit vRouter is the border gateway group type. You cannot both connect a tenant vRouter to and configure a transit vRouter link for it:外部网关组类型的Transit Router不能连接一个租户Router的同时配置一个Transit Router连接

·     Please specify the type as VFW and the family as CGSR for the firewall resource:防火墙资源的类型必须是VFW,资源特性必须为网关服务特性

·     Please specify a primary firewall resource ID:主防火墙资源ID不能为空

·     The primary firewall resource does not exist in the specified site:主防火墙资源在指定站点下不存在

·     The secondary firewall resource does not exist in the specified site:备防火墙资源在指定站点下不存在

·     Please first specify the site in which the secondary  firewall resource exists before specifying the secondary firewall resource:指定备防火墙资源时,所在的站点ID不能为空

·     When two transit router links use the same local transit router, they must use the same firewall resources:当两个Transit Router连接的本端Transit Router相同时,选择的防火墙资源也必须相同

·     The gateway member bound to the firewall resource must be in a border device group whose network position is border gateway and DCI:防火墙资源的出口网关成员必须绑定网络位置为出口网关和DC间互联的设备组

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Local CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的本端网段不能重叠

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Remote CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的对端网段不能重叠

·     When you specify a firewall resource for a border gateway access service, make sure the gateway members associated with that firewall resource do not belong to any tenant-exclusive border gateway:防火墙资源下的网关成员不能属于租户独占类型的出口网关

 

6.32  Update transit router connection

关键字

UPDATE_TRANSIT_ROUTER_CONNECTION_OP

日志内容

Updated transit router connection, request: $1

参数解释

$1transit router连接的请求消息体

举例

Updated transit router connection, request: {

         "transit_router_connection": {

                   "operation": "DELETE"

         }

}

日志说明

用户进行了修改Transit Router连接的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     The operation type is invalid:无效的操作类型

·     Please specify the operation fieldoperation字段必填

·     The name of a transit router link must be a case-sensitive string of up to 255 characters and cannot contain only spacesTransit Router连接最长255个字符,区分大小写,不支持全为空格

·     The description cannot exceed 255 characters:描述最长255个字符

·     When the intercommunication type of the remote transit router is border gateway group, make sure the remote CIDRs are the same as the destination CIDRs of the remote transit router:当对端Transit Router的互通类型为外部网关组时,对端网段必须和对端Transit Router的目的网段一致

·     A transit router link already exists with the specified name:指定的Transit Router连接名称已存在

·     For two transit vRouter links with the same local transit vRouter, make sure their remote CIDRs do not overlap:指定相同本端Transit RouterTransit Router连接,对端网段不能重叠

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Local CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的本端网段不能重叠

·     When you create a tenant router access service (Service A) that shares a vRouter with another tenant router access service (Service B), the following items cannot overlap: 1. Remote CIDRs specified for Service A. 2. Remote CIDRs specified for the transit router links associated with the transit router of Service B:租户Router的对端网段与其他使用同一个虚拟路由器的租户Router关联Transit Router绑定的Transit Router连接的对端网段不能重叠

 

6.33  Delete transit router connection

关键字

DEL_TRANSIT_ROUTER_CONNECTION_OP

日志内容

Deleted transit router connection $1

参数解释

$1Transit Router连接的ID

举例

Deleted transit router connection "255263da-d0f0-4bf6-8cba-46917b35cba3"

日志说明

用户进行了删除Transit Router连接的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     The transit fabric configuration is being deployed Please try again laterTransit Fabric正在进行配置发放,请稍后

·     You cannot directly delete resources specified in a configuration deployment:配置下发过的资源不允许直接删除

 

6.34  Add IPsec profile

关键字

ADD_IPSEC_OP

日志内容

Added an IPsec profile. Request: $1

参数解释

$1IPsec的请求消息体

举例

Added an IPsec profile. Request: {

    "vpn_connection": {

        "transit_fabric_id": "cd75c1a1-c610-435b-8f61-a9511f803a89",

        "name": "ipsec1",

        "description": "ipsec1",

        "local_transit_router_id": "7b8074ce-f6fa-4eac-b8a6-dca42db682a1",

        "local_network_cidr": "3.1.1.1/24",

        "local_public_ip": "10.99.3.1",

        "local_bgp_as": 2345,

        "ip_version": "IPV4",

        "remote_transit_router_id": "4a99b69c-8f0a-4239-8bd8-190ec64a92e0",

        "remote_network_cidr": "4.1.1.1/24",

        "tunnel_options": [

            {

                "tunnel_number": 1,

                "id": "2a99b69c-8f0a-4239-8bd8-190ec64a92e1",

                "pre_share_key": "abcdefg12345",

                "phase1_encryption_algorithms": [

                    "AES128"

                ],

                "phase1_integrity_algorithms": [

                    "SHA1"

                ],

                "phase1_dh_group_numbers": [

                    "2"

                ],

                "phase2_encryption_algorithms": [

                    "AES128"

                ],

                "phase2_integrity_algorithms": [

                    "SHA1"

                ],

                "phase2_dh_group_numbers": [

                    "2"

                ],

                "phase1_lifetime_seconds": 28800,

                "phase2_lifetime_seconds": 3600,

                "ike_versions": [

                    "ikev1"

                ],

                "rekey_margin_time_seconds": 540,

                "rekey_fuzz_percentage": 100,

                "replay_window_size": 1024,

                "dpd_timeout_seconds": 30,

                "dpd_timeout_action": "clear",

                "startup_action": "add"

            },

            {

                "tunnel_number": 2,

                "id": "2a99b69c-8f0a-4239-8bd8-190ec64a92e2",

                "pre_share_key": "abcdefg12345",

                "phase1_encryption_algorithms": [

                    "AES128"

                ],

                "phase1_integrity_algorithms": [

                    "SHA1"

                ],

                "phase1_dh_group_numbers": [

                    "2"

                ],

                "phase2_encryption_algorithms": [

                    "AES128"

                ],

                "phase2_integrity_algorithms": [

                    "SHA1"

                ],

                "phase2_dh_group_numbers": [

                    "2"

                ],

                "phase1_lifetime_seconds": 28800,

                "phase2_lifetime_seconds": 3600,

                "ike_versions": [

                    "ikev1"

                ],

                "rekey_margin_time_seconds": 540,

                "rekey_fuzz_percentage": 100,

                "replay_window_size": 1024,

                "dpd_timeout_seconds": 30,

                "dpd_timeout_action": "clear",

                "startup_action": "add"

            }

        ]

    }

}

日志说明

用户进行了增加IPsec的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The specified local transit router does not exist指定的本端Transit Router不存在

·     The description of an IPsec profile cannot exceed 255 charactersIPsec的描述最长255个字符

·     The name of an IPsec profile cannot exceed 64 characters. Only letters and digits are supportedIPsec的名称最长64个字符,支持字母和数字

·     Invalid local CIDRs:无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

·     Invalid public IP address:无效的公网IP地址

·     Only IPv4 is supported:仅支持IPv4

·     The intercommunication type of the local transit router must be south-north:本端Transit Router的互通类型必须是南北向

·     The IPsec must be configured with options for two and only two tunnelsVPN连接必须且仅能配置两个隧道选项

·     The IPsec must be configured with options for two and only two tunnelsVPN连接必须且仅能配置两个隧道选项

·     Only one phase 1 encryption algorithm can be configured:阶段1加密算法只能配置一个

·     Invalid phase 1 encryption algorithm:无效的阶段1加密算法

·     Only one phase 2 encryption algorithm can be configured:阶段2加密算法只能配置一个

·     Invalid phase 2 encryption algorithm:无效的阶段2加密算法

·     Only one phase 1 authentication algorithm can be configured:阶段1完整性算法只能配置一个

·     Invalid phase 1 authentication algorithm:无效的阶段1完整性算法

·     Only one phase 2 authentication algorithm can be configured:阶段2完整性算法只能配置一个

·     Invalid phase 2 authentication algorithm:无效的阶段2完整性算法

·     Only one phase 1 DH group number can be configured:阶段1Diffie-Hellman (DH)组编号只能配置一个

·     Invalid phase 1 DH group number:无效的阶段1Diffie-Hellman (DH)组编号

·     Only one phase 2 DH group number can be configured:阶段2Diffie-Hellman (DH)组编号只能配置一个

·     Invalid phase 2 DH group number:无效的阶段2Diffie-Hellman (DH)组编号

·     Invalid IKE version:无效的IKE版本

·     Only one IKE version can be configuredIKE版本只能配置一个

·     The phase 1 lifetime value must be an integer in the range of 900 to 28800:阶段1生命周期取值范围为90028800的整数

·     The phase 2 lifetime value must be an integer in the range of 900 to 3600:阶段2生命周期取值范围为9003600的整数

·     The phase 2 lifetime value must be less than the phase 1 lifetime value:阶段2生命周期取值必须小于阶段1生命周期取值

·     The DPD timeout value must be an integer equal to or greater than 30DPD超时时间的取值范围为大于等于30的整数

·     The value for the rekey margin time (seconds) parameter must be an integer in the range of 60 to half the phase 2 lifetime:再续键边缘时间()的取值范围为60到阶段2生命周期一半的整数

·     The value for the rekey fuzz (percentage) parameter must be an integer in the range of 0 to 100:再续键模糊(百分比)的取值范围为0100的整数

·     The value for the replay window size (packets) parameter must be an integer in the range of 64 to 2048:重播窗口大小(数据包)的取值范围为642048的整数

·     The DPD timeout action can only be clear, restart, or noneDPD超时操作取值为清除、重启或无

·     The startup action can only be add or start:启动操作取值为添加或开始

·     You can specify the IKE version as only IKEv2 when the startup action is Start:启动操作取值为开始时,IKE版本仅支持IKEv2

·     You can specify the IKE version as only IKEv2 when the phase 1 encryption algorithm is AES128-GCM-16 or AES256-GCM-16:阶段1加密算法取值为AES128-GCM-16AES256-GCM-16时,IKE版本仅支持IKEv2

·     The transit router on the private cloud side bound to the IPsec profile must be a transit router associated with a transit router link and not associated with a tenant router access serviceIPsec绑定的私有云侧Transit Router必须是已关联Transit Router连接且没有关联租户Router接入的Transit Router

·     The transit router bound to a tenant router access service cannot be bound to public VIFs and IPsec profiles:租户Router接入所绑定的Transit Router不能绑定公共服务专线和IPsec

 

6.35  Update IPsec profile

关键字

UPDATE_IPSEC_OP

日志内容

Updated IPsec profile “$1”. Request: $2

参数解释

$1IPsecID

$2IPsec的请求消息体

举例

Updated IPsec profile "c6bfd1a0-67ff-4699-b300-b9732f408772". Request: {

    "vpn_connection": {

        "operation": "DELETE",

        "description": "ipsec1",

        "name": "ipsec1-0",

        "local_network_cidr": "3.1.1.1/24",

        "remote_network_cidr": "4.1.1.1/24",

        "operation": "UPDATE"

    }

}

日志说明

用户进行了修改IPsec的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     The description of an IPsec profile cannot exceed 255 charactersIPsec的描述最长255个字符

·     The name of an IPsec profile cannot exceed 64 characters. Only letters and digits are supportedIPsec的名称最长64个字符,支持字母和数字

·     Invalid local CIDRs:无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

 

6.36  Delete IPsec profile

关键字

DEL_IPSEC_OP

日志内容

Deleted IPsec profile $1

参数解释

$1IPsecID

举例

Deleted IPsec profile edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除IPsec的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete the resource:删除资源失败

 

6.37  Add VPC VPN

关键字

ADD_VPC_VPN_OP

日志内容

Added a VPC VPN. Request: $1

参数解释

$1VPC专线的请求消息体

举例

Added a VPC VPN. Request: {

         "vpc_direct_connection": {

                   "name": "VPCLINK2",

                   "description": "12345",

                   "transit_fabric_id": "91fbe806-8505-4d1e-b37d-ec970b42c5d7",

                   "local_transit_router_id": "8d5fa381-46b0-43af-9dbc-c01fcd6c1565",

                   "border_port_id": "6t5fa381-46b0-43af-9dbc-c01fcd6c1565",

                   "connect_interface_type": "SUB_INTERFACE",

                   "connect_interface_number": 9,

                   "connect_vlan": null,

                   "bgp_password": "23456",

                   "bfd_flag": true,

                   "direct_connect_gateway_id": "13f4ed84-9879-40a1-abae-9fe56894cfc9",

                   "virtual_interface_id": "80e1cd49-aefe-47d0-9c3f-3251ed4756c8",

                   "tgw_id": "013cb035-c89c-46ec-8d66-fab8474d6473",

                   "remote_transit_router_id": "a26743b6-127c-4b30-9713-54335834088d",

         }

}

日志说明

用户进行了增加VPC专线的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The site of the border port has been configured with a VPC VPN or public VIF bound to the same transit vRouter指定专线端口所在的站点已配置VPC专线或公共服务专线绑定相同的Transit Router

·     The virtual interface has been specified for a VPC VPN or public VIF:指定虚拟接口已配置VPC专线或公共服务专线

·     For two VPC VPNs or public VIFs using the same transit vRouter, specify different border ports of the same device group in a site or border ports in different sites for them:若VPC专线或公共服务专线指定了同一Transit Router,则需要使用不同站点下的专线端口或者相同站点上同一设备组下的不同专线端口

·     Please specify a border port ID:专线端口的ID不能为空

·     The specified border port does not exist:指定的专线端口不存在

·     Invalid interconnect interface type:无效的互联接口类型

·     When the interconnect interface type is VLAN interface, the value for the interconnect VLAN must be an integer in the range of 1 to 4094:当互联接口类型为VLAN接口类型时,互联VLAN的取值范围为14094的整数

·     When the interconnect interface type is subinterface. the value for the subinterface number must be an integer in the range of 1 to 4094:当互联接口类型为子接口类型时,子接口编号的取值范围为14094的整数

·     The subinterface number and interconnect VLAN cannot be both specified:子接口编号和互联VLAN不能同时填写

·     The VPC VPN name cannot exceed 64 characters and only supports letters and digitsVPC专线的名称最长64个字符,只支持字母和数字

·     Please specify a VPC VPN nameVPC专线的名称不能为空

·     The description cannot exceed 255 characters:描述最长255个字符

·     The password is case sensitive and cannot exceed 80 characters. Only letters, digits, and special characters except for question marks (?) are supported:密码长度最长80个字符,区分大小写,仅支持英文、数字和特殊字符(不支持英文问号)

·     The specified virtual interface does not exist on the public cloud:指定的虚拟接口在公有云上不存在

·     The specified VPN gateway does not exist on the public cloud:指定的专线网关在公有云上不存在

·     The specified transit gateway does not exist on the public cloud:指定的Transit Gateway在公有云上不存在

·     The specified transit router does not exist on the public cloud:指定的Transit Router在公有云上不存在

·     The port type does not match the specified border port type:端口类型和指定的专线端口类型不匹配

·     A VPC VPN already exists with the specified name:指定的VPC专线名称已存在

·     The VPN gateway, transit gateway, transit router, and virtual interface must have bindings on the public cloud side:专线网关与Transit GatewayTransit GatewayTransit Router、专线网关与虚拟接口在公有云侧必须存在绑定关系

·     Processing on the public cloud side failed:公有云处理失败

·     The intercommuncation type of the transit router on the private cloud side bound to the VPC VPN must be east-westVPC专线绑定的私有云侧Transit Router的互通类型必须是东西向类型

 

6.38  Update VPC VPN

关键字

UPDATE_VPC_VPN_OP

日志内容

Updated a VPC VPN “$1”. Request: $2

参数解释

$1VPC专线的ID

$2VPC专线的请求消息体

举例

Updated a VPC VPN “c6bfd1a0-67ff-4699-b300-b9732f408772". Request: {

         "vpc_direct_connection": {

                   "description": "12345",

                   "bgp_password": "23456",

                   "bfd_flag": true

                   "operation": "UPDATE"

         }

}

日志说明

用户进行了修改VPC专线的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist指定的资源不存在

·     The site of the border port has been configured with a VPC VPN or public VIF bound to the same transit vRouter指定专线端口所在的站点已配置VPC专线或公共服务专线绑定相同的Transit Router

·     The description cannot exceed 255 characters:描述最长255个字符

·     The password is case sensitive and cannot exceed 80 characters. Only letters, digits, and special characters except for question marks (?) are supported:密码长度最长80个字符,区分大小写,仅支持英文、数字和特殊字符(不支持英文问号)

 

6.39  Delete VPC VPN

关键字

DEL_VPC_VPN_OP

日志内容

Deleted VPC VPN “$1”.

参数解释

$1VPC专线的ID

举例

Deleted VPC VPN “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”.

日志说明

用户进行了删除VPC专线的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist指定的资源不存在

 

6.40  Add public VIF

关键字

ADD_PUBLIC_VIF_OP

日志内容

Added a public VIF. Request: $1

参数解释

$1:公共服务专线的请求消息体

举例

Added a public VIF. Request: {

         "service_direct_connection": {

                   "name": "SERVICELINK2",

                   "description": "12345",

                   "transit_fabric_id": "91fbe806-8505-4d1e-b37d-ec970b42c5d7",

                   "local_transit_router_id": "8d5fa381-46b0-43af-9dbc-c01fcd6c1565",

                   "border_port_id": "6t5fa381-46b0-43af-9dbc-c01fcd6c1565",

                   "connect_interface_type": "SUB_INTERFACE",

                   "connect_interface_number": 9,

                   "connect_vlan": null,

                   "bgp_password": "23456",

                   "bfd_flag": true,

                   "virtual_interface_id": "80e1cd49-aefe-47d0-9c3f-3251ed4756c8"

         }

}

日志说明

用户进行了增加公共服务专线的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     The site of the border port has been configured with a VPC VPN or public VIF bound to the same transit vRouter指定专线端口所在的站点已配置VPC专线或公共服务专线绑定相同的Transit Router

·     To bind a transit vRouter in the private cloud to the public VIF, make sure the vRouter has a vRouter link whose peer end is an east-west transit vRouter:公共服务专线绑定的私有云侧Transit Router需要存在一个Transit Router连接,其对端是东西向的Transit Router

·     The virtual interface has been specified for a VPC VPN or public VIF:指定虚拟接口已配置VPC专线或公共服务专线

·     For two VPC VPNs or public VIFs using the same transit vRouter, specify different border ports of the same device group in a site or border ports in different sites for them:若VPC专线或公共服务专线指定了同一Transit Router,则需要使用不同站点下的专线端口或者相同站点上同一设备组下的不同专线端口

·     Please specify a border port ID:专线端口的ID不能为空

·     The specified border port does not exist:指定的专线端口不存在

·     Invalid interconnect interface type:无效的互联接口类型

·     When the interconnect interface type is VLAN interface, the value for the interconnect VLAN must be an integer in the range of 1 to 4094:当互联接口类型为VLAN接口类型时,互联VLAN的取值范围为14094的整数

·     When the interconnect interface type is subinterface. the value for the subinterface number must be an integer in the range of 1 to 4094:当互联接口类型为子接口类型时,子接口编号的取值范围为14094的整数

·     The subinterface number and interconnect VLAN cannot be both specified:子接口编号和互联VLAN不能同时填写

·     The public VIF name cannot exceed 64 characters and only supports letters and digits:公共服务专线的名称最长64个字符,只支持字母和数字

·     Please specify a public VIF name:公共服务专线的名称不能为空

·     The password is case sensitive and cannot exceed 80 characters. Only letters, digits, and special characters except for question marks (?) are supported:密码长度最长80个字符,区分大小写,仅支持英文、数字和特殊字符(不支持英文问号)

·     A public VIF already exists with the specified name:指定的公共服务专线名称已存在

·     The specified virtual interface does not exist on the public cloud:指定的虚拟接口在公有云上不存在

·     The port type does not match the specified border port type:端口类型和指定的专线端口类型不匹配

·     Processing on the public cloud side failed:公有云处理失败

·     The transit router on the private cloud side bound to the public VIF must be an east-west transit router associated with a transit router link and not associated with a tenant router access service:公共服务专线绑定的私有云侧的Transit Router必须是已关联Transit Router连接且没有关联租户router接入的东西向Transit Router

·     To bind a transit vRouter in the private cloud to the public VIF, make sure the vRouter has a vRouter link whose peer end is an east-west transit vRouter:公共服务专线绑定的私有云侧Transit Router需要存在一个Transit Router连接,其对端是东西向的Transit Router

·     The transit router bound to a tenant router access service cannot be bound to public VIFs and IPsec profiles:租户Router接入所绑定的Transit Router不能绑定公共服务专线和IPsec

 

6.41  Update public VIF

关键字

UPDATE_PUBLIC_VIF_OP

日志内容

Updated a public VIF $1. Request: $2

参数解释

$1:公共服务专线的ID

$2:公共服务专线的请求消息体

举例

Updated a public VIF “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”. Request: {

         "service_direct_connection": {

                   "description": "12345",

                   "bgp_password": "23456",

                   "bfd_flag": true

                   "operation": "UPDATE"

         }

}

日志说明

用户进行了修改公共服务专线的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The site of the border port has been configured with a VPC VPN or public VIF bound to the same transit vRouter指定专线端口所在的站点已配置VPC专线或公共服务专线绑定相同的Transit Router

·     To bind a transit vRouter in the private cloud to the public VIF, make sure the vRouter has a vRouter link whose peer end is an east-west transit vRouter:公共服务专线绑定的私有云侧Transit Router需要存在一个Transit Router连接,其对端是东西向的Transit Router

·     The specified resource does not exist指定的资源不存在

·     The description cannot exceed 255 characters:描述最长255个字符

·     The password is case sensitive and cannot exceed 80 characters. Only letters, digits, and special characters except for question marks (?) are supported:密码长度最长80个字符,区分大小写,仅支持英文、数字和特殊字符(不支持英文问号)

 

6.42  Delete public VIF

关键字

DEL_PUBLIC_VIF_OP

日志内容

Deleted public VIF “$1”

参数解释

$1:公共服务专线的ID

举例

Deleted public VIF "60ede326-144e-4949-a186-65891ae70bf0"

日志说明

用户进行了删除公共服务专线的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

 

6.43  Add border port

关键字

ADD_BORDER_PORT_OP

日志内容

Added a border port. Request: $1

参数解释

$1:专线端口的请求消息体

举例

Added a border port. Request: {

    " tenant_network": {

         "name": "TntN-1",

         "description": "",

         "site_id": "69a17205-6c32-4498-b5a9-1fa51f277251",

         "tenant_id": "10ec8773-8b45-46d1-92c3-3c279758f9c5",

         "network_id": "eeea49fa-3580-4d7f-a20f-78e8ee22aa4a",

         "transit_network_id": "1d1ffb84-e792-474d-adf8-1d8decbe3ce5",

         "IPSEC_id": "4be3cb06-b215-4700-aec4-cc632493aeff"

}

}

日志说明

用户进行了增加专线端口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     Please specify a border port name:边界端口的名称必填

·     A border port name must be a case-sensitive string of up to 255 characters and cannot be all spaces:边界端口的名称最长255个字符,区分大小写,不支持全为空格

·     A border port description must be a string of up to 255 characters:边界端口的描述最长255个字符

·     Please specify a port type:端口类型必填

·     You cannot delete the border port, because it has been used by a VPC VPN or public VIF:指定的专线端口已被VPC专线或公共服务专线使用,不允许删除

·     Please specify a device port name:设备端口名称必填

·     Please specify a device port type:设备端口类型必填

·     The device port type is invalid:无效的设备端口类型

·     No ports found on the specified device:指定设备未获取到端口

·     Ports of the specified type do not exist on the device:指定类型的端口不在该设备上

·     The device group is bound by a leased line port:该设备组已被专线端口绑定

·     The port on the device has been specified as a border port:该设备的指定设备端口已存在专线端口

 

6.44  Update border port

关键字

UPDATE_BORDER_PORT_OP

日志内容

Updated a border port $1. Request: $2

参数解释

$1:专线端口的ID

$2:专线端口的请求消息体

举例

Updated a border port edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027. Request: {

         "transit_network ":{

                   "operation":null

         }

}

日志说明

用户进行了修改专线端口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     Please specify a border port name:边界端口的名称必填

·     A border port name must be a case-sensitive string of up to 255 characters and cannot be all spaces:边界端口的名称最长255个字符,区分大小写,不支持全为空格

·     A border port description must be a string of up to 255 characters:边界端口的描述最长255个字符

 

6.45  Delete border port

关键字

DEL_BORDER_PORT_OP

日志内容

Deleted border port $1

参数解释

$1:专线端口的ID

举例

Deleted border port edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除专线端口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

·     Failed to delete the resource:删除资源失败

 

 


