Capirca for ACL conversion

[Luis Jimenez (ljimene2)]

Hi,

 

Hope you are doing well. I am currently in the need for a tool that converts ACL’s from Juniper to Cisco and I came across capirca. I am not sure however if Capirca does acl conversion, could you please confirm? Thanks in advance.

 

 

Best Regards,

.:|:.:|:. | Luis Jimenez | CCIE 43576 | Network Consulting Engineer | cell +52 1 55 2328 5504 | ljim...@cisco.com

 

[Jonathan Lassoff]

Not really, as far as I know.
However, if you write the rules in the platform-independent language,
it can convert to both formats.

> --
> You received this message because you are subscribed to the Google Groups
> "capirca-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to capirca-dev...@googlegroups.com.
> To post to this group, send email to capir...@googlegroups.com.
> Visit this group at https://groups.google.com/group/capirca-dev.
> For more options, visit https://groups.google.com/d/optout.

[robankeny]

Hi Luis,

No this library doesn't do the conversion for you. What this does is allows you to make your ACLs in a vendor agnostic language and then ask for it to create the vendor specific ACL. As an example

https://github.com/google/capirca/blob/master/policies/sample_cisco_lab.pol

That will make a cisco acl when aclgen is run. If you wanted to make a juniper also you would add a line in the header with "target:: juniper <options>"

[Florian Heigl]

You can at least generate both rulesets and compare them to the original one. ;)