[rancid] xrrancid destroys ipv[46] ACLs

heasley heas at shrubbery.net
Tue Jan 10 17:36:44 UTC 2012


Tue, Jan 10, 2012 at 05:41:26PM +0100, Erik Wenzel:
> regardless of setting ACLSORT in rancid.conf xrrancid is sorting an ACL like:
> ---snip---
> #sh ipv4 access-lists eriktest-v4
> ipv4 access-list eriktest-v4
>  1 remark erik
>  10 remark tests
>  100 remark acls
>  1000 deny ipv4 any any
> #sh ipv6 access-lists eriktest
> ipv6 access-list eriktest
>  1 remark erik
>  10 remark tests
>  100 remark acls
>  1000 deny ipv6 any any
> ---snip---
> to:
> ---snip---
> [?]
>  deny ipv6 any any
> ipv6 access-list eriktest
>  1 remark erik
>  10 remark tests
>  100 remark acls
> [?]
> !
>  deny ipv4 any any
> ipv4 access-list eriktest-v4
>  1 remark erik
>  10 remark tests
>  100 remark acls
> !
> [?]
> ---snip---
> ? in rancid backup. This is completely useless. This can't be used in case of 
> recovery. I urge everyone who uses xrrancid and sequence numbers to verify their
> ACLs in CVS. My workaround is to comment out line 1022-1037. Can someone who is
> using IOS-XR in this setup confirm this behavior?

i'm not sure if i understand what the behavior is that you are trying to
describe.  could you explain in more detail?

> 
> xrrancid version string: $Id: xrrancid.in 2264 2010-11-04 23:35:17Z heas $
> 
> -- 
> Erik Wenzel
> erik at code.de
> 
> 
> 
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


More information about the Rancid-discuss mailing list