Add support for generating prefix-list entries for juniper ACLs about capirca HOT 6 CLOSED

Hi,

I'm about to use this patch and was wondering if you improved/changed it in any 
ways since 2010?

Thanks

Original comment by xionox on 13 Apr 2015 at 7:38

from capirca.

That would be a very interesting feature to be added - any chance to see this merged ?

from capirca.

Hi Jerome,
I believe we have this already this in our internal version. I am working really hard to get the external version up to par with the internal one. There are a couple of things internally I need to do but I should have things getting ready in the next week or two. Please stay tuned!

from capirca.

I believe this is now fixed. The lastest version of Capirca is now available for download and it should provide for prefix lists. I am marking this closed but feel free to reopen if this issue was not fixed.

from capirca.

Is there an example of how this works for both juniper and srx filters? is there a new header setting we need to use similar to the "object-group" tag for cisco? Otherwise I'm assuming source-prefix still expects a "text" entry.

Thanks

from capirca.

Ahh so yea you need to give it a string and currently it prints only that string.

I looked a bit closer at the patch and it seems that it is printing out the prefix-lists. The patch is nice but I think some stuff is being forgotten in the process. If I understand your desire correctly you want to give a definition like you would in source-address and have it populate a prefix list with the IPs from that definition?

The prefix lists in juniper can also use apply-path to create dynamic lists of IPs. Currently Capirca doesn't really have any logic to handle this and I know that it is a pretty commonly used feature.

My suggestion is this, we can accept this but there needs to be a target option to toggle the printing. The default action is to continue how it is today. If the option is given then it will create the prefix list with the appropriate IP addresses.

If someone wants to take this on I will be happy to reopen the issue.

from capirca.