7 NSO_WAN

本节介绍NSO模块Super Controller支持云网协同功能的操作日志信息。

7.1  Add WAN controller

关键字

ADD_WAN_CONTROLLER_OP

日志内容

Added WAN controller, request: $1

参数解释

$1WAN控制组件的请求消息体

举例

Added WAN controller, request:

{

    "wan": {

        "id": "98a36a17-2190-919e-0a3f-81d6ee5177e9",

        "name": "wan1",

        "description": "wan1",

        "type": "WAN Carrier",

        "url": "http://192.168.162.202:30000",

        "username": "admin",

        "password": "sdn123456"

    }

}

日志说明

用户进行了增加WAN控制组件的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Up to 64 characters. The name cannot contain spacesWAN控制组件的名称最长64个字符,不支持空格

·     Up to 255 charactersWAN控制组件的描述最长255个字符

·     Invalid WAN controller type:无效的WAN控制组件类型

·     Up to 255 characters. Spaces are not supportedWAN控制组件的用户名最长255个字符,不支持空格

·     8 to 255 characters. The password must contain characters from at least two of the following categories: digits, uppercase letters, lowercase letters, and special charactersWAN控制组件的密码取值范围为8255个字符,至少需包含数字、大写字母、小写字母和特殊字符中的两种类型

·     Invalid WAN controller URL:无效的WAN控制组件URL

·     The URL of the WAN controller has been usedWAN控制组件的URL重复

·     A WAN controller already exists with the specified name:指定WAN控制组件的名称已存在

·     The WAN controller does not exist:指定的WAN控制组件不存在

 

7.2  Update WAN controller

关键字

UPDATE_WAN_CONTROLLER_OP

日志内容

Updated WAN controller “$1”, request: $2

参数解释

$1WAN控制组件的ID

$2WAN控制组件的请求消息体

举例

Updated WAN controller "c6bfd1a0-67ff-4699-b300-b9732f408772", request: {

    "wan": {

        "name": "wan1",

        "description": "wan1",

        "url": "http://192.168.162.202:30000",

        "username": "admin",

        "password": "sdn123456"

    }

}

日志说明

用户进行了修改WAN控制组件的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Up to 64 characters. The name cannot contain spacesWAN控制组件的名称最长64个字符,不支持空格

·     Up to 255 charactersWAN控制组件的描述最长255个字符

·     Up to 255 characters. Spaces are not supportedWAN控制组件的用户名最长255个字符,不支持空格

·     8 to 255 characters. The password must contain characters from at least two of the following categories: digits, uppercase letters, lowercase letters, and special charactersWAN控制组件的密码取值范围为8255个字符,至少需包含数字、大写字母、小写字母和特殊字符中的两种类型

·     Invalid WAN controller URL:无效的WAN控制组件URL

·     The URL of the WAN controller has been usedWAN控制组件的URL重复

·     A WAN controller already exists with the specified name:指定WAN控制组件的名称已存在

·     The WAN controller does not exist:指定的WAN控制组件不存在

 

7.3  Delete WAN controller

关键字

DEL_WAN_CONTROLLER_OP

日志内容

Deleted WAN controller $1

参数解释

$1WAN控制组件的ID

举例

Deleted WAN controller edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除WAN控制组件的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定资源不存在

·     You cannot delete the WAN controller when it is bound to a WAN link:指定的WAN控制组件已被对接关系绑定,不允许删除

 

7.4  Add WAN link

关键字

ADD_WAN_LINK_OP

日志内容

Added WAN link, request: $1

参数解释

$1:对接关系的请求消息体

举例

Added WAN link, request: {

    "device_groups_wan_link": {

        "id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "name": "link1",

        "description": "",

        "site_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "fabric_id": "7b71ae37-e66a-439d-a05e-e1b7b8d6a0f0",

        "device_groups_id": "7b71ae37-e66a-439d-a05e-e1b7b8d6a0f0",

        "wan_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "policy_group_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6"

    }

}

日志说明

用户进行了增加对接关系的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     Internal error:内部错误

·     Please specify a name for the WAN link:对接关系的名称不允许为空

·     Up to 255 characters. The name cannot contain only spaces:对接关系的名称最长255个字符,区分大小写,不支持全为空格

·     Up to 255 characters:对接关系的描述最长255个字符

·     The WAN controller does not exist:指定的WAN控制组件不存在

·     Failed to obtain SR policy group information from the WAN controller:向WAN控制组件查询SR策略组信息失败

·     The border device group does not support DC interconnect:指定的边界设备组不支持DC互联

·     The SR policy group does not exist on the WAN controller:指定的SR策略组在WAN控制组件上不存在

·     The border device group is already bound to another WAN link:指定的边界设备组已存在对接关系

·     A WAN link already exists with the specified name:对接关系的名称存在重复

 

7.5  Update WAN link

关键字

UPDATE_WAN_LINK_OP

日志内容

Updated WAN link, request: $1

参数解释

$1:对接关系的请求消息体

举例

Updated WAN link, request: {

    "device_groups_wan_link": {

        "name": "link1",

        "description": "link1"

    }

}

日志说明

用户进行了修改对接关系的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Up to 255 characters. The name cannot contain only spaces:对接关系的名称最长255个字符,区分大小写,不支持全为空格

·     Up to 255 characters:对接关系的描述最长255个字符

·     The WAN controller does not exist:指定的WAN控制组件不存在

 

7.6  Delete WAN link

关键字

DEL_WAN_LINK_OP

日志内容

Deleted WAN link “$1”.

参数解释

$1:对接关系的ID

举例

Deleted WAN link “edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027”

日志说明

用户进行了删除对接关系的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定资源不存在

·     You cannot delete the WAN link, because it has a minimum of one flow group:指定的对接关系下存在应用组,不允许删除

 

7.7  Add flow group

关键字

ADD_FLOW_GROUP_OP

日志内容

Added flow group, request: $1

参数解释

$1:应用组的请求消息体

举例

Added flow group, request: {

    "flow_group": {

        "id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "device_groups_wan_link_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "flow_group_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "dscp_type": "dscp-ipv4"

    }

}

日志说明

用户进行了增加应用组的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid UUID:无效的UUID

·     Invalid flow group DSCP type:无效的应用组DSCP类型

·     The WAN link does not exist:指定的对接关系不存在

·     The flow group does not exist on the WAN controller:指定的应用组在WAN控制组件上不存在

 

7.8  Delete flow group

关键字

DEL_FLOW_GROUP_OP

日志内容

Deleted flow group "$1"

参数解释

$1:应用组的ID

举例

Deleted flow group "60ede326-144e-4949-a186-65891ae70bf0"

日志说明

用户进行了删除应用组的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的资源不存在

 

7.9  Add east-west traffic application

关键字

ADD_EAST_WEST_APPLICATION_OP

日志内容

Added east-west traffic application, request: $1

参数解释

$1:东西向流量应用的请求消息体

举例

Added east-west traffic application, request:

{

    "east_west_application": {

        "id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "description": "",

        "name": "app1",

        "transit_router_id": "e28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "local_site_id": "0fb7f538-9535-45bb-9881-27d71e6c508c",

        "local_router_id": "0fb7f538-9535-45bb-9881-27d71e6c508c",

        "local_subnets": [

            "4fb7f538-9535-45bb-9881-27d71e6c508c",

            "1fb7f538-9535-45bb-9881-27d71e6c508c"

        ],

        "local_cidrs": [],

        "wan_flow_group_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "dscp": "20",

        "peer_site_id": "0fb7f538-9535-45bb-9881-27d71e6c508c",

        "peer_router_id": "0fb7f538-9535-45bb-9881-27d71e6c508c",

        "peer_subnets": [

            "9fb7f538-9535-45bb-9881-27d71e6c508c",

            "8fb7f538-9535-45bb-9881-27d71e6c508c"

        ],

        "peer_cidrs": []

    }

}

日志说明

用户进行了增加东西向流量应用的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified transit router does not exist:指定的Transit Router不存在

·     The specified local vRouter does not exist:指定的本端虚拟路由器不存在

·     The specified remote vRouter does not exist:指定的对端虚拟路由器不存在

·     Please specify a local vRouter ID:本端虚拟路由器ID必填

·     Please specify a remote vRouter ID:对端虚拟路由器ID必填

·     The specified local vRouter is not associated with the transit router or is not deployed in the local site:指定的本端虚拟路由器未接入该Transit Router或者未部署至本端站点上

·     The specified remote vRouter is not associated with the transit router or is not deployed in the remote site:指定的对端虚拟路由器未接入该Transit Router或者未部署至对端站点上

·     Please specify local subnet IDs or local CIDRs:本端子网ID或本端网段必填

·     Please specify remote subnet IDs:对端子网ID必填

·     Some of the specified local subnets do not exist:本端子网不存在

·     Some of the specified remote subnets do not exist:对端子网不存在

·     Some of the specified local subnets are not associated with the transit router:指定的本端子网未接入该Transit Router

·     Some of the specified local CIDRs are not associated with the transit router:指定的本端网段未接入该Transit Router

·     Some of the specified remote subnets are not associated with the transit router:指定的对端子网未接入该Transit Router

·     The border device group in the WAN link associated with the application group is different from that associated with the local vRouter:应用组所在对接关系的边界设备组与本端虚拟路由器关联的边界设备组不一致

·     Please specify a DSCP value         DSCP必填

·     The specified DSCP value must be in the valid DSCP value rangeDSCP不在应用组DSCP范围内

·     The specified tenant does not have any border gateway binding:指定站点上的租户没有绑定出口网关

·     The specified tenant does not have any border gateway binding or the border gateway bound to the specified tenant is not associated with any device groups used for DCI deployment:指定站点上的租户没有绑定出口网关,或者该出口网关的成员中没有DC间互联设备组

·     The description of an east-west traffic application cannot exceed 255 characters:东西向流量应用的描述最长255个字符

·     The name of an east-west traffic application cannot exceed 255 characters:东西向流量应用的名称最长255个字符

·     Please specify an east-west traffic application name:东西向流量应用的名称必填

·     Invalid local CIDRs         无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

·     The local CIDRs cannot overlap:本端CIDR存在重叠

·     The remote CIDRs cannot overlap:对端CIDR存在重叠

·     Please specify a local site ID:本端站点ID必填。

·     Please specify a remote site ID:对端站点ID必填

·     The specified local site does not exist:指定的本端站点不存在

·     The specified remote site does not exist:指定的对端站点不存在

·     The local site and the remote site must be different       指定的对端站点与本端站点不能相同

·     The specified transit router is not deployed:指定的Transit Router未部署

·     The interconnect type of the specified transit router must be east-west:指定的Transit Router互通类型不是东西向

·     If you do not specify a remote vRouter, you cannot specify remote subnets and you must specify remote CIDRs:不指定对端虚拟路由器时,不能指定对端子网且对端网段必填

·     There is no tenant bound to the exit gateway on the specified site:指定站点上没有绑定出口网关的租户

·     Remote subnets or remote CIDRs must use the same IP protocols as local subnets or local CIDRs:对端子网或对端网段的IP版本需要与本端子网或本端网段一致

 

7.10  Update east-west traffic application

关键字

UPDATE_EAST_WEST_APPLICATION_OP

日志内容

Updated east-west traffic application "$1", request: $2

参数解释

$1:东西向流量应用的ID

$2:东西向流量应用的请求消息体

举例

Updated east-west traffic application "c6bfd1a0-67ff-4699-b300-b9732f408772", request: {

 {

    "east_west_application": {

        "description": "",

        "name": "app1",

        "local_subnets": [

            "4fb7f538-9535-45bb-9881-27d71e6c508c",

            "1fb7f538-9535-45bb-9881-27d71e6c508c"

        ],

        "local_cidrs": [],

        "wan_flow_group_id": "c28993fd-8fa0-88ce-a2e2-13dfe7d67ee6",

        "dscp": "20",

        "peer_subnets": [

            "9fb7f538-9535-45bb-9881-27d71e6c508c",

            "8fb7f538-9535-45bb-9881-27d71e6c508c"

        ],

        "peer_cidrs": []

    }

}

日志说明

用户进行了修改东西向流量应用的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Please specify local subnet IDs or local CIDRs:本端子网ID或本端网段必填

·     Please specify remote subnet IDs:对端子网ID必填

·     Some of the specified local subnets do not exist:本端子网不存在

·     Some of the specified remote subnets do not exist:对端子网不存在

·     Some of the specified local subnets are not associated with the transit router:指定的本端子网未接入该Transit Router

