I can’t get BGP to filter routes to an ISP. It’s a multihoming setup and it’s trying to send the entire BGP tables that the AS gets from ISP1 to ISP2. I put filters outbound but the don’t seem to work. Please help, I’m not a MikroTik ninja and dont know what else to check or what I could be missing. Thank you!
Chris
!!!System info
[admin2@MikroTik] /system routerboard> print
routerboard: yes
model: CCR1009-8G-1S-1S+
serial-number: 4AB104F864DE
current-firmware: 3.13
upgrade-firmware: 3.22
[admin2@MikroTik] /system routerboard>
!!!BGP Peers
[admin2@MikroTik] /routing> bgp export verbose
# jun/19/2015 13:18:05 by RouterOS 6.27
# software id = A8XE-5BH5
#
[admin2@MikroTik] /routing> bgp export verbose
# jun/19/2015 13:24:27 by RouterOS 6.27
# software id = A8XE-5BH5
#
/routing bgp instance
set default as=65530 client-to-client-reflection=yes !cluster-id !confederation disabled=yes \
ignore-as-path-len=no name=default out-filter="" redistribute-connected=no redistribute-ospf=no \
redistribute-other-bgp=no redistribute-rip=no redistribute-static=no router-id=0.0.0.0 routing-table=\
""
add as=393386 client-to-client-reflection=no !cluster-id !confederation disabled=no ignore-as-path-len=no \
name=AS393386 out-filter="" redistribute-connected=no redistribute-ospf=no redistribute-other-bgp=no \
redistribute-rip=no redistribute-static=no router-id=1.1.1.1 routing-table=""
/routing bgp network
add disabled=no network=207.201.201.0/24 synchronize=no
add disabled=no network=96.33.99.0/24 synchronize=no
/routing bgp peer
add address-families=ip !allow-as-in as-override=no default-originate=never disabled=no hold-time=3m \
in-filter="" instance=AS393386 !keepalive-time !max-prefix-limit !max-prefix-restart-time multihop=no \
name=R2 nexthop-choice=default out-filter="" passive=no remote-address=10.5.1.3 remote-as=393386 \
remove-private-as=no route-reflect=no tcp-md5-key="" ttl=default use-bfd=no
add address-families=ip !allow-as-in as-override=no default-originate=never disabled=no hold-time=3m \
in-filter=TWC-IN instance=AS393386 !keepalive-time !max-prefix-limit !max-prefix-restart-time \
multihop=no name=TWC nexthop-choice=default out-filter=TWC-OUT passive=no remote-address=\
74.202.124.233 remote-as=4323 remove-private-as=no route-reflect=no tcp-md5-key="" ttl=default \
use-bfd=no
[admin2@MikroTik] /routing>
!!!Routing filters
[admin2@MikroTik] > /routing filter export verbose
# jun/19/2015 13:14:39 by RouterOS 6.27
# software id = A8XE-5BH5
#
/routing filter
add action=accept !address-family !append-bgp-communities !append-route-targets !bgp-as-path \
!bgp-as-path-length !bgp-atomic-aggregate !bgp-communities !bgp-local-pref !bgp-med !bgp-origin \
!bgp-weight chain=TWC-OUT disabled=no !distance invert-match=no !locally-originated-bgp !match-chain \
!ospf-type !pref-src prefix=207.201.201.0/24 !prefix-length !protocol !route-comment !route-tag \
!route-targets !routing-mark !scope !set-bgp-communities !set-bgp-local-pref !set-bgp-med \
!set-bgp-prepend set-bgp-prepend-path="" !set-bgp-weight !set-check-gateway !set-disabled \
!set-distance !set-in-nexthop !set-in-nexthop-direct !set-in-nexthop-ipv6 !set-in-nexthop-linklocal \
!set-out-nexthop !set-out-nexthop-ipv6 !set-out-nexthop-linklocal !set-pref-src !set-route-comment \
!set-route-tag !set-route-targets !set-routing-mark !set-scope !set-site-of-origin !set-target-scope \
!set-type !set-use-te-nexthop !site-of-origin !target-scope
add action=accept !address-family !append-bgp-communities !append-route-targets !bgp-as-path \
!bgp-as-path-length !bgp-atomic-aggregate !bgp-communities !bgp-local-pref !bgp-med !bgp-origin \
!bgp-weight chain=TWC-OUT disabled=no !distance invert-match=no !locally-originated-bgp !match-chain \
