The following example shows a policy configuration that ensures that an RPF check is not performed for sources with prefix 128.83/16 or longer that belong to groups having a prefix of 228/8 or longer:
- [edit]
- policy-options {
-
- policy-statement rpf-sg-policy {
-
- from {
- route-filter 228.0.0.0/8 orlonger;
- source-address-filter 128.83.0.0/16 orlonger;
- }
-
- then {
- reject;
- }
- }
- }