Net::ACL - Class representing a generic access-list/route-map
use Net::ACL; use Net::ACL::Rule qw( :action :rc ); # Constructor $list = new Net::ACL( Name => 'MyACL', Type => 'prefix-list', Rule => new Net::ACL::Rule( .. ) ); # Fetch existing object by name $list = renew Net::ACL( Name => 'MyACL' Type => 'prefix-list' ); $list = renew Net::ACL("$list"); # Object Copy $clone = $list->clone(); # Class methods $type_names_hr = Net::ACL->knownlists(); # Accessor Methods $list->add_rule($rule); $list->remove_rule($rule); $name = $list->name($name); $type = $list->type($type); $rc = $list->match(@data); ($rc,@data) = $list->query(@data);
This module represents a generic access-list and route-map. It uses the Net::ACL::Rule object to represent the rules.
$list = new Net::ACL( Name => 'MyACL', Type => 'prefix-list', Rule => new Net::ACL::Rule( .. ) );
This is the constructor for Net::ACL objects. It returns a reference to the newly created object. The following named parameters may be passed to the constructor.
The name parameter is optional and is only used to identify a list by the renew() constructor.
The type parameter is optional and defaults to the class name. It is used have different namespaces for the Name parameter. It is intended to have values like 'ip-accesslist', 'prefix-list', 'as-path-filter' and 'route-map'. This way the same name or number of an access-list could be reused in each class.
The rule parameter could be present one or more times. Each one can have multiple types:
A Net::ACL::Rule object.
An array reference of Net::ACL::Rule objects.
A hash reference with Net::ACL:Rule objects as values. Keys are currently ignored, but might later be used as sequance numbers or labels.
$list = renew Net::ACL( Name => 'MyACL' Type => 'prefix-list' ); $list = renew Net::ACL("$list");
The renew constructor localizes an existing ACL object from either Name, (Name,Type)-pair or the object in string context (e.g. Net::ACL=HASH(0x823ff84)). The Name and Type arguments have similar meaning as for the new() constructor.
Net::ACL=HASH(0x823ff84)
$clone = $list->clone();
This method creates an exact copy of the Net::ACL object and all the rules. The clone will not have a name unless one is assigned explicitly later.
The name() and type() methods return the access-list name and type fields respectively. If called with an argument they change the value to that of the argument.
The match method implements the basics of a standard router access-list matching.
It gets any arbitrary number of arguments. The arguments are passed to the match() method of each of the Net::ACL::Rule rules except any object which have the action() field set to ACL_CONTINUE. When a match() method returns ACL_MATCH, the action() of that entry is returned.
ACL_CONTINUE
ACL_MATCH
The query method implements the basics of a route-map execution.
It calls the Net::ACL::Rule rules query() method one by one as long as they return ACL_CONTINUE.
The function returns the result code (ACL_PERMIT or ACL_DENY) and the, possibly modified, arguments of the function.
ACL_PERMIT
ACL_DENY
The add() and remove() rule methods can add and remove rules after object construction.
Net::ACL::Rule, Net::ACL::File, Net::ACL::Bootstrap
Martin Lorensen <bgp@martin.lorensen.dk>
To install Net::ACL, copy and paste the appropriate command in to your terminal.
cpanm
cpanm Net::ACL
CPAN shell
perl -MCPAN -e shell install Net::ACL
For more information on module installation, please visit the detailed CPAN module installation guide.