Rare project developers

[Carmen Misa Moreira <>]

Hi Csaba,

Thanks, that was one of my first thoughts :)

Also, I noted that the PBR is executed on the first PBR declared, for 
example:

ipv6 pbr inet sequence 10 ipv6_flowlabel_10 inet nexthop fc01:10::2

ipv6 pbr inet sequence 20 ipv6_flowlabel_20 inet nexthop fc01:10::2

ipv6 pbr inet sequence 30 ipv6_flowlabel_30 inet nexthop fc01:10::2

Will works for the first one, it will route to fc01:10::2 all the 
traffic label with fl=10 but not for fl=20 and 30

BUT

If I change the order in the declaration, for example to this one:

ipv6 pbr inet sequence 10 ipv6_flowlabel_20 inet nexthop fc01:10::2

ipv6 pbr inet sequence 20 ipv6_flowlabel_10 inet nexthop fc01:10::2

ipv6 pbr inet sequence 30 ipv6_flowlabel_30 inet nexthop fc01:10::2

It will route to fc01:10::2 all the traffic label with fl=20 but not for 
fl=10 and 30

There is some priority in the declaration? Or maybe it can be only one 
PBR declaration per link?

Thanks for your time!

Best regards,

Carmen Misa


On 30.11.21 13:15, mc36 wrote:
> hi,
> at the moment of writing, the p4 dataplanes can only match against a 
> single flow label...
> adding ranges could be done but as far as i know should be avoided, at 
> least on tofino....
> but on the other hand, the p4 code currently matches against masks on 
> flowlabel, but
> as i've seen in freerouter it does not yet takes advantage of this 
> when exporting.... :)
> regards,
> cs
>
>
> On 11/30/21 13:07, Carmen Misa Moreira wrote:
> > Hi all,
> >
> > I see something weird in my access-list declarations...
> >
> > If I declare the access-list like this (just with a single value) it 
> > works:
> >
> > access-list ipv6_flowlabel_10
> >  sequence 10 permit all any all any all flow 10
> >  exit
> >
> > But if I declare it with a range of values, it doesn't work:
> >
> > access-list ipv6_flowlabel_10
> >  sequence 10 permit all any all any all flow 10-20
> >  exit
> >
> > There is one example on the FreeRtr self-test but is using 
> > access-group-in: http://sources.nop.hu/cfg/crypt-acl72.tst
> >
> > I was wondering if there is a limitation to match just a single flow 
> > label value in the access-list.
> >
> > Best regards,
> >
> > Carmen Misa