cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
365
Views
0
Helpful
1
Replies

Filter prefixes between VRFs in IOS-XR

silenthunter1
Level 1
Level 1

Good day.

 

I have ASR9006.

 

It has some VRF:

 

vrf GREEN
 description GREEN
 address-family ipv4 unicast
  import route-target
   7777:1000
   7777:2000
   7777:3000
  !
  export route-policy VRF-GREEN-EXPORT
  export route-target
   7777:3000
  !
 !
!

 

And route-policy is:

route-policy VRF-GREEN-EXPORT
  if destination in ALLOWED_EXPORT_FROM_GREEN or community matches-any OUR-CLIENTS then
    done
  else
    set extcommunity rt (7777:9999)
    drop
  endif
end-policy

 

But that prefixes are not droped. It seems DROP statement ain't working at all. They are still advertising to another peers. ("set extcommunity" is just debug).

 

How to prevent leakage of certain prefixes (VRF-GREEN-EXPORT has full-view table and i do not want to redistribute it to 7600s but i need to redistribute some other prefixes)?

1 Reply 1

Hello.

Do you see any prefixes been exported with "debug" 7777:9999 community (where it was not originally there)?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: