route validation-mode include-as

Function

The route validation-mode include-as command adds the AS_Path attribute as a check item to BGP Flow Specification route verification rules.

The undo route validation-mode include-as command restores the default configuration.

By default, BGP Flow Specification route verification rules do not involve a check on the AS_Path attribute.

route validation-mode include-as

undo route validation-mode include-as

None

BGP-Flow address family view, BGP-IPv6-flow address family view

2: Configuration level

Task Name	Operations
bgp	write

Usage Scenario

BGP Flow Specification routes are verified as follows:

Mode 1: After receiving a BGP Flow Specification route with a destination address as the filtering rule, the device verifies the route according to Figure 1. The route is considered valid only if the verification succeeds.
Mode 2: After receiving a BGP Flow Specification route with a destination address as the filtering rule, the device verifies the route by checking whether the AS_Path attribute of the route carries the AS_Set or AS_Sequence field. The route is considered valid only if its AS_Path attribute does not carry the AS_Set or AS_Sequence field.
If the
route validation-mode include-as command is run on a device, the device first uses mode 2 to verify BGP Flow Specification routes.
If the verification using mode 2 succeeds, the BGP Flow Specification route is considered valid, and the device no longer verifies the routes using mode 1.
If the verification using mode 2 fails, the device verifies the routes using mode 1.
If the
route validation-mode include-as command is not run on a device, the device uses mode 1 to verify BGP Flow Specification routes.

# Add the AS_Path attribute as a check item to BGP Flow Specification route verification rules.

<HUAWEI> system-view
[~HUAWEI] bgp 100
[*HUAWEI-bgp] ipv4-family flow
[*HUAWEI-af-ipv4-flow] route validation-mode include-as