Description

When deploying ACX7100 routers, we implement control plane policies to restrict access. However, during the commit process, the system does not accept wildcard masks and generates an error.

Symptoms

Customer applies similar policies under groups using wildcards:

set groups fw-wildsrc-manage firewall family inet filter <*> term <*> from source-address x.0.x.0/255.0.255.0

set groups fw-wildsrc-manage firewall family inet filter <*> term <*> from source-address x.0.x.0/255.0.255.0

Solution

On EVO, wildcard mask match was first time supported/qualified on QFX based platforms via RLI 56508 in 23.4R1EVO release. For ACX based platform it is not qualified and not supported.  RLI needs to be created.

 

Modification History

2024-06-21 : Article Created
2024-07-01: Article Published