-
Notifications
You must be signed in to change notification settings - Fork 11
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
mc36
committed
Oct 5, 2021
1 parent
4b06e79
commit 4dc598f
Showing
11 changed files
with
636 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
description ingress flow matching access list | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
access-list test4 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
access-list test6 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.252 | ||
ipv6 addr 1234::1 ffff:ffff:: | ||
ipv4 access-group-in test4 | ||
ipv6 access-group-in test6 | ||
exit | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.252 | ||
ipv6 addr 1234::2 ffff:ffff:: | ||
exit | ||
! | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 90 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 90 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 90 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 90 | ||
|
||
r2 tping 0 5 1.1.1.1 /vrf v1 /flow 115 | ||
r2 tping 0 5 1234::1 /vrf v1 /flow 115 | ||
r1 tping 0 5 1.1.1.2 /vrf v1 /flow 115 | ||
r1 tping 0 5 1234::2 /vrf v1 /flow 115 | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 130 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 130 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 130 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 130 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
description egress flow matching access list | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
access-list test4 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
access-list test6 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.252 | ||
ipv6 addr 1234::1 ffff:ffff:: | ||
ipv4 access-group-out test4 | ||
ipv6 access-group-out test6 | ||
exit | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.252 | ||
ipv6 addr 1234::2 ffff:ffff:: | ||
exit | ||
! | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 90 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 90 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 90 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 90 | ||
|
||
r2 tping 0 5 1.1.1.1 /vrf v1 /flow 115 | ||
r2 tping 0 5 1234::1 /vrf v1 /flow 115 | ||
r1 tping 0 5 1.1.1.2 /vrf v1 /flow 115 | ||
r1 tping 0 5 1234::2 /vrf v1 /flow 115 | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 130 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 130 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 130 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 130 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
description ingress flow matching common access list | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
access-list test4 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
access-list test6 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.252 | ||
ipv6 addr 1234::1 ffff:ffff:: | ||
ipv4 access-group-common-in test4 | ||
ipv6 access-group-common-in test6 | ||
exit | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.252 | ||
ipv6 addr 1234::2 ffff:ffff:: | ||
exit | ||
! | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 90 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 90 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 90 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 90 | ||
|
||
r2 tping 0 5 1.1.1.1 /vrf v1 /flow 115 | ||
r2 tping 0 5 1234::1 /vrf v1 /flow 115 | ||
r1 tping 0 5 1.1.1.2 /vrf v1 /flow 115 | ||
r1 tping 0 5 1234::2 /vrf v1 /flow 115 | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 130 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 130 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 130 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 130 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
description egress flow matching common access list | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
access-list test4 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
access-list test6 | ||
deny all any all any all flow 110-120 | ||
permit all any all any all | ||
exit | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.252 | ||
ipv6 addr 1234::1 ffff:ffff:: | ||
ipv4 access-group-common-out test4 | ||
ipv6 access-group-common-out test6 | ||
exit | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.252 | ||
ipv6 addr 1234::2 ffff:ffff:: | ||
exit | ||
! | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 90 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 90 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 90 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 90 | ||
|
||
r2 tping 0 5 1.1.1.1 /vrf v1 /flow 115 | ||
r2 tping 0 5 1234::1 /vrf v1 /flow 115 | ||
