[c-nsp] re-advertising eBGP learned prefixes

Sergey Nikitin oldnick at oldnick.ru
Fri Oct 21 02:45:00 EDT 2011


Could you post the output of "show ip bgp neighbor 10.36.254.2" ?

Andrey Koklin wrote:
> On 10/20/2011 19:17, Gert Doering wrote:
> 
>>> ip as-path access-list 100 permit ^$
>>> ip as-path access-list 101 permit _21017_
>>> ip as-path access-list 102 permit _21017_21017_
> 
>> This...
> 
>>> route-map TO_VPN_CTK permit 10
>>>  match ip address prefix-list TO_VPN_CTK
>>>  match as-path 100
> 
>> ... together with this will only permit AS-paths matched by ACL 100,
>> which is "^$" = "your local AS".
> 
>> So this AS path ACL will never permit anything learned from eBGP.
> 
> Oh, yes, this is important error!
> 
> I've added now the AS which prefixes should be seen there.
> Now it is:
> 
> -- 8< --
> router bgp 65036
>  no synchronization
>  bgp log-neighbor-changes
>  bgp redistribute-internal
>  network 10.36.0.0 mask 255.255.0.0
>  network 213.129.126.0
>  timers bgp 5 20 15
>  neighbor 10.36.254.2 remote-as 21017
>  neighbor 10.36.254.2 soft-reconfiguration inbound
>  neighbor 10.36.254.2 route-map FROM_VPN_CTK in
>  neighbor 10.36.254.2 route-map TO_VPN_CTK out
>  neighbor 213.129.126.1 remote-as 65036
>  neighbor 213.129.126.1 soft-reconfiguration inbound
>  default-information originate
>  distance bgp 100 100 10
>  no auto-summary
> 
> ip as-path access-list 100 permit ^$
> ip as-path access-list 100 permit _30835_
> 
> ip prefix-list TO_VPN_CTK description announced nets through CTK VPN
> ip prefix-list TO_VPN_CTK seq 10 permit 0.0.0.0/0
> ip prefix-list TO_VPN_CTK seq 20 permit 213.129.126.0/24
> ip prefix-list TO_VPN_CTK seq 30 permit 10.36.0.0/16
> ip prefix-list TO_VPN_CTK seq 35 permit 10.36.0.0/16 le 28
> ip prefix-list TO_VPN_CTK seq 40 permit 10.36.0.0/18 le 28
> ip prefix-list TO_VPN_CTK seq 50 permit 10.36.248.0/23 le 24
> 
> route-map TO_VPN_CTK permit 10
>  match ip address prefix-list TO_VPN_CTK
>  match as-path 100
> -- 8< --
> 
> But unfortunately, the problem remains:
> 
> spring#cle ip bgp * soft                                      
> 
> spring#sh ip bgp 10.36.72.32                     
> BGP routing table entry for 10.36.72.32/27, version 507121
> Paths: (1 available, best #1, table Default-IP-Routing-Table)
> Flag: 0x820
>   Not advertised to any peer
>   20485 30835, (received & used)
>     10.36.2.22 (metric 3072) from 213.129.126.1 (10.36.1.1)
>       Origin incomplete, metric 0, localpref 100, valid, internal, best
>       Originator: 10.36.1.4, Cluster list: 10.36.1.1
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


More information about the cisco-nsp mailing list