diff options
Diffstat (limited to 'scripts/policy')
| -rwxr-xr-x | scripts/policy/vyatta-policy.pl | 57 |
1 files changed, 56 insertions, 1 deletions
diff --git a/scripts/policy/vyatta-policy.pl b/scripts/policy/vyatta-policy.pl index 2ce6a2aa..a91d606b 100755 --- a/scripts/policy/vyatta-policy.pl +++ b/scripts/policy/vyatta-policy.pl @@ -7,11 +7,12 @@ use Getopt::Long; my $VTYSH = '/usr/bin/vyatta-vtysh'; -my ( $accesslist, $aspathlist, $communitylist, $peer ); +my ( $accesslist, $accesslist6, $aspathlist, $communitylist, $peer ); my ( $routemap, $deleteroutemap ); GetOptions( "update-access-list=s" => \$accesslist, + "update-access-list6=s" => \$accesslist6, "update-aspath-list=s" => \$aspathlist, "update-community-list=s" => \$communitylist, "check-peer-syntax=s" => \$peer, @@ -20,6 +21,7 @@ GetOptions( ) or exit 1; update_access_list($accesslist) if ($accesslist); +update_access_list6($accesslist6) if ($accesslist6); update_as_path($aspathlist) if ($aspathlist); update_community_list($communitylist) if ($communitylist); check_peer_syntax($peer) if ($peer); @@ -141,6 +143,12 @@ sub is_access_list { return ( $count > 0 ); } +sub is_access_list6 { + my $list = shift; + my $count = `$VTYSH -c \"show ipv6 access-list $list\" | grep -c $list`; + return ( $count > 0 ); +} + sub update_access_list { my $list = shift; my $config = new Vyatta::Config; @@ -221,6 +229,53 @@ sub update_access_list { exit 0; } +sub update_access_list6 { + my $list = shift; + my $config = new Vyatta::Config; + my @rules = (); + + # remove the old rule if it already exists + if ( is_access_list6($list) ) { + system("$VTYSH -c \"conf t\" -c \"no ipv6 access-list $list\" "); + } + + $config->setLevel("policy access-list6 $list rule"); + @rules = $config->listNodes(); + + foreach my $rule ( sort numerically @rules ) { + my ($action, $src, $exact) = ''; + + # set the action + $action = $config->returnValue("$rule action"); + if ( !defined $action ) { + print +"policy access-list6 $list rule $rule: You must specify an action\n"; + exit 1; + } + + if ( defined $config->returnValue("$rule source network") ) { + $src = $config->returnValue("$rule source network"); + if ($config->exists("$rule source exact-match")) { + $exact = 'exact-match'; + } + } + else { + if ( $config->exists("$rule source any") ) { $src = "any"; } + else { + print +"policy access-list6 $list rule $rule source: incorrect source filter\n"; + exit 1; + } + } + + system( +"$VTYSH -c \"configure terminal\" -c \"ipv6 access-list $list $action $src $exact\" " + ); + } + + exit 0; +} + ## check_routemap_action # check if the action has been changed since the last commit. # we need to do this because quagga will wipe the entire config if |