Skip to content

Commit 45a3ad5

Browse files
itdependsnetworksitdependsnetworks
authored
Merge pull request #20 from networktocode/develop
release 0.2.1
2 parents 0aef341 + b33b022 commit 45a3ad5

24 files changed

Lines changed: 735 additions & 2 deletions

‎CHANGELOG.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,15 @@
11
# Changelog
22

3+
## v0.2.1 - 2021-06
4+
5+
### Added
6+
7+
- #16 Cisco ASA Parser.
8+
9+
### Changed
10+
11+
- #17 Update interface mapping for Sync, TenGig, Port-channel.
12+
313
## v0.2.0 - 2021-06
414

515
### Fixed

‎netutils/__init__.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
"""Initialization file for library."""
22

3-
__version__ = "0.2.0"
3+
__version__ = "0.2.1"

‎netutils/config/compliance.py‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@
1010
"linux": parser.LINUXConfigParser,
1111
"bigip_f5": parser.F5ConfigParser,
1212
"juniper_junos": parser.JunosConfigParser,
13+
"cisco_asa": parser.ASAConfigParser,
1314
}
1415

1516
default_feature = {

‎netutils/config/parser.py‎

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -603,3 +603,78 @@ class JunosConfigParser(BaseSpaceConfigParser):
603603

604604
comment_chars = []
605605
banner_start = []
606+
607+
608+
class ASAConfigParser(CiscoConfigParser):
609+
"""Cisco ASA implementation of ConfigParser Class."""
610+
611+
comment_chars = ["!", ":"]
612+
613+
def __init__(self, config):
614+
"""Create ConfigParser Object.
615+
616+
Args:
617+
config (str): The config text to parse.
618+
"""
619+
self.unique_config_lines = set()
620+
self.same_line_children = set()
621+
super(ASAConfigParser, self).__init__(config)
622+
623+
def _update_config_lines(self, config_line):
624+
"""Add a ``ConfigLine`` object to ``self.config_lines``.
625+
626+
In addition to adding entries to config_lines, this also updates:
627+
* self.same_line_children
628+
* self.unique_config_lines
629+
630+
Args:
631+
config_line (str): The current config line being evaluated.
632+
633+
Returns:
634+
None
635+
"""
636+
super(ASAConfigParser, self)._update_config_lines(config_line)
637+
entry = self.config_lines[-1]
638+
if entry in self.unique_config_lines:
639+
self.same_line_children.add(entry)
640+
self.unique_config_lines.add(entry)
641+
642+
def build_config_relationship(self):
643+
r"""Parse text tree of config lines and their parents.
644+
645+
Example:
646+
>>> config = '''
647+
... interface Management0/0
648+
... management-only
649+
... nameif Management
650+
... security-level 100
651+
... ip address 10.1.1.10 255.255.255.0'''
652+
>>> config_tree = ASAConfigParser(str(config))
653+
>>> config_tree.build_config_relationship() == \
654+
... [
655+
... ConfigLine(config_line="interface Management0/0", parents=()),
656+
... ConfigLine(config_line=" management-only", parents=("interface Management0/0",)),
657+
... ConfigLine(config_line=" nameif Management", parents=("interface Management0/0",)),
658+
... ConfigLine(config_line=" security-level 100", parents=("interface Management0/0",)),
659+
... ConfigLine(config_line=" ip address 10.1.1.10 255.255.255.0", parents=("interface Management0/0",)),
660+
... ]
661+
True
662+
"""
663+
for line in self.generator_config:
664+
if not line[0].isspace():
665+
self._current_parents = ()
666+
else:
667+
previous_config = self.config_lines[-1]
668+
self._current_parents = (previous_config.config_line,)
669+
self.indent_level = self.get_leading_space_count(line)
670+
if line is not None and line[0].isspace():
671+
line = self._build_nested_config(line)
672+
else:
673+
self._current_parents = ()
674+
675+
if line is None:
676+
break
677+
678+
self._update_config_lines(line)
679+
680+
return self.config_lines

‎netutils/constants.py‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
"B": "Bdi",
88
"Bd": "Bdi",
99
"Bdi": "Bdi",
10+
"Bridge-Aggregation": "Port-channel",
1011
"EOBC": "EOBC",
1112
"EO": "EOBC",
1213
"Ethernet": "Ethernet",
@@ -104,6 +105,9 @@
104105
"Serial": "Serial",
105106
"Se": "Serial",
106107
"S": "Serial",
108+
"Sync": "Sync",
109+
"Sy": "Sync",
110+
"Ten-GigabitEthernet": "TenGigabitEthernet",
107111
"TenGigabitEthernet": "TenGigabitEthernet",
108112
"TenGigEthernet": "TenGigabitEthernet",
109113
"TenGigEth": "TenGigabitEthernet",
@@ -126,7 +130,10 @@
126130
"VLAN": "VLAN",
127131
"V": "VLAN",
128132
"Vl": "VLAN",
133+
"Vlan-interface": "VLAN",
134+
"vlan": "VLAN",
129135
"Wlan-GigabitEthernet": "Wlan-GigabitEthernet",
136+
"XGE": "TenGigabitEthernet",
130137
}
131138

