Forum Discussion

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
May 24, 2023

BGP - filtering kernel redistribution

Hello everyone,  I must be missing something on this setup:  I'm trying to configure BGP protocol to redistribute the Virtual Addresses that are configured on the unit, so that when monitors mark ...
application delivery
  • CA_Valli's avatar
    CA_Valli
    May 24, 2023

    I had originally posted this statement: 

    " I have tried tuning prefix-list but it doesn't seem to work either "

     

     

    ip prefix-list lab seq 1 permit 1.1.1.1/32

     

     

     

     

    Actually, after more tests, this seems to be the solution -- I sorted it out by completely removing all "redistribute" statements on the process, and then when I added it back again with the "updated" prefix list to match, it worked as intended. 

    I've edited original post to fix this info.

    I'm assuming matches on prefix-list statements require to be "exact matches", I was hoping subnet could match all. 

     

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP

I had originally posted this statement: 

" I have tried tuning prefix-list but it doesn't seem to work either "

 

 

ip prefix-list lab seq 1 permit 1.1.1.1/32

 

 

 

 

Actually, after more tests, this seems to be the solution -- I sorted it out by completely removing all "redistribute" statements on the process, and then when I added it back again with the "updated" prefix list to match, it worked as intended. 

I've edited original post to fix this info.

I'm assuming matches on prefix-list statements require to be "exact matches", I was hoping subnet could match all. 

 

wtwiggs's avatar
wtwiggs
Icon for Altocumulus rankAltocumulus
Jun 01, 2023

if you match an ip access list instead of prefix list it should work with subnet/cidr range.  we are using similar syntax and it has been in production use for several years. we set a /16 mask/range in our access list and each time we enable route advertisement on a Virtual Address the new /32 address automatically redistributes (RHI aka route injection) thru OSPF and BGP (we use both). as a reminder, don't forget to enable route advertisement on each virtual address in LTM.  regarding access list for your example it should look like this:

access-list lab permit 1.1.1.0/27

route-map frontend permit 5
 match ip address lab

router bgp NNNNN
 redistribute kernel route-map frontend