1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
|
!
{% if access_list is defined and access_list is not none %}
{% for acl, acl_config in access_list.items() | natural_sort %}
{% if acl_config.description is defined and acl_config.description is not none %}
access-list {{ acl }} remark {{ acl_config.description }}
{% endif %}
{% if acl_config.rule is defined and acl_config.rule is not none %}
{% for rule, rule_config in acl_config.rule.items() | natural_sort %}
{% set ip = '' %}
{% set src = '' %}
{% set src_mask = '' %}
{% if rule_config.source is defined and rule_config.source.any is defined %}
{% set src = 'any' %}
{% elif rule_config.source is defined and rule_config.source.host is defined and rule_config.source.host is not none %}
{% set src = 'host ' + rule_config.source.host %}
{% elif rule_config.source is defined and rule_config.source.network is defined and rule_config.source.network is not none %}
{% set src = rule_config.source.network %}
{% set src_mask = rule_config.source.inverse_mask %}
{% endif %}
{% set dst = '' %}
{% set dst_mask = '' %}
{% if (acl|int >= 100 and acl|int <= 199) or (acl|int >= 2000 and acl|int <= 2699) %}
{% set ip = 'ip' %}
{% set dst = 'any' %}
{% if rule_config.destination is defined and rule_config.destination.any is defined %}
{% set dst = 'any' %}
{% elif rule_config.destination is defined and rule_config.destination.host is defined and rule_config.destination.host is not none %}
{% set dst = 'host ' + rule_config.destination.host %}
{% elif rule_config.destination is defined and rule_config.destination.network is defined and rule_config.destination.network is not none %}
{% set dst = rule_config.destination.network %}
{% set dst_mask = rule_config.destination.inverse_mask %}
{% endif %}
{% endif %}
access-list {{ acl }} seq {{ rule }} {{ rule_config.action }} {{ ip }} {{ src }} {{ src_mask }} {{ dst }} {{ dst_mask }}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if access_list6 is defined and access_list6 is not none %}
{% for acl, acl_config in access_list6.items() | natural_sort %}
{% if acl_config.description is defined and acl_config.description is not none %}
ipv6 access-list {{ acl }} remark {{ acl_config.description }}
{% endif %}
{% if acl_config.rule is defined and acl_config.rule is not none %}
{% for rule, rule_config in acl_config.rule.items() | natural_sort %}
{% set src = '' %}
{% if rule_config.source is defined and rule_config.source.any is defined %}
{% set src = 'any' %}
{% elif rule_config.source is defined and rule_config.source.network is defined and rule_config.source.network is not none %}
{% set src = rule_config.source.network %}
{% endif %}
ipv6 access-list {{ acl }} seq {{ rule }} {{ rule_config.action }} {{ src }} {{ 'exact-match' if rule_config.source.exact_match is defined }}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if as_path_list is defined and as_path_list is not none %}
{% for acl, acl_config in as_path_list.items() | natural_sort %}
{% if acl_config.rule is defined and acl_config.rule is not none %}
{% for rule, rule_config in acl_config.rule.items() | natural_sort %}
bgp as-path access-list {{ acl }} {{ rule_config.action }} {{ rule_config.regex }}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if community_list is defined and community_list is not none %}
{% for list, list_config in community_list.items() | natural_sort %}
{% if list_config.rule is defined and list_config.rule is not none %}
{% for rule, rule_config in list_config.rule.items() | natural_sort %}
{# by default, if casting to int fails it returns 0 #}
{% if list|int != 0 %}
bgp community-list {{ list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.regex }}
{% else %}
bgp community-list expanded {{ list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.regex }}
{% endif %}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if extcommunity_list is defined and extcommunity_list is not none %}
{% for list, list_config in extcommunity_list.items() | natural_sort %}
{% if list_config.rule is defined and list_config.rule is not none %}
{% for rule, rule_config in list_config.rule.items() | natural_sort %}
{# by default, if casting to int fails it returns 0 #}
{% if list|int != 0 %}
bgp extcommunity-list {{ list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.regex }}
{% else %}
bgp extcommunity-list expanded {{ list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.regex }}
{% endif %}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if large_community_list is defined and large_community_list is not none %}
{% for list, list_config in large_community_list.items() | natural_sort %}
{% if list_config.rule is defined and list_config.rule is not none %}
{% for rule, rule_config in list_config.rule.items() | natural_sort %}
{# by default, if casting to int fails it returns 0 #}
{% if list|int != 0 %}
bgp large-community-list {{ list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.regex }}
{% else %}
bgp large-community-list expanded {{ list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.regex }}
{% endif %}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if prefix_list is defined and prefix_list is not none %}
{% for prefix_list, prefix_list_config in prefix_list.items() | natural_sort %}
{% if prefix_list_config.description is defined and prefix_list_config.description is not none %}
ip prefix-list {{ prefix_list }} description {{ prefix_list_config.description }}
{% endif %}
{% if prefix_list_config.rule is defined and prefix_list_config.rule is not none %}
{% for rule, rule_config in prefix_list_config.rule.items() | natural_sort %}
ip prefix-list {{ prefix_list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.prefix }} {{ 'ge ' + rule_config.ge if rule_config.ge is defined }} {{ 'le ' + rule_config.le if rule_config.le is defined }}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if prefix_list6 is defined and prefix_list6 is not none %}
{% for prefix_list, prefix_list_config in prefix_list6.items() | natural_sort %}
{% if prefix_list_config.description is defined and prefix_list_config.description is not none %}
ipv6 prefix-list {{ prefix_list }} description {{ prefix_list_config.description }}
{% endif %}
{% if prefix_list_config.rule is defined and prefix_list_config.rule is not none %}
{% for rule, rule_config in prefix_list_config.rule.items() | natural_sort %}
ipv6 prefix-list {{ prefix_list }} seq {{ rule }} {{ rule_config.action }} {{ rule_config.prefix }} {{ 'ge ' + rule_config.ge if rule_config.ge is defined }} {{ 'le ' + rule_config.le if rule_config.le is defined }}
{% endfor %}
{% endif %}
{% endfor %}
{% endif %}
!
