Dear VPP Dev Team,

i found a problem with creating a VPP ACL with IPv6 SRC / DST Address. The ACL 
created incorrectly. The problem occurs when "any" ::/0 is used as the SRC 
address. 



Example (correct)

vpp# set acl-plugin acl permit src 2a00:c940::/32
ACL index:35
vpp# show acl-plugin acl index 35
acl-index 35 count 1 tag {cli}
          0: ipv6 permit src 2a00:c940::/32 dst ::/0 proto 0 sport 0-65535 
dport 0-65535


Example (wrong): 

vpp# set acl-plugin acl permit dst 2a00:c940::/32
ACL index:36
vpp# show acl-plugin acl index 36
acl-index 36 count 1 tag {cli}
          0: ipv4 permit src 0.0.0.0/0 dst 0.0.0.0/32 proto 0 sport 0-65535 
dport 0-65535


The ACL 36 is IPv4, not IPv6. I found no way to create a ACL with ::/0 as 
source (with "set acl-plugin acl")


My workaround is use "binary-api acl_add_replace" instand of "set acl-plugin 
acl". But i think, the better way is fix this issue.



Mit freundlichen Grüßen
Jens Rösiger


-----------------------------------------------------------------------------------
Jens Rösiger                                                 tops.net GmbH u. 
Co KG
Linux Systemadministrator                                      Holtorfer 
Straße. 35
                                                             D-53229 Bonn / 
Germany
E-Mail:  je...@tops.net                                       Tel: +49 228 9771 
111
www   : http://www.tops.net                                   Fax: +49 228 9771 
199
-----------------------------------------------------------------------------------
Handelsregister Bonn: HRA 4251
Geschäftsführerin: tops.net GmbH, Holtorfer Straße 35, 53229 Bonn 


Handelsregister Bonn: HRB 7323
Vertreten einzeln durch den Geschäftsführer: Tamás Lányi


tops.net wird ausschließlich auf der Grundlage seiner jeweils
aktuellen Allgemeinen Geschäftsbedingungen tätig, die jederzeit
zugänglich unter http://agb.tops.net hinterlegt sind. 
Änderungen, Irrtümer und Tippfehler vorbehalten. 
Preisangaben verstehen sich zuzüglich der jeweils geltenden
gesetzlichen Umsatzsteuer von derzeit 19%.
-----------------------------------------------------------------------------------

Attachment: smime.p7s
Description: Electronic Signature S/MIME

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22151): https://lists.fd.io/g/vpp-dev/message/22151
Mute This Topic: https://lists.fd.io/mt/94893014/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to