[j-nsp] Using apply-path for generating prefix lists
Joerg Staedele
js at tnib.de
Thu Feb 10 06:02:46 EST 2011
Hi,
we make it this way:
IPv4:
apply-path "protocols bgp group <*> neighbor <*.*>";
IPv6:
apply-path "protocols bgp group <*> neighbor <*:*>";
Works fine :)
Regards,
- Joerg
-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Thomas Eichhorn
Sent: Thursday, February 10, 2011 11:20 AM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Using apply-path for generating prefix lists
Hi all,
I usually use something like that to generate a prefix-list
of all known bgp-speakers on our boxes:
[edit policy-options prefix-list BGP-Speaker]
teichhorn at router# show
apply-path "protocols bgp group <*> neighbor <*>";
That works almost fine - but of course it includes
v4 and v6 neighbors. That is not of a problem if using
this prefix list in an IPv4 firewall - the v6 entries are
simply ignored.
But when using this prefix-list in an IPv6 firewall,
it breaks because only the v4-IPs seems to be considered.
So my idea was to filter down to specific groups - all
IPv6 bgp groups end with "-6", so I tried:
apply-path "protocols bgp group <*-6> neighbor <*>"
and
apply-path "protocols bgp group <*>-6 neighbor <*>"
But none worked - and I haven't found some examples for
mixing wildcard with specific strings in here.
Has anybody any hint for me or even a better solution
than my approach?
Thanks,
Tom
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
More information about the juniper-nsp
mailing list