!ospf-type !pref-src prefix=96.33.99.0/24 !prefix-length !protocol !route-comment !route-tag \
!route-targets !routing-mark !scope !set-bgp-communities !set-bgp-local-pref !set-bgp-med \
!set-bgp-prepend set-bgp-prepend-path="" !set-bgp-weight !set-check-gateway !set-disabled \
!set-distance !set-in-nexthop !set-in-nexthop-direct !set-in-nexthop-ipv6 !set-in-nexthop-linklocal \
!set-out-nexthop !set-out-nexthop-ipv6 !set-out-nexthop-linklocal !set-pref-src !set-route-comment \
!set-route-tag !set-route-targets !set-routing-mark !set-scope !set-site-of-origin !set-target-scope \
!set-type !set-use-te-nexthop !site-of-origin !target-scope
add action=passthrough !address-family !append-bgp-communities !append-route-targets !bgp-as-path \
!bgp-as-path-length !bgp-atomic-aggregate !bgp-communities !bgp-local-pref !bgp-med !bgp-origin \
!bgp-weight chain=TWC-OUT disabled=no !distance invert-match=no !locally-originated-bgp !match-chain \
!ospf-type !pref-src prefix=96.33.99.0/24 !prefix-length !protocol !route-comment !route-tag \
!route-targets !routing-mark !scope !set-bgp-communities !set-bgp-local-pref !set-bgp-med \
set-bgp-prepend=4 set-bgp-prepend-path="" !set-bgp-weight !set-check-gateway !set-disabled \
!set-distance !set-in-nexthop !set-in-nexthop-direct !set-in-nexthop-ipv6 !set-in-nexthop-linklocal \
!set-out-nexthop !set-out-nexthop-ipv6 !set-out-nexthop-linklocal !set-pref-src !set-route-comment \
!set-route-tag !set-route-targets !set-routing-mark !set-scope !set-site-of-origin !set-target-scope \
!set-type !set-use-te-nexthop !site-of-origin !target-scope
add action=discard !address-family !append-bgp-communities !append-route-targets !bgp-as-path \
!bgp-as-path-length !bgp-atomic-aggregate !bgp-communities !bgp-local-pref !bgp-med !bgp-origin \
!bgp-weight chain=TWC-OUT disabled=no !distance invert-match=no !locally-originated-bgp !match-chain \
!ospf-type !pref-src !prefix !prefix-length !protocol !route-comment !route-tag !route-targets \
!routing-mark !scope !set-bgp-communities !set-bgp-local-pref !set-bgp-med !set-bgp-prepend \
set-bgp-prepend-path="" !set-bgp-weight !set-check-gateway !set-disabled !set-distance \
!set-in-nexthop !set-in-nexthop-direct !set-in-nexthop-ipv6 !set-in-nexthop-linklocal \
!set-out-nexthop !set-out-nexthop-ipv6 !set-out-nexthop-linklocal !set-pref-src !set-route-comment \
!set-route-tag !set-route-targets !set-routing-mark !set-scope !set-site-of-origin !set-target-scope \
!set-type !set-use-te-nexthop !site-of-origin !target-scope
[admin2@MikroTik] >
!!!Output from logs showing BGP flapping due to route filter issue
12:44:07 route,bgp,info RemoteAddress=74.202.124.233
12:45:09 route,bgp,info TCP connection established
12:45:09 route,bgp,info RemoteAddress=74.202.124.233
12:45:09 route,bgp,error Received notification
12:45:09 route,bgp,error cease: prefix limit reached
12:45:09 route,bgp,info Connection terminated
12:45:09 route,bgp,info RemoteAddress=74.202.124.233
12:46:10 route,bgp,info TCP connection established
12:46:10 route,bgp,info RemoteAddress=74.202.124.233
12:46:10 route,bgp,error Received notification
12:46:10 route,bgp,error cease: prefix limit reached
12:47:07 route,bgp,info TCP connection established
12:47:07 route,bgp,info RemoteAddress=74.202.124.233
12:47:07 route,bgp,error Received notification
12:47:07 route,bgp,error cease: prefix limit reached
12:47:07 route,bgp,info Connection terminated
12:47:07 route,bgp,info RemoteAddress=74.202.124.233
12:47:58 route,bgp,info TCP connection established
12:47:58 route,bgp,info RemoteAddress=74.202.124.233
12:47:58 route,bgp,error Received notification
12:47:58 route,bgp,error cease: prefix limit reached
12:47:59 route,bgp,info Connection terminated