Redistributing EIGRP using route-map Nexus 5596 L3

[r.shummoogum]

Hi All:

this is a Nexus 5596 L3 with the latest code:

It looks like the deny statement is not working as I can see  all routes I am redistributing. I even did a deny on a specific route and I still see it in the routing table on another router in the autonomous system.

The same below works fine on IOS platform

ant help appreciated before I open a case.

Thanks

ip access-list ACL-ALLOW-STATIC-TO-EIGRP

  10 remark test

  20 remark test2

  30 permit ip 55.55.55.1/32 any

  40 permit ip 55.55.65.1/32 any

  50 permit ip 55.55.75.1/24 any

  60 deny ip any any

route-map ROUTEMAP-ALLOW-STATIC-TO-EIGRP permit 10

  match ip address ACL-ALLOW-STATIC-TO-EIGRP

route-map ROUTEMAP-ALLOW-STATIC-TO-EIGRP deny 20

router eigrp client

  autonomous-system 1

   redistribute static route-map ROUTEMAP-ALLOW-STATIC-TO-EIGRP

  default-information originate

ip route 0.0.0.0/0 10.121.1.1

ip route 55.55.55.1/32 10.121.1.18 name test1

ip route 55.55.65.1/32 10.121.1.18 name test2

ip route 55.55.75.1/32 10.121.1.18 name test3

ip route 55.55.85.1/32 10.121.1.18 name test4

ip route 55.55.95.1/32 10.121.1.18 name test5

[Jerry Ye]

You cannot use IP access-list inside a route-map to perform redistribution in NXOS. You will have to use prefix-list instead:

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/unicast/5_0_3_N1_1/l3_rpm.html#wp1071167

However, N5500 NXOS 5.1(3)N1(1) has an IP prefix-list bug which the ip prefix-list command is not available in the CLI (I cannot share the bug ID since it is still internal), you should downgrade it to NXOS 5.0(3)N2(2b) instead.

HTH,

jerry

[r.shummoogum]

First of all thanks for your reply. Very much appreciated.

I have been waiting for 5.1(3)N1(1)  for 2 months now for a bug fix.

It is hard to fallback. Is this documented somewhere that I cannot use IP ACL for routemap to do redist?

Thanks

[Jerry Ye · Accepted solution]

It is listed in the link in my first post:

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/unicast/5_0_3_N1_1/l3_rpm.html#wp1088438

If you read the route-map section, it states that prefix-list is used for match based on an address or range of addresses. And ACL is used for a number of IP packet fields such as the following:

- Source or destination IPv4 address

- Protocol

- Precedence

- ToS

Can you tell me which bug you are waiting for 5.1(3)?

Regards,

jerry

[r.shummoogum]

thanks. The bug was the management SVI which is now a new feature in the new code.

[Jerry Ye]

Thanks for the info and points.

Regards,

jerry