Moving BGP policy rules

SebastianOlsen — Thu, 24 Feb 2022 08:21:46 GMT

Hi,

I'm trying to write Ansible automation to move a specific BGP import/export policy rule. Creating a BGP rule will automatically be added to the bottom of thel ist but as you can see we have default-import-deny rule(test_rule_top is used by the default deny even if missing in the screenshot). This will obviously prevent the rule from working.

So in the GUI it's easy going in clicking the move up / down buttons. When i look into the debug console I cannot see any way of doing this.

I have tried getting all the rules and using python to reorder the list of rules so default-import-deny policy is at the bottom and then using a type_cmd to set the rules again. This unfortunately does not move any of the rules on the firewalls. The only solution I have found is to get the default-import-deny rule, delete the rule and then re-add the rule.

So my question is: There must be a better way of doing this that I am missing? I know it's possible with NAT and security rules to declare where they should be positioned in regards to other rules, but it does not seem possible to do with the BGP policy rules.

topic Moving BGP policy rules in Automation/API Discussions

Moving BGP policy rules