Pass/Fail Messages

Policy rules must result in a <PolicyRulePass> or <PolicyRuleFail>, or the policy rule will evaluate as 'invalid'. When using <PolicyRulePass> or <PolicyRuleFail>, you may send a custom message indicating the reason for passing or failing. A static message can be included by simply making it the text of the element:

<PolicyRulePass>This is the pass message.</PolicyRulePass>

You may also put expressions as child elements, enabling dynamic messages:

<PolicyRulePass>
   <Expr op='concat'>
     <Expr value='VTY access-class '/>
     <Expr variable='access-list'/>
     <Expr value=' is set and defined'/>
   </Expr>
</PolicyRulePass>