Junos OS

last person joined: 6 days ago 

Ask questions and share experiences about Junos OS.

  • 1.  flowspec in logical-system

    Posted 03-22-2017 12:15

    Hi all,

     
    Did anybody tried to use flowspec in the logical-system ?
    The BGP session with flowspec family is up and receiving appropriate NLRI, the inetflow.0 table exists in the LS with appropriate values:

     

    logical-system: LS4

inetflow.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
	
172.16.22.139,*/term:N/A          
                   *[BGP/170] 00:00:37, localpref 100, from 172.16.24.36
	                      AS path: I, validation-state: unverified
	                      Fictitious

     

    But no firewall filter __flowspec_default_inet__ exists in the LS.
     
     
    admin@lab-2> show firewall filter logical-system LS4__flowspec_default_inet__    
error: filter name inconsistent with logical router
     


  • 2.  RE: flowspec in logical-system

    Posted 03-23-2017 16:59

    I have not used flowspec with logical systems but do on virtual-router routing instances and the main routing instance.

     

     

    The naming convention for the filter is

    show firewall filter __flowspec_vr-name_inet__

     

    And this will tab out if your start to type.

     

    I would also try the command directly on the LS prompt instead of from the root system.

     

    user@host> set cli logical-system PE3
    Logical system: PE3

     

    user@host:PE3>



  • 3.  RE: flowspec in logical-system
    Best Answer

     
    Posted 03-23-2017 20:11

     

    Hi Folks,

     

    As per my knowledge "Flowspec is not currently supported under logical system"