Applying the Policy on PE Router D

To prevent routes learned from CE Router A from being advertised to CE Router E (the two routers can communicate these routes directly), apply the soo-ce1-policy policy statement as an export policy to the PE Router D and CE Router E EBGP session vpn_blue.

View the EBGP session on PE Router D using the show routing-instances command.

user@host# show routing-instances

vpn_blue {

    instance-type vrf;

    interface fe-2/0/0.0;

    vrf-target target:100:200;

    protocols {

        bgp {

            group ce2 {

                advertise-peer-as;

                peer-as 100;

                neighbor 10.12.99.6;

            }

        }

    }

}

Apply the soo-ce1-policy policy statement as an export policy to the PE Router D and CE Router E EBGP session vpn_blue as follows:

[edit routing-instances]

vpn_blue {

    protocols {

        bgp {

            group ce2{

                export soo-ce1-policy;

            }

        }

    }

}