Forum Discussion

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
May 24, 2023

BGP - filtering kernel redistribution

Hello everyone,  I must be missing something on this setup:  I'm trying to configure BGP protocol to redistribute the Virtual Addresses that are configured on the unit, so that when monitors mark ...
application delivery
  • CA_Valli's avatar
    CA_Valli
    May 24, 2023

    I had originally posted this statement: 

    " I have tried tuning prefix-list but it doesn't seem to work either "

     

     

    ip prefix-list lab seq 1 permit 1.1.1.1/32

     

     

     

     

    Actually, after more tests, this seems to be the solution -- I sorted it out by completely removing all "redistribute" statements on the process, and then when I added it back again with the "updated" prefix list to match, it worked as intended. 

    I've edited original post to fix this info.

    I'm assuming matches on prefix-list statements require to be "exact matches", I was hoping subnet could match all. 

     

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
May 24, 2023

I had originally posted this statement: 

" I have tried tuning prefix-list but it doesn't seem to work either "

 

 

ip prefix-list lab seq 1 permit 1.1.1.1/32

 

 

 

 

Actually, after more tests, this seems to be the solution -- I sorted it out by completely removing all "redistribute" statements on the process, and then when I added it back again with the "updated" prefix list to match, it worked as intended. 

I've edited original post to fix this info.

I'm assuming matches on prefix-list statements require to be "exact matches", I was hoping subnet could match all. 

 

  • wtwiggs's avatar
    wtwiggs
    Icon for Altocumulus rankAltocumulus
    Jun 01, 2023

    if you match an ip access list instead of prefix list it should work with subnet/cidr range.  we are using similar syntax and it has been in production use for several years. we set a /16 mask/range in our access list and each time we enable route advertisement on a Virtual Address the new /32 address automatically redistributes (RHI aka route injection) thru OSPF and BGP (we use both). as a reminder, don't forget to enable route advertisement on each virtual address in LTM.  regarding access list for your example it should look like this:

    access-list lab permit 1.1.1.0/27

    route-map frontend permit 5
     match ip address lab

    router bgp NNNNN
     redistribute kernel route-map frontend