Table of Contents
Advertisement
Link BGP Flowspec to ePBR Policies
Command or Action
Step 6
exit
Example:
RP/0/RP0/CPU0:router(config-pmap-c)# exit
Step 7
end-policy-map
Example:
RP/0/RP0/CPU0:router(config-cmap)# end-policy-map
What to do next
Perform VRF and flowspec policy mapping for distribution of flowspec rules using the procedure explained
in
Link BGP Flowspec to ePBR Policies , on page 116
Link BGP Flowspec to ePBR Policies
For BGP flowspec, an ePBR policy is applied on a per VRF basis, and this policy is applied on all the interfaces
that are part of the VRF. If you have already configured a ePBR policy on an interface, it will not be overwritten
by the BGP flowspec policy. If you remove the policy from an interface, ePBR infrastructure will automatically
apply BGP flowspec policy on it, if one was active at the VRF level.
Note
At a time only one ePBR policy can be active on an interface.
SUMMARY STEPS
1. configure
2. flowspec
3. local-install interface-all
4. address-family ipv4
5. local-install interface-all
6. service-policy type pbr policy-name
7. commit
8. exit
9. show flowspec { afi-all | client | ipv4 | summary | vrf
DETAILED STEPS
Command or Action
Step 1
configure
Routing Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
116
Purpose
• Redirect IP NH: redirect { ipv4 } nexthop ipv4
address { ipv4 address}
Returns the router to policy map configuration mode.
Ends the policy map configuration and returns the router
to global configuration mode.
Purpose
Implementing BGP Flowspec
Advertisement
Chapters
Table of Contents
