[j-nsp] Could JUNOS OP Script support generate firewall filter term and added before original one?

[Jordan Head]

Hi James

An op script could definitely do this, but I haven't seen a basic template for this use case.  Depending on *exactly* what you want it to do, it might be a better job for Python, and maybe some netconf.

Here's something that might help get you started.

http://www.juniper.net/documentation/en_US/junos12.3/topics/example/junos-script-automation-op-script-changing-configuration.html

How complex are the rules that need to be generated?  Could you provide some examples?  Feel free to ping me off list if necessary.

-JH

> On Dec 17, 2015, at 2:35 AM, Chen Jiang <ilovebgp4 at gmail.com> wrote:
> 
> Hi! Experts
> 
> I have a requirement from end user that want to automate firewall filter
> configuration procedure, that means they want to use OP script to generate
> a customized firewall filter term and added it before the last "deny all"
> term.
> 
> I have searched official documents but couldn't find helpful information,
> it seems there is no method could manage firewall filter term sequence in
> SLAX language.
> 
> Could you pls shed some light on this if you have experience on this,
> Thanks!
> 
> -- 
> BR!
> 
> 
> 
>           James Chen
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp