|
|
|
|
@ -1362,26 +1362,26 @@ policy {
|
|
|
|
|
|
|
|
|
|
{% if 'community_affects_route_maps' in pillar and 'site_codes' in pillar and 'community_affects_prepend_asn' in pillar %}
|
|
|
|
|
{% for route_map_prefix,community_suffixes in pillar.get('community_affects',{}).items() %}
|
|
|
|
|
{% for community_suffix in community_suffixes %}
|
|
|
|
|
{% for digit in "01239" %}
|
|
|
|
|
community-list community_affects_65XX{{ digit }}_{{ community_suffix }} {
|
|
|
|
|
community-list community_affects_65XX{{ digit }}_{{ route_map_prefix }} {
|
|
|
|
|
{% for community_suffix in ["0"] + community_suffixes %}
|
|
|
|
|
{% set loop_parent = loop %}
|
|
|
|
|
{% for site_code in ['00'] + pillar['site_codes'] %}
|
|
|
|
|
rule {{ loop.index }} {
|
|
|
|
|
rule {{ loop_parent.index0 * 10 + loop.index }} {
|
|
|
|
|
action 'permit'
|
|
|
|
|
regex 65{{ site_code }}{{ digit }}:{{ community_suffix }}
|
|
|
|
|
}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
{% for af in ['IPv4','IPv6'] %}
|
|
|
|
|
{% for rm in pillar['community_affects_route_maps'] %}
|
|
|
|
|
route-map {{ route_map_prefix }}-{{ rm }}-{{ af }} {
|
|
|
|
|
{% for community_suffix in community_suffixes %}
|
|
|
|
|
rule {{ loop.index*10 }} {
|
|
|
|
|
match {
|
|
|
|
|
community {
|
|
|
|
|
community-list community_affects_65XX0_{{ community_suffix }}
|
|
|
|
|
community-list community_affects_65XX0_{{ route_map_prefix }}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
action deny
|
|
|
|
|
@ -1389,7 +1389,7 @@ policy {
|
|
|
|
|
rule {{ loop.index*10 + 1 }} {
|
|
|
|
|
match {
|
|
|
|
|
community {
|
|
|
|
|
community-list community_affects_65XX1_{{ community_suffix }}
|
|
|
|
|
community-list community_affects_65XX1_{{ route_map_prefix }}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
set {
|
|
|
|
|
@ -1401,7 +1401,7 @@ policy {
|
|
|
|
|
rule {{ loop.index*10 + 2 }} {
|
|
|
|
|
match {
|
|
|
|
|
community {
|
|
|
|
|
community-list community_affects_65XX2_{{ community_suffix }}
|
|
|
|
|
community-list community_affects_65XX2_{{ route_map_prefix }}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
set {
|
|
|
|
|
@ -1413,7 +1413,7 @@ policy {
|
|
|
|
|
rule {{ loop.index*10 + 3 }} {
|
|
|
|
|
match {
|
|
|
|
|
community {
|
|
|
|
|
community-list community_affects_65XX3_{{ community_suffix }}
|
|
|
|
|
community-list community_affects_65XX3_{{ route_map_prefix }}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
set {
|
|
|
|
|
@ -1425,7 +1425,7 @@ policy {
|
|
|
|
|
rule {{ loop.index*10 + 9 }} {
|
|
|
|
|
match {
|
|
|
|
|
community {
|
|
|
|
|
community-list community_affects_65XX9_{{ community_suffix }}
|
|
|
|
|
community-list community_affects_65XX9_{{ route_map_prefix }}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
set {
|
|
|
|
|
@ -1434,7 +1434,6 @@ policy {
|
|
|
|
|
call {{ rm }}-{{ af }}
|
|
|
|
|
action permit
|
|
|
|
|
}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
rule 65535 {
|
|
|
|
|
match {
|
|
|
|
|
{% if af == "IPv4" %}
|
|
|
|
|
|
