Esse artigo foi homologado no equipamento NetEngine 8000 F1A-8H20Q, na versão V800R021C10SPC600, o uso em uma versão diferente pode não resultar da mesma forma.
| Community |
Descrição |
| 991:100 |
EXPORT-1-UPSTREAM-PEER1 |
| 991:200 |
IMPORT-1-UPSTREAM-PEER1 |
| 991:210 |
PERMIT-IMPORT-1-UPSTREAM-PEER1 |
| 991:211 |
PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+1 |
| 991:212 |
PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+2 |
| 991:213 |
PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+3 |
sys
ip community-filter advanced EXPORT-1-UPSTREAM-PEER1 permit _991:100$
ip community-filter advanced IMPORT-1-UPSTREAM-PEER1 permit _991:200$
ip community-filter advanced PERMIT-IMPORT-1-UPSTREAM-PEER1 permit _991:210$
ip community-filter advanced PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+1 permit _991:211$
ip community-filter advanced PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+2 permit _991:212$
ip community-filter advanced PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+3 permit _991:213$
commit
#
!
sys
ip ip-prefix DESCARTE-PREFIXO-1-UPSTREAM-PEER1-V4 permit 192.0.2.254 32
ip ipv6-prefix DESCARTE-PREFIXO-1-UPSTREAM-PEER1-V6 permit 2001:DB8:9000:: 128
ip as-path-filter DESCARTE-ASPATH-1-UPSTREAM-PEER1 permit _65534$
commit
#
!
sys
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2001
if-match ip-prefix EMPRESA-99.70.0.0/22
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2002
if-match ip-prefix EMPRESA-99.70.0.0/23
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2003
if-match ip-prefix EMPRESA-99.70.2.0/23
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2004
if-match ip-prefix EMPRESA-99.70.0.0/24
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2005
if-match ip-prefix EMPRESA-99.70.1.0/24
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2006
if-match ip-prefix EMPRESA-99.70.2.0/24
route-policy 1-UPSTREAM-PEER1-V4-EXPORT deny node 2007
if-match ip-prefix EMPRESA-99.70.3.0/24
commit
dis th
!
| Local Pref |
Tipo do peer |
| 1100 |
IBGP |
| 1000 |
Cliente |
| 900 |
CDN |
| 800 |
IX/PNI |
| 700 |
Trânsito |
sys
route-policy 1-UPSTREAM-PEER1-V4-IMPORT deny node 1001
description DESCARTA ROTAS DE UM SERVICO BASEADO EM IP
if-match ip-prefix DESCARTE-PREFIXO-1-UPSTREAM-PEER1-V4
route-policy 1-UPSTREAM-PEER1-V4-IMPORT deny node 1002
description DESCARTA ROTAS DE UM SERVICO BASEADO EM AS PATH
if-match as-path-filter DESCARTE-ASPATH-1-UPSTREAM-PEER1
route-policy 1-UPSTREAM-PEER1-V4-IMPORT permit node 1003
apply community 990:200 990:201 991:200 additive
apply local-preference 1100
goto next-node
route-policy 1-UPSTREAM-PEER1-V4-IMPORT permit node 1006
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1
route-policy 1-UPSTREAM-PEER1-V4-IMPORT permit node 1007
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+1
apply as-path 65000 additive
route-policy 1-UPSTREAM-PEER1-V4-IMPORT permit node 1008
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+2
apply as-path 65000 65000 additive
route-policy 1-UPSTREAM-PEER1-V4-IMPORT permit node 1009
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+2
apply as-path 65000 65000 65000 additive
commit
dis th
!
sys
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2001
if-match ipv6 address prefix-list EMPRESA-99:70::/32
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2002
if-match ipv6 address prefix-list EMPRESA-99:70::/33
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2003
if-match ipv6 address prefix-list EMPRESA-99:70:8000::/33
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2004
if-match ipv6 address prefix-list EMPRESA-99:70::/34
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2005
if-match ipv6 address prefix-list EMPRESA-99:70:4000::/34
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2006
if-match ipv6 address prefix-list EMPRESA-99:70:8000::/34
route-policy 1-UPSTREAM-PEER1-V6-EXPORT deny node 2007
if-match ipv6 address prefix-list EMPRESA-99:70:c000::/34
commit
dis th
!
