Mailing List Archive: Brocade Deny route from iBGP in IGP

Brocade Deny route from iBGP in IGP

Jun 4, 2015, 5:11 AM

Post #1 of 3 (1482 views)

Hi all,

We want to deny all /32 routes in IGP learned from iBGP.
How can we do this? With a table-map the route go in the IGP:

ip prefix-list only32 seq 5 permit 0.0.0.0/0 ge 32

router bgp
local-as xxxx
-knip-

address-family ipv4 unicast
table-map deny-blackhole-in-IGP
-knip-
exit-address-family

route-map deny-blackhole-in-IGP deny 10
match ip address prefix-list only32

_______________________________________________
foundry-nsp mailing list
foundry-nsp@puck.nether.net
http://puck.nether.net/mailman/listinfo/foundry-nsp

Re: Brocade Deny route from iBGP in IGP [ In reply to ]

gk at ax

Jun 4, 2015, 7:10 AM

Post #2 of 3 (1467 views)

Permalink

I guess "table-map's" are not made for filtering IP prefixes:

http://www.brocade.com/downloads/documents/html_product_manuals/NOS_501_CMDREF/GUID-D2D7228E-465E-4639-8EFE-7DF84B62EA36.html

But you can use "neighbor ... prefix-list ... in":

http://www.brocade.com/downloads/documents/html_product_manuals/NOS_501_CMDREF/GUID-EAAB0CCE-FA09-44C1-AA5B-31BFC0198C1A.html

Or "neighbor ... route-map ... in":

http://www.brocade.com/downloads/documents/html_product_manuals/NOS_501_CMDREF/GUID-3D149823-A42A-42EF-B08D-2E8197F81B0A.html

--
Gerald

Am 04.06.2015 um 14:11 schrieb tech@elecks.nl:
> Hi all,
>
> We want to deny all /32 routes in IGP learned from iBGP.
> How can we do this? With a table-map the route go in the IGP:
>
>
> ip prefix-list only32 seq 5 permit 0.0.0.0/0 ge 32
>
> router bgp
> local-as xxxx
> -knip-
>
> address-family ipv4 unicast
> table-map deny-blackhole-in-IGP
> -knip-
> exit-address-family
>
>
> route-map deny-blackhole-in-IGP deny 10
> match ip address prefix-list only32
>
>
>
>
> _______________________________________________
> foundry-nsp mailing list
> foundry-nsp@puck.nether.net
> http://puck.nether.net/mailman/listinfo/foundry-nsp
>

_______________________________________________
foundry-nsp mailing list
foundry-nsp@puck.nether.net
http://puck.nether.net/mailman/listinfo/foundry-nsp

Re: Brocade Deny route from iBGP in IGP [ In reply to ]

robhass at gmail

Jun 7, 2015, 7:38 AM

Post #3 of 3 (1462 views)

Permalink

Just apply your prefix-list inbound filter on your iBGP neighbor.
Table-map is used for whole table.

Rob

On Thu, Jun 4, 2015 at 2:11 PM, <tech@elecks.nl> wrote:

> Hi all,
>
> We want to deny all /32 routes in IGP learned from iBGP.
> How can we do this? With a table-map the route go in the IGP:
>
>
> ip prefix-list only32 seq 5 permit 0.0.0.0/0 ge 32
>
> router bgp
> local-as xxxx
> -knip-
>
> address-family ipv4 unicast
> table-map deny-blackhole-in-IGP
> -knip-
> exit-address-family
>
>
> route-map deny-blackhole-in-IGP deny 10
> match ip address prefix-list only32
>
>
>
>
> _______________________________________________
> foundry-nsp mailing list
> foundry-nsp@puck.nether.net
> http://puck.nether.net/mailman/listinfo/foundry-nsp
>