<div dir="ltr">Bruno boa tarde tudo bem?<div><br></div><div>A melhor forma para PBRs que são de uso para CGNAT ou PAGINAS DE AVISO use o atributo next-ip, até mesmo o esforço de hardware e memória é menor.</div><div><br></div><div>Um abraço</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Em sex., 3 de jan. de 2020 às 01:07, Bruno DataFibra Telecom <<a href="mailto:bruno@datafibra.com.br">bruno@datafibra.com.br</a>> escreveu:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="PT-BR"><div class="gmail-m_1998826044972796645WordSection1"><p class="MsoNormal"><span style="color:rgb(42,107,166)">Bom dia a todos <u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">Estava olhando na internet e existe várias formas de fazer o PBR para o CGNAT no juniper, gostaria de uma opinião dos amigos qual forma é a melhor <u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">Via filter com netx-ip<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set firewall family inet filter blocos-cgnat term cgnat from source-address <a href="http://100.64.0.0/19" target="_blank">100.64.0.0/19</a><u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set firewall family inet filter blocos-cgnat term cgnat then next-ip 100.64.255.254<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set firewall family inet filter blocos-cgnat term default then accept<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">ou via filter com routing-instance<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set routing-options rib-groups CGNAT-rib-group import-rib inet.0<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set routing-options rib-groups CGNAT-rib-group import-rib CGNAT.inet.0<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set firewall family inet filter blocos-cgnat term cgnat from source-address <a href="http://100.64.0.0/19" target="_blank">100.64.0.0/19</a><u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set firewall family inet filter blocos-cgnat term cgnat then routing-instance CGNAT<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set firewall family inet filter blocos-cgnat term default then accept<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set routing-instances CGNAT instance-type forwarding<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)">set routing-instances CGNAT routing-options static route <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> next-hop 100.64.255.254<u></u><u></u></span></p><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal" style="margin-bottom:12pt"><b><span style="font-size:12pt;color:rgb(42,107,166)">Atenciosamente,</span></b><span style="color:rgb(42,107,166)"><u></u><u></u></span></p><table border="0" cellspacing="0" cellpadding="0" width="0" style="width:465.5pt;margin-left:1.8pt;border-collapse:collapse"><tbody><tr style="height:41.95pt"><td width="170" valign="top" style="width:123.75pt;border-top:none;border-bottom:none;border-left:none;border-right:1.5pt solid rgb(141,186,226);padding:0cm 1.4pt;height:41.95pt"><p class="MsoNormal" align="center" style="text-align:center;vertical-align:top"><sub><span style="color:rgb(42,107,166)"><br><img width="160" height="53" style="width: 1.6666in; height: 0.55in;" id="gmail-m_1998826044972796645Imagem_x0020_1" alt="logo-n"><u></u><u></u></span></sub></p></td><td width="450" valign="top" style="width:327pt;padding:0cm 5.4pt;height:41.95pt"><p class="MsoNormal"><b><span style="color:rgb(42,107,166)">Bruno Benatto Adacheski</span></b><span style="color:rgb(42,107,166)"> <br>CIO Diretor TI <br>Rua Professor Amálio Pinheiro , 20 – Guarapuava/PR - 85015-440<br><a href="http://www.datafibra.com.br" target="_blank">http://www.datafibra.com.br</a> <br>(42) 3036-6151 - (42) 3622-8199 <u></u><u></u></span></p></td></tr></tbody></table><p class="MsoNormal"><span style="color:rgb(42,107,166)"><u></u> <u></u></span></p><p class="MsoNormal"><u></u> <u></u></p></div></div>_______________________________________________<br>
bpf mailing list<br>
<a href="mailto:bpf@listas.brasilpeeringforum.org" target="_blank">bpf@listas.brasilpeeringforum.org</a><br>
<a href="https://listas.brasilpeeringforum.org/mailman/listinfo/bpf" rel="noreferrer" target="_blank">https://listas.brasilpeeringforum.org/mailman/listinfo/bpf</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div dir="ltr" style="color:rgb(136,136,136)"><img src="https://docs.google.com/uc?export=download&id=1l-VqvePCIZIZp2MRHtDvxYlVRw9o1lj-&revid=0B0h3Q-i7COOpR1RocDRRNm80ODE2ZzBJYnplSmU0ZE5iNGdrPQ" width="420" height="94"> <img src="https://docs.google.com/uc?export=download&id=1LfxDQBM5immpa15EaZ6mvZaA8UQ_iy7C&revid=0B0h3Q-i7COOpYXk2YzMvTFE4cTA5dmY0SUtOWkpNaXJmK0EwPQ" width="200" height="51"><br></div><div dir="ltr" style="color:rgb(136,136,136)"><p style="border:none;font-family:"Segoe UI","Lucida Grande",Verdana,Arial,Helvetica,sans-serif;margin:0cm 0cm 0pt;outline:0px;padding:0px;list-style-type:none;color:rgb(51,51,51);font-size:14px;text-align:justify"><span style="border:0px;font-weight:inherit;font-style:inherit;font-family:Verdana,sans-serif;margin:0px;outline:0px;padding:0px;font-size:8pt;color:gray">(PT) Esta mensagem pode conter informação confidencial ou privilegiada, sendo seu sigilo protegido por lei. Se você não for o destinatário ou a pessoa autorizada a receber esta mensagem, não pode usar, copiar ou divulgar as informações nela contidas ou tomar qualquer ação baseada nessas informações. Se você recebeu esta mensagem por engano, por favor, avise imediatamente ao remetente, respondendo o e-mail e em seguida apague-a. </span><span lang="EN-US" style="border:0px;font-weight:inherit;font-style:inherit;font-family:Verdana,sans-serif;margin:0px;outline:0px;padding:0px;font-size:8pt;color:gray">Agradecemos sua cooperação.</span></p><p style="border:none;font-family:"Segoe UI","Lucida Grande",Verdana,Arial,Helvetica,sans-serif;margin:0cm 0cm 0pt;outline:0px;padding:0px;list-style-type:none;color:rgb(51,51,51);font-size:14px"><span lang="EN-US" style="border:0px;font-weight:inherit;font-style:inherit;font-family:Verdana,sans-serif;margin:0px;outline:0px;padding:0px;font-size:8pt;color:gray"><br>(EN) This message may contain confidential or privileged information and its confidentiality is protected by law. If you are not the addressed or authorized person to receive this message, you must not use, copy, disclose or take any action based on it or any information herein. If you have received this message by mistake, please advise the sender immediately by replying the e-mail and then deleting it. </span><span style="border:0px;font-weight:inherit;font-style:inherit;font-family:Verdana,sans-serif;margin:0px;outline:0px;padding:0px;font-size:8pt;color:gray">Thank you for your cooperation.</span></p><div><span style="border:0px;font-weight:inherit;font-style:inherit;font-family:Verdana,sans-serif;margin:0px;outline:0px;padding:0px;font-size:8pt;color:gray"><br></span></div></div></div></div>