Regarding vmaps, I found that this syntax works:
icmpv6 type . icmpv6 code . ip6 saddr . ip6 daddr . ct state vmap {
1 . 1 . ::/0 . ::/0 . established : continue
}
However, just like with sets, this does not work:
icmpv6 type . icmpv6 code . ip6 saddr . ip6 daddr . ct state vmap {
1 . 1 . ::/0 . @ONE . established : continue
}
Is there really no way to refer to a set from within a concatenation/map?
