[j-nsp] Using apply-path for generating prefix lists

Joerg Staedele js at tnib.de
Thu Feb 10 06:02:46 EST 2011


Hi,

we make it this way:

IPv4:
apply-path "protocols bgp group <*> neighbor <*.*>";

IPv6:
apply-path "protocols bgp group <*> neighbor <*:*>";

Works fine :)

Regards,
 - Joerg

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Thomas Eichhorn
Sent: Thursday, February 10, 2011 11:20 AM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Using apply-path for generating prefix lists

Hi all,

I usually use something like that to generate a prefix-list
of all known bgp-speakers on our boxes:

[edit policy-options prefix-list BGP-Speaker]
teichhorn at router# show
apply-path "protocols bgp group <*> neighbor <*>";

That works almost fine - but of course it includes
v4 and v6 neighbors. That is not of a problem if using
this prefix list in an IPv4 firewall - the v6 entries are
simply ignored.

But when using this prefix-list in an IPv6 firewall,
it breaks because only the v4-IPs seems to be considered.

So my idea was to filter down to specific groups - all
IPv6 bgp groups end with "-6", so I tried:

apply-path "protocols bgp group <*-6> neighbor <*>"
and
apply-path "protocols bgp group <*>-6 neighbor <*>"

But none worked - and I haven't found some examples for
mixing wildcard with specific strings in here.

Has anybody any hint for me or even a better solution
than my approach?

Thanks,
Tom
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list