Open GoogleCodeExporter opened 9 years ago
Hi,
Can you give me more details on what is different between the syntax?
I do not have a nexus device to test things out on.
Original comment by anke...@gmail.com
on 23 Jun 2015 at 5:26
[deleted comment]
Our Nexus acl's are quite simple. The differences i found until now:
- Keyword 'extended' needs to be removed
- Protocol numbers need to be replaced by their respective name (eg 6 is tcp,
17 is udp etc)
- Only when using in switchprofile mode (in that case acl's are automatically
distributed between multiple switches) it is necessary to number the list
entries. But not every Nexus user uses that i guess.
A (very) simple and dirty conversion script i use at the moment:
./aclgen.py
find ./ -iname '*.acl' | while read f
do
sed -i 's/ extended / /g' "$f"
sed -i 's/ 6 / tcp /g' "$f"
sed -i 's/ 17 / udp /g' "$f"
head -n 4 "$f" > "$f".head
sed '1,4d' "$f" > "$f".sed
nl -i10 -v10 -s " " "$f".sed | grep -v " end" >> "$f".head
rm "$f".sed
mv "$f".head "$f"
done
Original comment by smma...@gmail.com
on 24 Jun 2015 at 1:41
Original issue reported on code.google.com by
smma...@gmail.com
on 27 May 2015 at 8:12