{% extends "generic/object_edit.html" %} {% load form_helpers %} {% load helpers %} {% block content-wrapper %}
{{ item.name }} | {{ item.items | join:" "}} |
{{ item.name }} | {{ item.items | join:" "}} |
A Network Definiton has a label and one or more networks. Further networks can be added on the following lines.
EXAMPLE = 192.0.2.0/27
2001:db8:123::/64
A Network Definition can contain other network definitions
EXAMPLE_V4 = 192.0.2.0/27
EXAMPLE_V6 = 2001:db8:123::/64
EXAMPLE_DUAL = EXAMPLE_V4
EXAMPLE_V6
Comments are allowed with a #
EXAMPLE = 2001:db8:c001:c4t5::/64 # this is a very important comment
Further details can be found in the capirca documentation at Github
A Service Definition is one or more ports or a range of ports and a protocol (tcp or udp).
HTTP = 80/tcp
DNS = 53/udp 53/tcp
Service Definitions can be nested and comments are allowed with a #
.
HTTP = 80/tcp
HTTPS = 443/tcp
WEBPORTS = HTTP HTTPS # the common webserver ports
Further details can be found in the capirca documentation at Github
The Terms are the entries of a ACL. Each term has a name and contains keywords that specify what the term does. Each of the labels (in this case DNS
, DNSSERVERS
, WEBPORTS
and WEBSERVERS
) have to be defined first.
term allow_dns {
comment:: "Allow Traffic to the DNS Servers"
destination-port:: DNS
destination-address:: DNSSERVERS
}
term allow_http {
comment:: "Allow HTTP and HTTPs to the WEBSERVERS.
destination-port:: WEBPORTS
destionation-address:: WEBSERVERS
}
A list of the available keywords can be found at Github