show version
Hostname: ACX7100-1
Model: ACX7100-32C
Junos: 22.2R1.12-EVO
Yocto: 3.0.2
Linux Kernel: 5.2.60-yocto-standard-g34a7a87
JUNOS-EVO OS 64-bit [junos-evo-install-acx-f-x86-64-22.2R1.12-EVO]
Looks like apply-path stranza is no working.
I'm try to create BGP filter on loopback.
Filter is inspired by Day One book:
# show interfaces lo0
unit 0 {
family inet {
filter {
input-list [ Accept-BGP Accept-ICMP Accept-SSH-OOBManagement ];
}
address 172.16.0.2/32;
}
##
## 'iBGPPeersConfigured' was inherited from group 'PrefixList-Defaults'
##
prefix-list iBGPPeersConfigured {
##
## 'protocols bgp group RR neighbor <*>' was inherited from group 'PrefixList-Defaults'
## apply-path was expanded to:
## 172.16.0.22/32;
## 172.16.0.51/32;
##
apply-path "protocols bgp group RR neighbor <*>";
}
##
## 'iBGPLocalAddress' was inherited from group 'PrefixList-Defaults'
##
prefix-list iBGPLocalAddress {
##
## 'protocols bgp group RR local-address <*>' was inherited from group 'PrefixList-Defaults'
## apply-path was expanded to:
## 172.16.0.2/32;
##
apply-path "protocols bgp group RR local-address <*>";
}
# show groups FirewalFilters-Default firewall family inet filter Accept-BGP
interface-specific;
term active {
from {
source-prefix-list {
iBGPPeersConfigured;
}
destination-prefix-list {
iBGPLocalAddress;
}
protocol tcp;
source-port 49152-65535;
destination-port bgp;
}
then accept;
}
term established {
from {
destination-prefix-list {
iBGPLocalAddress;
}
protocol tcp;
source-port [ bgp 49152-65535 ];
tcp-established;
}
then accept;
}
# run show bgp summary
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 1 Peers: 2 Down peers: 2
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
0 0 0 0 0 0
inet6.0
0 0 0 0 0 0
bgp.l3vpn.0
0 0 0 0 0 0
bgp.l3vpn-inet6.0
0 0 0 0 0 0
bgp.evpn.0
0 0 0 0 0 0
inet6.3
0 0 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
172.16.0.22 44600 0 0 0 31 3:53 Connect
172.16.0.51 44600 0 0 0 3 3:53 Connect
If I move to use hard coded prefix list, all becomes normal
172.16.0.22 44600 7 6 0 31 48 Establ
172.16.0.51 44600 9 6 0 3 58 Establ
[edit]
prefix-list iBGPLocalAddress {
172.16.0.2/32;
}
prefix-list iBGPPeersConfigured {
172.16.0.11/32;
172.16.0.12/32;
172.16.0.21/32;
172.16.0.22/32;
172.16.0.31/32;
172.16.0.41/32;
172.16.0.61/32;
}
Just interesting, this is bug or feature
------------------------------
Uri Ivanov
------------------------------