ros 7.6 bgp filter

[erunix@P99-AS65099] /routing/filter/rule> print
Flags: X – disabled, I – inactive
0 chain=ospf-in rule=”if (dst in 182.50.240.0/24) {accept} else {reject}”

1 chain=ospf-out rule=”if (dst in 182.50.240.0/24) {accept} else {reject}”

2 chain=bgp-in rule=”if (dst in 182.50.240.0/24) {reject} else {accept}”

3 chain=bgp-in-default rule=”if (dst == 0.0.0.0/0) {accept} else {reject}”

4 chain=bgp-out rule=”if (dst in 182.50.240.0/24) {reject} else {accept}”
[erunix@P99-AS65099] /routing/filter/rule>

[admin@AS100] /routing/filter/rule> print
Flags: X – disabled, I – inactive
0 X chain=bgp-in
rule=”if(dst == 10.10.10.0/24 && dst-len==24){reject} else{accept}”

1 chain=bgp-in
rule=”if(dst in bgp-outnetwork && dst-len in 24-32){reject} else{accept}”

2 chain=bgp-in
rule=”if(dst in 0.0.0.0/0 && dst-len in 0-32){accept}else{reject}”
[admin@AS100] /routing/filter/rule>

admin@AS100] /ip/firewall/address-list> print

0 bgp-outnetwork 10.10.0.0/24 nov/15/2022 03:09:29
1 bgp-outnetwork 10.10.1.0/24 nov/15/2022 03:09:35
2 bgp-outnetwork 10.10.2.0/24 nov/15/2022 03:09:39
3 bgp-outnetwork 10.10.3.0/24 nov/15/2022 03:09:44
4 bgp-outnetwork 10.10.10.0/24 nov/15/2022 08:25:50
[admin@AS100] /ip/firewall/address-list>

Uncategorized

Leave a comment