0bfe5d8c79
Main Enhancements: - Protocol Independent FIB API - Hierarchical FIB entries. Dynamic recursive route resolution. - Extranet Support. - Integration of IP and MPLS forwarding. - Separation of FIB and Adjacency databases. - Data-Plane Object forwarding model. Change-Id: I52dc815c0d0aa8b493e3cf6b978568f3cc82296c Signed-off-by: Neale Ranns <nranns@cisco.com>
64 lines
1.3 KiB
Plaintext
64 lines
1.3 KiB
Plaintext
|
|
create loop int
|
|
|
|
set int state loop0 up
|
|
set int ip addr loop0 10.10.10.10/32
|
|
|
|
packet-generator new {
|
|
name deny-from-default-route
|
|
limit 1
|
|
node ip4-input
|
|
size 64-64
|
|
no-recycle
|
|
data {
|
|
UDP: 1.2.3.4 -> 5.6.7.8
|
|
UDP: 3000 -> 3001
|
|
length 128 checksum 0 incrementing 1
|
|
}
|
|
}
|
|
|
|
packet-generator new {
|
|
name allow
|
|
limit 1
|
|
node ip4-input
|
|
size 64-64
|
|
no-recycle
|
|
data {
|
|
UDP: 1.1.1.1 -> 5.6.7.8
|
|
UDP: 3000 -> 3001
|
|
length 128 checksum 0 incrementing 1
|
|
}
|
|
}
|
|
|
|
packet-generator new {
|
|
name deny-from-port-range
|
|
limit 1
|
|
node ip4-input
|
|
size 64-64
|
|
no-recycle
|
|
data {
|
|
UDP: 1.1.1.1 -> 5.6.7.8
|
|
UDP: 6000 -> 6001
|
|
length 128 checksum 0 incrementing 1
|
|
}
|
|
}
|
|
|
|
set ip source-and-port-range-check 1.1.1.0/24 range 2000 - 3000 vrf 99
|
|
|
|
set interface ip source-and-port-range-check pg0 udp-out-vrf 99
|
|
|
|
show ip source-and-port-range-check vrf 99 1.1.1.1
|
|
|
|
set ip source-and-port-range-check 1.1.1.0/24 range 4000 - 5000 vrf 99
|
|
|
|
set ip source-and-port-range-check 1.1.2.0/24 range 4000 - 5000 vrf 99
|
|
|
|
show ip source-and-port-range-check vrf 99 1.1.1.1
|
|
show ip source-and-port-range-check vrf 99 1.1.2.1
|
|
|
|
set ip source-and-port-range-check 1.1.2.0/24 range 4000 - 5000 vrf 99 del
|
|
|
|
show ip source-and-port-range-check vrf 99 1.1.2.1
|
|
|
|
tr add pg-input 100
|