Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feat(eos_cli_config_gen): Add permit_response_traffic nat to ip-access-lists #4545

Merged
merged 3 commits into from
Oct 7, 2024
Merged

Feat(eos_cli_config_gen): Add permit_response_traffic nat to ip-access-lists #4545

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
52e3ee7
Feat(eos_cli_config_gen): Add permit_response_traffic nat to ip-acces…
gmuloc Oct 3, 2024
e79d17a
Merge branch 'devel' into issue/4282
gmuloc Oct 4, 2024
d30b424
Merge branch 'devel' into issue/4282
gmuloc Oct 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions ...arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-access-lists.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,7 @@ ip access-list ACL_SEQUENCE_AND_COUNTERS
40 permit tcp any gt 1023 host 172.16.16.16 eq 22
50 permit tcp any range 1000 1100 any range 10 20
4294967295 deny ip any any
permit response traffic nat
!
ip access-list ACL_NO_SEQUENCE
remark test acl without sequence numbers
Expand Down
1 change: 1 addition & 0 deletions ...e_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-access-lists.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@ ip access-list ACL_SEQUENCE_AND_COUNTERS
40 permit tcp any gt 1023 host 172.16.16.16 eq 22
50 permit tcp any range 1000 1100 any range 10 20
4294967295 deny ip any any
permit response traffic nat
!
ip access-list ACL_NO_SEQUENCE
remark test acl without sequence numbers
Expand Down
1 change: 1 addition & 0 deletions ...ollections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-access-lists.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@ ip_access_lists:
protocol: ip
source: any
destination: any
permit_response_traffic: nat
- name: ACL_NO_SEQUENCE
entries:
- remark: test acl without sequence numbers
Expand Down
5 changes: 5 additions & 0 deletions ..._collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ip-access-lists.md
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

5 changes: 5 additions & 0 deletions ansible_collections/arista/avd/roles/eos_designs/docs/tables/ipv4-acls.md
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

3 changes: 3 additions & 0 deletions python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-access-lists.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -136,6 +136,9 @@ ip access-list {{ acl.name }}
{% endif %}
{# END ACL_ENTRY CYCLE: walk over the list of ACL entries #}
{% endfor %}
{% if acl.permit_response_traffic is arista.avd.defined %}
permit response traffic {{ acl.permit_response_traffic }}
{% endif %}
{# END ACL CYCLE: end walk over the list of defined ACLs #}
{% endfor %}
{% endif %}
7 changes: 7 additions & 0 deletions python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.schema.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 7 additions & 0 deletions python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ip_access_lists.schema.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -150,3 +150,10 @@ keys:
vlan_mask:
type: str
description: 0x000-0xFFF VLAN mask.
permit_response_traffic:
type: str
valid_values:
- nat
description: |-
Permit response traffic automatically based on NAT translations.
Minimum EOS version requirement 4.32.2F.
Loading