supervisor@rtbrick: op> show bgp peer Instance: default Peer Remote AS State Up/Down Time PfxRcvd PfxSent PE2 65542 Established 0d:00h:00m:21s 8 17 SN-STD-2-3966602 65549 Established 0d:00h:00m:23s 3 3
supervisor@rtbrick: op> show bgp peer detail
Peer: PE2, Peer IP: 192.0.2.2, Remote AS: 65542, Local IP: 192.0.2.1, Local AS: 65541, Any AS: False
Type: ebgp, State: Established, Up/Down Time: Wed Jul 15 19:25:47 GMT +0000 2026
Discovered on interface: -
Last transition: Wed Jul 15 19:25:47 GMT +0000 2026, Flap count: 0
Peer ID : 198.51.100.21, Local ID: 198.51.100.11
Instance : default, Peer group: PE2
6PE enabled : False
TTL security : False, TTL limit: -
Deactivate : False
Authentication:
ID: BGP_AUTH_HMAC-SHA-256-128, Algorithm: HMAC-SHA-256-128
Timer values:
Peer keepalive : 30s, Local keepalive: 30s
Peer holddown : 90s, Local holddown : 90s
Connect retry : 30s
Timers:
Connect retry timer : 0
Keepalive timer : expires in 6s 536415us
Holddown timer : expires in 1m 8s 418579us
NLRIs:
Sent : ['ipv4-unicast', 'ipv6-unicast', 'ipv4-flowspec', 'ipv6-flowspec', 'ipv4-labeled-unicast', 'ipv6-labeled-unicast']
Received : ['ipv4-unicast', 'ipv6-unicast', 'ipv4-flowspec', 'ipv6-flowspec', 'ipv4-labeled-unicast', 'ipv6-labeled-unicast']
Negotiated : ['ipv4-unicast', 'ipv6-unicast', 'ipv4-flowspec', 'ipv6-flowspec', 'ipv4-labeled-unicast', 'ipv6-labeled-unicast']
Capabilities:
Addpath sent : None
Addpath received : None
Addpath negotiated : None
Extended nexthop sent : None
Extended nexthop received : None
Extended nexthop negotiated : None
Multiple labels sent : None
Multiple labels received : None
Multiple labels negotiated : None
Capabilities:
Feature Sent Received Negotiated
Route refresh True True True
4 byte AS True True True
Graceful restart False False False
Link local only False False False
Prefix Limit:
End of RIB:
Address family Sent Received
IPv4 unicast Wed Jul 15 19:25:53 GMT +0000 2026 Wed Jul 15 19:25:53 GMT +0000 2026
IPv4 labeled-unicast Wed Jul 15 19:25:53 GMT +0000 2026 Wed Jul 15 19:25:53 GMT +0000 2026
IPv6 unicast Wed Jul 15 19:25:53 GMT +0000 2026 Wed Jul 15 19:25:53 GMT +0000 2026
IPv6 labeled-unicast Wed Jul 15 19:25:53 GMT +0000 2026 Wed Jul 15 19:25:53 GMT +0000 2026
IPv4 VPN-unicast never never
IPv6 VPN-unicast never never
IPv4 flowspec Wed Jul 15 19:25:53 GMT +0000 2026 Wed Jul 15 19:25:53 GMT +0000 2026
IPv6 flowspec Wed Jul 15 19:25:53 GMT +0000 2026 Wed Jul 15 19:25:53 GMT +0000 2026
IPv4 VPN-multicast never never
L2VPN VPLS never never
L2VPN EVPN never never
RPKI Validation Stats:
Address family Valid Invalid Unknown
IPv4 unicast 0 0 0
IPv6 unicast 0 0 0
Message stats:
Session stats:
Direction Open Update Keepalive Notify Route refresh
Input 1 8 1 0 0
Output 1 11 1 0 0
Total stats:
Input 1 8 1 0 0
Output 1 11 1 0 0
Route stats:
Address family Received Sent Prefix limit Idle timeout
IPv4 unicast 4 7 0 0
IPv4 labeled-unicast 0 0 0 0
IPv6 unicast 4 7 0 0
IPv6 labeled-unicast 0 0 0 0
IPv4 VPN-unicast 0 0 0 0
IPv6 VPN-unicast 0 0 0 0
IPv4 multicast 0 0 0 0
IPv4 VPN-multicast 0 0 0 0
L2VPN VPLS 0 0 0 0
L2VPN EVPN 0 0 0 0
IPv4 Flowspec 0 2 0 0
IPv6 Flowspec 0 1 0 0
Peer: SN-STD-2-3966602, Peer IP: 192.0.2.102, Remote AS: 65549, Local IP: 192.0.2.101, Local AS: 65541, Any AS: False
Type: ebgp, State: Established, Up/Down Time: Wed Jul 15 19:25:45 GMT +0000 2026
Discovered on interface: -
Last transition: Wed Jul 15 19:25:45 GMT +0000 2026, Flap count: 0
Peer ID : 198.51.100.91, Local ID: 198.51.100.11
Instance : default, Peer group: FS
6PE enabled : False
TTL security : False, TTL limit: -
Authentication:
ID: , Algorithm: HMAC-SHA-256-128
Timer values:
Peer keepalive : 30s, Local keepalive: 30s
Peer holddown : 90s, Local holddown : 90s
Connect retry : 30s
Timers:
Connect retry timer : 0
Keepalive timer : expires in 2s 632207us
Holddown timer : expires in 1m 6s 383572us
NLRIs:
Sent : ['ipv4-flowspec', 'ipv6-flowspec']
Received : ['ipv4-flowspec', 'ipv6-flowspec']
Negotiated : ['ipv4-flowspec', 'ipv6-flowspec']
Capabilities:
Addpath sent : None
Addpath received : None
Addpath negotiated : None
Extended nexthop sent : None
Extended nexthop received : ['ipv4-flowspec', 'ipv6-flowspec']
Extended nexthop negotiated : None
Multiple labels sent : None
Multiple labels received : None
Multiple labels negotiated : None
Capabilities:
Feature Sent Received Negotiated
Route refresh True True True
4 byte AS True True True
Graceful restart False False False
Link local only False False False
Prefix Limit:
End of RIB:
Address family Sent Received
IPv4 unicast never never
IPv4 labeled-unicast never never
IPv6 unicast never never
IPv6 labeled-unicast never never
IPv4 VPN-unicast never never
IPv6 VPN-unicast never never
IPv4 flowspec Wed Jul 15 19:25:51 GMT +0000 2026 Wed Jul 15 19:25:51 GMT +0000 2026
IPv6 flowspec Wed Jul 15 19:25:51 GMT +0000 2026 Wed Jul 15 19:25:51 GMT +0000 2026
IPv4 VPN-multicast never never
L2VPN VPLS never never
L2VPN EVPN never never
Message stats:
Session stats:
Direction Open Update Keepalive Notify Route refresh
Input 1 3 1 0 0
Output 1 2 1 0 0
Total stats:
Input 1 3 1 0 0
Output 1 2 1 0 0
Route stats:
Address family Received Sent Prefix limit Idle timeout
IPv4 unicast 0 0 0 0
IPv4 labeled-unicast 0 0 0 0
IPv6 unicast 0 0 0 0
IPv6 labeled-unicast 0 0 0 0
IPv4 VPN-unicast 0 0 0 0
IPv6 VPN-unicast 0 0 0 0
IPv4 multicast 0 0 0 0
IPv4 VPN-multicast 0 0 0 0
L2VPN VPLS 0 0 0 0
L2VPN EVPN 0 0 0 0
IPv4 Flowspec 2 2 0 0
IPv6 Flowspec 1 1 0 0
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 2
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-in ipv6 flowspec
Instance: default, AFI: ipv6, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 1
Flowspec Hash Match Action AS Path
7bfa7233 dest-prefix : 2001:db8:0:1::91/128 None 65549
src-prefix : 2001:db8:0:1::92/128
ip-proto : [==icmp ]
src-port : [==49154 ]
supervisor@rtbrick: op> show bgp rib-out ipv4 flowspec
Flags: N - RPKI Unknown, I - RPKI Invalid, V - RPKI Valid
Instance: default, AFI: ipv4, SAFI: flowspec
Peer-group: FS, Sent routes: 2
Flags Flowspec Hash Match Action Origin
521b87e1 dest-prefix : 198.51.100.91/32 None Incomplete
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 None Incomplete
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
Peer-group: PE2, Sent routes: 2
Flags Flowspec Hash Match Action Origin
521b87e1 dest-prefix : 198.51.100.91/32 None Incomplete
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 None Incomplete
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-out ipv6 flowspec
Flags: N - RPKI Unknown, I - RPKI Invalid, V - RPKI Valid
Instance: default, AFI: ipv6, SAFI: flowspec
Peer-group: FS, Sent routes: 1
Flags Flowspec Hash Match Action Origin
7bfa7233 dest-prefix : 2001:db8:0:1::91/128 None Incomplete
src-prefix : 2001:db8:0:1::92/128
ip-proto : [==icmp ]
src-port : [==49154 ]
Peer-group: PE2, Sent routes: 1
