[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Source address selection insufficient?



On Wed, 3 Mar 2004, Francis Dupont wrote:
>  In your previous mail you wrote:
> 
>    Policy-based routing works, has been widely implemented (multiple for
>    v6 as well), and works quite well.
> 
> => I disagree a little because Cisco policy-based routing and Juniper
> filter-based forwarding share the same problem: they are based on ACLs
> and lack of dynamic capabilities. In fact they are only useful in the
> ingress filtering context.

What kind of dynamic capabilities would you looking for?  Reaction to 
the routing table?

But this is out of scope, so maybe you should follow up off-list.

The point is that you can match against the source prefix, which is 
what is required here.

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings