As path for Junos

Mailman List Mirror (Read Only)
1

Hi Everyone,
I need a help to transform this Cisco IOS command:

ip as-path access-list 50 permit _([0-9]+)_\1_\1_

in Juniper JUNOS policy-options.
Best regards,
Marco
M. +39 348 6019349

2

http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/policy-configuring-as-path-regular-expressions-to-use-as-routing-policy-match-conditions.html

There's no backref support in the regex subset that juniper has chosen
to implement, see
http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends

- and I don't think Juniper has gone anywhere with that engineering request.

3

http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/policy-configuring-as-path-regular-expressions-to-use-as-routing-policy-match-conditions.html

There's no backref support in the regex subset that juniper has chosen
to implement, see
http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends

- and I don't think Juniper has gone anywhere with that engineering
request.

Why wouldn't ".{3}" work, for this case?

4

http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/policy-configuring-as-path-regular-expressions-to-use-as-routing-policy-match-conditions.html

There's no backref support in the regex subset that juniper has chosen
to implement, see
http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends

- and I don't think Juniper has gone anywhere with that engineering
request.

Why wouldn't ".{3}" work, for this case?

Or, to better align with the given Cisco example: ".* .{3} .*"

5

Hi,
thanks for all info but with my 11.4R7.5 I cannot implement the check.
Regards,
Marco

6

Because the OP wants a same atom N times, not any atom N times.

7

> Why wouldn't ".{3}" work, for this case?

Because the OP wants a same atom N times, not any atom N times.

Of course, what was I thinking? I'll crawl back to my hole now... Thanks
for being gentle on the clue-bat.

8

Hi,

There is some open source sflow collector wich can talk via flowspec with juniper routers ? something like snort + nfdump ? I looking something besides Arbor because itis too expensive for me.

thanks for help
Peter

9

I believe the goal of ExaDDOS is what you're looking for.

https://github.com/Exa-Networks/exaddos

10

exabgp from ripe labs can inject flowspec routes.

typically some helper app would generate the policy for exabgp and then
exabgp would do the heavy lifting.

joel

11

You mean from Exa Networks[1], not RIPE: https://github.com/Exa-Networks/exabgp

Tom

[1] http://www.exa.net.uk/