Merge "SG rule should be ignored if neither source or destination is …

…'local'"
Juniper · Oct 2, 2015 · 612771f · 612771f
2 parents 7a26ec7 + 5b7452b
commit 612771f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/config/schema-transformer/config_db.py b/src/config/schema-transformer/config_db.py
@@ -1544,6 +1544,12 @@ def policy_to_acl_rule(self, prule):
                     if daddr.security_group == 'local':
                         daddr_match.security_group = None
                         acl_rule_list = ingress_acl_rule_list
+                    if acl_rule_list is None:
+                        self._logger.error("SG rule must have either source "
+                                           "or destination as 'local': " +
+                                           self.name)
+                        continue
+
                     for dp in prule.dst_ports:
                         action = ActionListType(simple_action='pass')
                         match = MatchConditionType(arule_proto,