Hello,
When in a Juniper i apply an input filter in the lo0 interface this
protection apply for the routing-instance too ??
For example ..
In the filter ... named protectRE i have one term to protect the bgp session
, the term looks like this:
term bgp {
from {
source-prefix-list {
neighbor.bgp;
}
protocol tcp;
port bgp;
}
then accept;
so .. in the list "neighbor.bgp" are all the ip prefix that the router
will accept for establish a bgp session.
My question is, if i have a routing-instance (type vrf ) and i want to
configure a bgp session in this vrf to the peer a.b.c.d , do i need to add
in the "neighbor.bgp" list the addreess of this peer a.b.c.d ???
the filter protectRE is applied in the lo0
interfaces lo0
unit 0 {
family inet {
filter {
input protectRE;
}
address x
address y
}
}
thanks for your help ..
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
