ACL中调用对象组object-group，该ACL被调用在策略路由之后，导致整个策略路由失效

利旧策略路由调用在vlanif接口下，策略路由中调用acl 3001 ，在3001中新增一条rule，rule中调用object-group，配置后导致整个策略路由失效

设备型号为S6805

利旧配置如下：

#

acl 3001

rule permit ip vpn-instance xxxxx source x.x.x.x 0 destination x.x.x.x 0

.........

#

policy-based-route redirect-Multipod permit node 10

if-match acl 3001

apply next-hop vpn-instance Dmp_DCN_LINK x.x.x.x

#

interface van-interface100

ip policy-based-route redirect-Multipod

#

新增配置如下：

在交换机上新建对象组

#

object-group ip address bss_to_DCN_1

0 network host address x.x.x.x

.........

120 network host address x.x.x.x

#

在利旧acl 3001中配置一条rule中调用该对象组

acl 3001

rule permit ip vpn-instance xxxxx source x.x.x.x 0 destination object-group bss_to_DCN_1

#

配置完上述rule之后，直接导致整个策略路由失效