[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Source address selection insufficient?
On Wed, 3 Mar 2004, Francis Dupont wrote:
> In your previous mail you wrote:
>
> Policy-based routing works, has been widely implemented (multiple for
> v6 as well), and works quite well.
>
> => I disagree a little because Cisco policy-based routing and Juniper
> filter-based forwarding share the same problem: they are based on ACLs
> and lack of dynamic capabilities. In fact they are only useful in the
> ingress filtering context.
What kind of dynamic capabilities would you looking for? Reaction to
the routing table?
But this is out of scope, so maybe you should follow up off-list.
The point is that you can match against the source prefix, which is
what is required here.
--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings