[j-nsp] QPPB SCU DCU

Mark Tinka mtinka at globaltransit.net
Sat Mar 22 11:02:38 EDT 2008


On Saturday 22 March 2008, Bit Gossip wrote:

> Mark,
> I would like to police traffic to and from a specific
> customer. The customer announces its own prefixes which
> are marked with a specific bgp community.
> I think that Raymond proposal will match and police
> traffic for which the destination IP matches the customer
> community; this is traffic to the customer.
> If I want to match and police traffic originated by the
> customer I should match source ip against the community;
> is it possible? How? I can not relay on interface because
> customers share the same interface on the router.
> Thanks,

I haven't tried it in this direction, but I believe you 
could swap 'destination-class' with 'source-class' in your 
firewall filter.

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 832 bytes
Desc: This is a digitally signed message part.
Url : https://puck.nether.net/pipermail/juniper-nsp/attachments/20080322/4b4f9a7e/attachment.bin 


More information about the juniper-nsp mailing list