[j-nsp] JUNOS : prefix-list

Samuel samuel.gay at c-s.fr
Thu Feb 7 07:33:19 EST 2008


Hi Jonathan,

> Regarding the default behavior in firewall filters, there is no way
> you can have an 'exact' match, since all source addresses are /32s by
> definition.  Therefore, the behavior of matching all addresses within
> the prefix is the only reasonable behavior.
>   
Yes it's right.
> And, you can actually apply different match types to prefix lists in
> routing policy now.  Use the 'prefix-list-filter' configuration
> statement.
>
> For example:
>
> [edit policy-options policy-statement example term example]
> lab at HongKong# set from prefix-list-filter internal-routes ?
> Possible completions:
>   exact                Exactly match the prefix length
>   longer               Mask is greater than the prefix length
>   orlonger             Mask is greater than or equal to the prefix length
>   
Thanks for this tip!

Regards,
Samuel


More information about the juniper-nsp mailing list