132139
# The default mac format
@@ -173,6 +180,7 @@
173180
"Port-channel": "Po",
174181
"POS": "PO",
175182
"Serial": "Se",
183+
"Sync": "Sy",
176184
"TenGigabitEthernet": "Te",
177185
"Tunnel": "Tu",
178186
"TwoGigabitEthernet": "Two",

‎pyproject.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[tool.poetry]
22
name = "netutils"
3-
version = "0.2.0"
3+
version = "0.2.1"
44
description = "Common helper functions useful in network automation."
55
authors = ["Network to Code, LLC <info@networktocode.com>"]
66

‎tests/unit/mock/config/compliance/compliance/cisco_asa/asa_basic_backup.txt‎

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
: Saved
2+
3+
:
4+
ASA Version 9.7(1)24
5+
!
6+
terminal width 511
7+
hostname jcy-fw-01
8+
enable password ntc123 encrypted
9+
xlate per-session deny tcp any4 any4
10+
xlate per-session deny tcp any4 any6
11+
xlate per-session deny tcp any6 any4
12+
xlate per-session deny tcp any6 any6
13+
xlate per-session deny udp any4 any4 eq domain
14+
xlate per-session deny udp any4 any6 eq domain
15+
xlate per-session deny udp any6 any4 eq domain
16+
xlate per-session deny udp any6 any6 eq domain
17+
passwd ntc123 encrypted
18+
names
19+
20+
!
21+
interface Management0/0
22+
management-only
23+
nameif Management
24+
security-level 100
25+
ip address 10.1.1.10 255.255.255.0
26+
!
27+
banner motd ********************************************************************
28+
banner motd
29+
banner motd This is a test banner.
30+
banner motd
31+
banner motd ********************************************************************
32+
pager lines 24
33+
logging enable
34+
logging timestamp
35+
logging standby
36+
logging buffer-size 1048576
37+
logging buffered informational
38+
logging trap informational
39+
logging asdm informational
40+
logging facility 21
41+
logging queue 0
42+
logging device-id hostname
43+
logging host Management 10.1.1.20
44+
no logging message 10101010
45+
mtu Management 1500
46+
ip verify reverse-path interface Management
47+
no monitor-interface service-module
48+
icmp unreachable rate-limit 1 burst-size 1
49+
icmp permit 10.0.0.0 255.0.0.0 Management
50+
no asdm history enable
51+
arp timeout 14400
52+
route Management 0.0.0.0 0.0.0.0 10.1.1.1 1
53+
timeout xlate 3:00:00
54+
timeout pat-xlate 0:00:30
55+
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02
56+
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
57+
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
58+
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
59+
timeout tcp-proxy-reassembly 0:01:00
60+
timeout floating-conn 0:00:00
61+
timeout conn-holddown 0:00:15
62+
timeout igp stale-route 0:01:10
63+
aaa-server TACACS+ protocol tacacs+
64+
reactivation-mode timed
65+
max-failed-attempts 5
66+
aaa-server TACACS+ (Management) host 10.1.1.100
67+
key 10101010
68+
user-identity default-domain LOCAL
69+
aaa authentication serial console LOCAL
70+
aaa authentication ssh console TACACS+ LOCAL
71+
aaa authentication enable console TACACS+ LOCAL
72+
aaa authentication http console TACACS+ LOCAL
73+
aaa accounting command TACACS+
74+
http server enable
75+
http 0.0.0.0 0.0.0.0 Management
76+
snmp-server host Management 10.1.1.50 community ***** version 2c
77+
no snmp-server contact
78+
snmp-server enable traps syslog
79+
sysopt noproxyarp Management
80+
crypto ipsec security-association pmtu-aging infinite
81+
telnet timeout 5
82+
ssh stricthostkeycheck
83+
ssh 0.0.0.0 0.0.0.0 Management
84+
ssh timeout 60
85+
ssh version 2
86+
ssh key-exchange group dh-group1-sha1
87+
no threat-detection statistics tcp-intercept
88+
dynamic-access-policy-record DfltAccessPolicy
89+
username ntc password ntc123 encrypted privilege 15
90+
!
91+
class-map inspection_default
92+
match default-inspection-traffic
93+
!
94+
!
95+
policy-map type inspect dns preset_dns_map
96+
parameters
97+
message-length maximum client auto
98+
message-length maximum 512
99+
no tcp-inspection
100+
policy-map global_policy
101+
class inspection_default
102+
inspect dns preset_dns_map
103+
inspect ftp
104+
inspect tftp
105+
inspect ip-options
106+
!
107+
service-policy global_policy global
108+
: end

