BGP route-map to filter default route with specific RT but allow all prefixes from other VRF's

[smailmilak]

Hi,

I am trying to create a route-map on IOS 122-33.SRE11 where I want to achieve this:

Allow only default route from RT 65101:50

Allow all routes from RT 65101:609 and 65101:10

I have a preflix-list with 0.0.0.0/0 for the default route in Route-map sequence 10 where I match the prefix-list and extcommunity list with RT 65101:50.

Second sequence is with with ext-community list with RT 65101:609 and 65101:10

Problem is that the route-map filters all routes that are not in the prefix-list. I want that the router checks the prefix-list only for RT 65101:50.

I have tried everything but whatever I do the router is denying all other routes except 0.0.0.0/0.

Workaround is to have the prefixes in the preflix-list I want to allow but this is not scalable.

On IOS-XR with RPL it's simple and I have accomplished this.

[paul driver]

Hello

Do you have extended communities enabled?
Can you post the config please of your route-map and prefix-list

res
Paul

[smailmilak]

Hi,

do you mean extended communities between the BGP neighbors? Yes.

Here is one of the multiple configs I have tried to use.

ip prefix-list DEF_ONLY

seq 5 permit 0.0.0.0/0

ip extcommunity-list standard INTERNET_VRF permit rt 65101:50
ip extcommunity-list standard INTERNAL_VRF permit rt 65101:10 rt 65101:609

route-map IGW_FILTER permit 10
match extcommunity INTERNAL_VRF
continue 30
route-map IGW_FILTER permit 15
match ip address prefix-list DEF_ONLY
match extcommunity INTERNET_VRF
continue 30
route-map IGW_FILTER permit 30
route-map IGW_FILTER deny 40

[Hitesh Vinzoda]

Hi Dude,

Can you try creating route-maps withouth "continue" statement and check.

Thanks

Hitesh

[Hitesh Vinzoda]

Hi Dude,

I suggest that you call a prefix list in permit 20 which is 0.0.0.0/0 le 32 and see if that helps.

HTH

Hitesh

[smailmilak]

Hi,

using 0.0.0.0/0 le 32 in seq 20 allows all routes. Maybe I am doing it wrong?

ip prefix-list DEF_ONLY_TEST: 1 entries
seq 5 permit 0.0.0.0/0

ip prefix-list INTERNAL_VRF: 1 entries
seq 5 permit 0.0.0.0/0 le 32

route-map IGW_FILTER_TEST, permit, sequence 10
Match clauses:
ip address prefix-lists: DEF_ONLY_TEST
extcommunity (extcommunity-list filter):INTERNET_VRF
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map IGW_FILTER_TEST, permit, sequence 15
Match clauses:
ip address prefix-lists: INTERNAL_VRF
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map IGW_FILTER_TEST, deny, sequence 40
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes