Internet2 Network Security SIG

[John Kristoff <>]

On Wed, 23 May 2018 21:50:49 -0500
Jeff Bartig 
<>
 wrote:

> Yes, I would be supportive of these features.  I'd prioritize the back 
> reference feature higher, since it is something that isn't possible 
> today, while GTSM is possible, but not as easy as it could be.

So apparently the back reference exists already:

  
<https://www.juniper.net/documentation/en_US/junos/topics/reference/general/junos-cli-replace-command-regular-expressions.html>

I thought this page was referring to edit mode search and replace.  I'm
guessing no one here who is still listening to me was aware of this
either.  I'll play around with captures when I get a chance.

That leaves the GTSM proposal.  After some discussion with some other
colleague in a big network, ingress GTSM support might be non-trivial,
but there may not be an easy way to get this functionality like there
is in IOS.  One suggestion was to put GTSM-enabled peers in a BGP group
and then use an apply-path in a loopback filter on a ttl 255 filter.
Not crazy about using GTSM BGP groups, but I'll think on this one a
little more.

John