[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Configuring RPF Policies

This example configures an RPF check policy named disable-RPF-on-PE, disabling the RPF check on multicast packets for the configured (S,G) source-group pair. This policy will not perform RPF checks on packets arriving for group 228.0.0.0/8 or from source address 196.168.25.6.

First, configure the policy disable-RPF-on-PE at the [edit policy-options] hierarchy level:



[edit]
policy-options {


policy-statement disable-RPF-on-PE {


term first {


from {
route-filter 228.0.0.0/8 orlonger;
source-address-filter 192.168.25.6/32 exact;
}




then {
reject;
}


}


}


}

For more information about route and source address filters, see the JUNOS Policy Framework Configuration Guide.

Then apply the policy disable-RPF-on-PE at the [edit routing-options] hierarchy level:



[edit]
routing-options {


multicast {
rpf-check-policy disable-RPF-on-PE;
}


}

You can also configure each condition as a separate policy and reference both policies in the rpf-check-policy statement:



[edit]
policy-options {


policy-statement disable-RPF-on-group {


term first {


from {
route-filter 228.0.0.0/8 orlonger;
}




then {
reject;
}


}


}


}
policy-statement disable-RPF-on-source {


term first {


from {
source-address-filter 192.168.25.6/32 exact;
}




then {
reject;
}


}


}
[edit]
routing-options {


multicast {
rpf-check-policy [ disable-RPF-on-group disable-RPF-on-source
];
}


}

This allows you to associate groups in one policy and sources in the other.

[Contents] [Prev] [Next] [Index] [Report an Error]