Technical Documentation

Example: Configuring RPF Policies

This example configures an RPF check policy named disable-RPF-on-PE, disabling the RPF check on multicast packets for the configured (S,G) source-group pair. This policy will not perform RPF checks on packets arriving for group 228.0.0.0/8 or from source address 196.168.25.6.

First, configure the policy disable-RPF-on-PE at the [edit policy-options] hierarchy level:

[edit]policy-options {policy-statement disable-RPF-on-PE {term first {from {route-filter 228.0.0.0/8 orlonger;source-address-filter 192.168.25.6/32 exact;}then {reject;}}}}

For more information about route and source address filters, see the JUNOS Policy Framework Configuration Guide.

Then apply the policy disable-RPF-on-PE at the [edit routing-options] hierarchy level:

[edit]routing-options {multicast {rpf-check-policy disable-RPF-on-PE;}}

You can also configure each condition as a separate policy and reference both policies in the rpf-check-policy statement:

[edit]policy-options {policy-statement disable-RPF-on-group {term first {from {route-filter 228.0.0.0/8 orlonger;}then {reject;}}}}policy-statement disable-RPF-on-source {term first {from {source-address-filter 192.168.25.6/32 exact;}then {reject;}}}[edit]routing-options {multicast {rpf-check-policy [ disable-RPF-on-group disable-RPF-on-source ];}}

This allows you to associate groups in one policy and sources in the other.

Published: 2010-04-16