·     Some of the specified local CIDRs are not associated with the transit router:指定的本端网段未接入该Transit Router

·     Some of the specified remote subnets are not associated with the transit router:指定的对端子网未接入该Transit Router

·     Please specify a DSCP value         DSCP必填

·     The specified DSCP value must be in the valid DSCP value rangeDSCP不在应用组DSCP范围内

·     The description of an east-west traffic application cannot exceed 255 characters:东西向流量应用的描述最长255个字符

·     The name of an east-west traffic application cannot exceed 255 characters:东西向流量应用的名称最长255个字符

·     Invalid local CIDRs         无效的本端网段

·     Invalid remote CIDRs:无效的对端网段

·     The local CIDRs cannot overlap:本端CIDR存在重叠

·     The remote CIDRs cannot overlap:对端CIDR存在重叠

·     If you do not specify a remote vRouter, you cannot specify remote subnets and you must specify remote CIDRs:不指定对端虚拟路由器时,不能指定对端子网且对端网段必填

·     Remote subnets or remote CIDRs must use the same IP protocols as local subnets or local CIDRs:对端子网或对端网段的IP版本需要与本端子网或本端网段一致

 

7.11  Delete east-west traffic application

关键字

DEL_EAST_WEST_APPLICATION_OP

日志内容

Deleted east-west traffic application $1

参数解释

$1:东西向流量应用的ID

举例

Deleted east-west traffic application edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除东西向流量应用的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定资源不存在

 

 


8 PUBLIC_CLOUD

本节介绍Super Controller模块支持对接公有云管理和编排功能的操作日志信息。

8.1  Add proxy

关键字

ADD_PROXY_OP

日志内容

Added proxy, request: $1

参数解释

$1:添加Proxy的请求消息体

举例

Added proxy, request: {

    "proxy": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "enable_proxy": true,

        "proxy_address": "proxy.sdn.com",

        "port": 8080,

        "user_name": "admin",

        "password": "******"

    }

}}

日志说明

用户进行了增加HTTP代理配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified proxy configuration already exist代理配置已存在

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.2  Update proxy

关键字

UPDATE_PROXY_OP

日志内容

Updated proxy “$1”, request: $2

参数解释

$1:代理配置的ID

$2:代理配置的请求消息体

举例

Updated proxy " 46585c3a-8ba8-4dbf-8db4-e7205652e674", request: {

    "id": "46585c3a-8ba8-4dbf-8db4-e7205652e674",

    "port": 8080,

    "password": "*********",

    "enable_proxy": false,

    "proxy_address": "proxy.sdn.com",

    "user_name": "z20291"

}

日志说明

用户进行了修改HTTP代理配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified resource does not exist:指定的资源不存在

·     The specified proxy configuration does not exist:指定的代理配置不存在

 

8.3  Delete proxy

关键字

DEL_PROXY_OP

日志内容

Deleted proxy $1

参数解释

$1:代理配置的ID

举例

Deleted proxy edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除HTTP代理配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified resource does not exist:指定的代理配置不存在

 

8.4  Add account

关键字

ADD_ACCOUNT_OP

日志内容

Added account, request: $1

参数解释

$1:添加账户的请求消息体

举例

Added account "c3978f64-87a2-4129-9f9d-a8d0047da3b0", request: {

         "id": "c3978f64-87a2-4129-9f9d-a8d0047da3b0",

         "vendor": "AWS",

         "mode": "AK-SK",

         "description": "aws account",

         "username": "[email protected]",

         "region": ["eu-west-3"],

         "ak": "*********",

         "sk": "*********",

         "state": "normal",

         "account_id": "490509281347",

         "sync_state": null,

         "last_sync_time": null

}

日志说明

用户进行了增加账户的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid public cloud type:无效的公有云类型

·     Invalid account ID:无效的账户ID

·     Invalid authentication mode:无效的认证模式

·     The account description cannot exceed 255 characters:账户的描述信息不能超过255个字符

·     Invalid AK:无效的AK

·     Invalid SK:无效的SK

·     The selected regions must be within the account's region range:已选Region必须在该账户Region范围内

·     The region list of the account cannot be empty:账户的Region列表不能为空

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     A public cloud account already exists with the same account ID:指定的公有云账户已存在

·     The public cloud is unreachable:公有云不可达

 

8.5  Update account

关键字

UPDATE_ACCOUNT_OP

日志内容

Updated account “$1”, request: $2

参数解释

$1:账户的ID

$2:修改账户的请求消息体

举例

Updated account "d29e08ee-a02b-4479-b3c4-bb2c520c7010", request: {

         "id": "d29e08ee-a02b-4479-b3c4-bb2c520c7010",

         "vendor": "AWS",

         "mode": "AK-SK",

         "description": "aws account",

         "username": "[email protected]",

         "region": ["eu-north-1"],

         "ak": "*********",

         "sk": "*********",

         "state": "normal",

         "account_id": "490509281347",

         "sync_state": "success",

         "last_sync_time": "2022-06-15 18:15:06"

}

日志说明

用户进行了修改账户的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     Invalid public cloud type:无效的公有云类型

·     Invalid account ID:无效的账户ID

·     Invalid authentication mode:无效的认证模式

·     The account description cannot exceed 255 characters:账户的描述信息不能超过255个字符

·     Invalid AK:无效的AK

·     Invalid SK:无效的SK

·     The selected regions must be within the account's region range:已选Region必须在该账户Region范围内

·     The region list of the account cannot be empty:账户的Region列表不能为空

·     The public cloud is unreachable:公有云不可达

 

8.6  Delete account

关键字

DEL_ACCOUNT_OP

日志内容

Deleted account $1

参数解释

$1:账户的ID

举例

Deleted account edfed45a-d3a9-4bb0-bfe4-b5fe5c3c9027

日志说明

用户进行了删除账户的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     A VPC exists under this account:指定账户下存在VPC,不能被删除

 

8.7  Check account

关键字

CHECK_ACCOUNT_OP

日志内容

Checked account, request: $2

参数解释

$1:账户信息的请求消息体

举例

Checked account: {

    "account": {

        "vendor": "AWS",

        "mode": "AK-SK",

        "account_id": "497487339952 ",

        "username": "awsaccount",

        "ak": "AKIAXHVEOMGYGYJXOOV6",

        "sk": "GAYvKzQ9IdtTsGG+ajm2TpdFCr8I7/k4jOLEwa+L"

}}

日志说明

用户进行了账号能力检测的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     Invalid public cloud type:无效的公有云类型

·     Invalid account ID:无效的账户ID

·     Invalid authentication mode:无效的认证模式

·     Invalid AK:无效的AK

·     Invalid SK:无效的SK

·     Invalid username:无效的用户名

·     Failed to authenticate to the public cloud by using the AK/SK pair:使用AK/SK认证公有云失败

·     The selected regions must be within the account's region range:已选Region必须在该账户Region范围内

·     The region list of the account cannot be empty:账户的Region列表不能为空

 

8.8  Add VPC

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加VPC的请求消息体

举例

{

  "action": "createVpc",

  "content": {

    "name": "VPC",

    "region": "eu-north-1",

    "description":"vpc111",

    "cidr_block": "10.0.0.0/24",

    "ipv6_cidr_source": "AWS",

    "account_id": "497487339952",

    "vendor": "AWS",

    "ipv6_cidr_block_network_border_group": "us-west-2-lax-1"

  }

}

日志说明

用户进行了增加VPC的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid public cloud type:无效的公有云类型

·     Invalid account ID:无效的账户ID

·     Invalid authentication mode:无效的认证模式

·     Invalid VPC name:无效的VPC名称

·     The VPC description cannot exceed 255 charactersVPC的描述信息不能超过255个字符

·     The value of region must be within the account's region range:已选Region必须在该账户的Region范围内

·     Invalid IPv6 CIDR source:无效的IPv6网段来源

·     You must specify a network border group when an IPv6 CIDR source is specified:已配置IPv6网段来源时,网络边界组的取值不能为空

·     Failed to authenticate to the public cloud by using the AK/SK pair:使用AK/SK认证公有云失败

·     The network border group must be within the region:该网络边界组不在指定的Region

·     You can specify a network border group only when the IPv6 CIDR source is specified:未配置IPv6 CIDR来源时,网络边界组的取值必须为空

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     The selected regions must be within the account's region range:已选Region必须在该账户Region范围内

·     Failed to request data from Amazon Web Services:从亚马逊云请求数据失败

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     A VPC name must be 2 to 128 charactersin length and start with a letter or Chinese character. It can contain digits,underscores (_), and hyphens (-)VPC名称长度为2128个字符,以字母或中文开头,可包含数字、下划线(_)和短划线(-

 

8.9  Update VPC

关键字

UPDATE_VPC_OP

日志内容

Executed public cloud resource $1

参数解释

$1:修改VPC信息

举例

{

  "action": "updateVpc",

  "content": {

    "name": "VPC",

    "region": "eu-north-1",

    "description":"vpc111",

    "cidr_block": "10.0.0.0/24",

    "ipv6_cidr_source": "AWS",

    "account_id": "497487339952",

    "vendor": "AWS",

    "ipv6_cidr_block_network_border_group": "us-west-2-lax-1"

  }

}

日志说明

用户进行了修改VPC的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid public cloud type:无效的公有云类型

·     Invalid account ID:无效的账户ID

·     Invalid authentication mode:无效的认证模式

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     Invalid VPC name:无效的VPC名称

·     The VPC description cannot exceed 255 charactersVPC的描述信息不能超过255个字符

·     The value of region must be within the account's region range:已选Region必须在该账户的Region范围内

·     Invalid IPv6 CIDR source:无效的IPv6网段来源

·     You must specify a network border group when an IPv6 CIDR source is specified:已配置IPv6网段来源时,网络边界组的取值不能为空

·     Failed to authenticate to the public cloud by using the AK/SK pair:使用AK/SK认证公有云失败

·     The network border group must be within the region:该网络边界组不在指定的Region

·     You can specify a network border group only when the IPv6 CIDR source is specified:未配置IPv6 CIDR来源时,网络边界组的取值必须为空

·     The selected regions must be within the account's region range:已选Region必须在该账户Region范围内

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

·     A VPC name must be 2 to 128 charactersin length and start with a letter or Chinese character. It can contain digits,underscores (_), and hyphens (-)VPC名称长度为2128个字符,以字母或中文开头,可包含数字、下划线(_)和短划线(-

 

8.10  Delete VPC

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1VPC信息

举例

{

  "action": "deleteVpc",

  "content": {

    "name": "VPC",

    "region": "eu-north-1",

    "description":"vpc111",

    "cidr_block": "10.0.0.0/24",

    "ipv6_cidr_source": "AWS",

    "account_id": "497487339952",

    "vendor": "AWS",

    "ipv6_cidr_block_network_border_group": "us-west-2-lax-1"

  }

}

日志说明

用户进行了删除代理配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified VPC does not exist:指定的VPC不存在

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     Please delete the gateway resources associated by the specified VPC first:请先删除与该VPC有关的出口网关资源

·     Please delete the vRouter resources associated by the specified VPC first:请先删除与该VPC有关的虚拟路由器资源

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.11  Add VPC CIDR

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加VPC网段的请求消息体

举例

{

  "action": "createVpcCidr",

  "content": {

    "protocolType":"v4",

    "cidr": {

      "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

      "cidr_block": "10.0.0.0/24"

    }

  }

}

或者

{

  "action": "createVpcCidr",

  "content": {

    "protocolType":"v6",

    "cidr": {

      " vpc_id ": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

      "ipv6_cidr_block_network_border_group": "us-west-2-lax-1",

      "ipv6_cidr_source": "AWS"

    }

  }

}

日志说明

用户进行了增加VPC网段的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid public cloud type:无效的公有云类型

·     Invalid VPC name:无效的VPC名称

·     Invalid IP protocol type:无效的IP协议类型

·     Invalid IPv4 cidr parameter:无效的IPv4网段参数

·     Invalid IPv6 cidr parameter:无效的IPv6网段参数

·     The specified VPC does not exist:指定的VPC不存在

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.12  Delete VPC CIDR

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1VPC网段信息

举例

{

  "action": "deleteVpcCidr",

  "content": {

    "association_id": "vpc-cidr-assoc-e2a5408b"

  }

}

日志说明

用户进行了删除VPC网段的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified VPC does not exist:指定的VPC不存在

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.13  Add egress gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加出口网关的请求消息体

