|
|
|
Using the force keyword with the route-assert-filter command causes the CNA system to assert routes to prefixes learned from a non-BGP source, such as your VPN endpoints. The auto-create-prefixes command is another way to generate new prefixes, where CNA uses addresses from active measurements to determine the new prefix. Such user-defined prefixes are known to the CNA system only because you have associated them with a decision policy. If you do not force the assertion, the CNA system will never assert these prefixes.
The permit-if-in-bgp keyword (the default condition) tells the CNA system to assert prefixes that it has learned from a BGP feed.
The deny keyword blocks assertion of the affected prefixes.
The command can be entered at a global level, where it will affect all prefixes, or within a decision policy, where it will affect only prefixes associated with the policy.
|
|
|