diff --git a/flowspy/settings.py.dist b/flowspy/settings.py.dist index ecf4dfa45faa64b794c3f493564e7fbd7b87939b..4555ec22d7b64e8d8cb206fcce7069d3f8a22896 100644 --- a/flowspy/settings.py.dist +++ b/flowspy/settings.py.dist @@ -531,6 +531,9 @@ NETCONF_MAX_RETRY_BEFORE_ERROR = 5 # Actually apply the rules COMMIT = True +# +NETCONF_FLOWSPEC_MAP_ICMP_TO_ICMPV6 = False + ############################################################################## ############################################################################## # Netconf Device credentials diff --git a/utils/flowspec_utils.py b/utils/flowspec_utils.py index a0777317b4764b64b76a356afb7230829ec766b0..bf1645feb42293954d9e576df201174791ab97cf 100644 --- a/utils/flowspec_utils.py +++ b/utils/flowspec_utils.py @@ -7,14 +7,16 @@ logger = flowspec.logging_utils.logger_init_default(__name__, "flowspec_utils.lo def map__ip_proto__for__ip_version__to_flowspec(ip_version, protocol_str): logger.info("map__ip_proto__for__ip_version__to_flowspec(): called ip_version="+str(ip_version)+" protocol_str="+str(protocol_str)) if ip_version==6 and protocol_str=='icmp': - protocol_str='icmp6' + if hasattr(settings, 'NETCONF_FLOWSPEC_MAP_ICMP_TO_ICMPV6') and settings.NETCONF_FLOWSPEC_MAP_ICMP_TO_ICMPV6: + protocol_str='icmp6' logger.info("map__ip_proto__for__ip_version__to_flowspec(): returning protocol_str="+str(protocol_str)) return protocol_str def map__ip_proto__for__ip_version__from_flowspec(ip_version, protocol_str): logger.info("map__ip_proto__for__ip_version__from_flowspec(): called ip_version="+str(ip_version)+" protocol_str="+str(protocol_str)) if ip_version==6 and protocol_str=='icmp6': - protocol_str='icmp' + if hasattr(settings, 'NETCONF_FLOWSPEC_MAP_ICMP_TO_ICMPV6') and settings.NETCONF_FLOWSPEC_MAP_ICMP_TO_ICMPV6: + protocol_str='icmp' logger.info("map__ip_proto__for__ip_version__from_flowspec(): returning protocol_str="+str(protocol_str)) return protocol_str