[SR-Users] [permissions] 'address' table and mask priorirty
Iñaki Baz Castillo
ibc at aliax.net
Wed Apr 28 19:20:19 CEST 2010
2010/4/28 Uriel Rozenbaum <uriel.rozenbaum at gmail.com>:
> Iñaki,
>
> Maybe you can try with 2 masks that are not 32.
> example:
>
> Entry 1:
> - grp = 1
> - ip_addr = 9.9.9.128
> - mask = 25
>
> Entry 2:
> - grp = 2
> - ip_addr = 9.9.9.0
> - mask = 24
>
> And then verify if the order or id matters. But as per Juha's comment, the
> result can be unpredictable.
Yes, it's also clear from the code. The subnets are matched until one
matches, and that's all.
> Maybe we can develop an exported function that can take into account the mask
> to get the most exact entry.
IMHO it shouldn't be an opcional parameter or a different exported
function, but just the default behavior as it really makes sense
(IMHO).
Regards.
--
Iñaki Baz Castillo
<ibc at aliax.net>
More information about the sr-users
mailing list