Use Case: Simple Allow List
Requirement: Allow access to specific hostids
In this scenario, only declared hostids are allowed access. Note that no partitions are needed in this scenario.
Instead of specifying all hostids in one condition within a rule, you can also include multiple rules with the “on hostid” condition in the model definition.
Model Definition Example
model "exampleModel" {
on hostid("F01898AD8DD3/ETHERNET", "5E00A4F17201/ETHERNET") {
use "default"
accept
}
on any() {
deny
}
}
Note:The hostid is specified as a value/type pair (for example, 7200014f5df0/ETHERNET). If a hostid condition does not specify the hostid type, it is assumed that the hostid is of type string.