#!/bin/bash
### Script to search existing acl templates
### Grab the template and remove html coding
  TEMPLATE1=/export/htdocs/secure/Template.html
  cat  $TEMPLATE1 | nawk 'BEGIN {RS="!"}{ORS="!"}{if ($2 ~ /'access-list'/) print $0;}' |\ 
  sed 's/<br>//g' | egrep -v "any any|icmp any|ip any" > template
### The next two lines grab all acl lines which has an ip block not a single host
  nawk '{if ($6 ~ /'^[0-9][0-9]'/ && $7 ~ /'^[0-9]'/) print $6" "$7" "$9}' template > input_file
  nawk ' $5 ~ "^[0-9][0-9]" { print $5" "$6" "$9 }' template >> input_file
### The next line empties any previous entries in the output_file.txt
  cat /dev/null > output_file.txt
### The next section takes the input_file that has ip blocks and runs each block through
### ipcalc giving the starting and ending ip address. Then prints to the output_file.txt
### every ip associated with that block along with the port number allowed
 while read line
   do
      one=`echo $line | awk ' { print $1; } '` 
      two=`echo $line | awk ' { print $2; } '` 
      port=`echo $line | awk ' { print $3; } '`
      address=`ipcalc $one $two | egrep "Address" | awk '{ print $2 }' | cut -f 1 -d "/"`
      echo "$address"".""$port" > input_file1
      broadcast=`ipcalc $one $two | egrep "Broadcast" | awk '{ print $2 }' | cut -f 1 -d "/"`
      echo "$broadcast"".""$port" >> input_file1
      awk -F"." '{ if(NR==1){ for(i=$4;i<=254;i++) print $1"."$2"."$3"."i" "$5 >> "output_file.txt" } else \
      { for(i=1;i<=$4;i++) print $1"."$2"."$3"."i" "$5 >> "output_file.txt" }} ' input_file1
    done  < input_file
### The next section takes the single host ips listed in the acl template and adds them to the output_file.txt
nawk '{if ($1 ~ /'seq'/ && $5 ~ /'host'/) print $6" "$9;}' template >> output_file.txt
nawk '{if ($1 ~ /'seq'/ && $6 ~ /'host'/) print $7"."$9;}' template >> output_file.txt
sort -on output_file.txt output_file.txt