[j-nsp] flowspec in logical-systems

Chuck Anderson cra at WPI.EDU
Wed Mar 22 20:05:59 EDT 2017


Try:

show firewall | match flowspec

Sometimes the filter names aren't what you expect when dealing with
logical-systems.  The ones I see are prepended with __LSYSNAME/ to you
might find them names __LSYSNAME/__flowspec_....

On Wed, Mar 22, 2017 at 09:07:22PM +0200, Michail Litvak wrote:
> Hi all,
> 
> Did anybody tried to use flowspec in the logical-system ?
> The BGP session with flowspec family is up and receiving appropriate NLRI,
> the inetflow.0 table exists in the LS with appropriate values:
> 
> But no firewall filter __flowspec_default_inet__ exists in the LS.
> 
> 
>    1.
> 
>    admin at lab-2> show firewall filter logical-system LS4
> __flowspec_default_inet__
> 
>    2.
> 
>    error: filter name inconsistent with logical router


More information about the juniper-nsp mailing list