flowspec match tunnel-pop

Function

The flowspec match tunnel-pop command enables BGP FlowSpec on a GRE tunnel interface.

The undo flowspec match tunnel-pop command disables BGP FlowSpec on a GRE tunnel interface.

By default, BGP FlowSpec is not enabled on a GRE tunnel interface.

Format
Parameters
Views
Default Level
Task Name and Operations
Usage Guidelines
Example

Format

flowspec match tunnel-pop

undo flowspec match tunnel-pop

Parameters

None

Views

Tunnel interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
cpu-defend	write

Usage Guidelines

Usage Scenario

By default, the BGP FlowSpec function does not identify the IP address of packets leaving the GRE tunnel. After the flowspec match tunnel-pop command is run on the GRE tunnel interface, the BGP FlowSpec function identifies the IP address of packets leaving the GRE tunnel.

Example

# Enable BGP FlowSpec on a GRE tunnel interface.

<HUAWEI> system-view
[~HUAWEI] interface tunnel 1
[*HUAWEI-Tunnel1] tunnel-protocol gre
[*HUAWEI-Tunnel1] flowspec match tunnel-pop