举例

{

    "action": "CreateExportGateway",

    "content": {

        "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "vpc",

        "description": "gateway--test",

        "resource_type": "InternetGateway"

    }

}

日志说明

用户进行了增加出口网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The egress gateway description cannot exceed 255 characters:该出口网关的描述不能超过255个字符

·     The egress gateway name cannot exceed 256 characters:该出口网关的名称不能超过256个字符

·     Invalid egress gateway resource type:无效的出口网关类型

·     Failed to create the egress gateway on the public cloud向公有云创建出口网关失败

·     The specified VPC does not exist指定的VPC不存在

·     Failed to attach an Internet gateway to the public cloud:向公有云连接互联网网关失败

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.14  Update egress gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改出口网关的请求消息体

举例

{

    "action": "UpdateExportGateway",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "gateway",

        "description": "gateway—test-modify"

    }

}

日志说明

用户进行了修改出口网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The egress gateway description cannot exceed 255 characters:该出口网关的描述不能超过255个字符

·     The egress gateway name cannot exceed 256 characters:该出口网关的名称不能超过256个字符

·     Failed to edit the egress gateway on the public cloud:向公有云修改出口网关失败

·     The specified VPC does not exist指定的VPC不存在

·     The specified egress gateway does not exist:指定的出口网关不存在

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.15  Delete egress gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除出口网关的请求消息体

举例

{

  "action": "DeleteExportGateway",

  "content": {

          "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除出口网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified egress gateway does not exist指定的出口网关不存在

·     Failed to detach an Internet gateway from the public cloud:向公有云分离互联网网关失败

·     Please delete the resources associated by the specified gateway first:请先删除与该出口网关有关的资源

·     Failed to delete the egress gateway from the public cloud:向公有云删除出口网关失败

 

8.16  Add vRouter

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加虚拟路由器的请求消息体

举例

{

        "action": "CreateVRouter",

        "content": {

              "name": "vroute",

              "description":"vroute",

              "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

        }

}

日志说明

用户进行了增加虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The vRouter name cannot exceed 256 characters:该虚拟路由器的名称不能超过256个字符

·     The vRouter description cannot exceed 255 characters:该虚拟路由器的描述不能超过255个字符

·     Failed to create the vRouter on the public cloud向公有云创建虚拟路由器失败

·     The specified VPC does not exist指定的VPC不存在

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     A vRouter name must be 2 to 128 charactersin length and start with a letter or Chinese character. It can contain digits,underscores (_), and hyphens (-):虚拟路由器名称长度为2128个字符,以字母或中文开头,可包含数字、下划线(_)和短划线(-

 

8.17  Update vRouter

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改虚拟路由器的请求消息体

举例

{

    "action": "UpdateVRouter",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "vrouter",

        "description":"router-modify"

    }

}

日志说明

用户进行了修改虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The vRouter name cannot exceed 256 characters:该虚拟路由器的名称不能超过256个字符

·     The vRouter description cannot exceed 255 characters:该虚拟路由器的描述不能超过255个字符

·     Failed to edit the vRouter on the public cloud:向公有云修改虚拟路由器失败

·     The specified VPC does not exist:指定的VPC不存在

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

·     A vRouter name must be 2 to 128 charactersin length and start with a letter or Chinese character. It can contain digits,underscores (_), and hyphens (-):虚拟路由器名称长度为2128个字符,以字母或中文开头,可包含数字、下划线(_)和短划线(-

 

8.18  Delete vRouter

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除虚拟路由器的请求消息体

举例

{

  "action": "DeleteVRouter",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除虚拟路由器的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified vRouter does not exist指定的虚拟路由器不存在

·     Failed to delete the vRouter from the public cloud向公有云删除虚拟路由器失败

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.19  Add route entry

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加路由表项的请求消息体

举例

{

    "action": "CreateRouteItem",

    "content": {

              "vrouter_id": "67fe85e4-ca2f-4192-b3cd-d5c249d7a211",

              "destination_cidr_block": "10.0.0.0/24",

              "destination_ipv6_cidr_block": "",

              "next_hop_type": "ExportGateway",

              "next_hop_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

    }

}

日志说明

用户进行了增加路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid next hop type:无效的下一跳类型

·     The request must contain exactly one of destination CIDR Block,destination IPv6 CIDR BlockIPv4目的网段和IPv6目的网段只能设置一个

·     Invalid destination IPv4 CIDR Block:无效的IPv4目的网段

·     Invalid destination IPv6 CIDR Block:无效的IPv6目的网段

·     The specified router item already exists:指定的路由表项已存在

·     Failed to create a router item on the public cloud:向公有云创建路由表项失败

·     Can not create IPv4 CIDR Block for an Egress Only Internet Gateway for an IPv4 route:当创建IPv4目的网段时,下一跳类型不能为仅出口互联网网关

·     The specified egress gateway does not exist:指定的出口网关不存在

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.20  Delete route entry

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除路由表项的请求消息体

举例

{

  "action": "DeleteRouteItem",

  "content": {

      "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The local main route item can not be deleted作为主虚拟路由器的路由表项不允许删除

·     The specified router item does not exist指定的路由表项不存在

·     Failed to delete a router item on the public cloud向公有云删除路由表项失败

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.21  Add subnet

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加子网的请求消息体

举例

{

        "action": "CreateSubnet",

        "content": {

             "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

             "name": "subnet1",

             "description": "subnet",

             "availability_zone_id": "use1-az4",

             "cidr_block": "22.22.22.0/24",

             "ipv6_cidr_block": "2600:1f16:42b:8210::/64",

             "vrouter_id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

        }

}

日志说明

用户进行了增加子网的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified VPC does not exist指定的VPC不存在

·     The subnet description cannot exceed 255 characters子网的描述不能超过255个字符

·     The subnet name cannot exceed 256 characters子网的名称不能超过256个字符

·     Failed to create a subnet on the public cloud向公有云创建子网失败

·     Failed to associate the subnet on the public cloud with the vRouter关联公有云上的子网和虚拟路由器失败

·     The availability zone specified by the subnet must be within the availability zone of the VPC子网指定的可用区必须在VPC的可用区范围内

·     The IPv4 CIDR must be within the IPv4 CIDR range of the specified VPCIPv4网段必须在指定的VPCIPv4网段范围内

·     The IPv4 CIDR has been specified for a subnetIPv4网段已被子网使用

·     The IPv6 CIDR has been specified for a subnetIPv6网段已被子网使用

·     The IPv4 CIDR of this subnet conflicts with the IPv4 CIDR of another subnet in the same VPC该子网的IPv4网段和同一个VPC下其他子网的IPv4网段冲突

·     The IPv6 CIDR of this subnet conflicts with the IPv6 CIDR of another subnet in the same VPC该子网的IPv6网段和同一个VPC下其他子网的IPv6网段冲突

·     The mask length of an IPv4 CIDR must be between 16 and 28IPv4网段的大小必须介于/16网络掩码和/28网络掩码之间

·     The prefix length of an IPv6 CIDR must be 64IPv6 CIDR网段必须是/64 CIDR网段

·     Invalid IPv6 CIDR无效的IPv6网段

·     Invalid IPv4 CIDR无效的IPv4网段

·     The IPv6 CIDR must be within the IPv6 CIDR range of the specified VPCIPv6网段必须在指定的VPCIPv6网段范围内

·     The specified network ACL does not exist:指定的网络ACL不存在

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     A subnet name must be 2 to 128 charactersin length and start with a letter or Chinese character. It can contain digits,underscores (_), and hyphens (-):子网名称长度为2128个字符,以字母或中文开头,可包含数字、下划线(_)和短划线(-

 

8.22  Update subnet

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改子网的请求消息体

举例

{

    "action": "UpdateSubnet",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "subnet1",

        "description": "subnet1",

        "ipv6_cidr_block": "2600:1f16:42b:8210::/64",

        "vrouter_id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f"   

    }

}

日志说明

用户进行了修改子网的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified VPC does not exist:指定的VPC不存在

·     The subnet description cannot exceed 255 characters子网的描述不能超过255个字符

·     The subnet name cannot exceed 256 characters子网的名称不能超过256个字符

·     Failed to update the subnet on the public cloud更新公有云上的子网失败

·     Failed to associate the subnet on the public cloud with the vRouter关联公有云上的子网和虚拟路由器失败

·     The IPv6 CIDR has been specified for a subnetIPv6网段已被子网使用

·     The IPv6 CIDR of this subnet conflicts with the IPv6 CIDR of another subnet in the same VPC该子网的IPv6网段和同一个VPC下其他子网的IPv6网段冲突

·     The prefix length of an IPv6 CIDR must be 64IPv6 CIDR网段必须是/64 CIDR网段

·     Invalid IPv6 CIDR无效的IPv6网段

·     The IPv6 CIDR must be within the IPv6 CIDR range of the specified VPCIPv6网段必须在指定的VPCIPv6网段范围内

·     The specified network ACL does not exist:指定的网络ACL不存在

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

·     A subnet name must be 2 to 128 charactersin length and start with a letter or Chinese character. It can contain digits,underscores (_), and hyphens (-):子网名称长度为2128个字符,以字母或中文开头,可包含数字、下划线(_)和短划线(-

 

8.23  Delete subnet

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除子网的请求消息体

举例

{

  "action": "DeleteSubnet",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除子网的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Failed to delete the subnet from the public cloud向公有云删除子网失败

·     You cannot delete the VPC, because vSubnets exist on the VPCVPC下存在虚拟子网,不允许删除

·     The vRouter is already associated with the subnet该虚拟路由器已和子网关联

·     The specified subnet does not exist指定的子网不存在

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.24  Add network ACL

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加网络ACL的请求消息体

举例

{

        "action": "CreateNetworkAcl",

        "content": {

              "name": "acl",

              "description":"acl",

              "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

        }

}

日志说明

用户进行了增加网络ACL的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified VPC does not exist:指定的VPC不存在

·     The network ACL name cannot exceed 256 characters:网络ACL的名称不能超过256个字符

·     The network ACL description cannot exceed 255 characters:网络ACL的描述不能超过255个字符

·     The specified network ACL already exists:指定的网络ACL已存在

·     Failed to create the network ACL on the public cloud:向公有云创建网络ACL失败

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.25  Update network ACL

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改网络ACL的请求消息体

举例

{

        "action": "UpdateNetworkAcl",

        "content": {

              "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

              "name": "acl",

              "description":"acl"

        }

}

日志说明

用户进行了修改网络ACL的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The network ACL name cannot exceed 256 characters:网络ACL的名称不能超过256个字符

·     The network ACL description cannot exceed 255 characters:网络ACL的描述不能超过255个字符

·     The specified network ACL does not exist:指定的网络ACL不存在

·     Failed to update the network ACL on the public cloud:向公有云修改网络ACL失败

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.26  Delete network ACL

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除网络ACL的请求消息体

举例

{

  "action": "DeleteNetworkAcl",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除网络ACL的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified network ACL does not exist:指定的网络ACL不存在

·     The default network ACL cannot be deleted:默认网络ACL不允许删除

·     The network ACL has been associated with a subnet and cannot be deleted:网络ACL已被子网关联,不允许删除

·     Failed to delete the network ACL from the public cloud:向公有云删除网络ACL失败

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.27  Add ACL rule

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加ACL规则的请求消息体

举例

{

    "action": "CreateAclEntryRule",

    "content": {

        "id": "36e6c86b-3efa-44c5-bde4-b179942489c6",

        "network_acl_id": "9b0019d9-9011-412b-b941-e2d6bfeb2cc8",

        "egress": true,

        "rule_num": 17,

        "protocol": 6,

        "icmp_type": null,

        "icmp_code": null,

        "port_range_from": 1,

        "port_range_to": 65535,

        "cidr_block": null,

        "ipv6_cidr_block": "2a05:d016:3bb:ab00::/56",

        "rule_action": "allow"

    }

}

日志说明

用户进行了增加ACL规则的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified network ACL does not exist:指定的网络ACL不存在

·     Please specify the rule as an outbound or inbound rule:请指定该规则是出站规则还是入站规则

·     Only rules with a protocol number of 1, 1, 6, 17, or 58 can be created:只允许创建协议编号为-1161758的规则

·     The ICMP type and ICMP code are required if the protocol number is 1 (ICMP) or 58 (ICMPv6):当协议编号为1ICMP)或58ICMPv6)时,需要配置ICMP TypeICMP Code

·     The rule number must be an integer in the range of 1 to 32766:规则编号取值范围为132766的整数

·     The start port must be an integer in the range of 1 to 65535:端口范围开始编号的取值必须是165535的整数

