Hi,
We currently have 4 rules in place for our BGP and OSPF networks, but would like to confirm whether they can be shortened before we roll out the new batch of replacement routers, which are replacing the version 6 routers.
Here are the current rules:
add chain=default disabled=no rule="if (dst == 10.5.0.0/16) { set bgp-communities no-export; accept; }"
add chain=ospf-out rule="if ( dst in 10.0.0.0/8 ) {accept; }"
add chain=ospf-out rule="if ( dst in 172.16.0.0/12 ) {accept; }"
add chain=ospf-out disabled=no rule="if (dst in 192.168.0.0/16 ) { accept; }"
Here is the rule; if I understand v7 correctly, it should work:
add chain=default rule="if (dst == 10.5.0.0/16) { set bgp-communities no-export; accept; }"
add chain=ospf-out rule="if (dst in 10.0.0.0/8 || dst in 172.16.0.0/12 || dst in 192.168.0.0/16) { accept; }"