diff --git a/src/config/schema-transformer/config_db.py b/src/config/schema-transformer/config_db.py index 8ca8c37c6a8..63d3c154584 100644 --- a/src/config/schema-transformer/config_db.py +++ b/src/config/schema-transformer/config_db.py @@ -1544,6 +1544,12 @@ def policy_to_acl_rule(self, prule): if daddr.security_group == 'local': daddr_match.security_group = None acl_rule_list = ingress_acl_rule_list + if acl_rule_list is None: + self._logger.error("SG rule must have either source " + "or destination as 'local': " + + self.name) + continue + for dp in prule.dst_ports: action = ActionListType(simple_action='pass') match = MatchConditionType(arule_proto,