Pass/Fail Messages
Policy rules must result in a <PolicyRulePass>
or <PolicyRuleFail>
, or the policy rule will evaluate as 'invalid'. When using <PolicyRulePass>
or <PolicyRuleFail>
, you may send a custom message indicating the reason for passing or failing. A static message can be included by simply making it the text of the element:
<PolicyRulePass>This is the pass message.</PolicyRulePass>
You may also put expressions as child elements, enabling dynamic messages:
<PolicyRulePass>
  <Expr op='concat'>
    <Expr value='VTY access-class '/>
    <Expr variable='access-list'/>
    <Expr value=' is set and defined'/>
  </Expr>
</PolicyRulePass>