Good day.
I have ASR9006.
It has some VRF:
vrf GREEN
description GREEN
address-family ipv4 unicast
import route-target
7777:1000
7777:2000
7777:3000
!
export route-policy VRF-GREEN-EXPORT
export route-target
7777:3000
!
!
!
And route-policy is:
route-policy VRF-GREEN-EXPORT
if destination in ALLOWED_EXPORT_FROM_GREEN or community matches-any OUR-CLIENTS then
done
else
set extcommunity rt (7777:9999)
drop
endif
end-policy
But that prefixes are not droped. It seems DROP statement ain't working at all. They are still advertising to another peers. ("set extcommunity" is just debug).
How to prevent leakage of certain prefixes (VRF-GREEN-EXPORT has full-view table and i do not want to redistribute it to 7600s but i need to redistribute some other prefixes)?