| line |
stmt |
bran |
cond |
sub |
pod |
time |
code |
|
1
|
|
|
|
|
|
|
#!/usr/bin/perl |
|
2
|
|
|
|
|
|
|
|
|
3
|
|
|
|
|
|
|
# $Id: File.pm,v 1.13 2003/06/06 18:45:02 unimlo Exp $ |
|
4
|
|
|
|
|
|
|
|
|
5
|
|
|
|
|
|
|
package Net::ACL::File; |
|
6
|
|
|
|
|
|
|
|
|
7
|
2
|
|
|
2
|
|
2934
|
use strict; |
|
|
2
|
|
|
|
|
7
|
|
|
|
2
|
|
|
|
|
76
|
|
|
8
|
2
|
|
|
2
|
|
11
|
use vars qw( $VERSION @ISA ); |
|
|
2
|
|
|
|
|
4
|
|
|
|
2
|
|
|
|
|
138
|
|
|
9
|
|
|
|
|
|
|
|
|
10
|
|
|
|
|
|
|
## Inheritance and Versioning ## |
|
11
|
|
|
|
|
|
|
|
|
12
|
|
|
|
|
|
|
@ISA = qw( Net::ACL ); |
|
13
|
|
|
|
|
|
|
$VERSION = '0.07'; |
|
14
|
|
|
|
|
|
|
|
|
15
|
|
|
|
|
|
|
## Module Imports ## |
|
16
|
|
|
|
|
|
|
|
|
17
|
2
|
|
|
2
|
|
11
|
use Net::ACL; |
|
|
2
|
|
|
|
|
4
|
|
|
|
2
|
|
|
|
|
70
|
|
|
18
|
2
|
|
|
2
|
|
13
|
use Net::ACL::Rule qw( :rc :action ); |
|
|
2
|
|
|
|
|
4
|
|
|
|
2
|
|
|
|
|
294
|
|
|
19
|
2
|
|
|
2
|
|
11
|
use Carp; |
|
|
2
|
|
|
|
|
4
|
|
|
|
2
|
|
|
|
|
115
|
|
|
20
|
2
|
|
|
2
|
|
981
|
use Cisco::Reconfig; |
|
|
2
|
|
|
|
|
26159
|
|
|
|
2
|
|
|
|
|
1322
|
|
|
21
|
|
|
|
|
|
|
|
|
22
|
|
|
|
|
|
|
## Private Global Class Variables ## |
|
23
|
|
|
|
|
|
|
|
|
24
|
|
|
|
|
|
|
my %listtypes; |
|
25
|
|
|
|
|
|
|
|
|
26
|
|
|
|
|
|
|
## Public Class Methods ## |
|
27
|
|
|
|
|
|
|
|
|
28
|
|
|
|
|
|
|
sub add_listtype |
|
29
|
|
|
|
|
|
|
{ |
|
30
|
6
|
|
|
6
|
1
|
14
|
my $proto = shift; |
|
31
|
6
|
|
33
|
|
|
42
|
my $class = ref $proto || $proto; |
|
32
|
6
|
|
|
|
|
12
|
my ($type,$aclclass,$match,$use) = @_; |
|
33
|
6
|
|
33
|
|
|
29
|
$use ||= $aclclass; |
|
34
|
6
|
|
33
|
|
|
20
|
$match ||= $type; |
|
35
|
6
|
50
|
|
|
|
92
|
unless ($aclclass->isa('Net::ACL::File::Standard')) |
|
36
|
|
|
|
|
|
|
{ |
|
37
|
0
|
|
|
|
|
0
|
eval "use $use;"; |
|
38
|
0
|
0
|
|
|
|
0
|
croak "Error adding $match ($type) - Can't locate $use module." if ($@ =~ /Can't locate/); |
|
39
|
0
|
0
|
|
|
|
0
|
croak $@ if ($@); |
|
40
|
0
|
0
|
|
|
|
0
|
croak "$aclclass is not a Net::ACL::File::Standard class" |
|
41
|
|
|
|
|
|
|
unless ($aclclass->isa('Net::ACL::File::Standard')) |
|
42
|
|
|
|
|
|
|
}; |
|
43
|
6
|
|
|
|
|
21
|
$listtypes{$match}->{_class} = $aclclass; |
|
44
|
6
|
|
|
|
|
26
|
$listtypes{$match}->{_type} = $type; |
|
45
|
|
|
|
|
|
|
} |
|
46
|
|
|
|
|
|
|
|
|
47
|
|
|
|
|
|
|
sub load |
|
48
|
|
|
|
|
|
|
{ |
|
49
|
12
|
|
|
12
