Variable management commands for NDCLI. Variables are key-value pairs that can be defined at different scopes and referenced in snippets and templates using a {{ variable_name }} syntax.
Command alias: var
Scopes
Variables are resolved from the most specific scope to the most general:
Scope Description deviceApplies to a single device ouApplies to all devices in an Organizational Unit templateApplies to all devices using a template orgApplies to all devices in the organization
When the same variable name is defined at multiple scopes, the most specific scope wins.
Commands
variable overview
Show all variables with their definitions across all scopes. Useful for understanding which variables are defined and where they come from.
ndcli variable overview [flags]
Flags
Flag Type Default Description --namestring Filter by name pattern (regex) --pageint 1Page number --per-pageint 50Items per page
Examples
ndcli variable overview --name " dns.* "
ndcli var overview -f json
variable org list
List all variables defined at the organization level.
ndcli variable org list [flags]
Flags
Flag Type Default Description --namestring Filter by name pattern (regex) --pageint 1Page number --per-pageint 50Items per page
Examples
ndcli variable org list --name " ntp.* "
variable org describe
Show details of a specific organization-level variable.
ndcli variable org describe [variable]
Arguments
Argument Required Description variableYes Variable name
Examples
ndcli variable org describe ntp_server
variable org create
Create a new organization-level variable.
ndcli variable org create [name] [value] [flags]
Arguments
Argument Required Description nameYes Variable name valueYes Variable value
Flags
Flag Type Default Description --descriptionstring Human-readable description --secretbool falseMark as secret — value is redacted in API responses
Examples
ndcli variable org create ntp_server 192.168.1.1
ndcli variable org create ntp_server 192.168.1.1 --description " Primary NTP server "
ndcli variable org create api_key " my-secret " --secret
variable org set
Update an existing organization-level variable.
ndcli variable org set [variable] [flags]
Arguments
Argument Required Description variableYes Variable name
Flags
Flag Type Default Description --valuestring New value --descriptionstring New description
Examples
ndcli variable org set ntp_server --value 10.0.0.1
ndcli variable org set ntp_server --description " Updated NTP server "
variable org delete
Delete an organization-level variable.
ndcli variable org delete [variable] [flags]
Arguments
Argument Required Description variableYes Variable name
Flags
Flag Type Default Description -y, --yesbool falseSkip confirmation prompt
Examples
ndcli variable org delete old_variable
variable ou list
List all variables defined for an Organizational Unit.
ndcli variable ou list [OU] [flags]
Arguments
Argument Required Description OUYes Organizational Unit name
Flags
Flag Type Default Description --namestring Filter by name pattern (regex) --pageint 1Page number --per-pageint 50Items per page
Examples
ndcli variable ou list production
variable ou describe
Show details of a specific OU-level variable.
ndcli variable ou describe [OU] [variable]
Arguments
Argument Required Description OUYes Organizational Unit name variableYes Variable name
Examples
ndcli variable ou describe production dns_server
variable ou create
Create a variable at the OU level.
ndcli variable ou create [OU] [name] [value] [flags]
Arguments
Argument Required Description OUYes Organizational Unit name nameYes Variable name valueYes Variable value
Flags
Flag Type Default Description --descriptionstring Human-readable description
Examples
ndcli variable ou create production dns_server 10.10.0.53
ndcli variable ou create staging dns_server 10.20.0.53 --description " Staging DNS "
variable ou set
Update an OU-level variable.
ndcli variable ou set [OU] [variable] [flags]
Arguments
Argument Required Description OUYes Organizational Unit name variableYes Variable name
Flags
Flag Type Default Description --valuestring New value --descriptionstring New description
Examples
ndcli variable ou set production dns_server --value 10.10.1.53
variable ou delete
Delete an OU-level variable.
ndcli variable ou delete [OU] [variable] [flags]
Arguments
Argument Required Description OUYes Organizational Unit name variableYes Variable name
Flags
Flag Type Default Description -y, --yesbool falseSkip confirmation prompt
Examples
ndcli variable ou delete production old_var
variable template list
List all variables defined for a template.
ndcli variable template list [template] [flags]
Arguments
Argument Required Description templateYes Template name
Flags
Flag Type Default Description --namestring Filter by name pattern (regex) --pageint 1Page number --per-pageint 50Items per page
Examples
ndcli variable template list base-config
variable template describe
Show details of a specific template-level variable.
ndcli variable template describe [template] [variable]
Arguments
Argument Required Description templateYes Template name variableYes Variable name
Examples
ndcli variable template describe base-config timezone
variable template create
Create a variable at the template level.
ndcli variable template create [template] [name] [value] [flags]
Arguments
Argument Required Description templateYes Template name nameYes Variable name valueYes Variable value
Flags
Flag Type Default Description --descriptionstring Human-readable description
Examples
ndcli variable template create base-config timezone UTC
ndcli variable template create base-config timezone " America/New_York " --description " Default timezone "
variable template set
Update a template-level variable.
ndcli variable template set [template] [variable] [flags]
Arguments
Argument Required Description templateYes Template name variableYes Variable name
Flags
Flag Type Default Description --valuestring New value --descriptionstring New description
Examples
ndcli variable template set base-config timezone --value " Europe/London "
variable template delete
Delete a template-level variable.
ndcli variable template delete [template] [variable] [flags]
Arguments
Argument Required Description templateYes Template name variableYes Variable name
Flags
Flag Type Default Description -y, --yesbool falseSkip confirmation prompt
Examples
ndcli variable template delete base-config old_var
variable device list
List all variables defined for a specific device.
ndcli variable device list [device] [flags]
Arguments
Argument Required Description deviceYes Device name
Flags
Flag Type Default Description --namestring Filter by name pattern (regex) --pageint 1Page number --per-pageint 50Items per page
Examples
ndcli variable device list my-firewall
variable device describe
Show details of a specific device-level variable.
ndcli variable device describe [device] [variable]
Arguments
Argument Required Description deviceYes Device name variableYes Variable name
Examples
ndcli variable device describe my-firewall wan_ip
variable device create
Create a variable at the device level.
ndcli variable device create [device] [name] [value] [flags]
Arguments
Argument Required Description deviceYes Device name nameYes Variable name valueYes Variable value
Flags
Flag Type Default Description --descriptionstring Human-readable description
Examples
ndcli variable device create my-firewall wan_ip 203.0.113.1
ndcli variable device create my-firewall wan_ip 203.0.113.1 --description " WAN IP address "
variable device set
Update a device-level variable.
ndcli variable device set [device] [variable] [flags]
Arguments
Argument Required Description deviceYes Device name variableYes Variable name
Flags
Flag Type Default Description --valuestring New value --descriptionstring New description
Examples
ndcli variable device set my-firewall wan_ip --value 203.0.113.2
variable device delete
Delete a device-level variable.
ndcli variable device delete [device] [variable] [flags]
Arguments
Argument Required Description deviceYes Device name variableYes Variable name
Flags
Flag Type Default Description -y, --yesbool falseSkip confirmation prompt
Examples
ndcli variable device delete my-firewall old_var