routing policies Flashcards
what are the default import/export policies for BGP?
Accept all v4 in and import into inet.0
readvertise all active BGP routes to BGP speakers.
What are the default import/export policies for OSPF?
accept all OSPf routes into inet.0
reject all exports (OSPF LSDB is fully synced)
What are the default import/export policies for ISIS?
accept all routes into inet.0
reject all exports (LSDB is fully synced…)
what are the default routing policies for RIP?
accept all in to inet.0
reject all exports, including RIP routes
How do you export RIP routes?
add a policy;
edit policy-options policy-statement <policy>
set term <term> from protocol <protocol>
set term <term> then accept</term></protocol></term></policy>
you then create a RIP group;
edit protocols rip
set group my-rip-group export <policy> neighbor <neighbor>
set group my-rip-group export <policy> neighbor <neighbor>
set group my-rip-group export <policy> neighbor <neighbor></neighbor></policy></neighbor></policy></neighbor></policy>
What are the building blocks of route policies?
terms.
You give each term a name.
They are if-then statements. If a term doesnt match it moves on to the next one.
What are the route policy terminating actions?
accept
reject
how can you add new terms in the middle of a policy?
via CLI using the Insert command
What can you match a route policy with using a from statement?
prefix - route-filter or prefix-list
protocol (ospf, bgp etc)
routing attributes - area ID, as path, community
next hop
Neighbour
If no from statement is used it matches everything
Whats the difference between prefix lists in JUNOS?
Prefix lists only contain the prefix.
You can apply a “prefix-list-filter” to a prefix list and specific exact, longer, orlonger matching when you apply it to a route policy.
Whats a route-filter in a route policy?
its just a prefix direct in the policy, and then the same exact longer orlonger matching types are possible
In a route policy, Whats the prefix-length match type?
Matches prefixes within a given prefix length range. match is INCLUSIVE.
whats the gotcha with maxing route-filters?
it evaluates most to least specific, and will ONLY lookup against the first one the prefix matches against. Longest match routing(!)
Route policy actions. What are they?
Terminating:
Accept
Reject
Flow Control:
Next term
Next Policy
Modification attributes:
Community (add, delete, set)
preference
as-path prepend
next-hop
How do you implement route policy?
- Define the policy under edit policy-options
- Apply the policy within the protocol configuration;
eg edit protocols ospf or edit protocols bgp
Some protocols like BGP you apply policy within an address family, or a neighbor, others its process level. ISIS is process level as LSDB is synced
import/export policies will use the one configured at the lowest hierarchy only. EG: if you have a permit at BGP group level and a deny at neighbor level, its getting denied.