dagmartin / capirca

Automatically exported from code.google.com/p/capirca
Apache License 2.0
0 stars 0 forks source link

Add Cisco Nexus support #39

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Cisco Nexus series is currently unsupported. With sed I can change most of the 
problematic ace's, but it would be great if it could be included natively.

Original issue reported on code.google.com by smma...@gmail.com on 27 May 2015 at 8:12

GoogleCodeExporter commented 9 years ago
Hi,
Can you give me more details on what is different between the syntax?
I do not have a nexus device to test things out on.

Original comment by anke...@gmail.com on 23 Jun 2015 at 5:26

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
Our Nexus acl's are quite simple. The differences i found until now:

- Keyword 'extended' needs to be removed
- Protocol numbers need to be replaced by their respective name (eg 6 is tcp, 
17 is udp etc)
- Only when using in switchprofile mode (in that case acl's are automatically 
distributed between multiple switches) it is necessary to number the list 
entries. But not every Nexus user uses that i guess.

A (very) simple and dirty conversion script i use at the moment:
./aclgen.py
find ./ -iname '*.acl' | while read f
do
sed  -i 's/ extended / /g' "$f"
sed  -i 's/ 6 / tcp /g' "$f"
sed  -i 's/ 17 / udp /g' "$f"
head -n 4 "$f" > "$f".head
sed '1,4d' "$f" > "$f".sed 
nl -i10 -v10 -s "  " "$f".sed | grep -v " end" >> "$f".head
rm "$f".sed
mv "$f".head "$f"
done

Original comment by smma...@gmail.com on 24 Jun 2015 at 1:41