Symptom
ASR9k is not working as documented in the RFC5575, when interpreting and applying the policy described on NRLIs with component type 9 with the Match Bit set.
According to RFC,
m - Match bit. If set, this is a bitwise match operation defined as "(data & value) == value"; if unset, (data & value) evaluates to TRUE if any of the bits in the value mask are set in the data.
Instead, the router seems to be doing something like data == value
Conditions
Setting tcp-flag class rule in PBR BGP flowspec.
