CreateVpcFirewallPrecheck - Cloud Firewall - Alibaba Cloud Documentation Center

Creates a precheck task before you create a VPC firewall.

Operation description

This operation creates a policy to accept, deny, or monitor traffic that passes through a NAT firewall.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter	Type	Required	Description	Example
Lang	string	No	The language of the request and response. Valid values: zh (default): Chinese. en: English.	zh
NetworkInstanceType	string	No	The type of the network instance. Valid values: cen_firewall cen_tr_firewall ec_firewall	cen_tr_firewall
VpcId	string	No	The ID of the VPC instance.	vpc-bp132e2wpu9o6qth****
Region	string	No	The region.	cn-chengdu
CenId	string	No	The ID of the Cloud Enterprise Network (CEN) instance.	cen-iv8m2lj2fqg1xt****
MemberUid	string	No	The UID of the member account of Cloud Firewall.	128599825273****
TransitRouterId	string	No	The ID of the transit router instance.	tr-t4n16htuv1jalj9cq****

Response elements

Element	Type	Description	Example
	object
PrecheckId	string	The ID of the precheck task.	4197
RequestId	string	The ID of the request.	C5BE1AA4-934A-5085-89CC-9AD1CAC3****

Examples

Success response

JSON format

{
  "PrecheckId": "4197",
  "RequestId": "C5BE1AA4-934A-5085-89CC-9AD1CAC3****"
}

Error codes

HTTP status code	Error code	Error message	Description
200	ErrorDBUpdateError	A database update error occurred.	A database update error occurred.
400	ErrorAliUid	Aliuid invalid.	The aliuid is invalid.
400	ErrorInvalidMemberUid	Member uid is invalid	The member is invalid.
400	ErrorNetworkInstanceIdError	Network InstanceId ID is invalid	The ID of the network instance is invalid.
400	ErrorCenId	CEN ID is error	The ID of the CEN instance is invalid.
400	ErrorRegionNoError	Region invalid.	Region selection error, please re-enter.
400	ErrorDestCidrError	The target network segment is wrong. Please configure the target network segment correctly.	The specified destination CIDR block is invalid. Enter another value.
400	ErrorDestCidrEmpty	The target network segment is empty and cannot be created	The destination CIDR block is not specified. The firewall cannot be created.
400	ErrorVpcFirewallNotFound	Vpc firewall not found.	The specified VPC firewall does not exist. Select another one.
400	ErrorDBSelectError	A database select error occurred.	The error message returned because an internal error has occurred in querying the database.
400	ErrorOwnerId	owner id invalid.	The account is incorrect, please re-enter.
400	ErrorFirewallStatus	Firewall status error, please try again later.	The status of the firewall is invalid. Try again later.
400	ErrorHubvpcCannotCreate	HUB VPC could not create vpc firewall	You are not allowed to create a firewall for a HUB VPC.
400	ErrorFirewallQuotaNotEmpty	The quota for VPC firewalls is exceeded.	The quota is insufficient. You cannot configure the VPC firewall. Increase the quota.
400	ErrorCenVbrNotSupport	The cloud enterprise network VBR does not support firewall	The firewall cannot be enabled for VBRs that are attached to CEN instances.
400	ErrorCenNotSupportCCN	vpc firewall CEN does not support ccn, cannot open vpc firewall.	The VPC firewall cannot be enabled for a CCN instance.
400	ErrorOwnerIdUnauthorized	owner id not authorized.	The account is not authorized and Cloud Firewall has not been purchased.
400	ErrorDBTxError	A database transaction error occurred.	The error message returned because an internal error has occurred in the database transaction.
400	ErrorDBInsertError	A database insert error occurred.	An error occurred while performing an insert operation in the database.
400	ErrorParameters	A parameter error occurred.	A parameter error occurred.
400	ErrorUserCredentials	User credentials failed.	Unauthorized, not accessible, please first authorize firewall permissions.
400	ErrorDBNoRow	No rows in database.	No data found.
400	ErrorVpcFirewallVpcNumLimit	The number of vpcs in this region is limited to open the vpc firewall.	The VPC boundary firewall cannot be enabled because of the limited number of VPCs in this region.
400	ErrorCenExistPublicCidr	cen domain route exist public route.	There is a public network segment in the cloud enterprise network, and the VPC boundary firewall is not supported.
400	ErrorCenExistTrRoute	Cen VPC route exist tr route.	The VPC in the cloud enterprise network has a route whose next hop is TR, and the VPC boundary firewall is not supported.
400	ErrorCenNotSupportTREnterprise	VPC firewall does not support TR Enterprise Edition protection in this region.	The VPC border firewall does not support TR Enterprise Edition in this region, and the VPC border firewall cannot be enabled.
400	ErrorCenNotSupportTREnterpriseAutoMode	VPC firewall does not support TR Enterprise Edition auto mode protection, please use manual mode protection	VPC firewalls do not support the CEN-TR automatic mode.
400	ErrorCenTRAssociationCustomRouteTable	CEN-TR association custom route table.	The VPC boundary firewall does not support the custom route table associated with the CEN-TR network instance connection, and the VPC boundary firewall cannot be enabled.
400	ErrorVpcOpenApi	vpc open api failed	Failed to call the VPC API.
400	ErrorVswitchNotFound	vswitch not found	The vSwitch does not exist. Select another vSwitch.
400	ErrorCidrFormat	Network segment CIDR format error, please select again	The format of the specified CIDR block is invalid. Enter another value.
400	ErrorRouteTableNotFound	route table not found.	Routing table does not exist

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.