{% if route_map is defined and route_map is not none %}
{% for route_map, route_map_config in route_map.items() | natural_sort %}
{% if route_map_config.rule is defined and route_map_config.rule is not none %}
{% for rule, rule_config in route_map_config.rule.items() | natural_sort %}
route-map {{ route_map }} {{ rule_config.action }} {{ rule }}
{% if rule_config.call is defined and rule_config.call is not none %}
call {{ rule_config.call }}
{% endif %}
{% if rule_config.continue is defined and rule_config.continue is not none %}
on-match goto {{ rule_config.continue }}
{% endif %}
{% if rule_config.description is defined and rule_config.description is not none %}
description {{ rule_config.description }}
{% endif %}
{% if rule_config.match is defined and rule_config.match is not none %}
{% if rule_config.match.as_path is defined and rule_config.match.as_path is not none %}
match as-path {{ rule_config.match.as_path }}
{% endif %}
{% if rule_config.match.community is defined and rule_config.match.community.community_list is defined and rule_config.match.community.community_list is not none %}
match community {{ rule_config.match.community.community_list }} {{ 'exact-match' if rule_config.match.community.exact_match is defined }}
{% endif %}
{% if rule_config.match.extcommunity is defined and rule_config.match.extcommunity is not none %}
match extcommunity {{ rule_config.match.extcommunity }}
{% endif %}
{% if rule_config.match.interface is defined and rule_config.match.interface is not none %}
match interface {{ rule_config.match.interface }}
{% endif %}
{% if rule_config.match.ip is defined and rule_config.match.ip.address is defined and rule_config.match.ip.address.access_list is defined and rule_config.match.ip.address.access_list is not none %}
match ip address {{ rule_config.match.ip.address.access_list }}
{% endif %}
{% if rule_config.match.ip is defined and rule_config.match.ip.address is defined and rule_config.match.ip.address.prefix_list is defined and rule_config.match.ip.address.prefix_list is not none %}
match ip address prefix-list {{ rule_config.match.ip.address.prefix_list }}
{% endif %}
{% if rule_config.match.ip is defined and rule_config.match.ip.nexthop is defined and rule_config.match.ip.nexthop.access_list is defined and rule_config.match.ip.nexthop.access_list is not none %}
match ip next-hop {{ rule_config.match.ip.nexthop.access_list }}
{% endif %}
{% if rule_config.match.ip is defined and rule_config.match.ip.nexthop is defined and rule_config.match.ip.nexthop.prefix_list is defined and rule_config.match.ip.nexthop.prefix_list is not none %}
match ip next-hop prefix-list {{ rule_config.match.ip.nexthop.prefix_list }}
{% endif %}
{% if rule_config.match.ip is defined and rule_config.match.ip.route_source is defined and rule_config.match.ip.route_source.access_list is defined and rule_config.match.ip.route_source.access_list is not none %}
match ip route-source {{ rule_config.match.ip.route_source.access_list }}
{% endif %}
{% if rule_config.match.ip is defined and rule_config.match.ip.route_source is defined and rule_config.match.ip.route_source.prefix_list is defined and rule_config.match.ip.route_source.prefix_list is not none %}
match ip route-source prefix-list {{ rule_config.match.ip.route_source.prefix_list }}
{% endif %}
{% if rule_config.match.ipv6 is defined and rule_config.match.ipv6.address is defined and rule_config.match.ipv6.address.access_list is defined and rule_config.match.ipv6.address.access_list is not none %}
match ipv6 address {{ rule_config.match.ipv6.address.access_list }}
{% endif %}
{% if rule_config.match.ipv6 is defined and rule_config.match.ipv6.address is defined and rule_config.match.ipv6.address.prefix_list is defined and rule_config.match.ipv6.address.prefix_list is not none %}
match ipv6 address prefix-list {{ rule_config.match.ipv6.address.prefix_list }}
{% endif %}
{% if rule_config.match.ipv6 is defined and rule_config.match.ipv6.nexthop is defined and rule_config.match.ipv6.nexthop is not none %}
match ipv6 next-hop {{ rule_config.match.ipv6.nexthop }}
{% endif %}
{% if rule_config.match.large_community is defined and rule_config.match.large_community.large_community_list is defined and rule_config.match.large_community.large_community_list is not none %}
