[c-nsp] Dumb question

Peter Rathlev peter at rathlev.dk
Thu Aug 4 04:16:08 EDT 2011


On Thu, 2011-08-04 at 11:14 +0300, Ziv Leyes wrote:
> Pete, the 207.226.45.254 is the real IP for "y.y.y.y" peer, I've just
> forgotten to obscure it and it's seen via ISIS topology

Ah, ok, just a shot in the dark. :-)

> You've got a point at the Local Policy Denied Prefixes, this is what
> I've get:
> 
>                                   Outbound    Inbound
>   Local Policy Denied Prefixes:    --------    -------
>     route-map:                            0          2
>     prefix-list                      568734          0
>     Total:                           568734          2
> 
> So they are indeed denied, the question is why?

Gert actually already addressed that part:

On Wed, 2011-08-03 at 18:01 +0200, Gert Doering wrote:
> route-map RTR1-IN permit 10
> >  match community 100:1
> > !
> > route-map RTR1-IN permit 20
> >  match community 100:2
> 
> Whatever it is, it won't work, as you're trying to match on a
> community list named "100:1", not "the community 100:1".

So you just need to convert those two match statements to community-list
statements instead, just like you do in the ISP1-OUT route-map.

-- 
Peter




More information about the cisco-nsp mailing list