‎tests/unit/mock/config/compliance/compliance/cisco_asa/asa_basic_feature.py‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
features = [
2+
{"name": "hostname", "ordered": False, "section": ["hostname"]},
3+
{"name": "logging", "ordered": False, "section": ["logging", "no logging"]},
4+
{"name": "aaa", "ordered": False, "section": ["aaa"]},
5+
]

‎tests/unit/mock/config/compliance/compliance/cisco_asa/asa_basic_intended.txt‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
hostname jcy-fw-01
2+
!
3+
logging enable
4+
logging timestamp
5+
logging standby
6+
logging buffer-size 1048576
7+
logging buffered informational
8+
logging trap informational
9+
logging asdm informational
10+
logging facility 21
11+
logging queue 0
12+
logging device-id hostname
13+
logging host Management 10.1.1.200
14+
no logging message 20202020
15+
!
16+
aaa-server TACACS+ protocol tacacs+
17+
reactivation-mode timed
18+
max-failed-attempts 5
19+
aaa-server TACACS+ (Management) host 10.1.1.100
20+
key 20202020
21+
aaa authentication serial console LOCAL
22+
aaa authentication ssh console TACACS+ LOCAL
23+
aaa authentication enable console TACACS+ LOCAL
24+
aaa authentication http console TACACS+ LOCAL
25+
aaa accounting command TACACS+

‎tests/unit/mock/config/compliance/compliance/cisco_asa/asa_basic_received.json‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{
2+
"hostname": {
3+
"compliant": true,
4+
"missing": "",
5+
"extra": "",
6+
"cannot_parse": true,
7+
"unordered_compliant": true,
8+
"ordered_compliant": true,
9+
"actual": "hostname jcy-fw-01",
10+
"intended": "hostname jcy-fw-01"
11+
},
12+
"logging": {
13+
"actual": "logging enable\nlogging timestamp\nlogging standby\nlogging buffer-size 1048576\nlogging buffered informational\nlogging trap informational\nlogging asdm informational\nlogging facility 21\nlogging queue 0\nlogging device-id hostname\nlogging host Management 10.1.1.20\nno logging message 10101010",
14+
"cannot_parse": true,
15+
"compliant": false,
16+
"extra": "logging host Management 10.1.1.20\nno logging message 10101010",
17+
"intended": "logging enable\nlogging timestamp\nlogging standby\nlogging buffer-size 1048576\nlogging buffered informational\nlogging trap informational\nlogging asdm informational\nlogging facility 21\nlogging queue 0\nlogging device-id hostname\nlogging host Management 10.1.1.200\nno logging message 20202020",
18+
"missing": "logging host Management 10.1.1.200\nno logging message 20202020",
19+
"ordered_compliant": false,
20+
"unordered_compliant": false
21+
},
22+
"aaa": {
23+
"actual": "aaa-server TACACS+ protocol tacacs+\n reactivation-mode timed\n max-failed-attempts 5\naaa-server TACACS+ (Management) host 10.1.1.100\n key 10101010\naaa authentication serial console LOCAL\naaa authentication ssh console TACACS+ LOCAL\naaa authentication enable console TACACS+ LOCAL\naaa authentication http console TACACS+ LOCAL\naaa accounting command TACACS+",
24+
"cannot_parse": true,
25+
"compliant": false,
26+
"extra": "aaa-server TACACS+ (Management) host 10.1.1.100\n key 10101010",
27+
"intended": "aaa-server TACACS+ protocol tacacs+\n reactivation-mode timed\n max-failed-attempts 5\naaa-server TACACS+ (Management) host 10.1.1.100\n key 20202020\naaa authentication serial console LOCAL\naaa authentication ssh console TACACS+ LOCAL\naaa authentication enable console TACACS+ LOCAL\naaa authentication http console TACACS+ LOCAL\naaa accounting command TACACS+",
28+
"missing": "aaa-server TACACS+ (Management) host 10.1.1.100\n key 20202020",
29+
"ordered_compliant": false,
30+
"unordered_compliant": false
31+
}
32+
}

0 commit comments

Comments
 (0)