...
Cхема:
Базовая конфигурация:
| Блок кода |
|---|
|
security zone Untrusted
exit
interface gigabitethernet 1/0/1
security-zone Untrusted
ip address 198.51.100.1/30
exit
interface loopback 1
ip address 192.0.2.1/32
exit
security zone-pair Untrusted self
rule 1
action permit
match protocol tcp
match destination-port port-range 179
enable
exit
rule 2
action deny
enable
exit
exit |
| Блок кода |
|---|
|
security zone Untrusted
exit
security zone Trusted
exit
interface gigabitethernet 1/0/1
security-zone Untrusted
ip address 198.51.100.2/30
exit
interface gigabitethernet 1/0/2
security-zone Trusted
ip address 203.0.113.1/30
exit
security zone-pair Untrusted self
rule 1
action permit
match protocol tcp
match destination-port port-range 179
enable
exit
rule 2
action deny
enable
exit
exit
security zone-pair Trusted self
rule 1
action permit
match protocol tcp
match destination-port port-range 179
enable
exit
rule 2
action deny
enable
exit
exit |
| Блок кода |
|---|
|
security zone Trusted
exit
interface gigabitethernet 1/0/2
security-zone Trusted
ip address 203.0.113.2/30
exit
interface loopback 1
ip address 192.0.2.2/32
exit
security zone-pair Trusted self
rule 1
action permit
match protocol tcp
match destination-port port-range 179
enable
exit
rule 2
action deny
enable
exit
exit |
| AUI Tab Group |
|---|
|
| trueESR1trueESR2trueESR3 |
Решение:
Первым шагом необходимо создать Route-map на ESR1, в котором с помощью регулярных выражений опишем интересующий AS-path. В случае совпадения укажем – запретить:
...
