Hi Rick,
I tried with just the acl but still no luck.
Even when I setup an acl to match and deny everything it still doesnt
filter any routes...not sure what Im missing...
access-list 34 permit any
!
route-map filter deny 10
match ip address 34
!
ip vrf SITE2
rd 7018:2
export map filter
route-target export 7018:2
route-target import 7018:6
route-target import 7018:2
R6 is still receiving all routes:
Pod122-R6(config-vrf)#do sh ip bgp vpnv4 a
BGP table version is 239, local router ID is 70.18.121.6
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 7018:2
*>i70.18.24.0/31 70.18.121.2 0 100 0 ?
*>i70.18.24.2/31 70.18.121.2 0 100 0 ?
*>i120.49.44.0/24 70.18.121.2 65 100 0 ?
*>i120.49.121.4/32 70.18.121.2 65 100 0 ?
*>i120.49.121.14/32 70.18.121.2 66 100 0 ?
Route Distinguisher: 7018:6 (default for vrf SITE6)
*>i70.18.24.0/31 70.18.121.2 0 100 0 ?
*>i70.18.24.2/31 70.18.121.2 0 100 0 ?
*> 70.18.69.0/28 0.0.0.0 0 32768 ?
*> 70.18.69.9/32 0.0.0.0 0 32768 ?
*>i120.49.44.0/24 70.18.121.2 65 100 0 ?
*> 120.49.93.0/24 70.18.69.9 33 32768 ?
*>i120.49.121.4/32 70.18.121.2 65 100 0 ?
*> 120.49.121.9/32 70.18.69.9 33 32768 ?
*> 120.49.121.13/32 70.18.69.9 34 32768 ?
*>i120.49.121.14/32 70.18.121.2 66 100 0 ?
Cheers
James
Pod122-R6(config-vrf)#
On Wed, Jan 25, 2012 at 11:15 PM, MUR Rick (INT/TEI) <
[email protected]> wrote:
> You are matching on a route-target in outbound direction? The export map
> should only contain 'set community' statements as you are setting the
> correct RT value there. The match is done as you did on inbound, but the
> export only matches usually on ACLs.
>
> Please try again without the match ext community statement. Matching on
> the IP ACL should be enough right?
>
> Rick Mur
> CCIE3 #21946 (R&S / SP / Storage), JNCIE-M #851
> Technical Consultant
> .......................................................
> Telindus-ISIT B.V.
> Krommewetering 7
> 3543 AP Utrecht, the Netherlands
> T +31 (0)30 2477 711
> www.telindus-isit.nl <http://www.telindus-isit.nl/>
> .......................................................
>
>
>
>
>
>
>
> On 25-01-12 12:49, "James Roc" <[email protected]> wrote:
>
> >Hi,
> >
> >I am working with import/export maps to filter vrf routes. My import map
> >is
> >working but I can't get the export map to work.
> >
> >There are a number of routes being passed via MBGP between vrf SITE2 and
> >vrf SITE6. I am trying to filter 120.49.44.0/24.
> >
> >Config not working:
> >
> >ip prefix-list 34 seq 5 permit 120.49.44.0/24
> >!
> >ip extcommunity-list 34 permit rt 7018:2
> >!
> >route-map filter deny 10
> > match ip address prefix-list 34
> > match extcommunity 34
> >route-map filter permit 20
> >!
> >ip vrf SITE2
> > rd 7018:2
> > export map filter
> > route-target export 7018:2
> > route-target import 7018:2
> > route-target import 7018:6
> >
> >When I use the same prefix-list, extcomm list and route-map on the remote
> >site with an 'import map filter', it correctly filters the route. For some
> >reason the export map is not filtering the route outbound.
> >
> >Any ideas?
> >
> >Thanks
> >James
> >_______________________________________________
> >For more information regarding industry leading CCIE Lab training, please
> >visit www.ipexpert.com
> >
> >Are you a CCNP or CCIE and looking for a job? Check out
> >www.PlatinumPlacement.com
> >
> >http://onlinestudylist.com/mailman/listinfo/ccie_rs
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
http://onlinestudylist.com/mailman/listinfo/ccie_rs
