Juniper JUNOSE 11.2.X IP SERVICES, Configuration Manual

Page: 47 / 356

deny condition for all routes. The implicit rule is displayed by show access-list and show
config commands.
You cannot selectively place conditions in or remove conditions from an access list, prefix
list, or prefix tree. You can insert a new condition only at the end of a list or tree.
Configuration Example 1
The following example shows how the implicit deny condition appears:
host1(config)# access-list 1 permit 10.10.10.1 0.0.0.255
host1(config)# access-list 2 permit 10.25.25.1 0.0.0.255
host1(config)# access-list 3 permit any any
host1(config)# show access-list
IP Access List 1:
permit ip 10.10.10.1 0.0.0.255 any
deny ip any any
IP Access List 2:
permit ip 10.25.25.1 0.0.0.255 any
deny ip any any
IP Access List 3:
permit ip any any
The implicit deny rule does not appear in the display for access list 3, because any prefix
matches access list 3.
Configuration Example 2
The following example demonstrates how to use a route map and an access list to
redistribute static routes to IS-IS.
1.
Configure three static routes.
host1(config)# ip route 20.20.20.0 255.255.255.0 192.168.1.0
host1(config)# ip route 20.20.21.0 255.255.255.0 192.168.2.0
host1(config)# ip route 20.21.0.0 255.255.255.0 192.168.30.0
2.
Configure an access list, fltra, that filters routes 20.20.20.0/24 and 20.20.21.0/24.
host1(config)# access-list fltra permit 20.20.0.0 0.0.255.255
3.
Configure route map 1 to match access list fltra, and apply an internal metric type.
host1(config)# route-map 1
host1(config-route-map)# match ip address fltra
host1(config-route-map)# set metric-type internal
4.
Configure redistribution into IS-IS of the static routes with route map 1.
host1(config)# router isis testnet
host1(config-router)# redistribute static route-map 1
5.
Verify the effect of the redistribution (the two static routes matching the route map
are redistributed as level 2 internal routes).
host1# show isis database detail l2
IS-IS Level-2 Link State Database
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.6666.00-00 0x000002B7 0x3E1F 1198 0/0/0
Area Address: 47.0005.80FF.F800.0000.0001.0001
21 Copyright © 2010, Juniper Networks, Inc.
Chapter 1: Configuring Routing Policy