Files
Analyse_Reseaux/Parseurs_config_Firewall/MODELE.md
2026-05-26 15:10:05 +02:00

5.2 KiB

{
  "firewall-device": {
    "type": "", //palo-alto, forcepoint, stormshield
    "name": [
      "NOM_Switch"
    ]
  },
  "openconfig-interfaces:interfaces": {
    "interface": [
      {
        "name": "INTERFACE NAME",
        "config": {
          "name": "INTERFACE NAME",
          "type": "", //iana-if-type:ieee8023adLag, iana-if-type:ethernetCsmacd, ...
          "enabled": true,
          "description": "DESCRIPTION"
        },
        "subinterfaces": {
          "subinterface": [
            {
              "index": 0,
              "config": {
                "index": 0,
                "enabled": true
              },
              "oc-ip:ipv4": {
                "oc-ip:addresses": {
                  "oc-ip:address": [
                    {
                      "oc-ip:ip": "IP",
                      "oc-ip:config": {
                        "oc-ip:ip": "IP",
                        "oc-ip:prefix-length": "MASQUE"
                      }
                    }
                  ]
                }
              }
            }
          ]
        }
      }
    ]
  },
  "openconfig-network-instance:network-instances": {
    "network-instance": [
      {
        "name": "NOM",
        "config": {
          "name": "NOM",
          "type": "TYPE"
        },
        "interfaces": {
          "interface": [
            {
              "id": "" // INTERFACE
            }
          ]
        },
        "protocols": { //routing table
          "protocol": [
            {
              "identifier": "STATIC",
              "name": "STATIC",
              "static-routes": {
                "static": [
                  {
                    "prefix": "CIDR",
                    "next-hops": {
                      "next-hop": [
                        {
                          "index": "", //NAME
                          "config": {
                            "index": "", //NAME
                            "next-hop": "", //NEXT VR ou NEXT HOP IP
                            "metric": 10,
                            "oc-loc-rt-netinst:next-network-instance": "", //NEXT VR si NEXT VR
                            "oc-loc-rt-netinst:nh-network-instance": "" // NEXT HOP IP si NEXT HOP IP
                          },
                          "interface-ref": {
                            "config": {
                              "interface": "" // INTERFACE
                            }
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    ]
  },
  "openconfig-acl:acl": {
    "acl-sets": {
      "acl-set": [
        {
          "name": "NOM",
          "type": "openconfig-acl:ACL_IPV4",
          "config": {
            "name": "NOM",
            "type": "openconfig-acl:ACL_IPV4",
            "description": "DESCRIPTION"
          },
          "state": {
            "description": true
          },
          "acl-entries": {
            "acl-entry": [
              {
                "sequence-id": 1,
                "config": {
                  "sequence-id": 1,
                  "description": [ //application
                    "ping",
                  ]
                },
                "state": {
                  "sequence-id": 1,
                  "description": "" //Format "Misc: liste des tag member"
                },
                "ipv4": {
                  "config": {
                    "source-address": "any",
                    "destination-address": "any"
                  }
                },
                "transport": {
                  "config": {
                    "source-port": "any",
                    "destination-port": "" //service member
                  }
                },
                "actions": {
                  "config": {
                    "forwarding-action": "", //openconfig-acl:ACCEPT, openconfig-acl:ACCEPT_DISABLED, openconfig-acl:DROP, openconfig-acl:NAT
                    "log-action": ""
                  }
                }
              }
            ]
          }
        }
      ]
    }
  },
  "custom-firewall-objects:firewall-objects": {
    "address": [
      {
        "name": "ADDRESS NAME",
        "config": {
          "name": "ADDRESS NAME",
          "ip_netmask": "IP ou CIDR",
          "description": "DESCRIPTION",
          "misc": [] //tag member
        }
      }
    ],
    "address-group": [
      {
        "name": "ADDRESS GROUP NAME",
        "config": {
          "name": "GROUP NAME",
          "members": [
            "ADDRESS NAME"
          ],
          "description": "DESCRIPTION",
          "misc": [] //tag member
        }
      }
    ],
    "service": [
      {
        "name": "SERVICE NAME",
        "config": {
          "name": "SERVICE NAME",
          "protocol": "", //udp, tcp, ...
          "port": "",
          "source_port": "1",
          "description": "DESCRIPTION",
          "misc": [] //tag member
        }
      }
    ],
    "service-group": [
      {
        "name": "SERVICE GROUP NAME",
        "config": {
          "name": "SERVICE GROUP NAME",
          "members": [
            "SERVICE NAME"
          ],
          "description": "DESCRIPTION",
          "misc": [] //tag member
        }
      }
    ]
  }
}