·     The end port must be an integer in the range of 1 to 65535:端口范围结束编号的取值必须是165535的整数

·     The start port must be smaller than or equal to the end port:端口范围开始编号必须小于等于端口范围结束编号

·     The rule action can only be Allow or Deny:规则动作只能设置为允许或者拒绝

·     The specified network ACL rule already exists:指定的网络ACL规则已存在

·     Invalid IPv4 CIDR:无效的IPv4网段

·     Invalid IPv6 CIDR:无效的IPv6网段

·     You must configure the source address for an inbound rule and make sure the source address is an IPv4 or IPv6 CIDR:入站规则的源地址只能为一个IPv4网段或一个IPv6网段,且必须配置

·     You must configure the source address for an outbound rule and make sure the source address is an IPv4 or IPv6 CIDR:出站规则的目的地址只能为一个IPv4网段或一个IPv6网段,且必须配置

·     Failed to create the network ACL rule on the public cloud:向公有云创建网络ACL规则失败

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.28  Delete ACL rule

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除ACL规则的请求消息体

举例

{

  "action": "DeleteAclEntryRule",

  "content": {

      "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除ACL规则的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified network ACL rule does not exist:指定的网络ACL规则不存在

·     The default inbound rule and outbound rule cannot be deleted:默认出入站规则不允许删除

·     Failed to create the network ACL rule on the public cloud:向公有云删除网络ACL规则失败

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.29  Add security group

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加安全组的请求消息体

举例

{

        "action": "CreateSecurityGroup",

        "content": {

              "name": "securityGroup",

              "description":"securityGroup",

              "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

        }

}

日志说明

用户进行了增加安全组的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.30  Delete security group

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除安全组的请求消息体

举例

{

  "action": "DeleteSecurityGroup",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除安全组的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.31  Add security group rule

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加安全组规则的请求消息体

举例

{

    "action": "CreateSecurityGroupEntryRule",

    "content": {

        "security_group_id": "9b0019d9-9011-412b-b941-e2d6bfeb2cc8",

        "egress": true,

        "name": "SG-0",

        "description": "SG-0",

        "protocol": "icmp",

        "icmp_type": 3,

        "icmp_code": 1,

        "port_range_from": null,

        "port_range_to": null,

        "cidr_block": null,

        "ipv6_cidr_block": null,

        "reference_group_id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

    }

}

日志说明

用户进行了增加安全组规则的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.32  Delete security group rule

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除安全组规则的请求消息体

举例

{

  "action": "DeleteSecurityGroupEntryRule",

  "content": {

      "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除安全组规则的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.33  Add endpoint

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加终端节点的请求消息体

举例

{

    "action": "CreateEndPoint",

    "content": {

        "vpc_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "endpoint1",

        "description": "endpoint1",

        "service_category": "aws",

        "service_name": "com.amazonaws.eu-west-3.airflow.api",

        "subnet_associate": [

              "56fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

              "98fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

        ],

        "security_group_associate": [

              "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

              "65fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

        ]

    }

}

日志说明

用户进行了增加终端节点的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.34  Update endpoint

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改终端节点的请求消息体

举例

{

    "action": "UpdateEndPoint",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "endpoint1",

        "description": "endpoint1",

        "subnet_associate": [

              "56fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

              "98fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

        ],

        "security_group_associate": [

              "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

              "65fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

        ]

    }

}

日志说明

用户进行了修改终端节点的操作

失败原因

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.35  Delete endpoint

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除终端节点的请求消息体

举例

{

  "action": "DeleteEndPoint",

  "content": {

          "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除终端节点的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The account to which the public cloud resource belongs is synchronizing data. Please try later:该公有云资源的账户正在进行数据同步,请稍后再试

 

8.36  Sync public cloud resources

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:终端节点服务信息

举例

Executed public cloud resource "{"

action ":"

SyncCloudResources ","

content ":{"

account_id ":"

d29e08ee - a02b - 4479 - b3c4 - bb2c520c7010 "}}"

日志说明

用户进行了同步公有云资源的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     The specified account is synchronizing data. Please try later:指定的账户正在进行数据同步,请稍后再试

 

8.37  Add transit gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加中转网关的请求消息体

举例

{

    "action": "CreateTransitGateway",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "TransitGateway1",

        "description": "TransitGateway1",

        "account_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "vendor": "AWS",

        "region": "eu-north-1",

        "as": 64512

    }

}

日志说明

用户进行了增加中转网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     The name of a transit gateway cannot exceed 256 charactersTransit Gateway的名称不能超过256个字符

·     The description of a transit gateway cannot exceed 255 characters. Only letters, digits, spaces,and special characters(!._-:/()#,@[]+=&;{}$*) are supportedTransit Gateway的描述不能超过255个字符,仅支持字母、数字、空格和以下特殊字符:!._-:/()#,@[]+=&;{}$*

·     Invalid AS number. The AS number range is 64512 to 65534 or 4200000000 to 4294967294:此AS号无效。AS号必须在64512-655344200000000-4294967294范围内

·     Failed to create a transit gateway on the public cloud:向公有云创建Transit Gateway失败

 

8.38  Update transit gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改中转网关的请求消息体

举例

{

    "action": "UpdateTransitGateway",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "TGW1",

        "description": "TGW1"

    }

}

日志说明

用户进行了修改中转网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The name of a transit gateway cannot exceed 256 charactersTransit Gateway的名称不能超过256个字符

·     The description of a transit gateway cannot exceed 255 characters. Only letters, digits, spaces,and special characters(!._-:/()#,@[]+=&;{}$*) are supportedTransit Gateway的描述不能超过255个字符,仅支持字母、数字、空格和以下特殊字符:!._-:/()#,@[]+=&;{}$*

·     The specified transit gateway does not exist:指定的Transit Gateway不存在

·     Failed to update a transit gateway on the public cloud:向公有云更新Transit Gateway失败

 

8.39  Delete transit gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除中转网关的请求消息体

举例

{

  "action": "DeleteTransitGateway",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除中转网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified transit gateway does not exist:指定的Transit Gateway不存在

·     Failed to delete a transit gateway from the public cloud:向公有云删除Transit Gateway失败

·     You cannot delete the transit gateway, because it has transit router bindings:指定的Transit Gateway下存在Transit Router,不可以删除

 

8.40  Add transit router

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加中转路由的请求消息体

举例

{

    "action": "CreateTransitRouter",

    "content": {

        "transit_gateway_id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "TR1",

        "description": "TR1"

    }

}

日志说明

用户进行了增加中转路由的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     The name of a transit router cannot exceed 256 charactersTransit Router的名称不能超过256个字符

·     The description of a transit router cannot exceed 255 charactersTransit Router的描述不能超过255个字符

·     Failed to create a transit router on the public cloud向公有云创建Transit Router失败

 

8.41  Update transit router

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改中转路由的请求消息体

举例

{

    "action": "UpdateTransitRouter",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "TR1",

        "description": "TR1"

    }

}

日志说明

用户进行了修改中转路由的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The name of a transit router cannot exceed 256 charactersTransit Router的名称不能超过256个字符

·     The description of a transit router cannot exceed 255 charactersTransit Router的描述不能超过255个字符

·     Failed to update a transit router on the public cloud:向公有云删除Transit Router失败。

·     The specified transit router does not exist:指定的Transit Router不存在

 

8.42  Delete transit router

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除中转路由的请求消息体

举例

{

  "action": "DeleteTransitRouter",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除中转路由的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Failed to delete a transit router from the public cloud:向公有云删除Transit Router失败

·     The specified transit router does not exist:指定的Transit Router不存在

 

8.43  Add transit route entry

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加中转路由表项的请求消息体

举例

{

    "action": "CreateTransitRouteItem",

    "content": {

              "id":"77fe85e4-ca2f-4192-b3cd-d5c249d7a211",

              "transit_router_id": "67fe85e4-ca2f-4192-b3cd-d5c249d7a211",

              "destination_cidr_block": "10.0.0.0/24",

              "destination_ipv6_cidr_block": "",

              "transit_gateway_peering_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

    }

}

日志说明

用户进行了增加中转路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

 

8.44  Delete transit route entry

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除中转路由表项的请求消息体

举例

{

  "action": "DeleteTransitRouteItem",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除中转路由表项的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

 

8.45  Add transit gateway peering

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加Transit Gateway Peering的请求消息体

举例

{

    "action": "CreateTransitGatewayPeering",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "TransitGatewayPeering1",

        "description": "TransitGatewayPeering1",

        "vendor": "AWS",

        "local_account_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "local_region": "eu-north-1",

        "local_transit_gateway_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "peer_account_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "peer_region": "eu-north-1",

        "peer_transit_gateway_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

    }

}

日志说明

用户进行了增加Transit Gateway Peering的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     The name of a transit gateway peering cannot exceed 256 charactersTransit Gateway Peering的名称不能超过256个字符

·     The description of a transit gateway peering cannot exceed 255 charactersTransit Gateway Peering的描述不能超过255个字符

·     Failed to create a transit gateway peering on the public cloud:向公有云创建Transit Gateway Peering失败

·     Failed to query transit gateway peering from the public cloud:向公有云查询Transit Gateway Peering失败

·     The specified local public cloud account does not exist:指定的本端公有云账户不存在

·     The specified remote public cloud account does not exist:指定的对端公有云账户不存在

·     The specified local region must be within the local account's region range:本端Region的取值必须在本端账户的Region范围内

·     The specified remote region must be within the remote account's region range:对端Region的取值必须在对端账户的Region范围内

·     The name of a transit gateway cannot exceed 256 characters:指定的本端Transit Gateway不存在

·     The specified local transit gateway does not exist:指定的对端Transit Gateway不存在

·     The remote transit gateway cannot be the same as the local transit gateway:本端Transit Gateway和对端Transit Gateway不能相同

·     The local transit gateway already has a peering attachment to the remote transit gateway:指定的本端Transit Gateway和该对端Transit Gateway的挂载关系已存在

 

8.46  Update transit gateway peering

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改Transit Gateway Peering的请求消息体

举例

{

    "action": "UpdateTransitGatewayPeering",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "TGWP1",

        "description": "TGWP1"

    }

}

日志说明

用户进行了修改Transit Gateway Peering的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified transit gateway peering does not exist:指定的Transit Gateway Peering不存在

·     The name of a transit gateway peering cannot exceed 256 charactersTransit Gateway Peering的名称不能超过256个字符

·     The description of a transit gateway peering cannot exceed 255 charactersTransit Gateway Peering的描述不能超过255个字符

·     Failed to update a transit gateway peering on the public cloud:向公有云更新Transit Gateway Peering失败

 

8.47  Delete transit gateway peering

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除Transit Gateway Peering的请求消息体

举例

{

  "action": "DeleteTransitGatewayPeering",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除Transit Gateway Peering的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     The specified transit gateway peering does not exist:指定的Transit gateway peering不存在

·     Failed to delete a transit gateway peering from the public cloud:向公有云删除Transit Gateway Peering失败

 

8.48  Add vRouter access

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加vRouter access的请求消息体

举例

{

    "action": "CreateVRouterAccess",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a214",

        "name":"vrouter access",

        "vpc_id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "vrouter_id": "91fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "transit_router_id": "93fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "subnets": [

            "93fe85e4-ca2f-4192-b3cd-d5c249d7a214",

            "93fe85e4-ca2f-4192-b3cd-d5c249d7a215"

        ],

        "destination_cidrs": [

            "10.0.0.0/24",

            "20.0.0.0/24"

        ],

        "destination_ipv6_cidrs": [

         

        ]

    }

}

日志说明

用户进行了增加vRouter access的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     The specified transit router does not exist:指定的Transit Router不存在

·     The specified vRouter does not exist:指定的虚拟路由器不存在

·     The subnet list cannot be empty:子网列表不能为空

·     The specified transit gateway does not existIPv4IPv6目的网段列表不能同时为空

·     Failed to create a VPC transit gateway attachment on the public cloud:向公有云创建VPC中转网关挂载失败

·     Failed to associate a transit router with the public cloud:向公有云关联Transit Router失败

·     Failed to propagate a transit router to the public cloud:向公有云传播Transit Router失败

·     A vRouter access already exists with the same VPC, transit gateway, and vRouter:指定的VPCTransit Router所属的Transit Gateway以及虚拟路由器已被其他vRouter接入绑定

·     Failed to obtain information about VPC transit gateway attachments from the public cloud:向公有云查询VPC中转网关挂载失败

