[j-nsp] IPv6 filters recommendation

[Daniel Roesen]

On Fri, Feb 13, 2004 at 11:40:39AM +0000, Carlos Friacas wrote:
> Does anybody know http://www.space.net/~gert/RIPE/ipv6-filters.html ?
> 
> It would be perhaps nice to have also the examples in JunOS style... :-)

Translated to JunOS (untested):

policy-statement ipv6-ebgp-relaxed {
    term pass-some {
        from {
            family inet6;
            route-filter 3ffe::/18 prefix-length-range /24-/48;
            route-filter 3ffe:4000::/18 prefix-length-range /32-/48;
            route-filter 3ffe:8000::/22 prefix-length-range /28-/48;
            route-filter 2001::/16 prefix-length-range /24-/48;
            route-filter 2002::/16 exact;
        }
        then next policy;
    }
    term reject-rest {
        from family inet6;
        then reject;
    }
}

policy-statement ipv6-ebgp-strict {
    term pass-some {
        from {
            family inet6;
            route-filter 3ffe::/18 prefix-length-range /24-/24;
            route-filter 3ffe:4000::/18 prefix-length-range /32-/32;
            route-filter 3ffe:8000::/22 prefix-length-range /28-/28;
            route-filter 2001:500::/30 prefix-length-range /48-/48;
            route-filter 2001::/16 prefix-length-range /35-/35;
            route-filter 2001::/16 prefix-length-range /24-/32;
            route-filter 2002::/16 exact;
        }
        then next policy;
    }
    term reject-rest {
        from family inet6;
        then reject;
    }
}

Gert: feel free to incorporate those into your page.


Best regards,
Daniel