Flags Flowspec Hash Match Action Origin
7bfa7233 dest-prefix : 2001:db8:0:1::91/128 None Incomplete
src-prefix : 2001:db8:0:1::92/128
ip-proto : [==icmp ]
src-port : [==49154 ]
supervisor@rtbrick: op> show bgp fib ipv4 flowspec
Instance: default, AFI: ipv4, SAFI: flowspec, Total routes: 2
Flowspec Hash Match Action Priority Status
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 1501 Ignored
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 1502 Valid
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp fib ipv4 flowspec ad2c54f5
Instance: default, AFI: ipv4, SAFI: flowspec, Total routes: 1
Flowspec hash: ad2c54f5
Match:
dest-prefix: 198.51.100.91/32
src-prefix: 198.51.100.92/32
ip-proto: [==icmp ]
dst-port: [==49152 ]
src-port: [==49152 ]
Action:
rate-limit: 400.0 kBps
Extended community:
['traffic-rate-bytes:0:400000.000000']
Priority: 1502
Status: Valid
Number of ACL added: 1
supervisor@rtbrick: op> show bgp fib ipv6 flowspec
Instance: default, AFI: ipv6, SAFI: flowspec, Total routes: 1
Flowspec Hash Match Action Priority Status
7bfa7233 dest-prefix : 2001:db8:0:1::91/128 None 1501 Valid
src-prefix : 2001:db8:0:1::92/128
ip-proto : [==icmp ]
src-port : [==49154 ]
supervisor@rtbrick: op> show bgp fib ipv6 flowspec 7bfa7233
Instance: default, AFI: ipv6, SAFI: flowspec, Total routes: 1
Flowspec hash: 7bfa7233
Match:
dest-prefix: 2001:db8:0:1::91/128
src-prefix: 2001:db8:0:1::92/128
ip-proto: [==icmp ]
src-port: [==49154 ]
Action:
None
Extended community:
['None']
Priority: 1501
Status: Valid
Number of ACL added: 1
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec filter port 49152
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 1
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec filter destination-prefix 198.51.100.91/32
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 2
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec filter source-prefix 198.51.100.92/32
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 2
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec filter destination-port 49152
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 2
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec filter source-port 49152
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 2
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show bgp rib-in ipv4 flowspec filter ip-proto icmp
Instance: default, AFI: ipv4, SAFI: flowspec
Hostname: SN-STD-2-3966602, Peer IP: 192.0.2.102
Source IP: 192.0.2.101, Total routes: 2
Flowspec Hash Match Action AS Path
521b87e1 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
port : [==49152 ]
dst-port : [==49152 ]
src-port : [==49152 ]
ad2c54f5 dest-prefix : 198.51.100.91/32 rate-limit: 400.0 kBps 65549
src-prefix : 198.51.100.92/32
ip-proto : [==icmp ]
dst-port : [==49152 ]
src-port : [==49152 ]
supervisor@rtbrick: op> show acl rule bgp-flowspec-ad2c54f59cf8944514bcfb21a0e2beec40a45efaea900442
Rule: bgp-flowspec-ad2c54f59cf8944514bcfb21a0e2beec40a45efaea900442
ACL type: ext_l3v4
Ordinal: 0 Priority: 1502
Match:
Direction: external
Instance: default
Destination IPv4 prefix: 198.51.100.91/32
Source IPv4 prefix: 198.51.100.92/32
Destination L4 port: 49152
Source L4 port: 49152
IP protocol: icmp
Action:
Policer profile name: bgp-flowspec-ad2c54f59cf8944514bcfb21a0e2beec40a45efaea900442
Result:
ACL Handle: 5
External:
Value: 80224256
Is Trap ID: No
Trap ID: 0
Trap Strength: 0
Is QoS: Yes
Class: 0
Policer ID: 612