|
1
|
1061
|
my $proto = shift; |
|
50
|
12
|
|
33
|
|
|
65
|
my $class = ref $proto || $proto; |
|
51
|
12
|
|
|
|
|
19
|
my $obj = shift; |
|
52
|
12
|
50
|
33
|
|
|
42
|
unless ((ref $obj) && $obj->isa('Cisco::Reconfig')) |
|
53
|
|
|
|
|
|
|
{ |
|
54
|
12
|
|
|
|
|
46
|
$obj = Cisco::Reconfig::stringconfig($obj); |
|
55
|
12
|
50
|
|
|
|
8293
|
croak "Unable to load configuration data" unless $obj; |
|
56
|
|
|
|
|
|
|
}; |
|
57
|
|
|
|
|
|
|
|
|
58
|
12
|
|
|
|
|
260
|
my $res; |
|
59
|
|
|
|
|
|
|
|
|
60
|
12
|
|
|
|
|
73
|
foreach my $match (sort keys %listtypes) |
|
61
|
|
|
|
|
|
|
{ |
|
62
|
56
|
|
|
|
|
871
|
my $aclclass = $listtypes{$match}->{_class}; |
|
63
|
56
|
|
|
|
|
333
|
my $lists = $obj->get($match); |
|
64
|
56
|
100
|
|
|
|
9630
|
foreach my $list ($lists->single ? $lists : $lists->all) # Was get not all |
|
65
|
|
|
|
|
|
|
{ |
|
66
|
19
|
50
|
|
|
|
1123
|
next if $list->text eq ''; |
|
67
|
19
|
|
|
|
|
1933
|
my $acl = $aclclass->load($list); |
|
68
|
19
|
50
|
|
|
|
49
|
next unless defined $acl->name; # No list name - no list at all! |
|
69
|
19
|
|
|
|
|
88
|
$acl->type($listtypes{$match}->{_type}); |
|
70
|
19
|
|
|
|
|
48
|
$res->{$acl->type}->{$acl->name} = $acl; |
|
71
|
|
|
|
|
|
|
} |
|
72
|
|
|
|
|
|
|
}; |
|
73
|
|
|
|
|
|
|
|
|
74
|
12
|
|
|
|
|
338
|
return $res; |
|
75
|
|
|
|
|
|
|
} |
|
76
|
|
|
|
|
|
|
|
|
77
|
|
|
|
|
|
|
## Public Object Methods ## |
|
78
|
|
|
|
|
|
|
|
|
79
|
|
|
|
|
|
|
sub asconfig |
|
80
|
|
|
|
|
|
|
{ |
|
81
|
18
|
|
|
18
|
1
|
6502
|
my $this = shift; |
|
82
|
18
|
|
33
|
|
|
49
|
my $class = ref $this || $this; |
|
83
|
18
|
50
|
|
|
|
50
|
$this = shift if $this eq $class; |
|
84
|
|
|
|
|
|
|
|
|
85
|
18
|
|
|
|
|
30
|
my $conf = ''; |
|
86
|
18
|
50
|
|
|
|
46
|
croak 'ACL need name for configuration to be generated' unless defined $this->name; |
|
87
|
18
|
50
|
|
|
|
53
|
croak 'ACL need type for configuration to be generated' unless defined $this->type; |
|
88
|
18
|
|
|
|
|
24
|
foreach my $rule (@{$this->{_rules}}) |
|
|
18
|
|
|
|
|
47
|
|
|
89
|
|
|
|
|
|
|
{ |
|
90
|
28
|
50
|
|
|
|
165
|
croak "ACL rule of class " . (ref $rule) . " has no asconfig method!" unless $rule->can('asconfig'); |
|
91
|
28
|
|
|
|
|
70
|
$conf .= $rule->asconfig($this->name,$this->type); |
|
92
|
|
|
|
|
|
|
}; |
|
93
|
18
|
|
|
|
|
70
|
return $conf; |
|
94
|
|
|
|
|
|
|
} |
|
95
|
|
|
|
|
|
|
|
|
96
|
