creating-service-edge-router-policies

New service edge router policy via UI

1. On the left side nav bar, click "Ziti Policies"
2. On the top nav bar, click "Service edge router policies"
3. In the top right corner of the screen click the "plus" image to add a new Service edge router policy
4. Choose a name for the Service edge router policy, such as "My Service edge router policy"
5. Enter the services you want to include in the policy
   1. Specific services can be referenced by ID or name using @. For example, a service called ssh can be referenced using @ssh.
   2. Services can be referenced by role attribute using #. For example, any service which has the sales role attribute will be included if #sales is included in the service roles list.
6. Enter the services you want to include in the policy
   1. Specific services can be referenced by ID or name using @. For example, a service called ssh can be referenced using @ssh.
   2. Services can be referenced by role attribute using #. For example, any service which has the sales role attribute will be included if #sales is included in the service roles list.
7. Specify the role semantic
   1. If you select Has Any Role then if you specify multiple roles then all entities which include any of the roles will be included.
   2. If you select Must Have All Roles, then if you specify multiple roles then only entities which include all of the given roles will be included
8. Click save

New service edge router policy via CLI

To create a Service edge router policy using the CLI issue the following commands.

1. To use the CLI, you'll need to be logged in. Link to instructions

2. Create a service edge router policy which allows all services to use all routers.

   ziti edge create service-edger-router-policy 'my-policy' --service-roles '#all' --edge-router-roles '#all'