flow-route ipv6

Usage Scenario

To filter out the attack traffic of a certain type, you can run the flow-route ipv6 command to manually configure a static BGP IPv6 Flow Specification route with a filtering rule and a traffic controlling action. Receiving the route, a BGP IPv6 Flow Specification peer generates a traffic policy to control the attack traffic.

One BGP IPv6 Flow Specification route can include multiple if-match and apply clauses. The if-match clauses define filtering rules. The apply clauses specify actions. The relationships between if-match clauses and between apply clauses are as follows:

• The relationship between if-match clauses of different types is "AND".
• The relationship between apply clauses is "AND".
  All traffic matching if-match filtering rules must be filtered with the actions specified by apply clauses.

Configuration Impact

After the BGP IPv6 Flow address family is enabled using the flow-route ipv6 and ipv6-family flow commands, the generated BGP IPv6 Flow Specification route is imported to the BGP routing table.

if-match port and if-match destination-port or if-match source-port are mutually exclusive.