You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Cisco platform policy numeric protocol always rendered as None
Example policy:
header {
comment:: "Test policy for numeric proto"
target:: cisco ProtoTest extended
target:: ciscoxr ProtoTest extended
}
term allow-ntp-numeric-proto {
comment:: "Allow example ntp servers"
destination-address:: NTP_SERVERS
protocol:: 50
action:: accept
}
term default {
action:: deny
}
Resulting acl for cisco:
! $Id:$
! $Date:$
! $Revision:$
no ip access-list extended ProtoTest
ip access-list extended ProtoTest
remark $Id:$
remark Test policy for numeric proto
remark allow-ntp-numeric-proto
remark Allow example ntp servers
permit None any host 10.0.0.1
permit None any host 10.0.0.2
remark default
deny ip any any
exit
And resulting Ciscoxr acl is correct:
! $Id:$
! $Date:$
! $Revision:$
no ipv4 access-list ProtoTest
ipv4 access-list ProtoTest
remark $Id:$
remark Test policy for numeric proto
remark allow-ntp-numeric-proto
remark Allow example ntp servers
permit 50 any host 10.0.0.1
permit 50 any host 10.0.0.2
remark default
deny ipv4 any any
exit
Activity
Update cisco.py to handle using raw protocol numbers in policy google…