topic regular expression in Routing and SD-WAN

regular expression

kozorezdi — Mon, 04 Mar 2019 18:20:33 GMT

Hello everybody,

I have a simple question. I want to block all communities from a customer and permit only what I need.

How to achive the result? Please help me, I have spent a lot of time on this task. Thank you in advance.

router bgp 5555

...

neighbor 2.2.2.2 route-map CUST-in in

...

route-map CUST-in permit 10

set comm-list FILTER delete

set community 5555:1111

ip community-list expanded CUST-ACCEPT deny 5555:6[1-4][0-9][0-9][0-3]
ip community-list expanded CUST-ACCEPT deny 5555:4[1-4][0-9][0-9][0-3]
ip community-list expanded CUST-ACCEPT deny 5555:666
ip community-list expanded CUST-ACCEPT deny 5555:777
ip community-list expanded CUST-ACCEPT permit .*:.*

result: I am still receiving 5555:666[0-9][0-9] or 5555:777[0-9][0-9] instead of strict 5555:666 and 5555:777.

sh ip bgp 200.200.200.0

...

Community: 5555:1111 5555:666 5555:6661 5555:777 5555:7773 5555:43882

Re: regular expression

Giuseppe Larosa — Tue, 02 Nov 2010 15:08:48 GMT

Hello Kozorezdi,

you should match on the community-list instead of using the community-list to decide if it is good to delete the communities in received advertisement

so your route-map should look like

route-map CUST-in permit 10

match community CUST-ACCEPT

set community 5555:1111

you need a match statement to fillter

Hope to help

Giuseppe

Re: regular expression

Mahesh Gohil — Tue, 02 Nov 2010 16:51:39 GMT

Hi,

Well i am using this like...say my peer have as number 9730 then i am using below config

route-map BGP-OTIP-SIN-IN permit 95

set comm-list 154 delete

set community 1234:7000 additive

Community (expanded) access list 154

permit _9730:.+_

means any community tagges with 9730:any occurance will be deleted and then I add what I want

Hope this is helpful

Regards

Mahesh

Re: regular expression

kozorezdi — Tue, 02 Nov 2010 17:23:32 GMT

Thank you Giuseppe. It is not what I need. I have wrote not the whole command, it should be: set community 5555:1111 additive.

Another words, I need to receive some communities from my customer and remove all other (and add my communities as well).

I will permit something like: 5555:62340 or 5555:41002, I will deny 5555:22340 or 5555:91002 - it is working.

I will permit 5555:666, but I will permit 5555:6669 - and I don't like it. I need exactly 5555:666

Hope now, my question asked correctly.

Thank you in advance,

Dmitry

Re: regular expression

kozorezdi — Tue, 02 Nov 2010 17:35:29 GMT

Thank you Mahesh.

In you case, if you need just remove the communities from the customer, you can just use set community 1234:7000 (without additive). Have I missed someting?

I need more strict rule. Customer will sent communities for my network (my AS5555) and I don't need any other communities. I need to receive only:

I will deny everything else by:

ip community-list expanded CUST-ACCEPT permit .*:.*

but the customer can send and I will receive 5555:6665 or 5555:77742 and I need to fix it.

Have a nice day,

Dmitry

Re: regular expression

Giuseppe Larosa — Thu, 04 Nov 2010 13:43:32 GMT

Hello Dmitry,

I see you would like to avoid to match on BGP communities with an additional digit:

>> ip community-list expanded CUST-ACCEPT deny 5555:666

I would suggest to modify the statement in:

ip community-list expanded CUST-ACCEPT deny 5555:666_

the additional '_' should allow to specify that no additional digit should result in a match

Hope to help

Giuseppe

Re: regular expression

kozorezdi — Fri, 05 Nov 2010 16:07:12 GMT

Good everning Giuseppe,

Thank you very much! I don't know why I haven't checked it before , but it is exactly what I need.

Thanks a lot!

Dmitry