While I'm beating this topic to death, I note that Quagga happily deals with:
ip community-list xxx deny/permit 1234:7 internet 100:1 200:2 .... which will match absolutely anything... all the other communities before or after "internet" are redundant -- even if the match is supposed to be "exact". More interesting, still, is that in "comm-list delete" this will match absolutely anything, and in the "permit" case will then proceed to delete any of the communities before and after (and including) the "internet". The "deny" case is (potentially) equally obstruse. All these cases are exceptions to the (apparent) rule that for there to be a match, all communities mentioned must be present ! IMHO the "internet" pseudo-community should probably only appear on its own. Where it appears with other (real) communities, it should be flagged as an error or simply ignored. I know Quagga will do it, but what does "set community internet..." mean ? What does it mean to advertise a route with the "internet" pseudo-community in it (it's "reserved" for goodness sake) ? You cannot test for its presence (except by regex !). You cannot (really) remove it, except by clearing all communities (or by regex !). Chris _______________________________________________ Quagga-dev mailing list [email protected] https://lists.quagga.net/mailman/listinfo/quagga-dev
