ios-xr / bgpfs2acl Goto Github PK

1. Can you add functionality to control which interfaces have the ACL applied? Or better yet let us configure the ACL name or names we want to have the functionality added to. Then we can apply those ACLs to the interfaces we want to enable the rules on. This would be especially handy if you have a mitigation device attached to the router.

2. Also the router supports configuring a nexthop inside a vrf with the ACL. Can we add that functionality to the script or is there some limitation that won't allow that configuration?

When running the command -> source run_container.sh

Output
7da5eaa275d04d0dbb8d52d9274d01621dcf70cb93c93405c068506eedfef56e
-su: --env-file: command not found

Tried changing to --env-file=$PWD/parameters.env but still didn't work.
New to docker . Need some help

Is there a reason the timer is set to 30 seconds by default? Have you tried a lower timer like 5-10 seconds and if so does it cause performance issues on the router?

Hi,

I have an issue with bgpfs2acl, I am unable to compile ACL.

Anyone can help me? There nothing in log, I have disk space..

`root@wanguard:~/xr-appmgr-build# ./appmgr_build -b bgpfs/build.yaml
Build version: 0dda1e1ffa6fbb6472530b50ef411b503432f298
Starting to build package: bgpfs2acl
---> bgpfs2acl
Building docker image arhashem/xr-wrl7...
docker build docker -f docker/WRL7.Dockerfile -t arhashem/xr-wrl7
[+] Building 0.5s (7/7) FINISHED docker:default
=> [internal] load build definition from WRL7.Dockerfile 0.0s
=> => transferring dockerfile: 94B 0.0s
=> [internal] load metadata for docker.io/akshshar/xr-wrl7:latest 0.3s
=> [internal] load .dockerignore 0.0s
=> => transferring context: 2B 0.0s
=> [internal] load build context 0.0s
=> => transferring context: 34B 0.0s
=> [1/2] FROM docker.io/akshshar/xr-wrl7:latest@sha256:3f8eb541488ffb288d25fc812136895275484445cadb6916579b6fd020b75928 0.0s
=> CACHED [2/2] COPY build_rpm.sh /usr/sbin/ 0.0s
=> exporting to image 0.0s
=> => exporting layers 0.0s
=> => writing image sha256:b40719999236579ee7da540c679db00536f6a84277e030afcdc12eeadc31eeaa 0.0s
=> => naming to docker.io/arhashem/xr-wrl7 0.0s
Adding sources...
Adding configs...
---> bgpfs2acl
Adding data...
---> bgpfs2acl
Creating source archive...
Generating spec file: bgpfs2acl-1.0.0-eXR_7.3.1.spec
Building RPM...
/usr/sbin/build_rpm.sh --spec-file /usr/src/rpm/SPECS/bgpfs2acl-1.0.0-eXR_7.3.1.spec --source-dir /usr/src/rpm/SOURCES --rpm-dir /usr/src/rpm/RPMS --output-dir /root/RPMS --verbose

• [[ '' == '' ]]
• log_file=/tmp/rpmbuild.log
• [[ /usr/src/rpm/SPECS/bgpfs2acl-1.0.0-eXR_7.3.1.spec == '' ]]
• [[ /usr/src/rpm/SOURCES == '' ]]
• [[ /usr/src/rpm/RPMS == '' ]]
• [[ /root/RPMS == '' ]]
• mkdir -p /root/RPMS
• chown -Rf root:root /root/RPMS
• chown -Rf root:root /usr/src/rpm/SOURCES/bgpfs2acl-1.0.0-eXR_7.3.1.tar.gz
  ++ dirname /usr/src/rpm/SPECS/bgpfs2acl-1.0.0-eXR_7.3.1.spec
• chown -Rf root:root /usr/src/rpm/SPECS/bgpfs2acl-1.0.0-eXR_7.3.1.spec
• [[ '' != '' ]]
• /usr/bin/rpmbuild --verbose -bb /usr/src/rpm/SPECS/bgpfs2acl-1.0.0-eXR_7.3.1.spec
• rpm_build_ec=1
• [[ 1 -eq 0 ]]
• echo 'Failed to build RPM. Check logfile for errors'
• exit 1
  Failed to build RPM. Check logfile for errors

`

++

root@wanguard:/xr-appmgr-build# cat bgpfs/
bgpfs2acl.py build.yaml dev_configs/ .git/ iosxr_grpc/ requirements.txt tests/
bgpfs2acl.tar.gz conf/ Dockerfile .gitignore README.md src/ vagrant/
root@wanguard:/xr-appmgr-build# cat bgpfs/build.yaml
packages:

• name: "bgpfs2acl"
  release: "eXR_7.3.1"
  version: "1.0.0"
  sources:
  • name: bgpfs2acl
    file: bgpfs/bgpfs2acl.tar.gz
    copy_hostname: true
    copy_ems_cert: false

Hi
have spoken to Taran and he said that I should upload the debug files here. ACL isn't installed seem that it can't find it.

FS_ACL_Script_debug_20221202.log

Br Dennis