You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The online docs say that is-fragment is a valid option value for Cisco rules, but I get the following error when I use is-fragment for Cisco ACLs under Capirca=1.122:
Traceback (most recent call last):
File "test_cisco_acl.py", line 37, in <module>
cisco_acl = Cisco(pp, exp_info=0)
File "/opt/virtual_env/py37_test/lib/python3.7/site-packages/capirca/lib/aclgenerator.py", line 325, in __init__
raise UnsupportedFilterError('\n %s' % '\n'.join(all_err))
capirca.lib.aclgenerator.UnsupportedFilterError:
test-deny-ip-fragments contains unsupported keywords (is-fragment) for target cisco in policy
The online docs say is-fragment is the proper keyword, but cisco.py seems to only recognize fragments option... What's more, the Juniper unit tests use is-fragment in the Term while the Cisco unit tests use fragments in the Term. For all the obvious reasons, we need to make the fragment keyword consistent for all targets.
The text was updated successfully, but these errors were encountered:
mpenning
changed the title
Capirca doesn't allow use of 'is-fragment' under Cisco IOS
Capirca correct keyword for fragment is confused and is-fragment doesn't work for Cisco targets
May 30, 2020
mpenning
added a commit
to mpenning/capirca
that referenced
this issue
May 30, 2020
The online docs say that
is-fragment
is a valid option value for Cisco rules, but I get the following error when I useis-fragment
for Cisco ACLs under Capirca=1.122:The online docs say
is-fragment
is the proper keyword, butcisco.py
seems to only recognizefragments
option... What's more, the Juniper unit tests useis-fragment
in the Term while the Cisco unit tests usefragments
in the Term. For all the obvious reasons, we need to make the fragment keyword consistent for all targets.Test script to reproduce...
The text was updated successfully, but these errors were encountered: