Property Reference
/routing/filter/chain
Dynamic list of filter rule chains that can be referenced in bgp/ospf configuration.
Read-only properties:
Property | Description | |
---|---|---|
dynamic (yes | no) | ||
inactive (yes | no) | ||
name (string) |
/routing/filter/community-ext-set
Allows to configure sets of extended communities to be easily reused in multiple filter configurations. Community sets can be used for both matching and appending/setting.
Property | Description | |
---|---|---|
comment (string; Default: ) | ||
communities (list of ext communities; Default: ) | List of extended communities expressed as raw integer value or in typed format: "type:value", where type can be:
Value depends on the type, for more info on RT and SoO values ask google. | |
disabled (yes | no) | ||
name (integer [string; Default: ) | Reference name. | |
regexp (string) | Regexp matcher to match communities. Community set with only regexp parameter cannot be used to append communities. |
/routing/filter/community-large-set
Allows to configure sets of large communities to be easily reused in multiple filter configurations. Community sets can be used for both matching and appending/setting.
Property | Description | |
---|---|---|
comment (string; Default: ) | ||
communities (list of large communities; Default: ) | List of large communities expressed in following format: "admin:value1:value2", where each section can be integer [0..4294967295]. | |
disabled (yes | no) | ||
name (integer [string; Default: ) | Reference name. | |
regexp (string) | Regexp matcher to match communities. Community set with only regexp parameter cannot be used to append communities. |
/routing/filter/community-set
Allows to configure sets of communities to be easily reused in multiple filter configurations. Community sets can be used for both matching and appending/setting.
Property | Description | |
---|---|---|
comment (string; Default: ) | ||
communities (list of communities; Default: ) | List of communities expressed either as well known name or in following format: "as:number", where each section can be integer [0..65535]. Accepted well known names: accept-own graceful-shutdown no-advertise no-llgr route-filter-6 | |
disabled (yes | no) | ||
name (integer [string; Default: ) | Reference name. | |
regexp (string) | Regexp matcher to match communities. Community set with only regexp parameter cannot be used to append communities. |
/routing/filter/num-set
Set of integer numbers that can be reused for number matching between multiple filter rules.
Property | Description | |
---|---|---|
comment (string; Default: ) | ||
disabled (yes | no) | ||
name (integer [string; Default: ) | Reference name. | |
range (start-[end]:: integer[0..4294967295]) | Range of numbers in numset |
/routing/filter/rule
xx.
Property | Description | |
---|---|---|
chain (string; Default: ) | Reference name of the chain | |
comment (string; Default: ) | ||
disabled (yes | no) | ||
rule (string) | Accepts script like syntax to match and set route attribute and reject or accept prefixes. |
Quick filter rule example:
if (dst==192.168.1.0/24 && dst-len>24) {set distance +1; accept} else {set distance -1; accept}
Accepted syntax:
if ( [matchers] ) { [actions] } else { [actions] } [matchers]: [prop readable] [bool operator] [prop readable] [actions]: [action] [prop writeable] [value]
[num prop readable] dst-len bgp-path-len bgp-input-local-as bgp-input-remote-as bgp-output-local-as bgp-output-remote-as ospf-metric ospf-tag rip-metric rip-tag [num prop writable] distance scope scope-target bgp-weigth bgp-med bgp-out-med bgp-local-pref bgp-igp-metric bgp-path-peer-prepend bgp-path-prepend ospf-ext-metric ospf-ext-tag rip-ext-metric rip-ext-tag [flag prop readable] active bgp-attomic-aggregate bgp-communities-empty bgp-communities-ext-empty bgp-communities-large-empty bgp-network ospf-dn [prfx prop readable] dst gw ospf-fwd ospf-ext-fwd bgp-input-local-addr bgp-input-remote-addr bgp-output-local-addr bgp-output-remote-addr [flag prop writable] ospf-ext-dn blackhole use-te-nexthop [matcher] (all can be prefixed with 'not' to negate bgp-communities|bgp-communities-ext|bgp-communities-large equal|any|includes|subset {inline set} equal-set|any-set|includes-set|subset-set {set name} any-regexp|subset-regexp {regexp} comment text|find|regexp {string} chain {chain name} vrf {vrf} rtab {rtab} gw-interface {interface} gw-check none|arp|icmp|bfd|bfd-mh afi ipv4|ipv6|l2vpn|l2vpn-cisco|vpnv4|vpnv6 ,... protocol connected|static|bgp|ospf|rip|dhcp|fantasy|modem|vpn ,... bpg-origin igp|egp|incomplete ,... bgp-as-path {regexp} rpki valid|invalid|unknown ospf-type intra|inter|ext1|ext2|nssa1|nssa2 ospf-ext-type type1|type2 [num prop readable] in {int..int}|{int-int} ==|!=|<=|>=|<|> {int} [num prop readable] [prfx prop readable] !=|==|in {address 46/} [flag prop readable] [block] if ([matcher] &&/|| ...) { [block] } [ else {[block]} ] accept|reject|return jump {chain name} unset pref-src|bgp-med|bgp-out-med|bgp-local-pref append comment {string} bgp-communities|bgp-communities-ext|bgp-communities-large {inline community set}|{set name} filter bgp-communities|bgp-communities-ext|bgp-communities-large regexp {regexp} {inline community set}|{set name} delete bgp-communities regexp {regexp} {inline community set}|{set name} wk|other ,... bgp-communities-ext regexp {regexp} {inline community set}|{set name} rt|soo|other ,... bgp-communities-large regexp {regexp} {inline community set}|{set name} all set [num prop writable] [+|-][num prop readable]|[num prop writable] gw {address 46i} gw-interface {interface} gw-check none|arp|icmp|bfd|bfd-mh pref-src {address 46} bgp-origin igp|egp|incomplete ospf-ext-fwd {address 46} ospf-ext-type type1|type2 comment {string} bgp-communities {inline community set}|{set name} bgp-communities-ext {inline community set}|{set name} bgp-communities-large {inline community set}|{set name} rpki-verify {rpki group name}
/routing/filter/select-chain
Dynamic list of filter select chains that can be referenced in bgp/ospf configuration.
Read-only properties:
Property | Description | |
---|---|---|
dynamic (yes | no) | ||
inactive (yes | no) | ||
name (string) |
/routing/filter/select-rule
xx.