MSDP SA Filtering?

From: Martin, Christian (cmartin@gnilink.net)
Date: Mon Mar 19 2001 - 23:28:02 EST


Folks,

I need to build some SA filters. But I can't determine how this can be
done. How are folks doing the standard SA filters on Juniper's acting as
MSDP hosts? I have a case open with JTAC, but thought someone here would
have a quick answer.

Regards,
chris

From heas@shrubbery.£óÅ; T
Received: from someone claiming to be
        guelah.shrubbery.net (guelah.shrubbery.net [198.58.5.1])
        £óÅ;uc
        for <juniper-nsp@puck.nether.net>; Tue, 20 Mar 2001 13:25:05 -0500£óÅ;nv
Received-Date: Tue, 20 Mar 2001 13:25:05 -0500
Received: (from heas@localhost)
        by guelah.s£óÅ;be
        Tue, 20 Mar 2001 18:25:02 GMT
Date: Tue, 20 Mar 2001 10:25:02 -0800
From: john he£óÅ;y
To: "Martin, Christian" <cmartin@gnilink.net>
Cc: "'juniper-nsp@puck.nether.net'" <juniper-nsp@puck.n£óÅ;r.
SuBject: Re: MSDP SA Filtering?
Message-ID: <20010320102501.X359@shrubbery.net>
References: <94B9091E1149D411A45C0050£óÅ;EB
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Use£óÅ;en
In-Reply-To: <94B9091E1149D411A45C00508BACEB359CD944@entmail.gnilink.com>; from cmartin@gnilink.net on Mon,£óÅ; 1
X-note: live free, or die!
X-homer: mmmm, donuts. is there anything they cant do?

Mon, Mar 19£óÅ;01
> Folks,
>
> I need to build some SA filters. But I can't determine how this ca£óÅ;
>
> MSDP hosts?

group x {
        export msdp-peer;
        im£óÅ; m
}

# show policy-options policy-statement msdp-peer
term boundary {
    from {
        route-filter 224.0.1.1/3£óÅ;ac
    
        route-filter 224.0.1.3/32 exact;
        route-filter 224.0.1.8/32 exa£óÅ;
        route-filter 224.0.1.24/32 exact;
        route-filter 224.0.1.25/32 exact£óÅ;
        route-filter 224.0.1.60/32 exact;
        route-filter 224.0.2.1/32 exact;
 £óÅ;
        route-filter 224.0.1.39/32 exact;
        route-filter 224.0.1.40/32 exact;
    £óÅ;ro
    }
    then reject;
}
then accept;

> I have a case open with JTAC, but thought someo£óÅ;er
> have a quick answer.

likely a tie.



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:40 EDT