fix1037_paloalto_panos_show_running_nat-policy

[diepes]

ISSUE TYPE

• Bugfix Pull Request

COMPONENT

ntc_templates/templates/paloalto_panos_show_running_nat-policy.textfsm

SUMMARY

SOURCE changed form single IP to list
add -> Error

Fixes #1037

New raw template.

[alihyder-s]

I have modified the code for DESTINATION as well. But Still it cant able to process data if there is list in the fields.

Destination : List of Subnets or List of IPs
Source: List of Subnets or List of IPs
From: List
To: List

[alihyder-s]

"Rule 4 Nat-ID 4; index: 8" {
nat-type ipv4;
from [ Mgmt Data TRUSTED UNTRUSTED ];
source [ 10.0.0.0/8 172.0.0.0/16 ];
to [ UNTRUSTED DMZ ];
to-interface ethernet1/5;
destination [ 1.1.1.1 2.2.2.2 ];
service 0:any/any/any;
translate-to "src: 3.3.3.3 (dynamic-ip-and-port) (pool idx: 24)";
terminal no;

source can be below:

• can be a list of IP Subnets: source [ 10.1.16.0/20 10.1.0.0/20 ];
• Can be single IP: source 10.189.188.49;
• Can be single subnet: source 10.0.0.0/8;

"Rule 4 Nat-ID 4; index: 8" {
nat-type ipv4;
from [ Mgmt Data TRUSTED UNTRUSTED ];
source 10.0.0.0/8 ;
to [ UNTRUSTED DMZ ];
to-interface ethernet1/5;
destination [ 1.1.1.1 2.2.2.2 ];
service 0:any/any/any;
translate-to "src: 3.3.3.3 (dynamic-ip-and-port) (pool idx: 24)";
terminal no;

[diepes]

@alihyder-s ok so you are saying here is another example where the destination is a list.

For now we just capture the lists as a string, to keep it backwards compatible, also seems PaloAlto invented there own list format with no commas.

I will add another test for source and destination lists.

"Rule 4 Nat-ID 4; index: 8" {
nat-type ipv4;
from [ Mgmt Data TRUSTED UNTRUSTED ];
source [ 10.0.0.0/8 172.0.0.0/16 ];
to [ UNTRUSTED DMZ ];
to-interface ethernet1/5;
destination [ 1.1.1.1 2.2.2.2 ];
service 0:any/any/any;
translate-to "src: 3.3.3.3 (dynamic-ip-and-port) (pool idx: 24)";
terminal no;
}

[diepes]

@alihyder-s please check updated PR - added new example and test.

[diepes]

Flaky pipeline ? Failed only in Python 3.8
• Updating six (1.16.0 -> 1.15.0): Failed