hi all,
Is there a way i can math l2vpn ( specific signalling , safi 65 vpls ) on ingress ? Looks like from family l2vpn is not available: set term 1 from family ? Possible completions: evpn EVPN family inet IPv4 family inet-mdt IPv4 MDT Signaling family inet-mvpn IPv4 Multicast VPN family inet-vpn IPv4-VPN family inet6 IPv6 family inet6-mvpn IPv6 Multicast VPN family inet6-vpn IPv6-VPN family iso ISO family route-target Local route target VPN family Short overview, we have singe session btw two routers and each family has a policy with last one being deny bgp { group RR { type internal; local-address 10.2.2.2; import [ RR-INET-in RR-INET6-in RR-VPNv4-in BGP-DENY-ALL ]; family inet { unicast; } family inet-vpn { unicast; } family inet6 { unicast; } family l2vpn { signaling; } ... each has : set policy-options policy-statement RR-XX-in term bulkbgp from family inet/inet6/inet-vpn set policy-options policy-statement RR-XX-in term bulkbgp from protocol bgp set policy-options policy-statement RR-XX-in term bulkbgp then accept set policy-options policy-statement BGP-DENY-ALL then reject The goal was to add another policy( RR-L2VPN-in ) before BGP-DENY-ALL to allow l2vpn signalling but this is not possible. The evpn family which is afi 25 ( same as l2vpn ) will not match l2vpn ( guess there is a match of safi's as well ). I can work around this by modify the policy chaining but still strange that this is not possible, so maybe I’m missing something? Regards, Catalin _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp