batfish
batfish copied to clipboard
batfish
Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evo...
I would like support for Fortigate in Batfish. Especially I want to add evaluate fw policy. I added a Fortigate config at this comment. [FGT.txt](https://github.com/batfish/batfish/files/3045994/FGT.txt) I would be glad if...
Consider the following policy-statement and condition, where `200.0.0.0/32` is an absent route: ``` set policy-options policy-statement if_false term t1 from condition false set policy-options policy-statement if_false term t1 then accept...
Dear All, do you have any plans for Checkpoint FW's support? BR!
When using `set metric` in a Cisco BGP route-map with a negative value, Batfish does not correctly update the metric value. Cisco routers ignore the negative sign and will add...
We're seeing parse failures for lines related to routing and firewall ACLs. When we later check for things like unusedStructures, we get results for things that _are_ actually in use,...
I need to do VLAN translate For example - rtr-1 trunk to some device rtr-2, I want that all packets from rtr-1 that are in VLAN X will be forward...
When generating the dataplane for a network, a failure occurs in the IPSec topology builder when the following conditions are true in the structure definition of the tunnel interface: `'destinationAddress':...
`match interface` is unsupported as of #6500. We need to implement two new BooleanExprs to match next hop IP and next hop interface. Documentation here: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/unicast/configuration/guide/l3_cli_nxos/l3_rpm.html "Matches any routes that...
Dear all, When loading batfish configs I'm observing about a dozen types of warnings. Please help me find if these warnings are bugs or they are as expected. ``` EIGRP...
https://networktocode.slack.com/archives/CCE02JK7T/p1604650500042600 If group A have hostname and group B have hostname, the hostname should be determined by the appy-group sequence. If group A is before group B then the hostname...
