forwarding-context (Protocols BGP)
Syntax
forwarding-context;
Hierarchy Level
[edit logical-systems name protocols bgp], [edit logical-systems name routing-instances name protocols bgp], [edit logical-systems name tenants name routing-instances name protocols bgp], [edit protocols bgp], [edit routing-instances name protocols bgp], [edit tenants name routing-instances name protocols bgp]
Description
The MPLS-forwarding type routing-instance can be used for segregating Inter-AS BGP neighbors that require MPLS spoof-protection to ensure the packets remain distinct from other peers.
Setting a forwarding context on a neighbor interface can be useful, for example, when configuring a common AS boundary router so that it only accepts MPLS packets from a peer AS boundary router whose labels were explicitly advertised to the common AS boundary router.
Use this statement in conjunction with mpls-forwarding
to protect against label spoofing across AS boundary routers in
the context of Inter-AS VPN Option B for AS boundary routers. Option
B peers are reachable thru local interfaces that are configured as
part of the MPLS forwarding type routing instance.
If forwarding-context
is not set for a VPN BGP peer
both the routing instance and forwarding context are provided by the
master routing instance. The master instance is the Junos default,
global routing-instance, that contains the protocols bgp configuration.
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 16.1.