Table of Contents
- About This Guide
- Objectives
- Audience
- Document Organization
- Part Organization
- Using the Indexes
- Documentation Conventions
- General Conventions
- Conventions for Software Commands and Statements
- List of Technical Publications
- Documentation Feedback
- How to Request Support
- Policy Framework Overview
- Router Flows Affected by Policies
- Policy Architecture
- Control Points
- Policy Components
- Default Policies and Actions
- Configuration Tasks
- Policy Configuration Recommendations
- Comparison of Routing Policies and Firewall Filters
- Routing Policy Framework Overview
- Importing and Exporting
- Routing Tables Affected by Routing Policies
- Default Routing Policies and Actions
- Creating Routing Policies
- Configuring a Routing Policy
- Match Conditions
- Named Match Conditions
- Actions
- Terms
- Routing Policy Application
- Routing Protocols
- Forwarding Table
- Evaluating a Routing Policy
- How a Routing Policy Is Evaluated
- How a Routing Policy Chain Is Evaluated
- How a Routing Policy Expression Is Evaluated
- How a Routing Policy Subroutine Is Evaluated
- Routing Policy Tests
- Supported Standards and Drafts
- Routing Policy Configuration Statements
- Minimum Routing Policy Configuration
- Minimum Routing Policy Chain Configuration
- Minimum Subroutine Configuration
- Routing Policy Configuration
- Defining Routing Policies
- Routing Policy Name
- Terms
- Match Conditions
- Actions
- Flow Control Actions
- Actions That Manipulate Route Characteristics
- Trace Action
- Final Action
- Default Action
- Route List Actions
- Examples: Defining Routing Policies
- Defining a Routing Policy from BGP to IS-IS
- Using Routing Policy to Set Preference
- Applying Routing Policies
- Applying Routing Policies to a Routing Protocol
- Applying a Routing Policy
- Applying a Routing Policy Chain
- Applying Policy Expressions
- Side Effects of Omitting the "from" Statement from an Export Policy
- Applying Routing Policies to the Forwarding Table
- Examples: Applying Routing Policies
- Examples: Routing Policy Configuration
- Example 1
- Example 2
- Example 3
- Example 4
- Example 5
- Example 6
- Example 7
- Example 8
- Example 9
- Example 10
- Example 11
- Example: ISP Network Case Study
- Requesting a Single Default Route on the Customer 1 Router
- Requesting Specific Routes on the Customer 2 Router
- Configuring Peer Policy on ISP Router 3
- Configuring Private and Exchange Peers on ISP Router 1 and 2
- Configuring Locally Defined Static Routes on the Exchange Peer 2 Router
- Configuring Outbound and Generated Routes on the Private Peer 2 Router
- Configuring the Discard Interface
- Testing Routing Policies
- Example: Testing a Routing Policy
- Extended Match Conditions Configuration
- Configuring AS Path Regular Expressions
- Defining AS Path Regular Expressions
- Null AS Path
- How AS Path Regular Expressions Are Evaluated
- Examples: Configuring AS Path Regular Expressions
- Configuring Communities
- Defining Communities
- Configuring the Community Attribute
- Configuring the Extended Communities Attribute
- Inverting Community Matches
- Configuring Link Bandwidth
- How Communities Are Evaluated
- Configuring Prefix Lists
- Prefix List and Route List Differences
- Defining Prefix Lists
- How a Prefix List Is Evaluated
- Example: Configuring a Prefix List
- Configuring Route Lists
- Defining Route Lists
- How a Route List Is Evaluated
- How Prefix Order Affects Route List Evaluation
- Common Configuration Problem with the Longest-Match Lookup
- Examples: Configuring Route Lists
- Example 1
- Example 2
- Example 3
- Example 4
- Example 5
- Example 6
- Example 7
- Example 8
- Example 9
- Configuring Subroutines
- Defining Subroutines
- Termination Actions
- Example: Configuring a Subroutine
- Extended Actions Configuration
- Configuring AS Path Prepend Action
- Configuring AS Path Expand Action
- Configuring Class Action
- Configuring Damping Action
- Configuring Flap Damping Parameters
- Defining Damping Action
- Enabling BGP Route Flap Damping
- Disabling Damping by Prefix
- Example: Disabling by Prefix
- Example: Configuring BGP Flap Damping
- Configuring Load-Balance Per-Packet Action
- Load Balancing Based on the MPLS Label Information
- Examples: Configuring Per-Packet Load Balancing
- Summary of Routing Policy Configuration Statements
- apply-path
- as-path
- as-path-group
- community
- damping
- export
- import
- policy-options
- policy-statement
- prefix-list
- Firewall Filter Overview
- Firewall Filter Components
- Supported Standards
- Firewall Filter Configuration
- Minimum Firewall Filter Configuration
