How to build IPv6 prefix filter with RtConfig?

Pekka Savola pekkas at netcore.fi
Tue May 8 14:42:48 UTC 2007


Hi,

On Tue, 8 May 2007, Katie Petrusha wrote:
> On Tue, May 08, 2007 at 02:49:22PM +0300, Pekka Savola wrote:
>
> Hi Pekka,
>
> As far as I remember, all filter evaluation defaults to
> 'afi ipv4.unicast', if no afi is mentioned.
>
> Try this:
>
> RtConfig> @RtConfig access_list filter afi ipv6 AS1741
> !
> no ipv6 access-list ipv6-100
> ipv6 access-list ipv6-100 permit 2001:708::/32 any
> ipv6 access-list ipv6-100 deny any any

Thanks -- that works.  It'd be great if that was documented better, 
e.g., the man page says nothing of this, and I wasn't able find 
anything else either..

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


More information about the irrtoolset mailing list