| Local Pref |
Tipo do peer |
| 1100 |
IBGP |
| 1000 |
Cliente |
| 900 |
CDN |
| 800 |
IX/PNI |
| 700 |
Trânsito |
sys
route-policy 1-UPSTREAM-PEER1-V6-IMPORT deny node 1001
description DESCARTA ROTAS DE UM SERVICO BASEADO EM IPV6
if-match ipv6 address prefix-list DESCARTE-PREFIXO-1-UPSTREAM-PEER1-V6
route-policy 1-UPSTREAM-PEER1-V6-IMPORT deny node 1002
description DESCARTA ROTAS DE UM SERVICO BASEADO EM AS PATH
if-match as-path-filter DESCARTE-ASPATH-1-UPSTREAM-PEER1
route-policy 1-UPSTREAM-PEER1-V6-IMPORT permit node 1003
apply community 990:200 990:201 991:200 additive
apply local-preference 1100
goto next-node
route-policy 1-UPSTREAM-PEER1-V6-IMPORT permit node 1006
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1
route-policy 1-UPSTREAM-PEER1-V6-IMPORT permit node 1007
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+1
apply as-path 65000 additive
route-policy 1-UPSTREAM-PEER1-V6-IMPORT permit node 1008
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+2
apply as-path 65000 65000 additive
route-policy 1-UPSTREAM-PEER1-V6-IMPORT permit node 1009
if-match community-filter PERMIT-IMPORT-1-UPSTREAM-PEER1-PREPEND+2
apply as-path 65000 65000 65000 additive
commit
dis th
!
sys
bgp 65000
peer 10.64.249.1 as-number 65000
!PARA ORIGINAR A SESSAO PARTIR DE OUTRO ASN
!peer 10.64.249.1 fake-as 65999
peer 10.64.249.1 description IBGP-1-UPSTREAM-PEER1-V4
peer 10.64.249.1 timer keepalive 3 hold 30
y
peer 10.64.249.1 connect-interface 10.64.249.2
peer 10.64.249.1 connect-only
!peer 10.64.249.1 listen-only
peer 10.64.249.1 ignore
ipv4-family unicast
peer 10.64.249.1 enable
peer 10.64.249.1 public-as-only
peer 10.64.249.1 route-policy 1-UPSTREAM-PEER1-V4-IMPORT import
peer 10.64.249.1 route-policy 1-UPSTREAM-PEER1-V4-EXPORT export
peer 10.64.249.1 advertise-community
peer 10.64.249.1 advertise-ext-community
commit
#
!
sys
bgp 65000
peer 2001:DB8:249::1 as-number 65000
!PARA ORIGINAR A SESSAO PARTIR DE OUTRO ASN
!peer 2001:DB8:249::1 fake-as 65999
peer 2001:DB8:249::1 description IBGP-1-UPSTREAM-PEER1-V6
peer 2001:DB8:249::1 timer keepalive 3 hold 30
y
peer 2001:DB8:249::1 connect-interface 2001:DB8:249::2
peer 2001:DB8:249::1 connect-only
!peer 2001:DB8:249::1 listen-only
peer 2001:DB8:249::1 ignore
ipv6-family unicast
peer 2001:DB8:249::1 enable
y
peer 2001:DB8:249::1 public-as-only
peer 2001:DB8:249::1 route-policy 1-UPSTREAM-PEER1-V6-IMPORT import
peer 2001:DB8:249::1 route-policy 1-UPSTREAM-PEER1-V6-EXPORT export
peer 2001:DB8:249::1 advertise-community
peer 2001:DB8:249::1 advertise-ext-community
commit
#
!