|
|
|
|
|
|
## POD ## |
|
97
|
|
|
|
|
|
|
|
|
98
|
|
|
|
|
|
|
=pod |
|
99
|
|
|
|
|
|
|
|
|
100
|
|
|
|
|
|
|
=head1 NAME |
|
101
|
|
|
|
|
|
|
|
|
102
|
|
|
|
|
|
|
Net::ACL::File - Access-lists constructed from configuration file like syntax. |
|
103
|
|
|
|
|
|
|
|
|
104
|
|
|
|
|
|
|
=head1 SYNOPSIS |
|
105
|
|
|
|
|
|
|
|
|
106
|
|
|
|
|
|
|
use Net::ACL::File; |
|
107
|
|
|
|
|
|
|
|
|
108
|
|
|
|
|
|
|
Net::ACL::File->add_listtype('community-list', __PACKAGE__,'ip community-list'); |
|
109
|
|
|
|
|
|
|
|
|
110
|
|
|
|
|
|
|
# Construction |
|
111
|
|
|
|
|
|
|
$config = "ip community-list 4 permit 65001:1\n"; |
|
112
|
|
|
|
|
|
|
$list_hr = load Net::ACL::File($config); |
|
113
|
|
|
|
|
|
|
|
|
114
|
|
|
|
|
|
|
$list = renew Net::ACL(Type => 'community-list', Name => 4); |
|
115
|
|
|
|
|
|
|
$config = $list->asconfig; |
|
116
|
|
|
|
|
|
|
|
|
117
|
|
|
|
|
|
|
=head1 DESCRIPTION |
|
118
|
|
|
|
|
|
|
|
|
119
|
|
|
|
|
|
|
This module extends the Net::ACL class with a load constructor that loads one |
|
120
|
|
|
|
|
|
|
or more objects from a Cisco-like configuration file using Cisco::Reconfig. |
|
121
|
|
|
|
|
|
|
|
|
122
|
|
|
|
|
|
|
=head1 CONSTRUCTOR |
|
123
|
|
|
|
|
|
|
|
|
124
|
|
|
|
|
|
|
=over 4 |
|
125
|
|
|
|
|
|
|
|
|
126
|
|
|
|
|
|
|
=item load() - Load one or more Net::ACL objects from a configuration string. |
|
127
|
|
|
|
|
|
|
|
|
128
|
|
|
|
|
|
|
$list_hr = load Net::ACL::File($config); |
|
129
|
|
|
|
|
|
|
|
|
130
|
|
|
|
|
|
|
This special constructor parses a Cisco-like router configuration. |
|
131
|
|
|
|
|
|
|
|
|
132
|
|
|
|
|
|
|
The constructor takes one argument which should either be a string or a |
|
133
|
|
|
|
|
|
|
Cisco::Reconfig object. |
|
134
|
|
|
|
|
|
|
|
|
135
|
|
|
|
|
|
|
It returns a hash reference. The hash is indexed on |
|
136
|
|
|
|
|
|
|
list-types. Currently supporting the following: |
|
137
|
|
|
|
|
|
|
|
|
138
|
|
|
|
|
|
|
=over 4 |
|
139
|
|
|
|
|
|
|
|
|
140
|
|
|
|
|
|
|
=item C |
|
141
|
|
|
|
|
|
|
|
|
142
|
|
|
|
|
|
|
=item C |
|
143
|
|
|
|
|
|
|
|
|
144
|
|
|
|
|
|
|
=item C |
|
145
|
|
|
|
|
|
|
|
|
146
|
|
|
|
|
|
|
=item C |
|
147
|
|
|
|
|
|
|
|
|
148
|
|
|
|
|
|
|
=item C |
|
149
|
|
|
|
|
|
|
|
|
150
|
|
|
|
|
|
|
=back |
|
151
|
|
|
|
|
|
|
|
|
152
|
|
|
|
|
|
|
Each list-type hash value contains a new hash reference indexed on list names |
|
153
|
|
|
|
|
|
|
or numbers. |
