[j-nsp] (no subject)
Sabri Berisha
sabri at cluecentral.net
Thu Oct 13 03:08:21 EDT 2005
On Wed, Oct 12, 2005 at 03:42:06PM -1000, Randy Bush wrote:
Dear Randy,
> > I don't believe that you can do that with a prefix-list statement.
> > Tried doing it this way?
> >
> > policy-statement foo {
> > from {
> > 42.0.0.0/8 orlonger;
> > }
> > then {
> > reject;
> > }
> > }
>
> does not scale. i want to use the prefix-list in many policy
> terms.
Perhaps you could use the groups-feature in JUNOS? Here is an example:
groups {
randy-bush {
policy-options {
policy-statement <*> {
from {
route-filter 42.0.0.0/8 orlonger;
}
}
}
}
}
policy-options {
policy-statement pl-foo {
apply-groups randy-bush;
}
}
In the config, that ultimately shows up as:
[edit policy-options]
sabri at host# show | display inheritance
policy-statement pl-sabri {
##
## 'from' was inherited from group 'randy-bush'
##
from {
##
## 'orlonger' was inherited from group 'randy-bush'
##
route-filter 42.0.0.0/8 orlonger;
}
}
Thanks,
--
Sabri
please do not throw salami pizza away
More information about the juniper-nsp
mailing list