This example creates an SSM policy called ssm-policy-example. The policy terms match the IPv4 SSM group address 232.1.1.1/32 and the IPv6 SSM group address ff35::1/128. All other addresses are rejected.
- [edit policy-options]
- policy-statement ssm-policy-example {
-
- term A {
-
- from {
- route-filter 232.1.1.1/32 exact;
- }
- then accept;
-
- term B {
-
- from {
- route-filter ff35::1/128 exact;
- }
- then accept;
- }
- then reject;
- }
- }
The group addresses must match the configured policy for SSM mapping to occur.