Open nouse4it opened 3 years ago
Hi yes the problem looks like the netjson
For now you can empty the acl netjson json templates (for learn and show acl) and send the raw JSON and we can see how to handle your unique ACL - if you could try this and post the raw json
Thanks and sorry I didn’t mean to abandon this issue but I had to focus on the rebranding
On Wed, May 26, 2021 at 8:50 AM John Capobianco @.***> wrote:
On Wed, May 26, 2021 at 8:45 AM nouse4it @.***> wrote:
Hi John,
I tried Merlin with our IOS-XE components, unfortunately we have the same problem as we hat on magic_carpet. Unfortunately I can´t find the issue anymore here on github. Thats why I wantend to reopen the issue here.
The script errors on step 37 - Store Data with the following error:
2021-05-26T14:33:53: %AETEST-INFO: The result of STEP 37: Store data is => ERRORED
2021-05-26T14:33:53: %AETEST-ERROR: Caught an exception while executing section parse:
2021-05-26T14:33:53: %AETEST-ERROR: Traceback (most recent call last):
2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/IOS_XE_merlin.py", line 237, in parse
2021-05-26T14:33:53: %AETEST-ERROR: parsed_output_netjson_json = learned_acl_netjson_json_template.render(to_parse_access_list=self.learned_acl['acls'],device_alias = device.alias)
2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/environment.py", line 1090, in render
2021-05-26T14:33:53: %AETEST-ERROR: self.environment.handle_exception()
2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/environment.py", line 832, in handle_exception
2021-05-26T14:33:53: %AETEST-ERROR: reraise(*rewrite_traceback_stack(source=source))
2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/_compat.py", line 28, in reraise
2021-05-26T14:33:53: %AETEST-ERROR: raise value.with_traceback(tb)
2021-05-26T14:33:53: %AETEST-ERROR: File "templates/cisco/ios_xe/learned_acl_netjson_json.j2", line 21, in top-level template code
2021-05-26T14:33:53: %AETEST-ERROR: "id": "UDP Source Port: {{ to_parse_access_list[list].aces[ace].matches.l4.udp.source_port.operator.port }}"
2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/environment.py", line 471, in getattr
2021-05-26T14:33:53: %AETEST-ERROR: return getattr(obj, attribute)
2021-05-26T14:33:53: %AETEST-ERROR: jinja2.exceptions.UndefinedError: 'genie.ops.base.maker.CmdDict object' has no attribute 'operator'
If I run genie learn acl against the device from the same testbed everything works fine. Seems like it´s a problem with j2. template for netjson.
Can you tell me how I can narrow it done, on which ACL it actually fails?
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/automateyournetwork/merlin/issues/4, or unsubscribe https://github.com/notifications/unsubscribe-auth/AKQSYCSUI6PV7RNKSPDMDPTTPTUP7ANCNFSM45R6U33A .
Hi, sure no problem.
I emptied the files and ran the script again. Now it goes all the way.
