IOS-XE restconf ACL issue

[y*** D***]

Hi,

This also applies to netconf.

When router has ACL with ACE like permit tcp xxxx xxxx establish its not shown when doing get.

ACE with permit tcp xxxx xxxx ack or other flag is shown when doing get.

Checked with IOS-XE release 16.9.

Any help appreciated

Thanks.

[yangorelik]

With this limited information is hard to understand what is going on. Could you please show your python environment (pip list | grep ydk) and version of your device. Make sure the bundle version is matching your device version. If matching, put your script to DEBUG logging and attach the log to the post. Look for errors from Libyang.

[y*** D***]

Hi,
It's easy to reproduce, just create ip extended access list like below example with established ACE:
[cid:image001.png@01D63CA9.0EEEF810]
Now perform get to the router configuration or ACL or ACL stats and you won't see the ACEs with TCP established statements.