vmware-sdwan-acl
Not to be considered as best practices in using VMware VCO API Meant to be used in Lab environments - Please test it and use at your own risk
please note that VMWare API and Support team - do not guarantee this samples It is provided - AS IS - i.e. while we are glad to answer questions about API usage and behavior generally speaking, VMware cannot and do not specifically support these scripts
Compatible with api v1 of the vmware sd-wan vco api using tokens to authenticate
Note that are current a few features missing in the vmware sd-wan object-group to be 1:1 compatible with Cisco's address and Service groups. These will be addressed in future releases of the sd-wan software: Only TCP and UDP support Also it is not possible to define protocols without ports (ie. tcp or udp, and only tcp port 22, tcp port 1000-2000 are possible)
python script that reads a cisco config file using the cisco-acl "library" from another Vladimir's github https://github.com/vladimirs-git/cisco-acl
and uses the result dictionary to build vmware sd-wan vco firewall rules.
Note: Currently the 2 scripts provided only work with ACL used as outbound direction. To be used with ACLs that are applied inbound src must be swapped with destination
Ex of some random Cisco config created to illustrated which lines can be converted (this is not an real ACL used in production)
Gets converted to:
