Implementing BGP Flowspec
Command or Action
Step 4
end-class-map
Example:
RP/0/RSP0/CPU0:router(config-cmap)#
end-class-map
What to Do Next
Associate the class defined in this procedure to a PBR policy as described in
215.
Define Policy Map
This procedure helps you define a policy map and associate it with traffic class you configured previously in
Define Class, on page 214
Purpose
• Type 3: match protocol {protocol-value |min-value -max-value}
• Type 4: Create two class-maps: one with source-port and another with
destination-port:
◦ match source-port {source-port-value |min-value -max-value}
◦ match destination-port {destination-port-value |min-value
-max-value}
Note
• Type 5: match destination-port {destination-port-value |[min-value -
max-value]}
• Type 6: match source-port {source-port-value |[min-value - max-value]}
• Type 7: match {ipv4}icmp-code {value |min-value -max-value}
• Type 8: match{ipv4}icmp-type {value |min-value -max-value}
• Type 9: match tcp-flag value bit-mask mask_value
• Type 10: matchpacket length {packet-length-value |min-value
-max-value}}
• Type 11: match dscp {dscp-value |min-value -max-value}
• Type 12: match fragment-type { is-fragment }
• Type 13: match ipv4 flow-label {value |min-value -max-value}
Supported Matching Criteria and Actions, on page 206
information on these match parameters.
Ends the class map configuration and returns the router to global configuration
mode.
.
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
How to Configure BGP Flowspec
These are applicable only for TCP and UDP
protocols.
provides conceptual
Define Policy Map, on page
215