Quantcast
Channel: All Routing posts
Viewing all articles
Browse latest Browse all 8688

Community add

$
0
0

Hi

 

Looking to blackhole traffic from anything annouced from community AS123:666 and pass this onto the upstream provider, but config isnt working during testing..

Have I configured the community "add" correctly?

 

set policy-options community AS123-666 members 123:666

set policy-options policy-statement ANNOUNCED-BY-AS123-IPV4 term 1 from route-filter x.x.x.x/32 address-mask 255.255.252.0

set policy-options policy-statement ANNOUNCED-BY-AS123-IPV4 term 1 from route-filter x.x.x.x/32 address-mask 255.255.254.0

set policy-options policy-statement ANNOUNCED-BY-AS123-IPV4 term 1 then community add AS123-666

set policy-options policy-statement ANNOUNCED-BY-AS123-IPV4 term 1 then accept

 

set policy-options policy-statement ANNOUNCE-TO-NTT-IPV4 term 3 from community RTBH

set policy-options policy-statement ANNOUNCE-TO-NTT-IPV4 term 3 then community add AS123-666

set policy-options policy-statement ANNOUNCE-TO-NTT-IPV4 term 3 then accept

 

Regards

Chris


Viewing all articles
Browse latest Browse all 8688

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>