Storing ACLs errors #4
Comments
|
Hi yes the problem looks like the netjson
For now you can empty the acl netjson json templates (for learn and show
acl) and send the raw JSON and we can see how to handle your unique ACL -
if you could try this and post the raw json
Thanks and sorry I didn’t mean to abandon this issue but I had to focus on
the rebranding
…On Wed, May 26, 2021 at 8:50 AM John Capobianco ***@***.***> wrote:
On Wed, May 26, 2021 at 8:45 AM nouse4it ***@***.***> wrote:
> Hi John,
>
> I tried Merlin with our IOS-XE components, unfortunately we have the same
> problem as we hat on magic_carpet. Unfortunately I can´t find the issue
> anymore here on github. Thats why I wantend to reopen the issue here.
>
> The script errors on step 37 - Store Data with the following error:
>
> 2021-05-26T14:33:53: %AETEST-INFO: The result of STEP 37: Store data is => ERRORED
>
> 2021-05-26T14:33:53: %AETEST-ERROR: Caught an exception while executing section parse:
>
> 2021-05-26T14:33:53: %AETEST-ERROR: Traceback (most recent call last):
>
> 2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/IOS_XE_merlin.py", line 237, in parse
>
> 2021-05-26T14:33:53: %AETEST-ERROR: parsed_output_netjson_json = learned_acl_netjson_json_template.render(to_parse_access_list=self.learned_acl['acls'],device_alias = device.alias)
>
> 2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/environment.py", line 1090, in render
>
> 2021-05-26T14:33:53: %AETEST-ERROR: self.environment.handle_exception()
>
> 2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/environment.py", line 832, in handle_exception
>
> 2021-05-26T14:33:53: %AETEST-ERROR: reraise(*rewrite_traceback_stack(source=source))
>
> 2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/_compat.py", line 28, in reraise
>
> 2021-05-26T14:33:53: %AETEST-ERROR: raise value.with_traceback(tb)
>
> 2021-05-26T14:33:53: %AETEST-ERROR: File "templates/cisco/ios_xe/learned_acl_netjson_json.j2", line 21, in top-level template code
>
> 2021-05-26T14:33:53: %AETEST-ERROR: "id": "UDP Source Port: {{ to_parse_access_list[list].aces[ace].matches.l4.udp.source_port.operator.port }}"
>
> 2021-05-26T14:33:53: %AETEST-ERROR: File "/home/nouse4it/Scripts/merlin/venv_merlin/lib/python3.8/site-packages/jinja2/environment.py", line 471, in getattr
>
> 2021-05-26T14:33:53: %AETEST-ERROR: return getattr(obj, attribute)
>
> 2021-05-26T14:33:53: %AETEST-ERROR: jinja2.exceptions.UndefinedError: 'genie.ops.base.maker.CmdDict object' has no attribute 'operator'
>
>
> If I run genie learn acl against the device from the same testbed
> everything works fine.
> Seems like it´s a problem with j2. template for netjson.
>
> Can you tell me how I can narrow it done, on which ACL it actually fails?
>
> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub
> <#4>, or unsubscribe
> <https://github.com/notifications/unsubscribe-auth/AKQSYCSUI6PV7RNKSPDMDPTTPTUP7ANCNFSM45R6U33A>
> .
>
|
|
Hi, sure no problem. I emptied the files and ran the script again. Now it goes all the way. The pure json of the acl is this |
|
Ok amazing I am happy at least you got a full run
So when I am done with my NXOS feature I will incorporate the JSON above
into my ACL logic - there is probably something not matching on the QoS
ACLs I will fix this
So I have to fix learn ACL, show ACL base .j2 files and the netjson files -
probably on the weekend I hope thanks for your patience!
…On Wed, May 26, 2021 at 9:14 AM nouse4it ***@***.***> wrote:
Hi, sure no problem.
I emptied the files an ran the script again. Now it goes all the way.
