To configure an embedding filter with embedded filter policies
Purpose
Perform this procedure to create an embedding filter that contains one or more embedded filters. An embedded filter is used to define a common set of rules. The filter that nests embedded filters is referred to as the embedding filter.
Steps
Create the embedding filter policy | |
1 |
Perform one of the following:
Note: You must set the Scope parameter of the embedding filter to either template or exclusive. |
Associate a flowspec configuration with the embedding filter policy, if required | |
2 |
Click on the Embedded Filters tab and then the Flowspec Embedded sub-tab. |
3 |
Enable the Enable Flowspec parameter. |
4 |
Choose the Router Instance Type, either Base or VPRN. If you selected VPRN, then click Select to choose a VPRN service and click OK. |
5 |
Configure the Offset and Admin State parameters. |
6 |
To limit the BGP flowspec embedded filters to specific interfaces, configure the Group ID parameter with the same value as the group-ID configured for the flowspec-set or flowspec-set-trans community members configured in the required routing community policy; see To configure a community policy. |
7 |
You should also define the maximum size for an embedded flowspec on the routing instances that this policy will be applied to. See configuring the IPv4 Max Size and IPv6 Max Size parameters under the Routing tab in To configure a routing instance or a VRF instance for base routers, or To configure a routing instance on a VPRN sitefor VPRN services, as required. |
Associate an embedded IP filter policy with the embedding filter policy, if required | |
8 |
Click on the Embedded Filters tab and then the IP Embedded sub-tab. |
9 |
Click Create. The Embedded Entry form opens. |
10 |
Select an embedded filter and click OK. |
11 |
Configure the Offset and Admin State parameters. |
12 |
Click OK. The Embedded Entry form closes. |
13 |
Click OK to save your changes. The ACL MAC/IP/IPv6 Filter properties form closes. End of steps |