The MPLS-OPS Archive

Cell Relay Retreat>MPLS-OPS Archive>month:2001-Aug> msg00225



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

Re: RT filtering

  • From: Robert Raszuk <raszuk@cisco.com>
  • Date: Sun, 26 Aug 2001 13:10:21 -0700
  • CC: mpls-ops@mplsrc.com
  • Organization: Signature: http://www.employees.org/~raszuk/sig/
  • Resent-Date: Sun, 26 Aug 2001 18:16:40 -0400
  • To: Kim Quang Vo <kimquang.vo@ost.eltele.no>

Kim,

> I have the same question :

Incorrect. Your question is quite different from Marcelo's ;). 

> May I use RT filter for limit one member of VPN.
> That means source 10.1.1.0/24 has only permit to 10.1.250.0/24  but not
> others in  the VPN .

RT is a control plane parameter and not data plane therefor you can use
it to control what goes in or our of your VRF table. It has nothing to
do with applying any policy to the particular sources in your VPNs. For
this you should be applying regular ACL on the appropriate vrf's
interface. 

Marcelo,

> > What I would like to do is use regular expression like:
> > 
> > ip extcommunity-list expanded NAME permit <regular expression>
> > 
> > I think IOS does not support it for now. Do you know when it are going to
> > be suported?

I am not responsing to your question due to travelling but I think you
can match today with not full reg exp but at least wild cards in the
route map RT match statament. When I double check with running IOS I
will confirm,

R.


> Kim Quang Vo wrote:
> 
> I have the same question :
> May I use RT filter for limit one member of VPN.
> That means source 10.1.1.0/24 has only permit to 10.1.250.0/24  but not
> others in  the VPN .
> 
> Kim
> 
> ----- Original Message -----
> From: "Marcelo Blanes" <mblanes@larc.usp.br>
> To: "Robert Raszuk" <raszuk@cisco.com>
> Cc: <mpls-ops@mplsrc.com>
> Sent: Sunday, August 26, 2001 1:55 AM
> Subject: Re: RT filtering
> 
> Robert,
> 
> What I would like to do is use regular expression like:
> 
> ip extcommunity-list expanded NAME permit <regular expression>
> 
> I think IOS does not support it for now. Do you know when it are going to
> be suported?
> 
> Thanks,
> Marcelo.
> 
> On Wed, 15 Aug 2001, Robert Raszuk wrote:
> 
> >
> > Hi Marcelo,
> >
> > Yes you can do it in the vrf directly. Use import-map <route-map>. Note
> > that import route targets and import-map are used sequentially.
> >
> > That is:
> >
> > The import route-targets selects the set of routes which are eligible
> > for import the import-map allows you to prevent specific routes from
> > actually being imported
> >
> > Example:
> >
> > ip vrf RED
> >   import-map import-red
> >   route-target import 2000:7
> > !
> > access-list 1 permit 8.8.8.8
> >
> > route-map import-red permit 10
> >  match ip address 1
> >
> > R.
> >
> > > Marcelo Blanes wrote:
> > >
> > > Hi list,
> > >
> > > Is there any way to implement RT filtering in VRF instance. I would like
> > > to match a expression when defining route target import command? May
> > > be something like BGP route filtering using route-maps.
> > >
> > > Is it possible?
> > >
> > > Thanks,
> > >
> > > Marcelo.
> > >
> > > -------
> > > The MPLS-OPS Mailing List
> > > Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> > > Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
> >
> > -------
> > The MPLS-OPS Mailing List
> > Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> > Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
> >
> >
> >
> 
> -------
> The MPLS-OPS Mailing List
> Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
> 
> -------
> The MPLS-OPS Mailing List
> Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> Archive: http://www.mplsrc.com/mpls-ops_archive.shtml

-------
The MPLS-OPS Mailing List
Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
Archive: http://www.mplsrc.com/mpls-ops_archive.shtml