[j-nsp] Connected Networks in a prefix list ?

Daniel Roesen dr at cluenet.de
Tue May 25 16:23:38 EDT 2004


On Tue, May 25, 2004 at 08:10:33PM +0200, Niels Bakker wrote:
> Can you reference that prefix-list in a firewall entry?  (I can't, even
> though "commit check" succeeds, a "commit" bails with a checkout error.)
> 
> Tried on 5.7, 6.2, 6.3

Hm indeed, referencing the prefix-list already gives an error for me
on "commit check":

[edit firewall filter foobar term foo]
dr at A1# commit check
[edit policy-options prefix-list foo apply-path]
  'apply-path "interfaces <*> unit <*> family inet address <*>"'
    '192.168.4.1/29' has non-zero bits where bits in mask are zero
error: configuration check-out failed

OK Anton, time to wait for 6.4... :-)


Best regards,
Daniel


More information about the juniper-nsp mailing list