API ReferenceNew CentralGuidesMRT APIConfiguration API
GithubAirheads Developer Community
API Reference

Create a new named condition with unique name for Traffic Class

Individual named condition (Traffic Class) configuration entry.
Each named condition represents a specific traffic classification rule
that can be applied to network policies. The condition defines criteria
for matching network traffic based on various protocol headers and
application characteristics.

Named conditions provide reusability and consistency across multiple
policies, allowing network administrators to define traffic classes
once and reference them in various policy contexts such as network,
access control, and QoS.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required
length ≤ 9999

Unique identifier for the named condition, which becomes the Traffic Class name
on the device. This name must be unique within the system and follows standard
naming conventions for network device objects. The Traffic Class name is used
by policies to reference this traffic classification rule.

Query Params
string

LOCAL - To create local objects. SHARED - To create shared objects. Default - Defaults to SHARED if not provided

string

Scope at which local object needs to be created. Mandatory if object-type = LOCAL. Should not be provided for object-type = SHARED.

string

Device function for which the local object needs to be created. Mandatory if object_type = LOCAL. Should not be provided for object_type = SHARED.

Body Params

named-conditionbody object

string
enum
Defaults to ASSOCIATION_NETWORK

Association context for the named condition, defining the scope and application
domain where this traffic classification rule will be active. The association
type determines how the named condition integrates with different policy
network contexts within the system.

Association types typically include interface-specific or
role-based contexts, allowing for control over where traffic classification
rules are applied.

Show Details
ASSOCIATION_APPApplication based named condition.
ASSOCIATION_NETWORKNetwork based named condition.
ASSOCIATION_ROLERole based named condition.
Allowed:
condition-rule
array of objects
length ≤ 2147483647

Ordered list of traffic classification rules that collectively define the
named condition (Traffic Class). Each rule specifies matching criteria for
network traffic using various protocol headers and application characteristics.

All rules within this list must conform to the same classification type
as specified in the parent named condition's rules-type field.

condition-rule
string
length ≤ 9999

Optional user-defined description or comment for the Named Condition (Traffic Class).

string
length between 1 and 128

Unique identifier for the named condition, which becomes the Traffic Class name
on the device. This name must be unique within the system and follows standard
naming conventions for network device objects. The Traffic Class name is used
by policies to reference this traffic classification rule.

boolean
Defaults to false

Boolean flag to enable reverse functionality for role-based policies.
When enabled, this creates bidirectional traffic classification for role-based
access control, allowing policies to automatically apply matching rules in
both directions of communication flows.

string
enum
required

Classification type for the named condition, determining which protocol layers
and fields are available for traffic matching.

Available types include:

  • IP-based conditions: Match on network layer protocols and addressing
  • Ethernet-based conditions: Match on data link layer MAC and VLAN information
  • Application-based conditions: Match on identified applications and services

All rules within a single named condition must use the same classification type.

Show Details
NAMED_CONDITION_ANYAny condition.
NAMED_CONDITION_ETHERNETEthernet condition type.
NAMED_CONDITION_IPIP condition type.
NAMED_CONDITION_IPV6IPv6 condition type.
NETWORK_ACL_ETHERNETNetwork ACL Ethernet condition type.
NETWORK_ACL_IPNetwork ACL IPv4 condition type.
NETWORK_ACL_IPV6Network ACL IPv6 condition type.
Allowed:
Responses

Language
Credentials
OAuth2
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json