Page MenuHomeVyOS Platform

Prefix list names are shared between ipv4 and ipv6
Closed, ResolvedPublicBUG

Description

The following config is allowed, but the ipv6 route map is matching the IPv4 named one

policy {
    prefix-list TENLOCAL {
        rule 10 {
            action permit
            le 32
            prefix 10.0.0.0/8
        }
        rule 20 {
            action deny
            le 32
            prefix 0.0.0.0/0
        }
    }
    prefix-list6 TENLOCAL {
        rule 10 {
            action permit
            le 128
            prefix 2001:dead:beef::/48
        }
        rule 20 {
            action deny
            le 128
            prefix ::/0
        }
    }
    route-map TENLOCAL-OUT {
        rule 10 {
            action permit
            match {
                ip {
                    address {
                        prefix-list TENLOCAL
                    }
                }
            }
        }
    }
    route-map TENLOCALv6-OUT {
        rule 10 {
            action permit
            match {
                ipv6 {
                    address {
                        prefix-list TENLOCAL
                    }
                }
            }
        }
    }
}

Details

Difficulty level
Unknown (require assessment)
Version
1.3
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Related Objects

Mentioned In
1.3.4

Event Timeline

kroy updated the task description. (Show Details)
erkin set Issue type to Bug (incorrect behavior).Aug 30 2021, 5:12 AM
erkin removed a subscriber: Active contributors.
Viacheslav claimed this task.
Viacheslav added a subscriber: Viacheslav.

@kroy What is wrong here?

set policy prefix-list foo rule 10 action 'permit'
set policy prefix-list foo rule 10 prefix '10.0.0.0/8'

set policy prefix-list6 foo rule 10 action 'permit'
set policy prefix-list6 foo rule 10 prefix '2001:dead:beef::/48'

set policy route-map RMAP rule 10 action 'permit'
set policy route-map RMAP rule 10 match ip address prefix-list 'foo'

set policy route-map RMAPv6 rule 20 action 'permit'
set policy route-map RMAPv6 rule 20 match ipv6 address prefix-list 'foo'

FRR configuration looks correct:

!
ip prefix-list foo seq 10 permit 10.0.0.0/8
!
ipv6 prefix-list foo seq 10 permit 2001:dead:beef::/48
!
route-map RMAP permit 10
 match ip address prefix-list foo
!
route-map RMAPv6 permit 20
 match ipv6 address prefix-list foo
!

Re-open if something else is wrong.