Usage¶
Assigning Policies¶
There are three primary ways of assigning policies (Policy
or NATPolicy
objects) to devices:
- Directly via the
assigned_devices
attribute on a policy object. - Dynamically by assigning an existing
DynamicGroup
object to theassigned_dynamic_groups
field on a policy object. - By creating a new
Relationship
specifying additional targets for policy association. This can be, for example, used to associate a policy with anInterface
object.- The use of a Relationship may limit future integrations with parsing or templating.
Although policies can be created without any rules it is recommended to create the required underlying objects first before moving to the policy definitions. Creation Order provides an ordered list of steps for creating and assigning, objects, needed for policy creation.