[90089] in North American Network Operators' Group
Re: [db-wg] yet another irrtoolset replacement, 1.0
daemon@ATHENA.MIT.EDU (Marco d'Itri)
Tue Apr 25 06:25:02 2006
Date: Tue, 25 Apr 2006 12:23:28 +0200
To: Gert Doering <gert@space.net>
Cc: db-wg@ripe.net, nanog@merit.edu
Mail-Followup-To: Gert Doering <gert@space.net>, db-wg@ripe.net,
nanog@merit.edu
In-Reply-To: <20060425071939.GE60910@Space.Net>
From: md@Linux.IT (Marco d'Itri)
Errors-To: owner-nanog@merit.edu
On Apr 25, Gert Doering <gert@space.net> wrote:
> - Can your tool do IPv6 as well?
Yes, support for IPv6 and multicast has been a design requirement from
start. It can handle IPv4/IPv6 unicast/multicast in all combinations.
> - Can I use the template setup to do generate prefix-list filters
> (for the BGP session) and uRPF ACLs (for anti-spoofing filters)
> at the same time?
You can now. :-)
Writing the template code to generate the ACLs was trivial, but I had to
implement a vmethod to convert CIDR prefixes to the net + netmask format
used by IOS standard ACLs.
I will mail you the patch.
(If anybody else needs other features, let me know and I will try to
implement them...)
--
ciao,
Marco
