Using of object-groups within capircha

[Tunka, Philipp]

Dear Madam or Sir,

i have the following questions:

+ using aclgen.py within the capirca-245 I only get the first header section written to

a file (Windows, Python 2.7)

+ can you give an example how to define object-groups for the cisco asa ?

I tried using this block:

header {

        target:: ciscoasa mitarbeiter_obj object-group

}

 

term contains{

        source-address::WORKERS

        action:: next

}

Does not give a satisfactory result:

Should look like

object-group network

 network-object 10.10.10.0 255.255.255.0

network-object host 10.20.20.21

…

But is some kind of access-list

 

Kind Regards

==================================================================

Philipp Tunka                Leibniz-Rechenzentrum

E-Mail: tu...@lrz.de     Operations

==================================================================