I have noticed when migrating from v6 filters to v7 filter the prefix length 0-32 does not seem to translate properly.
For example this
prefix-length=0-32
translates to
dst-len > 32
where is my mind it should be
dst-len <= 32
I have noticed when migrating from v6 filters to v7 filter the prefix length 0-32 does not seem to translate properly.
For example this
prefix-length=0-32
translates to
dst-len > 32
where is my mind it should be
dst-len <= 32
I picked up the same, and ended up rewriting all filters…
I’d say the conversion rate is probably close to 20% successful so far.
Please list all 80% things that did not convert properly.
Here are a few examples. If you would like me to provide you with the full before and after, please let me know how I can send it to you?
Example1
add action=discard chain=V4-BLOCK-RFC1918 prefix=192.168.0.0/16 prefix-length=0-32
—>
add chain=V4-BLOCK-RFC1918 disabled=no rule=“if (dst in 192.168.0.0/16 && dst-len > 32) { reject; }”
Example2
add action=accept chain=V4-IPT-BGP-IN-AS000000 prefix=0.0.0.0/0 set-bgp-communities=“” set-bgp-local-pref=110 set-route-targets=000000:110
add action=discard chain=V4-IPT-BGP-IN-AS000000
—>
add chain=V4-IPT-BGP-IN-AS000000 disabled=no rule=“reject;”
Example3
add action=accept chain=V6-IPT-BGP-OUT-AS000000 prefix=2000:0000::/32 set-bgp-communities=“”
add action=accept chain=V6-IPT-BGP-OUT-AS000000 prefix=2000:0000::/48 set-bgp-communities=“”
add action=discard chain=V6-IPT-BGP-OUT-AS000000
—>
add chain=V6-IPT-BGP-OUT-AS000000 disabled=no rule=“reject;”
What was the first ROSv7 version you upgraded to?
Your examples that supposedly should disappear upgrades correctly
81 chain=test-set rule="if (dst == 2000::/32) { accept; }"
82 chain=test-set rule="if (dst == 2000::/48) { accept; }"
83 chain=test-set rule="set bgp-local-pref 110; delete bgp-ext-communities rt; append bgp-ext-communities rt:0:110; accept;"
This was from version 6.49.2 (stable) to 7.1 (stable)
any list of all filter changes?