The pure json of the acl is this
{
"acls": {
"10": {
"aces": {
"10": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.49.20 0.0.0.0": {
"source_ipv4_network": "1.1.49.20 0.0.0.0"
}
}
}
}
},
"name": "10",
"statistics": {
"matched_packets": "27778746"
}
},
"20": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.49.217 0.0.0.0": {
"source_ipv4_network": "1.1.49.217 0.0.0.0"
}
}
}
}
},
"name": "20",
"statistics": {
"matched_packets": "3247558"
}
},
"30": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.2.50 0.0.0.0": {
"source_ipv4_network": "1.1.2.50 0.0.0.0"
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.49.8 0.0.0.0": {
"source_ipv4_network": "1.1.49.8 0.0.0.0"
}
}
}
}
},
"name": "40",
"statistics": {
"matched_packets": "53962962"
}
}
},
"name": "10",
"type": "ipv4-acl-type"
},
"IP-Adm-V4-Int-ACL-global": {
"name": "IP-Adm-V4-Int-ACL-global",
"type": "ipv4-acl-type"
},
"SSH": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 23
}
},
"established": false
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.58.69": {
"source_ipv4_network": "host 1.1.58.69"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "20",
"statistics": {
"matched_packets": 4
}
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.49.217": {
"source_ipv4_network": "host 1.1.49.217"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "30",
"statistics": {
"matched_packets": 508
}
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.58.149": {
"source_ipv4_network": "host 1.1.58.149"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.49.100": {
"source_ipv4_network": "host 1.1.49.100"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "50",
"statistics": {
"matched_packets": 18
}
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.124.199": {
"source_ipv4_network": "host 1.1.124.199"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "60",
"statistics": {
"matched_packets": 10
}
}
},
"name": "SSH",
"type": "ipv4-acl-type"
},
"implicit_deny": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_deny",
"type": "ipv4-acl-type"
},
"implicit_deny_v6": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "ipv6",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_deny_v6",
"type": "ipv6-acl-type"
},
"implicit_permit": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_permit",
"type": "ipv4-acl-type"
},
"implicit_permit_v6": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "ipv6",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_permit_v6",
"type": "ipv6-acl-type"
},
"meraki-fqdn-dns": {
"name": "meraki-fqdn-dns",
"type": "ipv4-acl-type"
},
"preauth_v4": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
}
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
},
"established": false
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "bootps"
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 68
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "bootpc"
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "60"
}
},
"name": "preauth_v4",
"type": "ipv4-acl-type"
},
"preauth_v6": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "udp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
}
}
}
},
"name": "10"
},
"100": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "ipv6",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "100"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "tcp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
},
"established": false
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "60"
},
"70": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "70"
},
"80": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "udp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 546
}
},
"source_port": {
"operator": {
"operator": "eq",
"port": "547"
}
}
}
}
},
"name": "80"
},
"90": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "udp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 547
}
},
"source_port": {
"operator": {
"operator": "eq",
"port": "546"
}
}
}
}
},
"name": "90"
}
},
"name": "preauth_v6",
"type": "ipv6-acl-type"
},
"qos-class-bd": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 445
}
},
"established": false
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "445"
}
}
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 9100
}
},
"established": false
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "9100"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"range": {
"lower_port": 40020,
"upper_port": 40039
}
}
}
}
},
"name": "50"
}
},
"name": "qos-class-bd",
"type": "ipv4-acl-type"
},
"qos-class-cs": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "5060"
}
}
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5060
}
}
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5060
}
},
"established": false
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "5060"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5061
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "5061"
}
}
}
}
},
"name": "60"
},
"70": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "5061"
}
}
}
}
},
"name": "70"
},
"80": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5061
}
},
"established": false
}
}
},
"name": "80"
}
},
"name": "qos-class-cs",
"type": "ipv4-acl-type"
},
"qos-class-iv": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5938
}
},
"established": false
}
}
},
"name": "10"
},
"100": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.139": {
"destination_ipv4_network": "host 1.1.68.139"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "100"
},
"110": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.140": {
"destination_ipv4_network": "host 1.1.68.140"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "110"
},
"120": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.141": {
"destination_ipv4_network": "host 1.1.68.141"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "120"
},
"130": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.159": {
"destination_ipv4_network": "host 1.1.68.159"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "130"
},
"140": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.80": {
"destination_ipv4_network": "host 1.1.49.80"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "140"
},
"150": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.88": {
"destination_ipv4_network": "host 1.1.49.88"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "150"