match large-community {{ rule_config.match.large_community.large_community_list }}
{% endif %}
{% if rule_config.match.local_preference is defined and rule_config.match.local_preference is not none %}
match local-preference {{ rule_config.match.local_preference }}
{% endif %}
{% if rule_config.match.metric is defined and rule_config.match.metric is not none %}
match metric {{ rule_config.match.metric }}
{% endif %}
{% if rule_config.match.origin is defined and rule_config.match.origin is not none %}
match origin {{ rule_config.match.origin }}
{% endif %}
{% if rule_config.match.peer is defined and rule_config.match.peer is not none %}
match peer {{ rule_config.match.peer }}
{% endif %}
{% if rule_config.match.rpki is defined and rule_config.match.rpki is not none %}
match rpki {{ rule_config.match.rpki }}
{% endif %}
{% if rule_config.match.tag is defined and rule_config.match.tag is not none %}
match tag {{ rule_config.match.tag }}
{% endif %}
{% endif %}
{% if rule_config.on_match is defined and rule_config.on_match is not none %}
{% if rule_config.on_match.next is defined %}
on-match next
{% endif %}
{% if rule_config.on_match.goto is defined and rule_config.on_match.goto is not none %}
on-match goto {{ rule_config.on_match.goto }}
{% endif %}
{% endif %}
{% if rule_config.set is defined and rule_config.set is not none %}
{% if rule_config.set.aggregator is defined and rule_config.set.aggregator.as is defined and rule_config.set.aggregator.ip is defined %}
set aggregator as {{ rule_config.set.aggregator.as }} {{ rule_config.set.aggregator.ip }}
{% endif %}
{% if rule_config.set.as_path_exclude is defined and rule_config.set.as_path_exclude is not none %}
set as-path exclude {{ rule_config.set.as_path_exclude }}
{% endif %}
{% if rule_config.set.as_path_prepend is defined and rule_config.set.as_path_prepend is not none %}
set as-path prepend {{ rule_config.set.as_path_prepend }}
{% endif %}
{% if rule_config.set.atomic_aggregate is defined %}
set atomic-aggregate
{% endif %}
{% if rule_config.set.distance is defined and rule_config.set.distance is not none %}
set distance {{ rule_config.set.distance }}
{% endif %}
{% if rule_config.set.ip_next_hop is defined and rule_config.set.ip_next_hop is not none %}
set ip next-hop {{ rule_config.set.ip_next_hop }}
{% endif %}
{% if rule_config.set.ipv6_next_hop is defined and rule_config.set.ipv6_next_hop.global is defined and rule_config.set.ipv6_next_hop.global is not none %}
set ipv6 next-hop global {{ rule_config.set.ipv6_next_hop.global }}
{% endif %}
{% if rule_config.set.ipv6_next_hop is defined and rule_config.set.ipv6_next_hop.local is defined and rule_config.set.ipv6_next_hop.local is not none %}
set ipv6 next-hop local {{ rule_config.set.ipv6_next_hop.local }}
{% endif %}
{% if rule_config.set.large_community is defined and rule_config.set.large_community is not none %}
set large-community {{ rule_config.set.large_community }}
{% endif %}
{% if rule_config.set.local_preference is defined and rule_config.set.local_preference is not none %}
set local-preference {{ rule_config.set.local_preference }}
{% endif %}
{% if rule_config.set.metric is defined and rule_config.set.metric is not none %}
set metric {{ rule_config.set.metric }}
{% endif %}
{% if rule_config.set.metric_type is defined and rule_config.set.metric_type is not none %}
set metric-type {{ rule_config.set.metric_type }}
{% endif %}
{% if rule_config.set.origin is defined and rule_config.set.origin is not none %}
set origin {{ rule_config.set.origin }}
{% endif %}
{% if rule_config.set.originator_id is defined and rule_config.set.originator_id is not none %}
set originator-id {{ rule_config.set.originator_id }}
{% endif %}
{% if rule_config.set.src is defined and rule_config.set.src is not none %}
set src {{ rule_config.set.src }}
{% endif %}
{% if rule_config.set.tag is defined and rule_config.set.tag is not none %}
set tag {{ rule_config.set.tag }}
{% endif %}
{% if rule_config.set.weight is defined and rule_config.set.weight is not none %}
set weight {{ rule_config.set.weight }}
{% endif %}
{% endif %}
{% endfor %}
!
{% endif %}
{% endfor %}
{% endif %}
!
|
