search

jathanism / acl

Network access control list and firewall policy parsing library.
Other
24 stars 23 forks source link

Add support for "vrrp" protocol keyword in Juniper firewall filters #18

Open jathanism opened 8 years ago

jathanism commented 8 years ago

Currently the ACL parser only supports the numeric form (112) to specify vrrp as a protocol. Example:

term permit-vrrp {
            from {
                destination-address {
                    224.0.0.18/32;
                }
                protocol vrrp;
            }
            then accept;
        }
}

Enhance the parser to support either form. This was explicitly disabled in the past because it breaks parsing of certain Cisco access-lists. We can find a way!