Hi Everyone, I need a help to transform this Cisco IOS command: ip as-path access-list 50 permit _([0-9]+)_\1_\1_ in Juniper JUNOS policy-options. Best regards, Marco M. +39 348 6019349
http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/poli... There's no backref support in the regex subset that juniper has chosen to implement, see http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends - and I don't think Juniper has gone anywhere with that engineering request. On Fri, Mar 7, 2014 at 3:31 AM, Marco Paesani <marco@paesani.it> wrote:
Hi Everyone, I need a help to transform this Cisco IOS command:
ip as-path access-list 50 permit _([0-9]+)_\1_\1_
in Juniper JUNOS policy-options. Best regards, Marco M. +39 348 6019349
-- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler
On 7 March 2014 19:26, Michael Loftis <mloftis@wgops.com> wrote:
http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/poli...
There's no backref support in the regex subset that juniper has chosen to implement, see http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends
- and I don't think Juniper has gone anywhere with that engineering request.
Why wouldn't ".{3}" work, for this case?
On Fri, Mar 7, 2014 at 3:31 AM, Marco Paesani <marco@paesani.it> wrote:
Hi Everyone, I need a help to transform this Cisco IOS command:
ip as-path access-list 50 permit _([0-9]+)_\1_\1_
in Juniper JUNOS policy-options. Best regards, Marco M. +39 348 6019349
--
"Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler
On 7 March 2014 19:44, Pedro Cavaca <pmsac.nanog@gmail.com> wrote:
On 7 March 2014 19:26, Michael Loftis <mloftis@wgops.com> wrote:
http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/poli...
There's no backref support in the regex subset that juniper has chosen to implement, see http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends
- and I don't think Juniper has gone anywhere with that engineering request.
Why wouldn't ".{3}" work, for this case?
Or, to better align with the given Cisco example: ".* .{3} .*"
On Fri, Mar 7, 2014 at 3:31 AM, Marco Paesani <marco@paesani.it> wrote:
Hi Everyone, I need a help to transform this Cisco IOS command:
ip as-path access-list 50 permit _([0-9]+)_\1_\1_
in Juniper JUNOS policy-options. Best regards, Marco M. +39 348 6019349
--
"Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler
Hi, thanks for all info but with my 11.4R7.5 I cannot implement the check. Regards, Marco 2014-03-07 20:47 GMT+01:00 Pedro Cavaca <pmsac.nanog@gmail.com>:
On 7 March 2014 19:44, Pedro Cavaca <pmsac.nanog@gmail.com> wrote:
On 7 March 2014 19:26, Michael Loftis <mloftis@wgops.com> wrote:
http://www.juniper.net/techpubs/en_US/junos13.3/topics/usage-guidelines/poli...
There's no backref support in the regex subset that juniper has chosen to implement, see http://juniper.cluepon.net/index.php/ER_Detect_AS-PATH_prepends
- and I don't think Juniper has gone anywhere with that engineering request.
Why wouldn't ".{3}" work, for this case?
Or, to better align with the given Cisco example: ".* .{3} .*"
On Fri, Mar 7, 2014 at 3:31 AM, Marco Paesani <marco@paesani.it> wrote:
Hi Everyone, I need a help to transform this Cisco IOS command:
ip as-path access-list 50 permit _([0-9]+)_\1_\1_
in Juniper JUNOS policy-options. Best regards, Marco M. +39 348 6019349
--
"Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler
On 8 March 2014 08:47, Saku Ytti <saku@ytti.fi> wrote:
On (2014-03-07 19:44 +0000), Pedro Cavaca wrote:
Why wouldn't ".{3}" work, for this case?
Because the OP wants a same atom N times, not any atom N times.
Of course, what was I thinking? I'll crawl back to my hole now... Thanks for being gentle on the clue-bat.
-- ++ytti
Hi, There is some open source sflow collector wich can talk via flowspec with juniper routers ? something like snort + nfdump ? I looking something besides Arbor because itis too expensive for me. thanks for help Peter
On 3/13/2014 6:42 PM, Piotr wrote:
Hi,
There is some open source sflow collector wich can talk via flowspec with juniper routers ? something like snort + nfdump ? I looking something besides Arbor because itis too expensive for me.
thanks for help Peter
I believe the goal of ExaDDOS is what you're looking for. https://github.com/Exa-Networks/exaddos
exabgp from ripe labs can inject flowspec routes. typically some helper app would generate the policy for exabgp and then exabgp would do the heavy lifting. joel On 3/13/14, 3:42 PM, Piotr wrote:
Hi,
There is some open source sflow collector wich can talk via flowspec with juniper routers ? something like snort + nfdump ? I looking something besides Arbor because itis too expensive for me.
thanks for help Peter
On 2014-03-13 23:13, joel jaeggli wrote:
exabgp from ripe labs can inject flowspec routes.
You mean from Exa Networks[1], not RIPE: https://github.com/Exa-Networks/exabgp Tom [1] http://www.exa.net.uk/
participants (8)
-
joel jaeggli -
Marco Paesani -
Michael Loftis -
ML -
Pedro Cavaca -
Piotr -
Saku Ytti -
Tom Hill