·     The specified subnet does not belong to the specified VPC:指定的子网不属于指定的VPC

·     The specified vRouter does not belong to the specified VPC:指定的虚拟路由器不属于指定的VPC

·     The specified subnets must belong to different availability zones:子网必须属于不同可用区

·     The specified subnet is not bound to the vRouter specified for the vRouter accessvRouter接入的子网未绑定指定的虚拟路由器

·     The vRouter access name cannot exceed 255 characters:无效的vRouter接入名称

·     A vRouter access with the same name already existsvRouter接入名称已存在

·     You cannot specify the same availability zone for two vRouter accesses when they meet the following requirements: 1. They have the same VPC binding. 2. The transit routers specified for them run on the same transit gateway:当两个vRouter接入绑定了相同的VPC,且绑定的Transit Router属于相同的Transit Gateway,这两个vRouter接入选择的子网可用区不能相同

·     The transit gateway to which the specified transit router belongs must be in the specified transit gateway peering attachmentTransit RouterTransit Gateway Peering不在同一Transit Gateway

·     The specified transit router and the specified VPC must belong to the same regionTransit RouterVPC必须属于同一个Region

·     The vRouter access name cannot exceed 255 charactersvRouter接入的名称最长255个字符

·     Please specify a name for the vRouter accessvRouter接入名称为必填项

·     A VPC-TGW attachment can only be associated with one transit router:一个VPC挂载只能被一个Transit Router所关联

 

8.49  Update vRouter access

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改vRouter access的请求消息体

举例

{

    "action": "UpdateVRouterAccess",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a214",

        "subnets": [

            "93fe85e4-ca2f-4192-b3cd-d5c249d7a214",

            "93fe85e4-ca2f-4192-b3cd-d5c249d7a215"

        ],

        "destination_cidrs": [

            "10.0.0.0/24",

            "20.0.0.0/24"

        ]

    }

}

 

日志说明

用户进行了修改vRouter access的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·      The specified vRouter does not exist:指定的虚拟路由器不存在

·     The subnet list cannot be empty:子网列表不能为空

·     The specified transit gateway does not existIPv4IPv6目的网段列表不能同时为空

·     Failed to update a VPC transit gateway attachment on the public cloud:向公有云修改VPC中转网关挂载失败

·     The specified subnet does not belong to the specified VPC:指定的子网不属于指定的VPC

·     The specified subnets must belong to different availability zones:子网必须属于不同可用区

·     The specified subnet is not bound to the vRouter specified for the vRouter accessvRouter接入的子网未绑定指定的虚拟路由器

·     The vRouter access name cannot exceed 255 characters:无效的vRouter接入名称

·     A vRouter access with the same name already existsvRouter接入名称已存在

·     You cannot specify the same availability zone for two vRouter accesses when they meet the following requirements: 1. They have the same VPC binding. 2. The transit routers specified for them run on the same transit gateway:当两个vRouter接入绑定了相同的VPC,且绑定的Transit Router属于相同的Transit Gateway,这两个vRouter接入选择的子网可用区不能相同

·     The specified transit router item already exists:指定的Transit Router路由表项已存在

·     The vRouter access name cannot exceed 255 charactersvRouter接入的名称最长255个字符

·     Please specify a name for the vRouter accessvRouter接入名称为必填项

 

8.50  Delete vRouter access

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除vRouter access的请求消息体

举例

{

  "action": "DeleteVRouterAccess",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除vRouter access的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Failed to delete a VPC transit gateway attachment from the public cloud:向公有云删除VPC中转网关挂载失败

·     Failed to disassociate a transit router from the public cloud:向公有云解除Transit Router关联失败

·     Failed to disable propagate a transit router to the public cloud:向公有云解除传播Transit Router失败

·     A vRouter access already exists with the same VPC, transit gateway, and vRouter:指定的VPCTransit Router所属的Transit Gateway以及虚拟路由器已被其他vRouter接入绑定

·     The specified vRouter access does not exist:指定的vRouter接入不存在

 

8.51  Add direct connect gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加专线网关的请求消息体

举例

{

    "action": "CreateDirectConnectGateway",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "dgw1",

        "as": 64512,

        "account_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211"

    }

}

日志说明

用户进行了增加专线网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     Please specify a direct connect gateway name:专线网关名称必填

·     The name of a direct connect gateway cannot exceed 100 characters. Only letters, digits, and hyphens (-) are supported:专线网关的名称最长100个字符,支持字母、数字和连字符

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     The AS number must be an integer in the range of 64512 to 65534 or 4200000000 to 4294967294AS号的取值范围为645126553442000000004294967294的整数

·     Failed to create the direct connect gateway on the public cloud:向公有云创建专线网关失败

 

8.52  Update direct connect gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改专线网关的请求消息体

举例

{

    "action": "UpdateDirectConnectGateway",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "dwg1"

    }

}

日志说明

用户进行了修改专线网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     Please specify a direct connect gateway name:专线网关名称必填

·     The name of a direct connect gateway cannot exceed 100 characters. Only letters, digits, and hyphens (-) are supported:专线网关的名称最长100个字符,支持字母、数字和连字符

·     The specified direct connect gateway does not exist:指定的专线网关不存在

·     Failed to update the direct connect gateway on the public cloud:向公有云更新专线网关失败

 

8.53  Delete direct connect gateway

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除专线网关的请求消息体

举例

{

  "action": "DeleteDirectConnectGateway",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除专线网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     The id must be specifiedID不能为空

·     The specified direct connect gateway does not exist:指定的专线网关不存在

·     You cannot delete the direct connect gateway, because it has gateway associations:指定的专线网关存在网关关联,不允许删除

·     Failed to delete the direct connect gateway on the public cloud:向公有云删除专线网关失败

 

8.54  Add direct connect gateway association

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加网关关联的请求消息体

举例

{

    "action": "CreateDirectConnectGatewayAssociation",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "ass1",

        "direct_connect_gateway_id": "9caef4c6-1010-42c3-9527-289ceb29a456",

        "allowed_prefixes": [

            "192.168.0.0/24",

            "192.161.0.0/24"

        ],

        associated_gateway: {

            gateway_id: "695a4331-7fc7-4b7c-bcb9-5d69c2c1e662"

        }

    }

}

日志说明

用户进行了增加网关关联的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     Please specify a gateway association name:网关关联名称必填

·     The name of a gateway association cannot exceed 256 characters and cannot contain only spaces:网关关联的名称最大256个字符,不支持全空格

·     The specified direct connect gateway does not exist:指定的专线网关不存在

·     The specified direct connect gateway is not available:指定的专线网关为非正常状态

·     The specified transit gateway does not exist:指定的Transit Gateway不存在

·     The specified transit gateway is not available:指定的中转网关为非正常状态

·     A gateway association already exists with the specified transit gateway:中转网关关联关系已存在

·     Please specify allowed prefixes for the gateway association:网关关联允许的前缀必填

·     Invalid prefixes for the gateway association:无效的网关关联前缀

·     You can specify up to 20 allowed prefixes for a gateway association:网关关联允许的前缀最多指定20

·     The allowed prefixes of the gateway association cannot exist in any other gateway association:网关关联允许的前缀和其他的网关关联存在冲突

·     Failed to create the gateway association on the public cloud:向公有云创建网关关联失败

·     The BGP AS number of the VPN gateway cannot be the same as that of the transit gateway:专线网关BGP AS号和Transit Gateway BGP AS号不能重复

 

8.55  Update direct connect gateway association

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改网关关联的请求消息体

举例

{

    "action": "UpdateDirectConnectGatewayAssociation",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "allowed_prefixes": [

            "192.165.0.0/24",

            "192.161.0.0/24"

        ]

    }

}

日志说明

用户进行了修改网关关联的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     Please specify allowed prefixes for the gateway association:网关关联允许的前缀必填

·     Invalid prefixes for the gateway association:无效的网关关联前缀

·     You can specify up to 20 allowed prefixes for a gateway association:网关关联允许的前缀最多指定20

·     The allowed prefixes of the gateway association cannot exist in any other gateway association:网关关联允许的前缀和其他的网关关联存在冲突

·     The specified gateway association does not exist:指定的网关关联不存在

·     Failed to update the gateway association from the public cloud:向公有云更新网关关联失败

·     The BGP AS number of the VPN gateway cannot be the same as that of the transit gateway:专线网关BGP AS号和Transit Gateway BGP AS号不能重复

 

8.56  Delete direct connect gateway association

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除网关关联的请求消息体

举例

{

  "action": "DeleteDirectConnectGatewayAssociation",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除网关关联的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     The id must be specifiedID不能为空

·     The specified gateway association does not exist:指定的网关关联不存在

·     Failed to delete the gateway association from the public cloud:向公有云删除网关关联失败

 

8.57  Add virtual interface

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:添加虚拟接口的请求消息体

举例

{

    "action": "CreateVirtualInterface",

    "content": {

        "id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "account_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "name": "vt1",

        "description": "vt1",

        "type": "TRANSIT",

        "connection_id": "dxcon-fgjn0v0q",

        "ip_version": "ipv4",

        "vlan": 111,

        "mtu": 1500,

        "customer_address": "10.1.0.1/24",

        "amazon_address": "10.1.0.5/24",

        "customer_as": "111",

        "auth_key": "0xy.wr9h9miV64Sp9PfQU2eL",

        "route_filter_prefixes": [],

        "direct_connect_gateway_id": "97fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

    }

}

日志说明

用户进行了增加虚拟接口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     Invalid UUID:无效的UUID

·     The UUID already existsUUID已存在

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     The specified direct connect gateway does not exist:指定的专线网关不存在

·     Please specify a virtual interface name:虚拟接口的名称必填

·     The name of a virtual interface cannot exceed 100 characters. Only letters, digits, and hyphens (-) are supported:虚拟接口的名称最长100个字符,支持字母、数字和连字符

·     The description of a virtual interface cannot exceed 255 characters. Only letters, digits, spaces,and special characters(!._-:/()#,@[]+=&;{}$*) are supported:虚拟接口的描述不能超过255个字符,仅支持字母、数字、空格和以下特殊字符:!._-:/()#,@[]+=&;{}$*

·     Invalid type for the virtual interface:无效的虚拟接口类型

·     Invalid IP version for the virtual interface:无效的虚拟接口IP版本

·     Please specify a VLAN ID for the virtual interface:虚拟接口的VLAN必填

·     The VLAN ID of a virtual interface must be an integer in the range of 1 to 4094:虚拟接口的VLAN取值范围为14094的整数

·     Please specify a BGP peer AS number for the virtual interface:虚拟接口BGP对端AS号必填

·     The BGP peer AS number of a virtual interface must be an integer in the range of 1 to 2147493647:虚拟接口的BGP对端AS号的取值范围为12147493647的整数

·     The MTU value for a virtual interface must be 1500 or 8500:虚拟接口允许的MTU只能为15008500

·     Please specify prefixes for the virtual interface:虚拟接口公布的前缀必填

·     You can specify up to 100 prefixes for a virtual interface:虚拟接口最多指定100个前缀

·     Invalid IP address for the virtual interface:无效的虚拟接口IP地址

·     Invalid BGP peer IP address for the virtual interface:无效的虚拟接口BGP对端IP地址

·     Failed to create the public virtual interface on the public cloud:向公有云创建公有虚拟接口失败

·     Failed to create the transit virtual interface on the public cloud:向公有云创建中转虚拟接口失败

·     The BGP peer address and the Amazon address must be in the same CIDR of a prefix specified for the virtual interfaceBGP对端地址和亚马逊地址不在公布的前缀的同一CIDR块内

·     The BGP peer address and the Amazon address must be in the same CIDR:亚马逊地址和BGP对端地址必须在同一CIDR

·     The IP version of the network prefixes specfied for a virtual interface must be the same as that of the virtual interface:虚拟接口公布的前缀网段与虚拟接口的IP协议版本不一致

·     You can create up to one transit virtual interface for a direct connect:一个专线连接下只能创建一个中转类型的虚拟接口

·     The virtual interfaces created for the same direct connect must use different VLANs:一个专线连接下虚拟接口VLAN不能重复

·     The format of the BGP authentication key does not meet the AWS requirementsBGP身份验证密钥的格式不符合AWS要求

·     The BGP authentication key can contain up to 80 charactersBGP身份验证密钥最长80个字符

·     The prefix length of the IPv6 network address must be smaller than or equal to 64 bitsIPv6前缀的掩码需小于等于64

 

8.58  Update virtual interface

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:修改虚拟接口的请求消息体

举例

{

    "action": "UpdateVirtualInterface",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "vt1",

        "description": "vt1"

    }

}

日志说明

用户进行了修改虚拟接口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     Please specify a virtual interface name:虚拟接口的名称必填

·     The name of a virtual interface cannot exceed 100 characters. Only letters, digits, and hyphens (-) are supported:虚拟接口的名称最长100个字符,支持字母、数字和连字符

·     The description of a virtual interface cannot exceed 255 characters. Only letters, digits, spaces,and special characters(!._-:/()#,@[]+=&;{}$*) are supported:虚拟接口的描述不能超过255个字符,仅支持字母、数字、空格和以下特殊字符:!._-:/()#,@[]+=&;{}$*

·     The specified virtual interface does not exist:指定的虚拟接口不存在

·     Failed to update the virtual interface on the public cloud:向公有云修改虚拟接口失败

·     Only virtual interfaces in pending or available states can be modified:只能修改处于挂起或可用状态的虚拟接口

 

8.59  Delete virtual Interface

关键字

PUBLIC_CLOUD_RESOURCE

日志内容

Executed public cloud resource $1

参数解释

$1:删除虚拟接口的请求消息体

举例

{

  "action": "DeleteVirtualInterface",

  "content": {

    "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

  }

}

日志说明

用户进行了删除虚拟接口的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter:无效的参数

·     The id must be specifiedID不能为空

·     The specified virtual interface does not exist:指定的虚拟接口不存在

·     Failed to delete the virtual interface from the public cloud:向公有云删除虚拟接口失败

 

8.60  Updated license usage info for public cloud service

关键字

SYNC_LICENSE_USED_OP

日志内容

Updated license usage information for the public cloud service.

