| trueESR2ESR1 security zone Untrust exit route-map BGP rule 1 exit exit router bgp 64498 neighbor 198.51.100.2 remote-as 64497 address-family ipv4 unicast enable exit enable exit enable exit interface gigabitethernet 1/0/3 security-zone Untrust ip address 198.51.100.1/30 exit security zone-pair Untrust self rule 1 action permit match protocol tcp match destination-port port-range 179 enable exit rule 2 action deny enable exit exit security zone Untrust exit route-map BGP rule 1 match ip address 192.0.2.1/32 exit exit router bgp 64497 neighbor 198.51.100.1 remote-as 64498 address-family ipv4 unicast route-map BGP out enable exit enable exit address-family ipv4 unicast network 192.0.2.1/32 exit enable exit interface gigabitethernet 1/0/3 security-zone Untrust ip address 198.51.100.2/30 exit interface loopback 1 ip address 192.0.2.1/32 exit security zone-pair Untrust self rule 1 action permit match protocol tcp match destination-port port-range 179 enable exit rule 2 action deny enable exit exit
|