RE: [j-nsp] filtering on prefix length

From: Fernando Krahe (fernando_krahe@optiglobe.com.br)
Date: Fri Mar 23 2001 - 06:42:27 EST


Hi Marco,

I use almost the same thing, but don't need a final term.

police-statement transit-ingress {
   term final-term {
        from {
            route-filter 24.0.0.0/8 upto /20;
            route-filter 61.0.0.0/8 upto /20;
            route-filter 63.0.0.0/8 upto /20;
            route-filter 64.0.0.0/8 upto /20;
            route-filter 65.0.0.0/8 upto /20;
            route-filter 66.0.0.0/8 upto /20;
            route-filter 0.0.0.0/1 upto /19;
            route-filter 128.0.0.0/2 upto /16;
            route-filter 192.0.0.0/3 upto /24;
        }
        then {
            local-preference 80;
            community set identifier;
            community add peer;
            accept;
        }
    }
    then reject;
}

Fernando

> -----Original Message-----
> From: MarcoH [mailto:marcoh@cistron.nl]
> Sent: sexta-feira, 23 de março de 2001 07:39
> To: juniper-nsp@puck.nether.net
> Subject: [j-nsp] filtering on prefix length
>
>
> Hi there,
>
> I`ve got some problems with configuring a bgp-import policy which will
> filter out all prefixes with a mask greater then /24.
>
> I`ve been trying several route-filter settings, but can`t
> seem to find the
> right one, either it drops all prefixes or it accepts the all.
>
> TIA,
>
> MarcoH
>
> --
> Q: What do you call someone with herpes, AIDS, syphilis,
> and gonorrhea?
> A: An incurable romantic.
>



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:41 EDT