16.03.2014 Views

Policy Framework Configuration Guide - Juniper Networks

Policy Framework Configuration Guide - Juniper Networks

Policy Framework Configuration Guide - Juniper Networks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Chapter 5: Extended Match Conditions <strong>Configuration</strong><br />

Table 20: Route List Match Types for a Prefix List Filter (continued)<br />

Match Type<br />

Match Condition<br />

orlonger<br />

The route shares the same most-significant bits (described by prefix-length), and prefix-length is equal<br />

to or greater than the route’s prefix length.<br />

Example: Configuring a Prefix List<br />

The following example accepts and rejects traffic from sites specified using prefix lists:<br />

[edit]<br />

policy-options {<br />

policy-statement prefix-list-policy {<br />

term ok-sites {<br />

from {<br />

prefix-list known-ok-sites;<br />

}<br />

then accept;<br />

}<br />

term reject-bcasts {<br />

from {<br />

prefix-list known-dir-bcast-sites;<br />

}<br />

then reject;<br />

}<br />

}<br />

}<br />

[edit]<br />

policy-options {<br />

prefix-list known-ok-sites {<br />

172.16.0.3;<br />

10.10.0.0/16;<br />

192.168.12.0/24;<br />

}<br />

[edit]<br />

policy-options {<br />

prefix-list known-dir-bcast-sites {<br />

10.3.4.6;<br />

10.2.0.0/16;<br />

192.168.1.0/24;<br />

}<br />

}<br />

}<br />

Configuring Route Lists for Use in Routing <strong>Policy</strong> Match Conditions<br />

A route list is a collection of destination prefixes. When specifying a prefix, you can specify<br />

an exact match with a particular route or a less precise match. You can configure either<br />

a common action that applies to the entire list or an action associated with each prefix.<br />

Copyright © 2010, <strong>Juniper</strong> <strong>Networks</strong>, Inc.<br />

119

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!