[Xorp-hackers] [Xorp-users] Policy network4 operator

Pavlin Radoslavov pavlin at icir.org
Fri Nov 17 13:46:29 PST 2006


Kristian Larsson <kristian at spritelink.se> wrote:

> On Fri, Nov 17, 2006 at 01:34:11PM +0200, Hasso Tepper wrote:
> > Pavlin Radoslavov wrote:
> > > "network4 shorter 10.0.0.0/8"   SAME AS "network4 > 10.0.0.0/8"
> > > "network4 orshorter 10.0.0.0/8" SAME AS "network4 >= 10.0.0.0/8"
> > 
> > [snip]
> > 
> > > Note that the last three keywords (shorter/orshorter/not) don't
> > > exist in Juniper, so feel free to suggest better names.
> > 
> > What networks you'd expect to match these conditions? Ok, 10.0.0.0/8 would 
> > match "orshorter" but point being ... ?
> I've been wondering over the same thing
> 
> Would the following expressions do the same thing?
> cisco:
> ip prefix-list standard FOO deny 10.0.0.0/8 le 32
> ip prefix-list standard FOO permit 0.0.0.0/0
> 
> xorp:
> network-list BAR {
> 	permit orshorter 10.0.0.0/8;
> }

I believe the answer is no, because the second Cisco rule will
permit only the default route 0.0.0.0/0 (please correct me if my
limited knowledge of Cisco commands is wrong here).

The equivalent XORP-like rule (which BTW is not valid configuration)
will match the following routes:
10.0.0.0/8, 10.0.0.0/7, 8.0.0.0/6, 8.0.0.0/5, 0.0.0.0/4, 0.0.0.0/3,
0.0.0.0/2, 0.0.0.0/1, 0.0.0.0/0.

Pavlin



More information about the Xorp-hackers mailing list