参数解释

举例

Updated license usage information for the public cloud service.

日志说明

用户进行了更新License使用量的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Failed to obtain information about instances from the public cloud:向公有云查询实例失败

·     No licenses are installed for the public cloud service:当前未安装公有云业务授权

 

8.61  Add VPN connection

关键字

ADD_VPN_CONNECTION_OP

日志内容

Executed public cloud resource: $1

参数解释

$1:添加VPN Connection的请求消息体

举例

Executed public cloud resource “{

    "action": "CreateVpnConnection",

    "content": {

        "id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "customer gateway_id": "b8f07739-68d5-47ba-bf8f-8f8ad05e054a",

        "name": "vct1",

        "description": "vct1444444",

        "region": "eu-north-1",

        "transit_gateway_id": "03e66305-5440-47a8-aee1-272c02e46219",

        "custom_gateway_id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "local_ipv4_network_cidr": "5.0.0.0/24",

        "remote_ipv4_network_cidr": "6.0.0.0/24",

        "tunnel_options": [

            {

                "tunnel_number": 1,

                "tunnel_inside_cidr": "2.2.2.0/24",

                "pre_share_key": "abcdefg12345",

                "phase1_encryption_algorithms": [

                    "AES128"

                ],

                "phase1_integrity_algorithms": [

                    "SHA1"

                ],

                "phase1_dh_group_numbers": [

                    "2"

                ],

                "phase2_encryption_algorithms": [

                    "AES128"

                ],

                "phase2_integrity_algorithms": [

                    "SHA1"

                ],

                "phase2_dh_group_numbers": [

                    "2"

                ],

                "ike_versions": [

                    "ikev1"

                ],

                "phase1_lifetime_seconds": 3600,

                "phase2_lifetime_seconds": 3600,

                "rekey_margin_time_seconds": 540,

                "rekey_fuzz_percentage": 100,

                "replay_window_size": 1024,

                "dpd_timeout_seconds": 30,

                "dpd_timeout_action": "clear",

                "startup_action": "add"

            },

            {

                "tunnel_number": 2,

                "tunnel_inside_cidr": "2.2.2.0/24",

                "pre_share_key": "abcdefg12345",

                "phase1_encryption_algorithms": [

                    "AES128"

                ],

                "phase1_integrity_algorithms": [

                    "SHA1"

                ],

                "phase1_dh_group_numbers": [

                    "2"

                ],

                "phase2_encryption_algorithms": [

                    "AES128"

                ],

                "phase2_integrity_algorithms": [

                    "SHA1"

                ],

                "phase2_dh_group_numbers": [

                    "2"

                ],

                "ike_versions": [

                    "ikev1"

                ],

                "phase1_lifetime_seconds": 3600,

                "phase2_lifetime_seconds": 3600,

                "rekey_margin_time_seconds": 540,

                "rekey_fuzz_percentage": 100,

                "replay_window_size": 1024,

                "dpd_timeout_seconds": 30,

                "dpd_timeout_action": "clear",

                "startup_action": "add"

            }

        ]

    }

}”

日志说明

用户进行了增加VPN连接配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Failed to create the VPN connection on the public cloud:向公有云创建VPN连接失败

·     The name of a VPN connection cannot exceed 64 characters. Only letters and digits are supportedVPN连接的名称最长64个字符,支持字母和数字

·     The VPN connection description cannot exceed 255 charactersVPN连接的描述不能超过255个字符

·     Invalid local ipv4 CIDR:无效的本地IPv4网络CIDR

·     Invalid remote ipv4 CIDR:无效的远程IPv4网络CIDR

·     The VPN connection must be configured with options for two and only two tunnelsVPN连接必须且仅能配置两个隧道选项

·     Only one phase 1 encryption algorithm can be configured:阶段1加密算法只能配置一个

·     Invalid phase 1 encryption algorithm:无效的阶段1加密算法

·     Only one phase 2 encryption algorithm can be configured:阶段2加密算法只能配置一个

·     Invalid phase 2 encryption algorithm:无效的阶段2加密算法

·     Only one phase 1 authentication algorithm can be configured:阶段1完整性算法只能配置一个

·     Invalid phase 1 authentication algorithm:无效的阶段1完整性算法

·     Only one phase 2 authentication algorithm can be configured:阶段2完整性算法只能配置一个

·     Invalid phase 2 authentication algorithm:无效的阶段2完整性算法

·     Only one phase 1 DH group number can be configured:阶段1Diffie-Hellman (DH)组编号只能配置一个

·     Invalid phase 1 DH group number:无效的阶段1Diffie-Hellman (DH)组编号

·     Only one phase 2 DH group number can be configured:阶段2Diffie-Hellman (DH)组编号只能配置一个

·     Invalid phase 2 DH group number:无效的阶段2Diffie-Hellman (DH)组编号

·     Invalid IKE version:无效的IKE版本

·     Only one IKE version can be configuredIKE版本只能配置一个

·     The phase 1 lifetime value must be an integer in the range of 900 to 28800:阶段1生命周期取值范围为90028800的整数

·     The phase 2 lifetime value must be an integer in the range of 900 to 3600:阶段2生命周期取值范围为9003600的整数

·     The phase 2 lifetime value must be less than the phase 1 lifetime value:阶段2生命周期取值必须小于阶段1生命周期取值

·     The DPD timeout value must be an integer equal to or greater than 30DPD超时时间的取值范围为大于等于30的整数

·     The value for the rekey margin time (seconds) parameter must be an integer in the range of 60 to half the phase 2 lifetime:再续键边缘时间()的取值范围为60到阶段2生命周期一半的整数

·     The value for the rekey fuzz (percentage) parameter must be an integer in the range of 0 to 100:再续键模糊(百分比)的取值范围为0100的整数

·     The value for the replay window size (packets) parameter must be an integer in the range of 64 to 2048:重播窗口大小(数据包)的取值范围为642048的整数

·     The DPD timeout action can only be clear, restart, or noneDPD超时操作取值为清除、重启或无

·     The startup action can only be add or start:启动操作取值为添加或开始

·     You can specify the IKE version as only IKEv2 when the startup action is Start:启动操作取值为开始时,IKE版本仅支持IKEv2

·     You can specify the IKE version as only IKEv2 when the phase 1 encryption algorithm is AES128-GCM-16 or AES256-GCM-16:阶段1加密算法取值为AES128-GCM-16AES256-GCM-16时,IKE版本仅支持IKEv2

 

8.62  Update VPN connection

关键字

UPDATE_VPN_CONNECTION_OP

日志内容

Executed public cloud resource: $1

参数解释

$1VPN连接的请求消息体

举例

Executed public cloud resource “{

    "action": "UpdateVpnConnection",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f",

        "name": "vct1",

        "description": "vct1",

        "local_ipv4_network_cidr": "3.1.1.1/24",

        "remote_ipv4_network_cidr": "4.1.1.1/24"

    }

}”

日志说明

用户进行了修改VPN连接配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Failed to update the VPN connection on the public cloud:向公有云修改VPN连接失败

·     The name of a VPN connection cannot exceed 64 characters. Only letters and digits are supportedVPN连接的名称最长64个字符,支持字母和数字

·     The VPN connection description cannot exceed 255 charactersVPN连接的描述不能超过255个字符

·     Invalid local ipv4 CIDR:无效的本地IPv4网络CIDR

·     Invalid remote ipv4 CIDR:无效的远程IPv4网络CIDR

 

8.63  Delete VPN connection

关键字

DEL_VPN_CONNECTION_OP

日志内容

Executed public cloud resource: $1

参数解释

$1VPN连接的请求体

举例

Executed public cloud resource “{

    "action": "DeleteVpnConnection",

    "content": {

        "id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a21f"

    }

}”

日志说明

用户进行了删除VPN连接配置的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified VPN connection does not exist:指定的VPN连接不存在

·     Failed to delete the VPN connection from the public cloud:向公有云删除VPN连接失败

 

8.64  Add customer gateway

关键字

ADD_CUSTOMER_GATEWAY_OP

日志内容

Executed public cloud resource: $1

参数解释

$1:添加客户网关的请求消息体

举例

Executed public cloud resource “{

    "action": "CreateCustomerGateway",

    "content": {

        "id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "account_id": "57fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "region": "eu-north-1",

        "public_ip": "10.1.1.1",

        "bgp_as": 10

    }

}”

日志说明

用户进行了增加客户网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Invalid BGP AS number:无效的BGP AS

·     Invalid public IP:无效的公网地址

·     Please specify a public IP:公网地址必填

·     The specified public cloud account does not exist:指定的公有云账户不存在

·     Failed to create a customer gateway to the public cloud:向公有云创建客户网关失败

 

8.65  Delete customer gateway

关键字

DEL_CUSTOMER_GATEWAY_OP

日志内容

Executed public cloud resource: $1

参数解释

$1:删除客户网关的请求消息体

举例

Executed public cloud resource “{

    "action": "DeleteCustomerGateway",

    "content": {

        "id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a211"

    }

}”

日志说明

用户进行了删除客户网关的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Failed to delete the customer gateway from the public cloud:向公有云删除客户网关失败

·     The specified customer gateway does not exist:指定的客户网关不存在

 

8.66  Add route propagation

关键字

ADD_ROUTER_PROPAGATION_OP

日志内容

Executed public cloud resource: $1

参数解释

$1:添加路由传播的请求消息体

举例

Executed public cloud resource “{

    "action": "CreateRoutePropagation",

    "content": {

        "id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "transit_router_id": "61fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "resource_id": "71fe85e4-ca2f-4192-b3cd-d5c249d7a211",

        "resource_type": "direct-connect-gateway"

    }

}”

日志说明

用户进行了增加路由传播的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     Invalid parameter无效的参数

·     Failed to create a route propagation on the public cloud:向公有云创建路由传播失败

·     Failed to obtain transit gateway attachments from the public cloud:向公有云查询网关挂载失败

·     Can not find transit gateway attachment by the specified resource id:根据指定的资源ID无法找到对应的网关挂载

·     The specified resource does not exist:指定的资源不存在

·     The specified resource type is invalid:无效的资源类型

 

8.67  Delete route propagation

关键字

DEL_ROUTER_PROPAGATION_OP

日志内容

Executed public cloud resource: $1

参数解释

$1:删除路由传播的请求消息体

举例

Executed public cloud resource “{

    "action": "DeleteRoutePropagation",

    "content": {

        "id": "47fe85e4-ca2f-4192-b3cd-d5c249d7a211"

    }

}”

日志说明

用户进行了删除路由传播的操作

失败原因

当操作失败时,可能的原因如下:

·     Internal error:内部错误

·     Invalid JSON format:无效的JSON格式

·     The specified route propagation does not exist:指定的路由传播不存在

·     Failed to delete the route propagation from the public cloud:向公有云删除路由传播失败

 

新华三官网
联系我们