cloudstack/plugins/network-elements/cisco-vnmc/scripts/network/cisco/create-pf-rule.xml

<configConfMos
  cookie="%cookie%"
  inHierarchical="false">
  <inConfigs>

    <pair key="%natruledn%">
      <policyRule
        descr="%descr%"
        dn="%natruledn%"
        name="%natrulename%"
        order="%order%"
        status="created"/>
    </pair>

    <pair key="%natruledn%/nat-action">
      <natpolicyNatAction
        actionType="static"
        destTranslatedIpPool="%ippoolname%"
        destTranslatedPortPool="%portpoolname%"
        dn="%natruledn%/nat-action"
        id="0"
        isBidirectionalEnabled="yes"
        isDnsEnabled="no"
        isNoProxyArpEnabled="no"
        isRoundRobinIpEnabled="no"
        srcTranslatedIpPatPool=""
        srcTranslatedIpPool=""
        srcTranslatedPortPool=""
        status="created"/>
    </pair>

    <pair key="%natruledn%/rule-cond-2">
      <policyRuleCondition
        dn="%natruledn%/rule-cond-2"
        id="2"
        order="unspecified"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-2/nw-expr2/nw-attr-qual">
      <policyNwAttrQualifier
        attrEp="destination"
        dn="%natruledn%/rule-cond-2/nw-expr2/nw-attr-qual"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-2/nw-expr2">
      <policyNetworkExpression
        dn="%natruledn%/rule-cond-2/nw-expr2"
        id="2"
        opr="eq"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-2/nw-expr2/nw-ip-2">
      <policyIPAddress
        dataType="string"
        descr=""
        dn="%natruledn%/rule-cond-2/nw-expr2/nw-ip-2"
        id="2"
        name=""
        placement="none"
        status="created"
        value="%ip%"/>
    </pair>

    <pair key="%natruledn%/rule-cond-3">
      <policyRuleCondition
        dn="%natruledn%/rule-cond-3"
        id="3"
        order="unspecified"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-3/nw-expr2/nw-attr-qual">
      <policyNwAttrQualifier
        attrEp="destination"
        dn="%natruledn%/rule-cond-3/nw-expr2/nw-attr-qual"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-3/nw-expr2">
      <policyNetworkExpression
        dn="%natruledn%/rule-cond-3/nw-expr2"
        id="2"
        opr="range"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-3/nw-expr2/nw-port-2">
      <policyNetworkPort
        appType="Other"
        dataType="string"
        descr=""
        dn="%natruledn%/rule-cond-3/nw-expr2/nw-port-2"
        id="2"
        name=""
        placement="begin"
        status="created"
        value="%startport%"/>
    </pair>
    <pair key="%natruledn%/rule-cond-3/nw-expr2/nw-port-3">
      <policyNetworkPort
        appType="Other"
        dataType="string"
        descr=""
        dn="%natruledn%/rule-cond-3/nw-expr2/nw-port-3"
        id="3"
        name=""
        placement="end"
        status="created"
        value="%endport%"/>
    </pair>

    <pair key="%natruledn%/rule-cond-4">
      <policyRuleCondition
        dn="%natruledn%/rule-cond-4"
        id="4"
        order="unspecified"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-4/nw-expr2">
      <policyNetworkExpression
        dn="%natruledn%/rule-cond-4/nw-expr2"
        id="2"
        opr="eq"
        status="created"/>
    </pair>
    <pair key="%natruledn%/rule-cond-4/nw-expr2/nw-protocol-2">
      <policyProtocol
        dataType="string"
        descr=""
        dn="%natruledn%/rule-cond-4/nw-expr2/nw-protocol-2"
        id="2"
        name=""
        placement="none"
        status="created"
        value="%protocolvalue%"/>
    </pair>

  </inConfigs>
</configConfMos>

<!--
    natruledn="org-root/org-vlan-123/org-VDC-vlan-123/natpol-aaa/rule-bbb"
    natrulename="bbb"
    descr=value
    ippoolname="ccc"
    portpoolname="ddd"
    ip="10.147.30.230"
    startport="22"
    endport="22"
    protocolvalue="TCP"
--!>