Configuration Example 1; Configuration Example 2 - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual

Copyright © 2010, Juniper Networks, Inc.
deny condition for all routes. The implicit rule is displayed by show access-list and show
config commands.
You cannot selectively place conditions in or remove conditions from an access list, prefix
list, or prefix tree. You can insert a new condition only at the end of a list or tree.

Configuration Example 1

The following example shows how the implicit deny condition appears:
host1(config)#access-list 1 permit 10.10.10.1 0.0.0.255
host1(config)#access-list 2 permit 10.25.25.1 0.0.0.255
host1(config)#access-list 3 permit any any
host1(config)#show access-list
IP Access List 1:
permit ip 10.10.10.1 0.0.0.255 any
deny ip any any
IP Access List 2:
permit ip 10.25.25.1 0.0.0.255 any
deny ip any any
IP Access List 3:
permit ip any any
The implicit deny rule does not appear in the display for access list 3, because any prefix
matches access list 3.

Configuration Example 2

The following example demonstrates how to use a route map and an access list to
redistribute static routes to IS-IS.
Configure three static routes.
1.
host1(config)#ip route 20.20.20.0 255.255.255.0 192.168.1.0
host1(config)#ip route 20.20.21.0 255.255.255.0 192.168.2.0
host1(config)#ip route 20.21.0.0 255.255.255.0 192.168.30.0
Configure an access list, fltra, that filters routes 20.20.20.0/24 and 20.20.21.0/24.
2.
host1(config)#access-list fltra permit 20.20.0.0 0.0.255.255
Configure route map 1 to match access list fltra, and apply an internal metric type.
3.
host1(config)#route-map 1
host1(config-route-map)#match ip address fltra
host1(config-route-map)#set metric-type internal
Configure redistribution into IS-IS of the static routes with route map 1.
4.
host1(config)#router isis testnet
host1(config-router)#redistribute static route-map 1
Verify the effect of the redistribution (the two static routes matching the route map
5.
are redistributed as level 2 internal routes).
host1#show isis database detail l2
IS-IS Level-2 Link State Database
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.6666.00-00 0x000002B7
Area Address: 47.0005.80FF.F800.0000.0001.0001
Chapter 1: Configuring Routing Policy
0x3E1F 1198 0/0/0
21