-
Notifications
You must be signed in to change notification settings - Fork 228
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support Cisco ASA subinterface vlan declaration #3631
Support Cisco ASA subinterface vlan declaration #3631
Conversation
Codecov Report
@@ Coverage Diff @@
## master #3631 +/- ##
============================================
- Coverage 74.27% 73.36% -0.91%
+ Complexity 25348 24601 -747
============================================
Files 2110 2110
Lines 104780 101786 -2994
Branches 13054 12064 -990
============================================
- Hits 77822 74674 -3148
- Misses 21526 21738 +212
+ Partials 5432 5374 -58
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 11 of 11 files at r1.
Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @arifogel and @dhalperi)
a discussion (no related file):
I guess this isn't an issue specific to vlan parsing, but if vlan ###
is also valid at the top-level, could this cause ambiguity issues when a top-level vlan declaration occurs immediately after an interface declaration?
e.g.
interface foo
vlan 1
ip address ...
vlan 1001
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @dhalperi and @sfraint)
a discussion (no related file):
Previously, sfraint (Spencer Fraint) wrote…
I guess this isn't an issue specific to vlan parsing, but if
vlan ###
is also valid at the top-level, could this cause ambiguity issues when a top-level vlan declaration occurs immediately after an interface declaration?
e.g.interface foo vlan 1 ip address ... vlan 1001
It's not valid at the top level in ASA. I could add a guard there. We desperately need to split off these parsers :(
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewable status: 9 of 12 files reviewed, 1 unresolved discussion (waiting on @dhalperi and @sfraint)
a discussion (no related file):
Previously, arifogel (Ari Fogel) wrote…
It's not valid at the top level in ASA. I could add a guard there. We desperately need to split off these parsers :(
I added a guard so there is no ambiguity.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 3 of 3 files at r2.
Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @arifogel and @dhalperi)
a discussion (no related file):
Previously, arifogel (Ari Fogel) wrote…
I added a guard so there is no ambiguity.
👍
what about on a non ASA device if it encounters something similar:
interface foo
ip address ...
vlan 1001
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @dhalperi and @sfraint)
a discussion (no related file):
Previously, sfraint (Spencer Fraint) wrote…
👍
what about on a non ASA device if it encounters something similar:
interface foo ip address ... vlan 1001
This will not work properly, unfortunately. To fix, we need to either split off ASA parser, or split off all ASA interface stanzas into separate top-level s_interface_asa
rule.
Let's defer, as this is unlikely to be a problem in practice.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 1 of 1 files at r3.
Reviewable status: complete! all files reviewed, all discussions resolved (waiting on @dhalperi)
Fixes #3629