Junos OS

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about Junos OS.

Acx7100 EVO apply path not working

  • 1.  Acx7100 EVO apply path not working

    Posted 10-25-2023 04:13
    show version 
    Hostname: ACX7100-1
    Model: ACX7100-32C
    Junos: 22.2R1.12-EVO
    Yocto: 3.0.2
    Linux Kernel: 5.2.60-yocto-standard-g34a7a87
    JUNOS-EVO OS 64-bit [junos-evo-install-acx-f-x86-64-22.2R1.12-EVO]

    Looks like apply-path stranza is no working.
    I'm try to create BGP filter on loopback.
    Filter is inspired by Day One book:

    # show interfaces lo0 
    unit 0 {
        family inet {
            filter {
                input-list [ Accept-BGP Accept-ICMP Accept-SSH-OOBManagement ];
            }
            address 172.16.0.2/32;
        }
    
    ##
    ## 'iBGPPeersConfigured' was inherited from group 'PrefixList-Defaults'
    ##
    prefix-list iBGPPeersConfigured {
        ##
        ## 'protocols bgp group RR neighbor <*>' was inherited from group 'PrefixList-Defaults'
        ## apply-path was expanded to:
        ##     172.16.0.22/32; 
        ##     172.16.0.51/32; 
        ##
        apply-path "protocols bgp group RR neighbor <*>";
    }
    ##
    ## 'iBGPLocalAddress' was inherited from group 'PrefixList-Defaults'
    ##
    prefix-list iBGPLocalAddress {
        ##
        ## 'protocols bgp group RR local-address <*>' was inherited from group 'PrefixList-Defaults'
        ## apply-path was expanded to:
        ##     172.16.0.2/32; 
        ##
        apply-path "protocols bgp group RR local-address <*>";
    }
    
    # show groups FirewalFilters-Default firewall family inet filter Accept-BGP 
    interface-specific;
    term active {
        from {
            source-prefix-list {
                iBGPPeersConfigured;
            }
            destination-prefix-list {
                iBGPLocalAddress;
            }
            protocol tcp;
            source-port 49152-65535;
            destination-port bgp;
        }
        then accept;
    }
    term established {
        from {
            destination-prefix-list {
                iBGPLocalAddress;
            }
            protocol tcp;
            source-port [ bgp 49152-65535 ];
            tcp-established;
        }
        then accept;
    }
    
    # run show bgp summary 
    Threading mode: BGP I/O
    Default eBGP mode: advertise - accept, receive - accept
    Groups: 1 Peers: 2 Down peers: 2
    Table          Tot Paths  Act Paths Suppressed    History Damp State    Pending
    inet.0               
                           0          0          0          0          0          0
    inet6.0              
                           0          0          0          0          0          0
    bgp.l3vpn.0          
                           0          0          0          0          0          0
    bgp.l3vpn-inet6.0    
                           0          0          0          0          0          0
    bgp.evpn.0           
                           0          0          0          0          0          0
    inet6.3              
                           0          0          0          0          0          0
    Peer                     AS      InPkt     OutPkt    OutQ   Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
    172.16.0.22            44600          0          0       0      31        3:53 Connect
    172.16.0.51            44600          0          0       0       3        3:53 Connect

    If I move to use hard coded prefix list, all becomes normal

    172.16.0.22            44600          7          6       0      31          48 Establ
    172.16.0.51            44600          9          6       0       3          58 Establ
    
    [edit]
    prefix-list iBGPLocalAddress {
        172.16.0.2/32;
    }
    prefix-list iBGPPeersConfigured {
        172.16.0.11/32;
        172.16.0.12/32;
        172.16.0.21/32;
        172.16.0.22/32;
        172.16.0.31/32;
        172.16.0.41/32;
        172.16.0.61/32;
    }

    Just interesting, this is bug or feature



    ------------------------------
    Uri Ivanov
    ------------------------------