|
154
|
|
|
|
|
|
|
|
|
155
|
|
|
|
|
|
|
=back |
|
156
|
|
|
|
|
|
|
|
|
157
|
|
|
|
|
|
|
=head1 CLASS METHODS |
|
158
|
|
|
|
|
|
|
|
|
159
|
|
|
|
|
|
|
=over 4 |
|
160
|
|
|
|
|
|
|
|
|
161
|
|
|
|
|
|
|
=item add_listtype() |
|
162
|
|
|
|
|
|
|
|
|
163
|
|
|
|
|
|
|
The add_listtype() class method registers a new class of access-lists. |
|
164
|
|
|
|
|
|
|
|
|
165
|
|
|
|
|
|
|
The first argument is the type-string of the new class. |
|
166
|
|
|
|
|
|
|
The second argument is the class to be registered. The class should be a |
|
167
|
|
|
|
|
|
|
sub-class of Net::BGP::File::Standard. Normally this should be C<__PACKAGE__>. |
|
168
|
|
|
|
|
|
|
|
|
169
|
|
|
|
|
|
|
The third argument is used to match the lines in the configuration file using |
|
170
|
|
|
|
|
|
|
Cisco::Reconfig's get() method. If match argument is not defined, |
|
171
|
|
|
|
|
|
|
the type string will be used. |
|
172
|
|
|
|
|
|
|
|
|
173
|
|
|
|
|
|
|
The forth argument is used to load the class with a "use" statement. This |
|
174
|
|
|
|
|
|
|
should only be needed if the class is located in a different package. |
|
175
|
|
|
|
|
|
|
Default is the class name from the second argument. |
|
176
|
|
|
|
|
|
|
|
|
177
|
|
|
|
|
|
|
=back |
|
178
|
|
|
|
|
|
|
|
|
179
|
|
|
|
|
|
|
=head1 ACCESSOR METHODS |
|
180
|
|
|
|
|
|
|
|
|
181
|
|
|
|
|
|
|
=over 4 |
|
182
|
|
|
|
|
|
|
|
|
183
|
|
|
|
|
|
|
=item asconfig() |
|
184
|
|
|
|
|
|
|
|
|
185
|
|
|
|
|
|
|
This function tries to generate a configuration matching the one the load |
|
186
|
|
|
|
|
|
|
constructer got. It can read from any access-list. The resulting configuration |
|
187
|
|
|
|
|
|
|
is returned as a string. |
|
188
|
|
|
|
|
|
|
|
|
189
|
|
|
|
|
|
|
All ACL's which rules support the I method may be used. To do so, |
|
190
|
|
|
|
|
|
|
use: |
|
191
|
|
|
|
|
|
|
|
|
192
|
|
|
|
|
|
|
$conf = Net::ACL::File->asconfig($acl); |
|
193
|
|
|
|
|
|
|
|
|
194
|
|
|
|
|
|
|
=back |
|
195
|
|
|
|
|
|
|
|
|
196
|
|
|
|
|
|
|
=head1 SEE ALSO |
|
197
|
|
|
|
|
|
|
|
|
198
|
|
|
|
|
|
|
Net::ACL, Cisco::Reconfig, Net::ACL::File::Standard |
|
199
|
|
|
|
|
|
|
|
|
200
|
|
|
|
|
|
|
=head1 AUTHOR |
|
201
|
|
|
|
|
|
|
|
|
202
|
|
|
|
|
|
|
Martin Lorensen |
|
203
|
|
|
|
|
|
|
|
|
204
|
|
|
|
|
|
|
=cut |
|
205
|
|
|
|
|
|
|
|
|
206
|
|
|
|
|
|
|
## End Package Net::ACL::File ## |
|
207
|
|
|
|
|
|
|
|
|
208
|
|
|
|
|
|
|
1; |