[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(cisco, or any) acl *reducers* out there?
- Subject: (cisco, or any) acl *reducers* out there?
- From: randy at psg.com (Randy Bush)
- Date: Thu, 19 Aug 2010 12:00:48 +0900
- In-reply-to: <[email protected]>
- References: <[email protected]>
> something which can take a couple of hundred basic and extended ACLs and tell you
> these <ten> don't work
> these <twenty> conflict
> the remaining <x> have a sequence and can reduce to this basic <x-y> set
maybe you could go the other direction. as opposed to trying to digest
and correct cruft, generate the acls from something reasonable so that
they are canonic by construction.
randy