Constraints
The Constraints system allows Admin users to configure custom field validation and limitations into IPAM and Resource fields. Many constraint types are available, such as mathematical comparison operators, length, enumeration, pre-set lists, RegEx, IPv4/IPv6, Phone, email, hostname, FQDN, Mac Address, and URL.
The Constraints Tab has one sub-tab - Configuration - where new constraints may be created and managed.
Constraints Tab
The Constraints Tab, available to Admin users, allows for custom field validation and field restrictions to be created for Resource and IPAM fields. Constraints are applied to Resource fields from the Edit Section page and to IPAM fields from the Admin Edit IPAM Columns page. The applied constraint may be anything from a numerical comparison operation, a check against a pre-determined text string, ensuring selections from a pre-set list, or forcing entries into a specific format, such as IPv4/IPv6, phone number, or RegEx.
These constraints can be applied to Resource fields and the following IPAM fields:
- ASN
- Custom Generic Field
- Notes
- Metadata 1-10, if enabled for the instance
Depending on the type of constraint applied, the constraint may be a simple single-value comparison needing only one constraint to be created, such as "Equals to" or "Length Max". Some other constraint types, however, may have two or more levels deep of constraint types and value checks. One example of this is "Enumeration", which requires the user to first set up an "Enumeration" constraint, and then a second level list of sub-constraint types or a list of values.
Available Constraint Types
The following constraint types are currently available:
| Type | Description |
|---|---|
Enumeration | Create a list of child enum items. |
| Section Entry | Creates an enumeration based on all entries that belong to a given section. |
| Resource Type | Creates an enumeration based on a Resource type. |
| Resource Entry | Creates an enumeration based on all resource entries. |
| IPAM Region | Creates an enumeration based on all IPAM Regions. |
| IPAM Tags | Creates an enumeration based on all IPAM Tags. |
| Equals to | Checks to ensure a value is exactly equal to a provided value, e.g. (X == Y) is true |
| Not Equal to | Checks to ensure a value is not equal to a provided value, e.g. (X != Y) is true |
| Greater Than | Checks if the input value (left operand) is greater than a given value (right operand). e.g. (X ﹥ Y) is true |
| Less Than | Checks if the input value (left operand) is less than a given value (right operand). e.g. (X ﹤ Y) is true |
| Greater Than or Equal to | Checks if the input value (left operand) is greater than or equals to a given value (right operand). e.g. (X ﹥= Y) is true |
| Less Than or Equal to | Checks if the input value (left operand) is less than or equals to a given value (right operand). e.g. (X ﹤= Y) is true |
| One of | Create a list of child constraint items. It will be true if one of child constraints is true. Its children must be previously configured. |
| All of | Create a list of child constraint items. It will be true if all of the child constraints are true. Its children must be previously configured. |
| Length Max | Checks to ensure a string has, at most, the specified number of characters |
| Length Min | Checks to ensure a string has, at minimum, the specified number of characters |
| Regular Expression | Compares the input format to a provided Regular Expression |
| IPv4 | Sets the required format for the input to an IPv4 address |
| IPv6 | Sets the required format for the input to an IPv6 address |
| Sets the required format for the input to an email address (uses an "@" symbol) | |
| Hostname | Sets the required format for the input to a hostname. Hostnames may not have underscore or dash characters. |
| FQDN | Sets the required format for the input to a FQDN |
MAC Address | Sets the required format for the input to a MAC address |
| URL | Sets the required format for the input to a url |
| Phone Number | Sets the required format for the input to a phone number |
Constraints List Overview
The Constraints List displays all registered constraints and is where you can view, edit, test, and delete existing constraints.
Search / Filter
Filter the list for a specific constraint by typing all or part of the name in the searchbox.
Filter the list by type via the dropdown selector at the top.
Sort
Sort columns into ascending/descending order by clicking on the column header for any column with an up/down arrow (⇅).
View Applied Constraints
The "Used by" column allows users to view which resource views and/or IPAM attributes have a specific constraint applied. Simply click the constraint's "View" link in the "Used by" column and a modal will open.
Click the link for a resource field to see which sections have that field enabled. Click a section name to go to the Section Edit page. Click the link for a IPAM column to go to the Edit IPAM Columns page. Constraints can be applied or removed from both these locations.
Add a Constraint
To add a new Constraint, click "Add Constraint" at the top right of the page.
The Constraint type selector indicates the control type of any given constraint (i.e. dropdown, input).
In the "Add Constraint" screen, select (at minimum, depending on the selected constraint type):
- The constraint type (here, "Length Min")
- The name for the constraint
- Select whether to allow empty values in the attribute field
If desired, you may enter a custom error message or placeholder text.
When done, click "Add Constraint" to save.
Test Constraint
To test a Constraint, right click to open the Options action menu and select "Test".
