Mailing List Archive

IPv6 filters recommendation
Hello.

Does anybody know http://www.space.net/~gert/RIPE/ipv6-filters.html ?

It would be perhaps nice to have also the examples in JunOS style... :-)


Regards,

./Carlos
-------------- IPv6 -> http://www.ip6.fccn.pt
Wide Area Network Workgroup, CMF8-RIPE, CF596-ARIN
FCCN - Fundacao para a Computacao Cientifica Nacional http://www.fccn.pt

"Internet is just routes (131586/456), naming (millions) and... people!"
IPv6 filters recommendation [ In reply to ]
On Fri, Feb 13, 2004 at 11:40:39AM +0000, Carlos Friacas wrote:
> Does anybody know http://www.space.net/~gert/RIPE/ipv6-filters.html ?
>
> It would be perhaps nice to have also the examples in JunOS style... :-)

Translated to JunOS (untested):

policy-statement ipv6-ebgp-relaxed {
term pass-some {
from {
family inet6;
route-filter 3ffe::/18 prefix-length-range /24-/48;
route-filter 3ffe:4000::/18 prefix-length-range /32-/48;
route-filter 3ffe:8000::/22 prefix-length-range /28-/48;
route-filter 2001::/16 prefix-length-range /24-/48;
route-filter 2002::/16 exact;
}
then next policy;
}
term reject-rest {
from family inet6;
then reject;
}
}

policy-statement ipv6-ebgp-strict {
term pass-some {
from {
family inet6;
route-filter 3ffe::/18 prefix-length-range /24-/24;
route-filter 3ffe:4000::/18 prefix-length-range /32-/32;
route-filter 3ffe:8000::/22 prefix-length-range /28-/28;
route-filter 2001:500::/30 prefix-length-range /48-/48;
route-filter 2001::/16 prefix-length-range /35-/35;
route-filter 2001::/16 prefix-length-range /24-/32;
route-filter 2002::/16 exact;
}
then next policy;
}
term reject-rest {
from family inet6;
then reject;
}
}

Gert: feel free to incorporate those into your page.


Best regards,
Daniel