hi,
i have 2 isps and 4 /24 subnets lets take it as isp1 and isp2, networks as 1, 2, 3, 4. I have to advertise 1 and 2 on isp1 and 3 and 4 on isp2 My filter list is
subnet 1 accept chain isp1out
subnet 2 accept chain isp1out
discard all chain isp1out
subnet 3 accept chain isp2out
subnet 4 accept chain isp2out
discard all chain isp2out
filters on isp1 works well and filters on isp2 discards all the subnets ignoring subnet 3 and 4. Anything wrong in my filters or is it a bug. Hardware is ccr 1036-8g version 6.15
Unfortunately you don’t provide a copy of your config.
Filters worked for me on 6.15 on my CCR’s.
Things to look out for:
Chain typo - Case sensitive so check that, also make sure you have applied the in and out filters to the peers / sessions (if you do more than one session)
Check the order of rules, if you have a single session and two peers (one to each ISP) then make sure you haven’t put one of the filters onto the session, if isp1out is on the session and you use that one session you discard the isp2 prefixes first then you discard the isp1 prefixes on the peer itself.
Check your networks list has the prefixes in them and that your matching is equal. If you have the 2 /24’s being contiguous and your network line has them as a /23 but your rule accepts only the /24’s then they won’t match the rule.
For more help please provide config example.
Also can I ask why you aren’t using 6.17? I am still validating 6.19 and 6.18 had issues but I liked 6.17 and validated it for my network usage. Two of my border routers are currently validating 6.19 release and the third one is still on 6.19RC13 that was validated through earlier testing. Two of them are CCR’s
Regards
Alexander
ty, here is my config
0 chain=isp1-out prefix=x.x.7.0/24 prefix-length=24-32 invert-match=no action=accept set-bgp-prepend-path=“”
1 chain=isp2-out invert-match=no action=discard set-bgp-prepend-path=“”
2 chain=isp2-out prefix=x.x.53.0/24 invert-match=no action=accept set-bgp-prepend-path=“”
3 chain=isp1-out prefix=x.x.5.0/24 prefix-length=24-32 invert-match=no action=accept set-bgp-prepend-path=“”
4 chain=isp1-out invert-match=no action=discard set-bgp-prepend-path=“”
5 chain=isp2-out prefix=x.x.41.0/24 invert-match=no action=accept set-bgp-prepend-path=“”
scared of upgrading as its now on load after testing 35 days in idle mode then 300mbps and now 400mbps.
Look at the order of rules. For chain isp2-out first rule is discard in your config.
thanks,
This question i always wanted to ask. What is the match criteria of bgp filters.
all rules are read
rules are read till match is met.
no its not something to do with rule order. As discard all rule is 2nd so subnet 2 should be advertised.
I tried to change the rule order with discard all in the last but still same problem
look at your rules more closely. First rule is from chain “isp1-out”, second drop rule is from chain “isp2-out”.
So for chain “isp2-out” first rule is dropping everything.
i changed the rule order as per said but on isp2 it was still advertising all subnets. I deleted all rules of isp2 and chain. Added all 3 rules again. Everything working as per needed. ty all. Next problem is policy routing