- Configuring Firewall Filters
- Configuring the Family Address Type
- Configuring the Filter Name
- Configuring the Filter Terms
- Configuring a Filter Match Statement
- Configuring a Filter Action Statement
- Example: Configure a Filter Action Statement
- How Firewall Filters Are Evaluated
- Filter Match Conditions
- Specifying Numeric Range Filter Match Conditions
- Specifying Address Filter Match Conditions
- Specifying Multiple Match Conditions
- Specifying Bit-Field Filter Match Conditions (IPv4 Traffic Only)
- Specifying Class-Based Filter Match Conditions
- How Firewall Filters Test a Packet's Protocol
- Example: Do Not Test Packet Protocol
- Examples: Defining Firewall Filters
- Example 1
- Example 2
- Example 3
- Example 4
- Example 5
- Example 6
- Example 7
- Example 8
- Example 9
- Configuring Service Filters
- Applying Firewall Filters to Interfaces
- Configuring Interface-Specific Counters
- Example: Configuring Interface-Specific Counters
- Defining Interface Groups
- Example: Defining Interface Groups
- Configuring Accounting
- Configuring a Firewall Filter Accounting Profile
- Configuring Filter-Based Forwarding
- Examples: Configuring Filter-Based Forwarding
- Configuring Forwarding Table Filters
- Overview
- Configuring a Forwarding Table Filter
- Configuring Firewall Filter System Logging
- Example: Configuring Firewall Filter System Logging
- Policer Overview
- Policer Configuration
- Minimum Policer Configuration
- Configuring Policers
- Configuring Rate Limiting
- Configuring a Policer Action
- Example: Configuring a Policer Action
- Configuring Multifield Classification and Policing
- Configuring Filter-Specific Policers
- Configuring Prefix-Specific Actions
- Examples: Configuring Prefix-Specific Actions
- Examples: Classifying Traffic
- Applying an Interface Policer
- Example: Applying an Interface Policer
- Examples: Configuring Policing
- Summary of Firewall Filter and Policer Configuration Statements
- accounting-profile
- family
- filter
- filter-specific
- firewall
- if-exceeding
- interface-specific
- policer
- prefix-action
- service-filter
- term
- Traffic Sampling and Forwarding Overview
- Traffic Sampling and Forwarding Configuration
- Minimum Traffic Sampling or Forwarding Configuration
- Configuring a Forwarding Table Filter
- Configuring Traffic Sampling
- Configuring Discard Accounting
- Configuring Flow Monitoring
- Configuring a Next-Hop Group
- Configuring Per-Flow Load-Balancing Information
- Configuring the Router or Interface to Act as a DHCP/BOOTP Relay Agent
- Configuring DNS and TFTP Packet Forwarding
- Tracing BOOTP, DNS, and TFTP Forwarding Operations
- Example: Configuring DNS Packet Forwarding
- Disabling Traffic Sampling
- Examples: Configuring Traffic Sampling
- Sampling a Single SONET/SDH Interface
- Sampling All Traffic from a Single IP Address
- Sampling All FTP Traffic
- Configuring Traffic Sampling Output
- Traffic Sampling Output Files
- Tracing Traffic Sampling Operations
- Configuring Flow Aggregation (cflowd)
- Debugging cflowd Flow Aggregation
- Configuring Port Mirroring
- Summary of Traffic Sampling and Forwarding Options Configuration Statements
- accounting
- aggregation
- autonomous-system-type
- bootp
- cflowd
- cflowd (Discard Accounting)
- cflowd (Flow Monitoring)
- cflowd (Sampling)
- description
- description (Interface)
- description (Service)
- disable
- domain
- export-format
- family
- family inet
- family inet (Load Balancing)
- family inet (Sampling)
- family mpls
- file
- file (Helpers Trace Options)
- file (Sampling)
- file (Trace Options)
- filename
- files
- filter
- flood
- flow-active-timeout
- flow-export-destination
- flow-inactive-timeout
- forwarding-options
- hash-key
- helpers
- input
- input (Port Mirroring)
- input (Sampling)
- interface
- interface (Accounting or Sampling)
- interface (BOOTP)
- interface (DNS and TFTP Packet Forwarding or Relay Agent)
- interface (Monitoring)
- interface (Next-Hop Group)
- interface (Port Mirroring)
- local-dump
- max-packets-per-second
- maximum-hop-count
- minimum-wait-time
- monitoring
- next-hop
- next-hop-group
- no-filter-check
- no-listen
- no-local-dump
- no-stamp
- no-world-readable
- output
- output (Accounting)
- output (Monitoring)
- output (Port Mirroring)
- output (Sampling)
- port
- port-mirroring
- rate
- routing-instance
- run-length
- sampling
- server
- server (DHCP or BOOTP Service)
- server (DNS and TFTP Service)
- size
- stamp
- tftp
- traceoptions
- traceoptions (DNS and TFTP Packet Forwarding)
- traceoptions (Port Mirroring and Traffic Sampling)
- version
- world-readable
- Index
- Index of Statements and Commands