Configuring Inbound Route Filters

Configuring Inbound Route Filters - Gaia Clish

IPv4 Inbound Route Filters

Use these commands to configure IPv4 inbound route filters:

set inbound-route-filter <protocol>

<protocol parameter>

accept-all-ipv4

restrict-all-ipv4

route <IPv4_prefix / mask>

<per-route protocol parameter>

<route parameter>

Parameters

Parameter	Description
`<`protocol`>`	The IPv4 protocol to which the inbound route filter policy applies. BGP (uses individual rules - see next section) OSPF RIP
`<`protocol parameter`>`	Protocol-specific parameters that apply to all routes imported for that protocol. These change per protocol. See the list of options for each protocol.
`accept-all-ipv4`	Accept all IPv4 routes by default for this protocol. All routes are accepted with default settings unless specified otherwise.
`restrict-all-ipv4`	Restrict all IPv4 routes by default for this protocol. No routes are accepted unless specified otherwise.
`route <`IPv4_prefix/mask`>`	Configure policy for a prefix or mask length
`<`per-route protocol parameter`>`	Protocol-specific parameters that apply to specific prefixes. These change per protocol. See the list of options for for each protocol.
`<`route parameter`>`	Specific routes imported by inbound route filters use these options, regardless of which protocol is importing them. These only apply to routes specified with the route keyword, not accept-all-ipv4. `accept` - Accept and install routes matched by this prefix `between <integer> and <integer> -` Match all subnets of this prefix with mask lengths in the specified range `exact` - Match only the route with this exact prefix/mask length `off` - Remove this prefix `refine` - Match all routes that are subnets of this prefix / mask length, but exclude the exact prefix/mask `restrict` - Do not install routes matched by this prefix

IPv6 Inbound Route Filters

Use these commands to configure IPv6 inbound route filters:

set ipv6 inbound-route-filter <protocol>

<protocol parameter>

accept-all-ipv6

restrict-all-ipv6

route <IPv6 prefix / mask>

<per-route protocol parameter>

<route parameter>

Parameters

Parameter	Description
<protocol>	IPv6 protocol that the inbound route filter policy applies to. See "Protocols" section below
<protocol parameter>	Protocol-specific parameters that apply to all routes imported for that protocol. These vary per protocol, see the appropriate section within each protocol for a list of options
accept-all-ipv6	Accept all IPv6 routes by default for this protocol. All routes will be accepted with default settings unless specified otherwise
restrict-all-ipv6	Restrict all IPv6 routes by default for this protocol. No routes will be accepted unless specified otherwise
route <IPv6 prefix / mask>	Configure policy for a specific prefix / mask length
<per-route protocol parameter>	Protocol-specific parameters that apply to specific prefixes. These vary per protocol, see the appropriate section within each protocol for a list of options
<route parameter>	Parameters that apply to specific routes. See Per-route parameters section below

Per-route parameters:

Specific routes imported by inbound route filters use the following options, regardless of which protocol is importing them. These only apply to routes specified with the ‘route’ keyword, not ‘accept-all-ipv6’:

Parameter	Description
`accept`	Accept and install routes matched by this prefix
`exact`	Match only the route with this exact prefix / mask length
`normal`	Match all routes that are subnets of this prefix / mask length, including the prefix / mask itself
`off`	Remove this prefix
`refines`	Match all routes that are subnets of this prefix / mask length, but exclude the exact prefix / mask
`restrict`	Do not install routes matched by this prefix