On Saturday, July 31, 2010 11:55:44 am Richard A Steenbergen wrote: > All my policy evaluation bugs are REALLY obscure, for > example subroutine policies which will randomly not > apply any actions in any term that doesn't contain a > "then accept". I've never seen a problem with a > configuration as simple as yours.
We've had this problem - the documentation would suggest that a non-accept/reject action should still execute the policy, but then it doesn't. It has meant we need to have 'then accept' in literally all our policies, in addition to the real action we're trying to implement. It's only a few policies that work without needing the 'then accept' action, but these are not directly related to routing protocols, e.g., DCU, load balancing, e.t.c. Cheers, Mark.
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