r1 tping 0 5 1.1.1.2 /vrf v1 /flow 115 | ||
r1 tping 0 5 1234::2 /vrf v1 /flow 115 | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 130 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 130 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 130 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 130 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,58 @@ | ||
description ingress flow matching hierarchical access list | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
access-list test4a | ||
permit all any all any all flow 110-120 | ||
exit | ||
access-list test6a | ||
permit all any all any all flow 110-120 | ||
exit | ||
access-list test4 | ||
evaluate deny test4a | ||
permit all any all any all | ||
exit | ||
access-list test6 | ||
evaluate deny test6a | ||
permit all any all any all | ||
exit | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.252 | ||
ipv6 addr 1234::1 ffff:ffff:: | ||
ipv4 access-group-in test4 | ||
ipv6 access-group-in test6 | ||
exit | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.252 | ||
ipv6 addr 1234::2 ffff:ffff:: | ||
exit | ||
! | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 90 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 90 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 90 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 90 | ||
|
||
r2 tping 0 5 1.1.1.1 /vrf v1 /flow 115 | ||
r2 tping 0 5 1234::1 /vrf v1 /flow 115 | ||
r1 tping 0 5 1.1.1.2 /vrf v1 /flow 115 | ||
r1 tping 0 5 1234::2 /vrf v1 /flow 115 | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 130 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 130 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 130 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 130 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,58 @@ | ||
description egress flow matching hierarchical access list | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
access-list test4a | ||
permit all any all any all flow 110-120 | ||
exit | ||
access-list test6a | ||
permit all any all any all flow 110-120 | ||
exit | ||
access-list test4 | ||
evaluate deny test4a | ||
permit all any all any all | ||
exit | ||
access-list test6 | ||
evaluate deny test6a | ||
permit all any all any all | ||
exit | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.252 | ||
ipv6 addr 1234::1 ffff:ffff:: | ||
ipv4 access-group-out test4 | ||
ipv6 access-group-out test6 | ||
exit | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.252 | ||
ipv6 addr 1234::2 ffff:ffff:: | ||
exit | ||
! | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 90 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 90 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 90 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 90 | ||
|
||
r2 tping 0 5 1.1.1.1 /vrf v1 /flow 115 | ||
r2 tping 0 5 1234::1 /vrf v1 /flow 115 | ||
r1 tping 0 5 1.1.1.2 /vrf v1 /flow 115 | ||
r1 tping 0 5 1234::2 /vrf v1 /flow 115 | ||
|
||
r2 tping 100 5 1.1.1.1 /vrf v1 /flow 130 | ||
r2 tping 100 5 1234::1 /vrf v1 /flow 130 | ||
r1 tping 100 5 1.1.1.2 /vrf v1 /flow 130 | ||
r1 tping 100 5 1234::2 /vrf v1 /flow 130 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,68 @@ | ||
description qos ingress flow matcher | ||
|
||
addrouter r1 | ||
int eth1 eth 0000.0000.1111 $1a$ $1b$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.1 255.255.255.0 | ||
ipv6 addr 1234::1 ffff:: | ||
exit | ||
ipv4 route v1 0.0.0.0 0.0.0.0 1.1.1.2 | ||
ipv6 route v1 :: :: 1234::2 | ||
! | ||
|
||
addrouter r2 | ||
int eth1 eth 0000.0000.2222 $1b$ $1a$ | ||
int eth2 eth 0000.0000.2222 $2a$ $2b$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
policy-map p1 | ||
seq 10 act drop | ||
match flow 123 | ||
seq 20 act trans | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 1.1.1.2 255.255.255.0 | ||
ipv6 addr 1234::2 ffff:: | ||
service-policy-in p1 | ||
exit | ||
int eth2 | ||
vrf for v1 | ||
ipv4 addr 2.2.2.1 255.255.255.0 | ||
ipv6 addr 4321::1 ffff:: | ||
service-policy-in p1 | ||
exit | ||
! | ||
|
||
addrouter r3 | ||
int eth1 eth 0000.0000.3333 $2b$ $2a$ | ||
! | ||
vrf def v1 | ||
rd 1:1 | ||
exit | ||
int eth1 | ||
vrf for v1 | ||
ipv4 addr 2.2.2.2 255.255.255.0 | ||
ipv6 addr 4321::2 ffff:: | ||
exit | ||
ipv4 route v1 0.0.0.0 0.0.0.0 2.2.2.1 | ||
ipv6 route v1 :: :: 4321::1 | ||
! | ||
|
||
|
||
r1 tping 100 5 2.2.2.2 /vrf v1 /flow 124 | ||
r3 tping 100 5 1.1.1.1 /vrf v1 /flow 124 | ||
r1 tping 100 5 4321::2 /vrf v1 /flow 124 | ||
r3 tping 100 5 1234::1 /vrf v1 /flow 124 | ||
|
||
r1 tping 0 5 2.2.2.2 /vrf v1 /flow 123 | ||
r3 tping 0 5 1.1.1.1 /vrf v1 /flow 123 | ||
r1 tping 0 5 4321::2 /vrf v1 /flow 123 | ||
r3 tping 0 5 1234::1 /vrf v1 /flow 123 |
Oops, something went wrong.