BGP FlowSpec Configuration

Enabling BGP FlowSpec Address Family

Adding the FlowSpec address family to the BGP address-family configuration enables the exchange of BGP FlowSpec NLRIs.

Syntax:

set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec allow-missing-export-policy (false|true)
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec default-information originate (false|true)
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec download-count <0-255>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec export instance <instance>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec export-filter site-id
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec export-label-block base <300001-400000>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec export-label-block range <range>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec inter-as-option-ab (disable|enable)
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> control-word enable
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> label-base <label-base>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> local-service-id <1-65535>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> local-site-id <1-65535>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> remote-service-id <1-65535>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> remote-site-id <1-65535>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec interface <name> sid-index <sid-index>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec label <label>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec multipath <multipath>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec protocol-preference external <1-255>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec protocol-preference internal <1-255>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec redistribute (direct|static|isis|ospf|pim|igmp|ppp|arp-nd|ipoe|nat) policy <policy>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec retain-route-target (disable|enable)
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec sid-index <sid-index>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec srgb base <base>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec srgb index <index>
set instance <name> protocol bgp address-family (ipv4|ipv6) flowspec srgb range <0-499967>

Attribute Description

<instance-name>

Name of the BGP instance

<afi>

Address family identifier (AFI). Supported values: ipv4, ipv6

<safi>

Subsequent address family identifier (SAFI). Specify "flowspec" as the SAFI for BGP to enable the exchange of BGP FlowSpec NLRIs.

Example 1: BGP FlowSpec IPv4 Configuration

supervisor@rtbrick>LEAF01: cfg> show config instance default protocol bgp address-family ipv4 flowspec
{
  "rtbrick-config:address-family": [
    {
      "afi": "ipv4",
      "safi": "flowspec"
    }
  ]
}

Example 2: BGP FlowSpec IPv6 Configuration

supervisor@rtbrick>LEAF01: cfg> show config instance default protocol bgp address-family ipv6 flowspec
{
  "rtbrick-config:address-family": [
    {
      "afi": "ipv6",
      "safi": "flowspec"
    }
  ]
}

Enabling BGP FlowSpec in Peer Group Address Family

Syntax:

set instance <name> protocol bgp peer-group <pg-name>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec add-path option (receive-only|send-only|both)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec add-path path-count <1-128>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec default-information originate (false|true)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec export-rib <instance> policy <policy>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec extended-nexthop (false|true)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec multi-label-capability (false|true)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec peer-default-route <peer-default-route>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec policy export <export>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec policy import <import>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec prefix-limit count <1-4294967295>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec prefix-limit idle-timeout <1-2400>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec remove-private-as (false|true)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec route-reflect-client (false|true)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec send-label (false|true)
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec update-nexthop ipv4-address <ipv4-address>
set instance <name> protocol bgp peer-group <pg-name> address-family (ipv4|ipv6) flowspec update-nexthop ipv6-address <ipv6-address>

Attribute Description

<afi>

Address family identifier (AFI). Supported values: ipv4, ipv6, l2vpn

<safi>

Subsequent address family identifier (SAFI). Specify "flowspec" as the SAFI to enable BGP FlowSpec in Peer Group address family.

Example 1: BGP FlowSpec in Peer Group Address Family

supervisor@rtbrick>LEAF01: cfg> show config instance default protocol bgp peer-group
{
  "rtbrick-config:peer-group": [
    {
      "pg-name": "PE2",
      "remote-as": 4200000002,
      "address-family": [
        {
          "afi": "ipv4",
          "safi": "flowspec"
        },
        {
          "afi": "ipv4",
          "safi": "unicast"
        },
        {
          "afi": "ipv6",
          "safi": "flowspec"
        },
        {
          "afi": "ipv6",
          "safi": "unicast"
        }
      ]
    }
  ]
}