It's been tossed around for a while... all of the forms (class, ::class, $class, $::class) seem to work as far as matching goes. I don't have a CMP enabled box to test on so I can't check which forms allow you to use CMP.
log local0. "\[findclass 10.0.0.1 private_net\]: [findclass 10.0.0.1 private_net]"
log local0. "\[findclass 10.0.0.1 \$private_net\]: [findclass 10.0.0.1 $private_net]"
log local0. "\[findclass 10.0.0.1 ::private_net\]: [findclass 10.0.0.1 ::private_net]"
log local0. "\[findclass 10.0.0.1 \$::private_net\]: [findclass 10.0.0.1 $::private_net]"
log local0. "\[matchclass 10.0.0.1 equals private_net\]: [matchclass 10.0.0.1 equals private_net]"
log local0. "\[matchclass 10.0.0.1 equals \$private_net\]: [matchclass 10.0.0.1 equals $private_net]"
log local0. "\[matchclass 10.0.0.1 equals ::private_net\]: [matchclass 10.0.0.1 equals ::private_net]"
log local0. "\[matchclass 10.0.0.1 equals \$::private_net\]: [matchclass 10.0.0.1 equals $::private_net]"
log local0. "\[findclass 205.0.0.1 private_net\]: [findclass 205.0.0.1 private_net]"
log local0. "\[findclass 205.0.0.1 \$private_net\]: [findclass 205.0.0.1 $private_net]"
log local0. "\[findclass 205.0.0.1 ::private_net\]: [findclass 205.0.0.1 ::private_net]"
log local0. "\[findclass 205.0.0.1 \$::private_net\]: [findclass 205.0.0.1 $::private_net]"
log local0. "\[matchclass 205.0.0.1 equals private_net\]: [matchclass 205.0.0.1 equals private_net]"
log local0. "\[matchclass 205.0.0.1 equals \$private_net\]: [matchclass 205.0.0.1 equals $private_net]"
log local0. "\[matchclass 205.0.0.1 equals ::private_net\]: [matchclass 205.0.0.1 equals ::private_net]"
log local0. "\[matchclass 205.0.0.1 equals \$::private_net\]: [matchclass 205.0.0.1 equals $::private_net]"
Log output:
Rule : [findclass 10.0.0.1 private_net]: 10.0.0.0/8
Rule : [findclass 10.0.0.1 $private_net]: 10.0.0.0/8
Rule : [findclass 10.0.0.1 ::private_net]: 10.0.0.0/8
Rule : [findclass 10.0.0.1 $::private_net]: 10.0.0.0/8
Rule : [matchclass 10.0.0.1 equals private_net]: 1
Rule : [matchclass 10.0.0.1 equals $private_net]: 1
Rule : [matchclass 10.0.0.1 equals ::private_net]: 1
Rule : [matchclass 10.0.0.1 equals $::private_net]: 1
Rule : [findclass 205.0.0.1 private_net]:
Rule : [findclass 205.0.0.1 $private_net]:
Rule : [findclass 205.0.0.1 ::private_net]:
Rule : [findclass 205.0.0.1 $::private_net]:
Rule : [matchclass 205.0.0.1 equals private_net]: 0
Rule : [matchclass 205.0.0.1 equals $private_net]: 0
Rule : [matchclass 205.0.0.1 equals ::private_net]: 0
Rule : [matchclass 205.0.0.1 equals $::private_net]: 0
Aaron