[j-nsp] Community matching policy

Andrew Khan good1uzi at outlook.com
Mon Mar 31 05:10:00 EDT 2014


Hi -

Let's say I want to reject everything except the following communities:

Either 100:100
OR 101:101
OR both 100:100 101:100

Tried to setup something:

[edit policy-options]
policy-statement TEST {
      term TEST1 {
          from community [ TEST1 TEST2 ]; ///////Is not it logical OR, and matching everything except what I want because of invert-match//////
           then reject;
       }
      term TEST2 {
     then accept;   //// And then this should accept what I wanted /////
   }
}

[edit policy-options]
   community TEST1 {
      invert-match;
       members 100:100;
   }
   community TEST2 {
       invert-match;
       members 101:101;
   }

However it is rejecting everything. Any thoughts what I'm missing here or perhaps the approach is not correct. 

Thanks in advance. 

 		 	   		  


More information about the juniper-nsp mailing list