Basic Policy Based ACL

[Mark_Lamond]

Hi there,
Can anyone explain to my why this basic ACL policy does not work?
This is using XOS 22.2.15 on an X450-G2.

I want to emulate Cisco behaviour of permitting what I want with an deny at the bottom.

# Permit
entry 1.1 { if { source-address 192.168.132.0/26; destination-address 192.168.249.202/32;} then { permit; count Permit;}}

# Deny Everything Else
entry 2.1 { if {} then { deny; count Deny;}}

The access list is applied to a VLAN as follows:

configure access-list Test vlan "Data" ingress

It seems to drop all packets, I thought policies were supposed to process top down with packets until they get a match?

Thanks,
Mark

[Erik_Auerswald]

Hi Mark,

if you need to convert Cisco(-like) ACLs to EXOS you can try the IOS to EXOS ACL Convert Perl script. Simple IPv4 ACLs can be converted with E2X as well.

Thanks,
Erik

[Erik_Auerswald]

Great that it works!

Thanks,
Erik

[Nick_Yakimenko]

thank you very much for the solution!
That was my typo:
I applied the policy like this
configure bgp neighbor 2001:db8::1 route-policy in allv6-in
and (again!) forgot about address-family ipv6-unicast
now it works as expected

[Erik_Auerswald]

Thanks for testing. Sorry that it did not work. 