The test constraint form will appear - enter a test value, and you can check whether the constraint returns an appropriate invalid or valid response:
Invalid result, for "Length Min 3":
Valid result, for "Length Min 3":
Edit Constraint
To edit a Constraint, right click to open the Options action menu and select "Edit". The constraint details will open, matching the "Add Constraint" form.
Adjust values or settings as desired, and then click "Update Constraint".
Delete Constraint
To delete a Constraint, right click to open the Options action menu and select "Delete".
A Confirmation box will appear - confirm whether to delete the constraint, or click "Close" to exit without deletion.
You may also select more than one constraint to delete.
To do so, select the checkboxes for the desired constraints, then under the "Actions" menu at the top of the list, select "Delete All".
Working with Constraints in IPAM
Apply a Constraint
To apply a constraint to an IPAM field, go to IPAM Admin → Edit IPAM Columns.
A column that may have a constraint applied will have a checkmark icon. Click the icon and select a constraint from the dropdown.
Click "Save".
The applied constraint name will then be displayed in the column row. Click "Save Changes" before exiting the IPAM Column page to retain changes.
Constrained Fields in IPAM
When a field is viewed in IPAM Manage that has a constraint applied, a "check" icon will display next to the field input for simple input constraint checks, if empty values are allowed.
If the constraint is of a type that has been set up with a dropdown box, then the dropdown box and placeholder text will be applied:
In this example, constraint validation checks have been applied to Metadata4, Metadata7, and Metadata8, with a dropdown "One Of" constraint applied to Metadata 10.
Metadata8 has been associated with our previous constraint example, "Length Min 3", so if we enter less than three characters into that field, we should get an error, and see the "X" for the input not meeting the constraint settings:
On the other hand, a valid input will return to displaying the "valid" success checkmark:
Working with Constraints in Resources
Apply a Constraint
To apply a constraint to an Resource field, go to Edit Section, "Manage Fields" tab. Open the edit modal for an assigned field. Select a constraint from the dropdown and click "Save".
Applying a constraint to a field affects all sections to which a field is assigned. In the above example, adding a constraint to a field in QA Test Section 1 will also apply the constraint to the field in the Contact Section. You can see which sections are using the field displayed in the Edit Field modal.
Once a constraint is applied to a field, it will be visible to the user.
Remember to save before exiting the tab to retain changes.
Constrained Fields in Resources
A constrained field is available to edit from the Resource List Edit Fields modal and the Resource's Fields Gadget.
When a field is viewed that has a constraint applied, a "check" icon will display next to the field input for simple input constraint checks.
If the constraint is of a type that has been set up with a dropdown box, then the dropdown box and placeholder text will be applied:
In this example, a Length Min constraint has been applied to the field "Abuse POC", so if we enter less than three characters into that field, we should get an error and see a visual indicator for the input not meeting the constraint settings:
On the other hand, a valid input will return to displaying the "valid" success checkmark:
Constrained fields display the same way in a Resource's Fields Gadget when editing.
A failed constraint input:
A valid constraint input:
Constraint Permissions
Admins can limit which users are bound by certain constraints by clicking "Settings" at upper right.
From there, select "Enable user group permissions" to limit constraint visibility by User Permission Group.
Once permissions are enabled a new option will appear when adding and editing a constraint, "Change Binding Permissions".
Selecting "Change Binding Permissions" opens the "Change Permissions" dialog box where you can select a group(s) to assign the constraint to. The groups assigned to a constraint are listed below the group selector.
To remove a group, just click the "remove" button next to the group name.
For more information on working with Permission Groups see Permission Groups and Working with Groups.
Enabling user group permissions applies to all constraints, including those already existing. If no group is assigned to a constraint, it will not be visible in IPAM Manage to any users.
Example: Adding an Enumeration Constraint Containing Children
This example shows how to add a two-level Enumeration constraint, which are set up having a "parent" constraint at the top level list, and "child" items or constraints on a sub-level.
From the Constraints "Configuration" page, click "Add Constraint".
Select "Enumeration" for the constraint type and enter a name.
In the section "Enumeration items" enter a name for an option and click "Add Item". Repeat for any additional values that you wish to make available in your enumeration dropdown. You can edit or delete options via the row icons.
In the "UI Properties" section, you may enter custom placeholder text or enable multiple item selection. When done, click "Add Constraint".
"Export type" specifies whether an id or name should be exported when submitting a form and will affect exported .csv files and api calls.
On the main Constraints List, open the action menu and select "Test".
A display dropdown box will appear. Click inside of it to confirm your child items show as selectable options.
Using the Enumeration
To see the constraint in action in IPAM or Resources, navigate to a block or field and open Edit. Select the field to which you applied the enumeration to view/select constraint items from the dropdown
Additional Information
For additional information on working with IPAM Manage or IPAM Blocks, see