},
"160": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"range": {
"lower_port": 42000,
"upper_port": 42019
}
}
}
}
},
"name": "160"
},
"170": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"range": {
"lower_port": 42000,
"upper_port": 42019
}
}
}
}
},
"name": "170"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "5938"
}
}
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.139": {
"destination_ipv4_network": "host 1.1.68.139"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 57501
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.140": {
"destination_ipv4_network": "host 1.1.68.140"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 57501
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.141": {
"destination_ipv4_network": "host 1.1.68.141"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 57501
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.159": {
"destination_ipv4_network": "host 1.1.68.159"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 57501
}
}
}
}
},
"name": "60"
},
"70": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.80": {
"destination_ipv4_network": "host 1.1.49.80"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 57501
}
}
}
}
},
"name": "70"
},
"80": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.88": {
"destination_ipv4_network": "host 1.1.49.88"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 57501
}
}
}
}
},
"name": "80"
},
"90": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"range": {
"lower_port": 50000,
"upper_port": 50019
}
}
}
}
},
"name": "90"
}
},
"name": "qos-class-iv",
"type": "ipv4-acl-type"
},
"qos-class-sc": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 137
}
}
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "netbios-ns"
}
}
}
}
},
"name": "20"
}
},
"name": "qos-class-sc",
"type": "ipv4-acl-type"
},
"qos-class-sv": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "qos-class-sv",
"type": "ipv4-acl-type"
},
"qos-class-td": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 3200
}
},
"established": false
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 3600
}
},
"established": false
}
}
},
"name": "20"
}
},
"name": "qos-class-td",
"type": "ipv4-acl-type"
},
"qos-class-vo": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.44.0 0.0.3.255": {
"source_ipv4_network": "1.1.44.0 0.0.3.255"
}
}
}
}
},
"name": "10"
},
"100": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.88": {
"destination_ipv4_network": "host 1.1.49.88"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "100"
},
"110": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.235": {
"destination_ipv4_network": "host 1.1.49.235"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 60000
}
}
}
}
},
"name": "110"
},
"120": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.236": {
"destination_ipv4_network": "host 1.1.49.236"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 60000
}
}
}
}
},
"name": "120"
},
"130": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.160": {
"destination_ipv4_network": "host 1.1.68.160"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "130"
},
"140": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.161": {
"destination_ipv4_network": "host 1.1.68.161"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "140"
},
"150": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.82": {
"destination_ipv4_network": "host 1.1.49.82"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "150"
},
"160": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.86": {
"destination_ipv4_network": "host 1.1.49.86"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "160"
},
"170": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 10.201.0.47": {
"destination_ipv4_network": "host 10.201.0.47"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 443
}
},
"established": false
}
}
},
"name": "170"
},
"180": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 10.201.0.48": {
"destination_ipv4_network": "host 10.201.0.48"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 443
}
},
"established": false
}
}
},
"name": "180"
},
"190": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 10.201.0.47": {
"destination_ipv4_network": "host 10.201.0.47"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 3478
}
}
}
}
},
"name": "190"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"1.1.44.0 0.0.3.255": {
"destination_ipv4_network": "1.1.44.0 0.0.3.255"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "20"
},
"200": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 10.201.0.48": {
"destination_ipv4_network": "host 10.201.0.48"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 3478
}
}
}
}
},
"name": "200"
},
"210": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"range": {
"lower_port": 50020,
"upper_port": 50039
}
}
}
}
},
"name": "210"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 9000
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "9000"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.139": {
"destination_ipv4_network": "host 1.1.68.139"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.140": {
"destination_ipv4_network": "host 1.1.68.140"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "60"
},
"70": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.141": {
"destination_ipv4_network": "host 1.1.68.141"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "70"
},
"80": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.159": {
"destination_ipv4_network": "host 1.1.68.159"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "80"
},
"90": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.49.80": {
"destination_ipv4_network": "host 1.1.49.80"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 49152
}
}
}
}
},
"name": "90"
}
},
"name": "qos-class-vo",
"type": "ipv4-acl-type"
}
}
}
Ok amazing I am happy at least you got a full run
So when I am done with my NXOS feature I will incorporate the JSON above into my ACL logic - there is probably something not matching on the QoS ACLs I will fix this
So I have to fix learn ACL, show ACL base .j2 files and the netjson files - probably on the weekend I hope thanks for your patience!
On Wed, May 26, 2021 at 9:14 AM nouse4it @.***> wrote:
Hi, sure no problem.
I emptied the files an ran the script again. Now it goes all the way.
