Security
then
{
permit;
}
}
entry
entry-25
{
if
{
nlri
22.44.66.0/23
}
then
{
deny;
}
}
The policy above can be optimized by combining some of the if into a single expression. The compact
form of the policy will look like this:
entry
permit_entry
If match any {
nlri
22.16.0.0/14;
nlri
192.168.0.0/18 exact ;
nlri
10.10.0.0/18;
}
then
{
permit;
}
}
entry
deny_entry
{
if match any {
nlri
any/8;
nlri
22.44.66.0/23
}
then
{
deny;
}
}
126
exact;
{
exact;
ExtremeWare XOS 10.1 Concepts Guide