diff options
Diffstat (limited to 'src')
| -rwxr-xr-x | src/conf_mode/policy.py | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/src/conf_mode/policy.py b/src/conf_mode/policy.py index 689365724..4da884e3e 100755 --- a/src/conf_mode/policy.py +++ b/src/conf_mode/policy.py @@ -167,6 +167,23 @@ def verify(config_dict): if 'prefix' not in rule_config: raise ConfigError(f'A prefix {mandatory_error}') + mask_len = int(rule_config['prefix'].split('/')[1]) + ge = int(rule_config['ge']) if 'ge' in rule_config else None + le = int(rule_config['le']) if 'le' in rule_config else None + + if ge is not None and ge < mask_len: + raise ConfigError( + f'{policy_hr} {instance} rule {rule}: "ge" ({ge}) must be >= ' + f'prefix length ({mask_len})') + if le is not None and le < mask_len: + raise ConfigError( + f'{policy_hr} {instance} rule {rule}: "le" ({le}) must be >= ' + f'prefix length ({mask_len})') + if ge is not None and le is not None and ge > le: + raise ConfigError( + f'{policy_hr} {instance} rule {rule}: "ge" ({ge}) must be <= ' + f'"le" ({le})') + if rule_config in entries: raise ConfigError( f'Rule "{rule}" contains a duplicate prefix definition!') |