The pure json of the acl is this
{ "acls": { "10": { "aces": { "10": { "actions": { "forwarding": "permit" }, "matches": { "l3": { "ipv4": { "protocol": "ipv4", "source_ipv4_network": { "1.1.49.20 0.0.0.0": { "source_ipv4_network": "1.1.49.20 0.0.0.0" } } } } }, "name": "10", "statistics": { "matched_packets": "27778746" } }, "20": { "actions": { "forwarding": "permit" }, "matches": { "l3": { "ipv4": { "protocol": "ipv4", "source_ipv4_network": { "1.1.49.217 0.0.0.0": { "source_ipv4_network": "1.1.49.217 0.0.0.0" } } } } }, "name": "20", "statistics": { "matched_packets": "3247558" } }, "30": { "actions": { "forwarding": "permit" }, "matches": { "l3": { "ipv4": { "protocol": "ipv4", "source_ipv4_network": { "1.1.2.50 0.0.0.0": { "source_ipv4_network": "1.1.2.50 0.0.0.0" } } } } }, "name": "30" }, "40": { "actions": { "forwarding": "permit" }, "matches": { "l3": { "ipv4": { "protocol": "ipv4", "source_ipv4_network": { "1.1.49.8 0.0.0.0": { "source_ipv4_network": "1.1.49.8 0.0.0.0" } } } } }, "name": "40", "statistics": { "matched_packets": "53962962" } } }, "name": "10", "type": "ipv4-acl-type" }, "IP-Adm-V4-Int-ACL-global": { "name": "IP-Adm-V4-Int-ACL-global", "type": "ipv4-acl-type" }, "SSH": { "aces": { "10": { "actions": { "forwarding": "deny", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 23 } }, "established": false } } }, "name": "10" }, "20": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "host 1.1.58.69": { "source_ipv4_network": "host 1.1.58.69" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 22 } }, "established": false } } }, "name": "20", "statistics": { "matched_packets": 4 } }, "30": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "host 1.1.49.217": { "source_ipv4_network": "host 1.1.49.217" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 22 } }, "established": false } } }, "name": "30", "statistics": { "matched_packets": 508 } }, "40": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "host 1.1.58.149": { "source_ipv4_network": "host 1.1.58.149" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 22 } }, "established": false } } }, "name": "40" }, "50": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "host 1.1.49.100": { "source_ipv4_network": "host 1.1.49.100" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 22 } }, "established": false } } }, "name": "50", "statistics": { "matched_packets": 18 } }, "60": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "host 1.1.124.199": { "source_ipv4_network": "host 1.1.124.199" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 22 } }, "established": false } } }, "name": "60", "statistics": { "matched_packets": 10 } } }, "name": "SSH", "type": "ipv4-acl-type" }, "implicit_deny": { "aces": { "10": { "actions": { "forwarding": "deny", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "ipv4", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } } }, "name": "10" } }, "name": "implicit_deny", "type": "ipv4-acl-type" }, "implicit_deny_v6": { "aces": { "10": { "actions": { "forwarding": "deny", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "ipv6", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "10" } }, "name": "implicit_deny_v6", "type": "ipv6-acl-type" }, "implicit_permit": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "ipv4", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } } }, "name": "10" } }, "name": "implicit_permit", "type": "ipv4-acl-type" }, "implicit_permit_v6": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "ipv6", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "10" } }, "name": "implicit_permit_v6", "type": "ipv6-acl-type" }, "meraki-fqdn-dns": { "name": "meraki-fqdn-dns", "type": "ipv4-acl-type" }, "preauth_v4": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 53 } } } } }, "name": "10" }, "20": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 53 } }, "established": false } } }, "name": "20" }, "30": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "source_port": { "operator": { "operator": "eq", "port": "bootps" } } } } }, "name": "30" }, "40": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 68 } } } } }, "name": "40" }, "50": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "source_port": { "operator": { "operator": "eq", "port": "bootpc" } } } } }, "name": "50" }, "60": { "actions": { "forwarding": "deny", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "ipv4", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } } }, "name": "60" } }, "name": "preauth_v4", "type": "ipv4-acl-type" }, "preauth_v6": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "udp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 53 } } } } }, "name": "10" }, "100": { "actions": { "forwarding": "deny", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "ipv6", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "100" }, "20": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "tcp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 53 } }, "established": false } } }, "name": "20" }, "30": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "icmp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "30" }, "40": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "icmp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "40" }, "50": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "icmp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "50" }, "60": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "icmp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "60" }, "70": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "icmp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } } }, "name": "70" }, "80": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "udp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 546 } }, "source_port": { "operator": { "operator": "eq", "port": "547" } } } } }, "name": "80" }, "90": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv6": { "destination_ipv6_network": { "any": { "destination_ipv6_network": "any" } }, "protocol": "udp", "source_ipv6_network": { "any": { "source_ipv6_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 547 } }, "source_port": { "operator": { "operator": "eq", "port": "546" } } } } }, "name": "90" } }, "name": "preauth_v6", "type": "ipv6-acl-type" }, "qos-class-bd": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 445 } }, "established": false } } }, "name": "10" }, "20": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "established": false, "source_port": { "operator": { "operator": "eq", "port": "445" } } } } }, "name": "20" }, "30": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 9100 } }, "established": false } } }, "name": "30" }, "40": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "established": false, "source_port": { "operator": { "operator": "eq", "port": "9100" } } } } }, "name": "40" }, "50": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "established": false, "source_port": { "range": { "lower_port": 40020, "upper_port": 40039 } } } } }, "name": "50" } }, "name": "qos-class-bd", "type": "ipv4-acl-type" }, "qos-class-cs": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "source_port": { "operator": { "operator": "eq", "port": "5060" } } } } }, "name": "10" }, "20": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 5060 } } } } }, "name": "20" }, "30": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 5060 } }, "established": false } } }, "name": "30" }, "40": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "established": false, "source_port": { "operator": { "operator": "eq", "port": "5060" } } } } }, "name": "40" }, "50": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "eq", "port": 5061 } } } } }, "name": "50" }, "60": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "source_port": { "operator": { "operator": "eq", "port": "5061" } } } } }, "name": "60" }, "70": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "established": false, "source_port": { "operator": { "operator": "eq", "port": "5061" } } } } }, "name": "70" }, "80": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 5061 } }, "established": false } } }, "name": "80" } }, "name": "qos-class-cs", "type": "ipv4-acl-type" }, "qos-class-iv": { "aces": { "10": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "any": { "destination_ipv4_network": "any" } }, "protocol": "tcp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "tcp": { "destination_port": { "operator": { "operator": "eq", "port": 5938 } }, "established": false } } }, "name": "10" }, "100": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "host 1.1.68.139": { "destination_ipv4_network": "host 1.1.68.139" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "range", "port": 40803 } } } } }, "name": "100" }, "110": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "host 1.1.68.140": { "destination_ipv4_network": "host 1.1.68.140" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "range", "port": 40803 } } } } }, "name": "110" }, "120": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "host 1.1.68.141": { "destination_ipv4_network": "host 1.1.68.141" } }, "protocol": "udp", "source_ipv4_network": { "any": { "source_ipv4_network": "any" } } } }, "l4": { "udp": { "destination_port": { "operator": { "operator": "range", "port": 40803 } } } } }, "name": "120" }, "130": { "actions": { "forwarding": "permit", "logging": "log-none" }, "matches": { "l3": { "ipv4": { "destination_ipv4_network": { "host 1.1.68.159": { "destination_ipv4_network": "host 1.1.68.159" } }, "p
Hi John,
I tried Merlin with our IOS-XE components, unfortunately we have the same problem as we hat on magic_carpet. Unfortunately I can´t find the issue anymore here on github. Thats why I wantend to reopen the issue here.
The script errors on step 37 - Store Data with the following error:
If I run
genie learn acl
against the device from the same testbed everything works fine. Seems like it´s a problem with j2. template for netjson.Can you tell me how I can narrow it done, on which ACL it actually fails?