ASA VPN L2L Allow dynamic connection (#1822)

networktocode · Aug 12, 2024 · e18461f · e18461f
1 parent b65505e
commit e18461f
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 4 deletions.
diff --git a/ntc_templates/templates/cisco_asa_show_vpn-sessiondb_detail_l2l.textfsm b/ntc_templates/templates/cisco_asa_show_vpn-sessiondb_detail_l2l.textfsm
@@ -1,5 +1,5 @@
 Value Filldown,Required SESSION_TYPE (\S+)
-Value Filldown CONNECTION (\d+\.\d+\.\d+\.\d+)
+Value Filldown CONNECTION (\S+)
 Value Filldown INDEX (\d+)
 Value Filldown IP_ADDRESS (\d+\.\d+\.\d+\.\d+)
 Value Filldown PROTOCOL (.+?)
@@ -68,6 +68,8 @@ Value REDIRECT_URL (.*?)
 
 Start
   ^Session\s+Type:\s+${SESSION_TYPE}\s+Detailed\s*$$ -> Connection
+  ^\s*$$
+  ^. -> Error
 
 Connection
   ^\s*Connection\s*:\s+${CONNECTION}\s*$$

diff --git a/tests/cisco_asa/show_vpn-sessiondb_detail_l2l/cisco_asa_show_vpn-sessiondb_detail_l2l4.raw b/tests/cisco_asa/show_vpn-sessiondb_detail_l2l/cisco_asa_show_vpn-sessiondb_detail_l2l4.raw
@@ -1,6 +1,6 @@
 Session Type: LAN-to-LAN Detailed
 
-Connection   : 169.254.107.100
+Connection   : DefaultL2LGroup
 Index        : 26386                  IP Addr      : 169.254.107.100
 Protocol     : IKEv2 IPsecOverNatT
 Encryption   : IKEv2: (1)AES-GCM-256  IPsecOverNatT: (1)AES-GCM-256

diff --git a/tests/cisco_asa/show_vpn-sessiondb_detail_l2l/cisco_asa_show_vpn-sessiondb_detail_l2l4.yml b/tests/cisco_asa/show_vpn-sessiondb_detail_l2l/cisco_asa_show_vpn-sessiondb_detail_l2l4.yml
@@ -1,7 +1,7 @@
 ---
 parsed_sample:
   - session_type: "LAN-to-LAN"
-    connection: "169.254.107.100"
+    connection: "DefaultL2LGroup"
     index: "26386"
     ip_address: "169.254.107.100"
     protocol: "IKEv2 IPsecOverNatT"
@@ -67,7 +67,7 @@ parsed_sample:
     posture_token: ""
     redirect_url: ""
   - session_type: "LAN-to-LAN"
-    connection: "169.254.107.100"
+    connection: "DefaultL2LGroup"
     index: "26386"
     ip_address: "169.254.107.100"
     protocol: "IKEv2 IPsecOverNatT"