[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cisco-nsp
Subject:    Re: [c-nsp] IOS XR vrf export route-policy
From:       "Aaron" <aaron1 () gvtc ! com>
Date:       2016-02-19 3:40:56
Message-ID: 000201d16ac7$57bc9d30$0735d790$ () gvtc ! com
[Download RAW message or body]

I may have found the answer to this...

vrf export route-policy doesn't seem to directly deny prefixes from
advertisement... but according to this one site you can indirectly deny
prefixes... it seems that vrf export route-policy is mainly used to more
granularly assign rt's and add rt's to rt's (additive).

http://www.akbintel.com/mediawiki/index.php/VRF/Config#export_map

http://nagendrakumar-nagendra.blogspot.com/2011/09/mpls-vpn-vrf-export-map.h
tml

I thought it was pretty clever to not put a route-target export x:x and then
whichever prefixes are denied in the export route-policy will drop out of
the route-map logic, and this will not be advertised since there isn't a
route-target export statement in the vrf.  Cool.

Aaron


-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces@puck.nether.net] On Behalf Of
Aaron
Sent: Thursday, February 18, 2016 4:40 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] IOS XR vrf export route-policy

Shouldn't the following block 192.168.252.0/24 from being exported ?  What
am I not understanding about vrf export maps ?

 

I have bounced BVI200 on this PE and I see the route get removed from remote
PE's, but when I no shut bvi200 that route is readvertised and the export
map doesn't seem to drop that route like I'm trying to do.
I have bounced bgp also on this PE, and still don't see that route being
dropped like I'm trying to accomplish.

 

vrf one

address-family ipv4 unicast

  import route-target

   1:1

  !

  export route-policy routes-export

  export route-target

   1:1

  !

!

!

 

 

route-policy routes-export

  if destination in export-1to1-all-routes then

    drop

  endif

end-policy

!

 

prefix-set export-1to1-all-routes

  192.168.252.0/24

end-set

!

 

 

RP/0/RSP0/CPU0:eng-lab-9k-1#sh route vrf one connected | in BVI

C    192.168.252.0/24 is directly connected, 00:05:53, BVI200

 

 

 

Aaron

 

 

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic