Added suppport for Cisco ACE.
Merge branch 'master' into ACE-support
Fixed unwanted non local ACLs for managed=local
Test supernet to external and local network
Fixed any:[ip=i.i.i.i/m & any:[...]]

It uses mask of outer aggregate now.
Fixed subset relation between implicit aggregates.

Failure occured if both aggregates had no sub-networks
and if the larger aggregate had been inserted first.
Test with aggregate as subnet.
Fixed more subnet relation beween matching aggregates.

If an aggregate has subnets and sub-aggregates,
then check both; not only the subnets.
Another test for aggregates in subnet relation.

Aggregate < network < aggregate
Added redundant rule with "overlaps".
Simpler sub link_implicit_aggregate_to_zone
No longer use %zones, %global_nat
Split name for ACE: "vlan3" -> "vlan 3"
Automatically add managed hosts to rule.

We recently added support for managed hosts.  A rule which permits
access to network, implictly permits access to hosts of this
network. Until now, access to each managed host had to be permitted
explicitly. This was counter intuitive.

We now implicitly permit access to contained managed hosts, if a rule
permits traffic to a network or aggregate.
Added support for host:[managed & ...]

host:[...] without keyword 'managed' was fixed to include managed
hosts as well.
Fixed automatic addition of managed hosts to rule.

Handle not only anonymous aggregates, but named aggregates as well.
Added "overlaps" tests
Added attribute 'server_name' for managed host.

This attribute is used to declare the real server name which might
differ from the host name.
Collect managed hosts with identical server_name.
Warn only once if admin IP is missing in any VRF.