[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Configuring PIM Join Filters

In this example, you create the PIM join filter by including the import pim-join-filter statement at the [edit protocols pim] hierarchy level. Define pim-join-filter by adding the policy-statement pim-join filter statement at the [edit policy-options] hierarchy level. The filter is composed of a route filter and a source address filter—bad-groups and bad-sources, respectively. Policy bad-groups prevents (*,G) or (S,G) join messages from being received for all groups listed. Policy bad-sources prevents (S,G) join messages from being received for all sources listed. The bad-groups filter and bad-sources filter are in two different terms. If route filters and source address filters are in the same term, they are logically ANDed.



protocols {


pim {
import pim-join-filter;
}


}
policy-statement pim-join-filter {


term bad-groups {


from {
route-filter 224.0.1.2/32 exact;
route-filter 224.0.1.3/32 exact;
route-filter 224.0.1.8/32 exact;
route-filter 224.0.1.22/32 exact;
route-filter 224.0.1.24/32 exact;
route-filter 224.0.1.25/32 exact;
route-filter 224.0.1.35/32 exact;
route-filter 224.0.1.39/32 exact;
route-filter 224.0.1.40/32 exact;
route-filter 224.0.1.60/32 exact;
route-filter 224.0.2.1/32 exact;
route-filter 224.0.2.2/32 exact;
route-filter 225.1.2.3/32 exact;
route-filter 229.55.150.208/32 exact;
route-filter 234.42.42.42/30 orlonger;
route-filter 239.0.0.0/8 orlonger;
}


then reject;
}




term bad-sources {


from {
source-address-filter 10.0.0.0/8 orlonger;
source-address-filter 127.0.0.0/8 orlonger;
source-address-filter 172.16.0.0/12 orlonger;
source-address-filter 192.168.0.0/16 orlonger;
}


then reject;
}




term last {
then accept;
}


}

[Contents] [Prev] [Next] [Index] [Report an Error]