Define Class - Cisco ASR 9000 Series Routing Configuration Manual

How to Configure BGP Flowspec
Command or Action
Step 6
remote-as as-number
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)#remote-as
100
Step 7 address-family { ipv4 } flowspec
Example:
RP/0/RSP0/CPU0:router(config-bgp)#
address-family ipv4 flowspec

Define Class

In order to associate the ePBR configuration to BGP flowspec you must perform these sub-steps: define the
class and use that class in ePBR to define the action. The steps to define the class include:
SUMMARY STEPS
1. configure
2. class-map [type traffic] [match-all] class-map-name
3. match match-statement
4. end-class-map
DETAILED STEPS
Command or Action
Step 1 configure
Step 2 class-map [type traffic] [match-all]
class-map-name
Example:
RP/0/RSP0/CPU0:router(config)#
class-map type traffic match all
classc1
Step 3 match match-statement
Example:
RP/0/RSP0/CPU0:router(config-cmap)#
match protocol ipv4 1 60
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
214
Purpose
Assigns a remote autonomous system number to the
neighbor.
Specifies an address family and enters address family
configuration submode, and initializes the global address
family for flowspec policy mapping.
Purpose
Creates a class map to be used for matching packets to the class whose name
you specify and enters the class map configuration mode. If you specify
match-any , one of the match criteria must be met for traffic entering the traffic
class to be classified as part of the traffic class. This is the default. If you specify
match-all , the traffic must match all the match criteria.
Configures the match criteria for a class map on the basis of the statement
specified. Any combination of tuples 1-13 match statements can be specified
here. The tuple definition possibilities include:
• Type 1: match destination-address {ipv4} address/mask length
• Type 2: match source-address {ipv4} address/mask length
Implementing BGP Flowspec