Cisco NCS 6000 Series User Manual

Multi value rangeDefines a list of {operation, value} pairs used
to match the 6-bit DSCP field. Values are
encoded using a single byte, where the two
most significant bits are zero and the six least
significant bits contain the DSCP value.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match dscp {dscp-value |min-value
-max-value}
IPv4 DSCPType 11
Bit maskIdentifies a fragment-type as the match
criterion for a class map.
Encoding: <type (1 octet), [op, bitmask]+>
Syntax:
match fragment type [is-fragment]
IPv4 Fragmentation
bits
Type 12
In a given flowspec rule, multiple action combinations can be specified without restrictions.
Redirect IP Nexthop is only supported in default VRF cases.
Note
Traffic Filtering Actions, on page 109 provides information on the actions that can be associated with a flow.
Configuring BGP Flowspec with ePBR, on page 112 explains the procedure to configure BGP flowpsec with
the required tuple definitions and action sequences.
Traffic Filtering Actions
The default action for a traffic filtering flow specification is to accept IP traffic that matches that particular
rule. The following extended community values can be used to specify particular actions:
DescriptionPBR
Action
Extended
Community
Type
The traffic-rate extended community is a non-transitive extended
community across the autonomous-system boundary and uses
following extended community encoding:
The first two octets carry the 2-octet id, which can be assigned from
a 2-byte AS number. When a 4-byte AS number is locally present,
the 2 least significant bytes of such an AS number can be used. This
value is purely informational. The remaining 4 octets carry the rate
information in IEEE floating point [IEEE.754.1985] format, units
being bytes per second. A traffic-rate of 0 should result on all traffic
for the particular flow to be discarded.
Command syntax
police rate < > | drop
Drop
Police
traffic-rate 0
traffic-rate
<rate>
0x8006
Routing Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
109
Implementing BGP Flowspec
Traffic Filtering Actions

Cisco NCS 6000 Series Specifications

General

Brand	Cisco
Model	NCS 6000 Series
Category	Network Router
Language	English