The pure json of the acl is this
{
"acls": {
"10": {
"aces": {
"10": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.49.20 0.0.0.0": {
"source_ipv4_network": "1.1.49.20 0.0.0.0"
}
}
}
}
},
"name": "10",
"statistics": {
"matched_packets": "27778746"
}
},
"20": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.49.217 0.0.0.0": {
"source_ipv4_network": "1.1.49.217 0.0.0.0"
}
}
}
}
},
"name": "20",
"statistics": {
"matched_packets": "3247558"
}
},
"30": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.2.50 0.0.0.0": {
"source_ipv4_network": "1.1.2.50 0.0.0.0"
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit"
},
"matches": {
"l3": {
"ipv4": {
"protocol": "ipv4",
"source_ipv4_network": {
"1.1.49.8 0.0.0.0": {
"source_ipv4_network": "1.1.49.8 0.0.0.0"
}
}
}
}
},
"name": "40",
"statistics": {
"matched_packets": "53962962"
}
}
},
"name": "10",
"type": "ipv4-acl-type"
},
"IP-Adm-V4-Int-ACL-global": {
"name": "IP-Adm-V4-Int-ACL-global",
"type": "ipv4-acl-type"
},
"SSH": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 23
}
},
"established": false
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.58.69": {
"source_ipv4_network": "host 1.1.58.69"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "20",
"statistics": {
"matched_packets": 4
}
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.49.217": {
"source_ipv4_network": "host 1.1.49.217"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "30",
"statistics": {
"matched_packets": 508
}
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.58.149": {
"source_ipv4_network": "host 1.1.58.149"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.49.100": {
"source_ipv4_network": "host 1.1.49.100"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "50",
"statistics": {
"matched_packets": 18
}
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"host 1.1.124.199": {
"source_ipv4_network": "host 1.1.124.199"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 22
}
},
"established": false
}
}
},
"name": "60",
"statistics": {
"matched_packets": 10
}
}
},
"name": "SSH",
"type": "ipv4-acl-type"
},
"implicit_deny": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_deny",
"type": "ipv4-acl-type"
},
"implicit_deny_v6": {
"aces": {
"10": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "ipv6",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_deny_v6",
"type": "ipv6-acl-type"
},
"implicit_permit": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_permit",
"type": "ipv4-acl-type"
},
"implicit_permit_v6": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "ipv6",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "10"
}
},
"name": "implicit_permit_v6",
"type": "ipv6-acl-type"
},
"meraki-fqdn-dns": {
"name": "meraki-fqdn-dns",
"type": "ipv4-acl-type"
},
"preauth_v4": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
}
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
},
"established": false
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "bootps"
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 68
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "bootpc"
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "ipv4",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
}
},
"name": "60"
}
},
"name": "preauth_v4",
"type": "ipv4-acl-type"
},
"preauth_v6": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "udp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
}
}
}
},
"name": "10"
},
"100": {
"actions": {
"forwarding": "deny",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "ipv6",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "100"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "tcp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 53
}
},
"established": false
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "60"
},
"70": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "icmp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
}
},
"name": "70"
},
"80": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "udp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 546
}
},
"source_port": {
"operator": {
"operator": "eq",
"port": "547"
}
}
}
}
},
"name": "80"
},
"90": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv6": {
"destination_ipv6_network": {
"any": {
"destination_ipv6_network": "any"
}
},
"protocol": "udp",
"source_ipv6_network": {
"any": {
"source_ipv6_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 547
}
},
"source_port": {
"operator": {
"operator": "eq",
"port": "546"
}
}
}
}
},
"name": "90"
}
},
"name": "preauth_v6",
"type": "ipv6-acl-type"
},
"qos-class-bd": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 445
}
},
"established": false
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "445"
}
}
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 9100
}
},
"established": false
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "9100"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"range": {
"lower_port": 40020,
"upper_port": 40039
}
}
}
}
},
"name": "50"
}
},
"name": "qos-class-bd",
"type": "ipv4-acl-type"
},
"qos-class-cs": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "5060"
}
}
}
}
},
"name": "10"
},
"20": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5060
}
}
}
}
},
"name": "20"
},
"30": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5060
}
},
"established": false
}
}
},
"name": "30"
},
"40": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "5060"
}
}
}
}
},
"name": "40"
},
"50": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5061
}
}
}
}
},
"name": "50"
},
"60": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"source_port": {
"operator": {
"operator": "eq",
"port": "5061"
}
}
}
}
},
"name": "60"
},
"70": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"established": false,
"source_port": {
"operator": {
"operator": "eq",
"port": "5061"
}
}
}
}
},
"name": "70"
},
"80": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5061
}
},
"established": false
}
}
},
"name": "80"
}
},
"name": "qos-class-cs",
"type": "ipv4-acl-type"
},
"qos-class-iv": {
"aces": {
"10": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"any": {
"destination_ipv4_network": "any"
}
},
"protocol": "tcp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"tcp": {
"destination_port": {
"operator": {
"operator": "eq",
"port": 5938
}
},
"established": false
}
}
},
"name": "10"
},
"100": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.139": {
"destination_ipv4_network": "host 1.1.68.139"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "100"
},
"110": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.140": {
"destination_ipv4_network": "host 1.1.68.140"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "110"
},
"120": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.141": {
"destination_ipv4_network": "host 1.1.68.141"
}
},
"protocol": "udp",
"source_ipv4_network": {
"any": {
"source_ipv4_network": "any"
}
}
}
},
"l4": {
"udp": {
"destination_port": {
"operator": {
"operator": "range",
"port": 40803
}
}
}
}
},
"name": "120"
},
"130": {
"actions": {
"forwarding": "permit",
"logging": "log-none"
},
"matches": {
"l3": {
"ipv4": {
"destination_ipv4_network": {
"host 1.1.68.159": {
"destination_ipv4_network": "host 1.1.68.159"
}
},
"p
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi John,
I tried Merlin with our IOS-XE components, unfortunately we have the same problem as we hat on magic_carpet. Unfortunately I can´t find the issue anymore here on github. Thats why I wantend to reopen the issue here.
The script errors on step 37 - Store Data with the following error:
If I run
genie learn aclagainst the device from the same testbed everything works fine.Seems like it´s a problem with j2. template for netjson.
Can you tell me how I can narrow it done, on which ACL it actually fails?
The text was updated successfully, but these errors were encountered: