Redistribution using route-maps and extended BGP communities
I have stumbled across a problem and I?m not sure how to fix it. I have an MPLS VPN containing private and management routes. I?m running EBGP between the PE and CE. I?m then using mutual redistribution between BGP and OSPF on the CE.
Management routes need to reach the CE but shouldn?t be passed downstream. I thought this should be easy enough. I configured my PE EBGP peer to send extended communities. I then checked the BGP routes on the CE and could see that each management route was marked with one or more communities.
I then created a route-map that I had hoped would block routes with those extended communities and redistribute everything else. I tried this two different ways with no joy. Both times all routes stop being redistributed.
First attempt:
router ospf 1
redistribute bgp 64512 metric 1 metric-type 1 subnets route-map BLOCK-MANAGEMENT
!
ip extcommunity-list 1 permit rt 100:1
ip extcommunity-list 1 permit rt 100:2
ip extcommunity-list 1 permit rt 100:3
route-map BLOCK-MANAGEMENT deny 10
match extcommunity 1
!
Second attempt:
router ospf 1
redistribute bgp 64512 metric 1 metric-type 1 subnets route-map BLOCK-MANAGEMENT
!
ip extcommunity-list 1 deny rt 100:1
ip extcommunity-list 1 deny rt 100:2
ip extcommunity-list 1 deny rt 100:3
route-map BLOCK-MANAGEMENT permit 10
match extcommunity 1
!
route-map BLOCK-MANAGEMENT permit 20
Any ideas?
