From: Henk de Tombe (henk.de.Tombe@qi.nl)
Date: Mon Aug 20 2007 - 07:54:04 ART
Hi,
Method1:
Try to create the same rule with the keyword host in between :-) That's
why it's not working.
The reason that method 3 is not working is because of the syntax in your
acl:
History-post:
http://www.groupstudy.com/archives/ccielab/200507/msg00684.html
Test on dynamips:
RTR01(config-route-map)#do sh access-list
Extended IP access list 100
10 permit ip host 150.1.1.0 host 255.255.255.0
Peering router on other side:
RTR02(config-router)#do sh ip bgp
There is no 0.0.0.0 in the BGP table.
Acl 101 is an extended acl in the notation so that BGP understands what
we want:
Extended IP access list 101
10 permit ip 150.1.1.0 0.0.0.255 host 255.255.255.0 (14 matches)
RTR02(config-router)#do sh ip bgp
BGP table version is 9, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
r> 0.0.0.0 192.168.12.1 0 100 i
After changing the route-map with the new acl (101), the default-route
gets propagated,
Regards,
Henk
Met vriendelijke groet,
Q&I
Henk de Tombe
Senior Network Engineer
Q&I NEDERLAND BV
Delftech Park 35 - 37
P.O. Box 402 - 2600 AK DELFT
Phone [+31] 15-8880444 - Fax [+31] 15-8880445
info@qi.nl - www.qi.nl
-----Oorspronkelijk bericht-----
Van: nobody@groupstudy.com [mailto:nobody@groupstudy.com] Namens NET HE
Verzonden: maandag 20 augustus 2007 4:10
Aan: tohsoon28@gmail.com; ccielab@groupstudy.com
Onderwerp: RE: Issue with BGP "neighbor default-originate route-map"
command
My understanding is to use standard ACL or prefix-list when comparing
with
routing map and use extended ACL when comparing with NLRI of BGP
database.
Your case is to compare routing map, so method 1, 2, and 3 should be
working.
To me, I really also want to know the difference between method 1 and 2.
Best Regards,
Net (Xin) He
>From: "Toh Soon, Lim" <tohsoon28@gmail.com>
>Reply-To: "Toh Soon, Lim" <tohsoon28@gmail.com>
>To: ccielab@groupstudy.com
>Subject: Issue with BGP "neighbor default-originate route-map" command
>Date: Mon, 20 Aug 2007 09:30:12 +0800
>MIME-Version: 1.0
>Received: from lists.groupstudy.com ([207.44.210.9]) by
>bay0-mc7-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Sun, 19
>Aug 2007 18:35:26 -0700
>Received: (from sympa@localhost)by lists.groupstudy.com
>(8.12.11.20060308/8.11.6) id l7K1ZNpb021992;Sun, 19 Aug 2007 21:35:23
-0400
>Received: from groupstudy.com (www.groupstudy.com [209.51.144.7])by
>lists.groupstudy.com (8.12.11.20060308/8.11.6) with ESMTP id
>l7K1UDj4021935for <ccielab@lists.groupstudy.com>; Sun, 19 Aug 2007
21:30:13
>-0400
>Received: from groupstudy.com (groupstudy.com [127.0.0.1])by
groupstudy.com
>(8.12.11.20060308/8.12.11) with ESMTP id l7K1UIvd005375GroupStudy
Mailer;
>Sun, 19 Aug 2007 21:30:18 -0400
>Received: (from listserver@localhost)by groupstudy.com
>(8.12.11.20060308/8.12.11/Submit) id l7K1UIQO005373for ccielabxhiddenx;
>Sun, 19 Aug 2007 21:30:18 -0400
>Received: from rv-out-0910.google.com (rv-out-0910.google.com
>[209.85.198.184]) by groupstudy.com (8.12.11.20060308/8.12.11) with
ESMTP
>id l7K1UGGJ005353 GroupStudy Mailer; Sun, 19 Aug 2007 21:30:16 -0400
>Received: by rv-out-0910.google.com with SMTP id k15so818805rvb for
><ccielab@groupstudy.com>; Sun, 19 Aug 2007 18:30:12 -0700 (PDT)
>Received: by 10.114.92.2 with SMTP id p2mr2809497wab.1187573412126;
