diff options
| author | ISHIDA Wataru <ishida.wataru@lab.ntt.co.jp> | 2016-03-30 17:57:56 +0900 |
|---|---|---|
| committer | FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp> | 2016-03-31 11:38:17 +0900 |
| commit | 051621bf3aecbe0fd6292a3b4ee41ab42169eea1 (patch) | |
| tree | dafa1b882570e059d57692c14e8a9537ff8c6f07 /docs/sources/flowspec.md | |
| parent | 63788325a04d2c1956f79713fabcb00d68782f37 (diff) | |
*: support draft-ietf-idr-flowspec-l2vpn-03
$ gobgp g ri add -a l2vpn-flowspec match destination-mac 01:01:01:01:01:01 ether-type ipv4 vid 10 cos 20
$ gobgp g ri add -a l2vpn-flowspec match source-mac 01:01:01:01:01:01 ether-type arp inner-vid 20 inner-cos 20
Signed-off-by: ISHIDA Wataru <ishida.wataru@lab.ntt.co.jp>
Diffstat (limited to 'docs/sources/flowspec.md')
| -rw-r--r-- | docs/sources/flowspec.md | 20 |
1 files changed, 18 insertions, 2 deletions
diff --git a/docs/sources/flowspec.md b/docs/sources/flowspec.md index 97ab2a85..34c20608 100644 --- a/docs/sources/flowspec.md +++ b/docs/sources/flowspec.md @@ -2,7 +2,8 @@ GoBGP supports [RFC5575](https://tools.ietf.org/html/rfc5575), [draft-ietf-idr-flowspec-redirect-rt-bis-05](http://tools.ietf.org/html/draft-ietf-idr-flowspec-redirect-rt-bis-05) -and [draft-ietf-idr-flow-spec-v6-06](https://tools.ietf.org/html/draft-ietf-idr-flow-spec-v6-06). +, [draft-ietf-idr-flow-spec-v6-06](https://tools.ietf.org/html/draft-ietf-idr-flow-spec-v6-06) +and [draft-ietf-idr-flowspec-l2vpn-03](https://tools.ietf.org/html/draft-ietf-idr-flowspec-l2vpn-03). ## Prerequisites @@ -28,11 +29,15 @@ afi-safis like below. peer-as = 64512 [[neighbors.afi-safis]] afi-safi-name = "ipv4-flowspec" +[[neighbors.afi-safis]] + afi-safi-name = "ipv6-flowspec" +[[neighbors.afi-safis]] + afi-safi-name = "l2vpn-flowspec" ``` ## <a name="section1"> Add Flowspec routes through CLI -CLI syntax to add flowspec is +CLI syntax to add ipv4/ipv6 flowspec rule is ```shell % global rib add match <MATCH_EXPR> then <THEN_EXPR> -a [ipv4-flowspec|ipv6-flowspec] @@ -47,6 +52,17 @@ CLI syntax to add flowspec is <RT> : xxx:yyy, xx.xx.xx.xx:yyy, xxx.xxx:yyy ``` +that for l2vpn flowspec rule is + +``` shell +% global rib add match <MATCH_EXPR> then <THEN_EXPR> -a [l2vpn-flowspec] + <MATCH_EXPR> : { { destination-mac | source-mac } <MAC> | ether-type <ETHER_TYPE> | { llc-dsap | llc-ssap | llc-control | snap | vid | cos | inner-vid | inner-cos } <ITEM>... }... + <ETHER_TYPE> : arp, vmtp, ipx, snmp, net-bios, xtp, pppoe-discovery, ipv4, rarp, ipv6, pppoe-session, loopback, apple-talk, aarp + <ITEM> : &?{<|>|=}<value> + <THEN_EXPR> : { accept | discard | rate-limit <value> | redirect <RT> | mark <value> | action { sample | terminal | sample-terminal } | rt <RT>... }... + <RT> : xxx:yyy, xx.xx.xx.xx:yyy, xxx.xxx:yyy +``` + ### Examples ```shell |