Routing filter for v7 bgp and ospf

Hi,

We currently have 4 rules in place for our BGP and OSPF networks, but would like to confirm whether they can be shortened before we roll out the new batch of replacement routers, which are replacing the version 6 routers.

Here are the current rules:

add chain=default disabled=no rule="if (dst == 10.5.0.0/16) { set bgp-communities no-export; accept; }"
add chain=ospf-out rule="if ( dst in 10.0.0.0/8 ) {accept; }"
add chain=ospf-out rule="if ( dst in 172.16.0.0/12 ) {accept; }"
add chain=ospf-out disabled=no rule="if (dst in 192.168.0.0/16 ) { accept; }"

Here is the rule; if I understand v7 correctly, it should work:

add chain=default rule="if (dst == 10.5.0.0/16) { set bgp-communities no-export; accept; }"
add chain=ospf-out rule="if (dst in 10.0.0.0/8 || dst in 172.16.0.0/12 || dst in 192.168.0.0/16) { accept; }"

Hi,

moved topic to "better" category

If that is the all rule set you had in v6, then those accept rules are pretty useless, because v6 by default accepts everything.

In v7 on the other hand by default chain rejects everything, so there might be unexpected behavior if v6 accepted something that was not matched by "accept" rules, v7 would drop those advertisements.