Esse artigo foi homologado no equipamento CCR2116-12G-4S+, na versão v7.18.2, o uso em uma versão diferente pode não resultar da mesma forma.
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.0.0/22) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.0.0/23) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.2.0/23) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.0.0/24) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.1.0/24) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.2.0/24) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-EXPORT disabled=yes rule="if (dst == 99.70.3.0/24) {accept}"
#
| Community |
Descrição |
| 991:100 |
EXPORT-1-UPSTREAM-PEER1 |
| 991:200 |
IMPORT-1-UPSTREAM-PEER1 |
| 991:210 |
PERMIT-1-UPSTREAM-PEER1 |
| 991:211 |
PERMIT-1-UPSTREAM-PEER1-PREPEND+1 |
| 991:212 |
PERMIT-1-UPSTREAM-PEER1-PREPEND+2 |
| 991:213 |
PERMIT-1-UPSTREAM-PEER1-PREPEND+3 |
| Local Pref |
Tipo do peer |
| 1100 |
IBGP |
| 1000 |
Cliente |
| 900 |
CDN |
| 800 |
IX/PNI |
| 700 |
Trânsito |
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::LOCAL-PREF disabled=no rule="set bgp-local-pref 1100"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::COMMUNITIES-INFORMATIVAS disabled=no rule="append bgp-communities 990:200,990:202,991:200"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::DESCARTE-PREFIXO disabled=no rule="if (dst == 192.0.2.254/32) {reject}\
\nif (dst == 192.0.2.253/32) {reject}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::DESCARTE-ASPATH disabled=no rule="if (bgp-as-path .65534.) {reject}\
\nif (bgp-as-path .65533.) {reject}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::PERMIT-IMPORT rule="if (bgp-communities includes 990:210) {accept}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::PERMIT-IMPORT-PREPEND+1 rule="if (bgp-communities includes 990:211) {set bgp-path-prepend 2;accept}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::PERMIT-IMPORT-PREPEND+2 rule="if (bgp-communities includes 990:212) {set bgp-path-prepend 3;accept}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V4-IMPORT comment=!::PERMIT-IMPORT-PREPEND+3 rule="if (bgp-communities includes 990:213) {set bgp-path-prepend 4;accept}"
#
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70::/32) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70::/33) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70:8000::/33) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70::/34) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70:4000::/34) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70:8000::/34) {accept}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-EXPORT disabled=yes rule="if (dst == 99:70:c000::/34) {accept}"
#
| Community |
Descrição |
| 991:100 |
EXPORT-1-UPSTREAM-PEER1 |
| 991:200 |
IMPORT-1-UPSTREAM-PEER1 |
| 991:210 |
PERMIT-1-UPSTREAM-PEER1 |
| 991:211 |
PERMIT-1-UPSTREAM-PEER1-PREPEND+1 |
| 991:212 |
PERMIT-1-UPSTREAM-PEER1-PREPEND+2 |
| 991:213 |
PERMIT-1-UPSTREAM-PEER1-PREPEND+3 |
| Local Pref |
Tipo do peer |
| 1100 |
IBGP |
| 1000 |
Cliente |
| 900 |
CDN |
| 800 |
IX/PNI |
| 700 |
Trânsito |
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::LOCAL-PREF disabled=no rule="set bgp-local-pref 1100"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::COMMUNITIES-INFORMATIVAS disabled=no rule="append bgp-communities 990:200,990:202,991:200"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::DESCARTE-PREFIXO disabled=no rule="if (dst == 2001:DB8:9000::/128) {reject}\
\nif (dst == 2001:DB8:9000::1/128) {reject}"
/routing filter rule add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::DESCARTE-ASPATH disabled=no rule="if (bgp-as-path .65534.) {reject}\
\nif (bgp-as-path .65533.) {reject}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::PERMIT-IMPORT rule="if (bgp-communities includes 990:210) {accept}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::PERMIT-IMPORT-PREPEND+1 rule="if (bgp-communities includes 990:211) {set bgp-path-prepend 2;accept}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::PERMIT-IMPORT-PREPEND+2 rule="if (bgp-communities includes 990:212) {set bgp-path-prepend 3;accept}"
/routing/filter/rule/add chain=1-UPSTREAM-PEER1-V6-IMPORT comment=!::PERMIT-IMPORT-PREPEND+3 rule="if (bgp-communities includes 990:213) {set bgp-path-prepend 4;accept}"
#
A partir da versão v7.19, o parâmetro address-families passou a ser chamado afi.
/routing bgp connection add \
name=IBGP-1-UPSTREAM-PEER1-V4 \
address-families=ip \
connect=yes \
#listen=yes \
as=65000 \
router-id=99.70.3.253 \
local.role=ibgp \
local.address=10.64.249.2 \
remote.as=65000 \
remote.address=10.64.249.1 \
keepalive-time=3s \
hold-time=30s \
nexthop-choice=force-self \
input.filter=1-UPSTREAM-PEER1-V4-IMPORT \
output.filter-chain=1-UPSTREAM-PEER1-V4-EXPORT \
output.network=BGP-NETWORK \
output.remove-private-as=yes \
disabled=yes \
#
/routing bgp connection add \
name=IBGP-1-UPSTREAM-PEER1-V6 \
address-families=ipv6 \
connect=yes \
#listen=yes \
as=65000 \
router-id=99.70.3.253 \
local.role=ibgp \
local.address=2001:DB8:249::2 \
remote.as=65000 \
remote.address=2001:DB8:249::1 \
keepalive-time=3s \
hold-time=30s \
nexthop-choice=force-self \
input.filter=1-UPSTREAM-PEER1-V6-IMPORT \
output.filter-chain=1-UPSTREAM-PEER1-V6-EXPORT \
output.network=BGP-NETWORK \
output.remove-private-as=yes \
disabled=yes \
#