Sun,
>19 Aug 2007 18:30:12 -0700 (PDT)
>Received: by 10.115.54.7 with HTTP; Sun, 19 Aug 2007 18:30:12 -0700
(PDT)
>X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
>X-Message-Info:
>+ECsOKemykfesWAtthZo542NRRsONqXDuY7ldS7YsytIgS+VERHi8TI54dFMHL5dMIMZFBo
ErGIar3gw0XaJHRvmp3rGcblv
>DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta;
>h=domainkey-signature:received:received:message-id:date:from:to:subject
:mime-version:content-type;
>
>b=Rd53Rr7CG+8EF7RlvxisQKoHf69ZOuqcF+u3HG6g8EgB3BCW1RYEs/5U61h9wzW1khv4P
U3iPHVkXe0ScI8E3cO4d8Hwgx/axqx8p9mfuMoi5meLyp+Z3a4ERwHwY2Z+se5XOAXHJ0mrY
7NPWk9Tgej3yFuhbxRWRNgARS4ssfM=
>DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
>h=received:message-id:date:from:to:subject:mime-version:content-type;
>b=YeIyysFRI7TPzxseeUAMhoA8AExZoRToblgvRcUnoy+SFIJdFCFGGrFwAPM/f/pq1YndS
g3ZMFfQ4WQr7tNDaCBDu/3/xuuAVUEy14aAS2OQdzm2L+QoITuB4amzGPzruL/KotTruIAsk
4KN+PprTEni8iTuhQWHLwxuCiEo9aU=
>X-Converted-To-Plain-Text: from multipart/alternative by GroupStudy
>X-Converted-To-Plain-Text: Alternative section used was text/plain
>X-ASK-Info: Whitelist match [from tohsoon28@gmail\.com] (2007/08/19
>21:30:17)
>X-Loop: ccielab@groupstudy.com
>X-Sequence: 20489
>Errors-to: ccielab-owner@groupstudy.com
>Precedence: bulk
>X-no-archive: yes
>List-Id: <ccielab.groupstudy.com>
>List-Help: <mailto:sympa@groupstudy.com?subject=help>
>List-Subscribe:
<mailto:sympa@groupstudy.com?subject=subscribe%20ccielab>
>List-Unsubscribe:
><mailto:sympa@groupstudy.com?subject=unsubscribe%20ccielab>
>List-Post: <mailto:ccielab@groupstudy.com>
>List-Owner: <mailto:ccielab-request@groupstudy.com>
>Return-Path: ccielab-owner@groupstudy.com
>X-OriginalArrivalTime: 20 Aug 2007 01:35:26.0537 (UTC)
>FILETIME=[62647390:01C7E2CA]
>
>Hi All,
>
>I'm trying the BGP "neighbor default-originate route-map" command. R7
will
>inject route 0.0.0.0 to R8 only if there is a route to 140.10.76.0/24.
The
>140.10.76.0/24 happens to be R7's connected Fa0/0 interface.
>!
>router bgp 700
> neighbor 140.10.78.8 remote-as 800
> neighbor 140.10.78.8 description *** R8 in AS 800 ***
> neighbor 140.10.78.8 default-originate route-map DEFtoR8
>!
>
>Method 1
>--------
>route-map DEFtoR8 permit 10
> match ip address 1
>!
>access-list 1 permit 140.10.76.0
>
>Method 2
>--------
>route-map DEFtoR8 permit 10
> match ip address 10
>!
>access-list 10 permit 140.10.76.0 0.0.0.255
>
>Method 3
>--------
>route-map DEFtoR8 permit 10
> match ip address 100
>!
>access-list 100 permit ip host 140.10.76.0 host 255.255.255.0
>
>Method 4
>--------
>route-map DEFtoR8 permit 10
> match ip address prefix-list TEST
>!
>ip prefix-list TEST seq 5 permit 140.10.76.0/24
>
>
>Only Methods 2 & 4 successfully source a BGP 0.0.0.0 route to R8 when
Fa0/0
>is up on R7. Can anyone explain why Methods 1 & 3 do not work? The ACL1
in
>Method 1 is the usual way I use to match prefixes and I expect it to
work
>in
>this scenario.
>
>Also, can you enlighten me the difference between ACL1 and ACL10 above
in
>terms of matching prefix 140.10.76.0/24? I was under the impression
that
>ACL1 matches the prefix address 140.10.76.0 exactly because the
wildcard
>mask is 0.0.0.0. I guess I'm wrong here.
>
>
>Thank you.
>
>B.Rgds,
>Lim TS
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Sep 01 2007 - 11:32:12 ART