@daniel.hearty But why does this not work for transient routes?
If I have R1 --- R2 --- R3, and I want to stop redistributing routes from R1 to R3 at R2, policy statements seem to have no effect.
I tried this:
root# show policy-options
policy-statement ban {
to interface ge-0/0/1.0;
then reject;
}
[edit]
root# show protocols isis
interface ge-0/0/0.0 {
level 1 disable;
}
interface ge-0/0/1.0 {
level 1 disable;
}
interface lo0.0 {
level 1 disable;
}
export ban; <<<<<<<<<<<<<<<<
[edit]
root#
but I still see the route on R3:
root# run show route 11.11.11.10
inet.0: 13 destinations, 14 routes (13 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
11.11.11.8/30 *[IS-IS/18] 00:32:58, metric 30
> to 100.10.10.5 via ge-0/0/1.0
[edit]
root#
------------------------------
Cristian Vladescu
------------------------------
Original Message:
Sent: 05-17-2017 01:23
From: DANIEL HEARTY
Subject: Filtering routes from IS-IS
"DEFAULT-TO-ISIS" is simply another policy that I'm using to inject a default route into ISIS. For reference here is the policy:
[edit]lab@mx104-edge# show policy-options policy-statement DEFAULT-TO-ISIS term 1 { from { protocol aggregate; route-filter 0.0.0.0/0 exact; } then accept;}
We can see the default route is present on the downstream device:
lab@srx-vpn> show route protocol isis inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)+ = Active Route, - = Last Active, * = Both0.0.0.0/0 *[IS-IS/165] 2w0d 21:22:28, metric 30 > to 137.221.196.5 via ge-0/0/0.0137.221.196.0/30 *[IS-IS/18] 2w0d 21:22:38, metric 20 > to 137.221.196.5 via ge-0/0/0.0
Let's now remove the policy leaving only the isis-filter policy we created previously:
[edit]lab@mx104-edge# show protocols isis export isis-filter;level 1 disable;interface ge-0/0/1.0 { point-to-point;}interface lo0.0 { passive;}
Checking on the downstream device we can now only see a single prefix is received:
lab@srx-vpn> show route protocol isis inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)+ = Active Route, - = Last Active, * = Both137.221.196.0/30 *[IS-IS/18] 2w0d 21:24:57, metric 20 > to 137.221.196.5 via ge-0/0/0.0
I hope this is now clear 🙂