match rpki

In a route map configuration, this command is used to indicate what actions need to be performed for the validation state being configured. When a prefix is validated with the RPKI cache, the following three states are reported, valid, invalid, and not found. Use this command to configure the matching criteria. Once you have configured the matching parameter, you must configure the various actions that need to be performed when a prefix is received and is matched with the RPKI cache on the SLX device.

Syntax

match rpki { valid | invalid | not-found }

[no] match rpki { valid | invalid | not-found }

Parameters

valid: Indicates that the received prefix is valid when compared with the local RPKI cache.
invalid: Indicates that the received prefix is invalid when compared with the local RPKI cache.
not-found: Indicates that the received prefix is not-found when compared with the local RPKI cache.

Modes

Route Map

Usage Guidelines

Use the [no] format of this command to remove match rpki configured for a route map configuration.

Examples

This command shows the steps to create a match rpki configuration within the Route Map (BGP) permit entry.

This command creates a route map permit entry.

SLX(config)# route-map rm-bgp-p-test-01 permit 1
                    SLX(config-route-map-rm-bgp-p-test-01/permit/1)#

This command creates a match RPKI entry for valid prefixes.

SLX(config-route-map-rm-bgp-p-test-01/permit/1)# 
SLX(config-route-map-rm-bgp-p-test-01/permit/1)# match rpki valid
SLX(config-route-map-rm-bgp-p-test-01/permit/1)#

This command adds the other configurations for this route map permit entry.

SLX(config-route-map-rm-bgp-p-test-01/permit/1)# 
SLX(config-route-map-rm-bgp-p-test-01/permit/1)# match metric 10
SLX(config-route-map-rm-bgp-p-test-01/permit/1)# continue 
SLX(config-route-map-rm-bgp-p-test-01/permit/1)# set weight 10

This example shows the steps to remove the match rpki configuration from an existing route-map configuration.

(1)SLX(config-route-map-rm-bgp-p-test-01/deny/1)# 
SLX(config-route-map-rm-bgp-p-test-01/deny/1)# match rpki invalid
SLX(config-route-map-rm-bgp-p-test-01/permit/1)#