Re: [j-nsp] route-filter

From: Jesper Skriver (jesper@skriver.dk)
Date: Sun Dec 23 2001 - 16:55:49 EST


On Sun, Dec 23, 2001 at 03:36:34PM -0500, jkeius@yahoo.com wrote:
> Hi.
>
> A simple question on the route filter. Anyone care to provide the
> answer with some brief explanation? Thank you.
>
> How do you write the route filter for
> 1)discard routes more specific than /19 for class A
> 2)discard routes more specific than /16 for class B
> 3)discard routes more specific than /28 for class C

policy-options {
    policy-statement TEST {
        term only_/19_in_classA {
            from {
                route-filter 0.0.0.0/1 prefix-length-range /20-/32;
            }
            then reject;
        }
        term only_/16_in_classB {
            from {
                route-filter 128.0.0.0/2 prefix-length-range /17-/32;
            }
            then reject;
        }
        term only_/28_in_classC {
            from {
                route-filter 192.0.0.0/3 prefix-length-range /29-/32;
            }
            then reject;
        }
        term deny_classD_and_classE {
            from {
                route-filter 224.0.0.0/3 orlonger;
            }
            then reject;
        }
        term allow {
            then accept;
        }
    }
}

Should do it, though I havn't tested it

/Jesper

-- 
Jesper Skriver, jesper(at)skriver(dot)dk  -  CCIE #5456
Work:    Network manager   @ AS3292 (Tele Danmark DataNetworks)
Private: FreeBSD committer @ AS2109 (A much smaller network ;-)

One Unix to rule them all, One Resolver to find them, One IP to bring them all and in the zone to bind them.



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:38 EDT