Skip to Content.

rare-dev - Re: [rare-dev] PBR flow label access-list

Subject: Rare project developers

List archive


Re: [rare-dev] PBR flow label access-list


Chronological Thread 
  • From: mc36 <>
  • To: , Carmen Misa Moreira <>
  • Subject: Re: [rare-dev] PBR flow label access-list
  • Date: Tue, 30 Nov 2021 13:15:27 +0100

hi,
at the moment of writing, the p4 dataplanes can only match against a single
flow label...
adding ranges could be done but as far as i know should be avoided, at least
on tofino....
but on the other hand, the p4 code currently matches against masks on
flowlabel, but
as i've seen in freerouter it does not yet takes advantage of this when
exporting.... :)
regards,
cs


On 11/30/21 13:07, Carmen Misa Moreira wrote:
Hi all,

I see something weird in my access-list declarations...

If I declare the access-list like this (just with a single value) it works:

access-list ipv6_flowlabel_10
sequence 10 permit all any all any all flow 10
exit

But if I declare it with a range of values, it doesn't work:

access-list ipv6_flowlabel_10
sequence 10 permit all any all any all flow 10-20
exit

There is one example on the FreeRtr self-test but is using access-group-in:
http://sources.nop.hu/cfg/crypt-acl72.tst

I was wondering if there is a limitation to match just a single flow label
value in the access-list.

Best regards,

Carmen Misa




Archive powered by MHonArc 2.6.19.

Top of Page