Configuring Bgp Filtering By Neighbor - Cisco IE-4000 Software Configuration Manual

Configuring IP Unicast Routing
Configuring BGP

Configuring BGP Filtering by Neighbor

You can filter BGP advertisements by using AS-path filters, such as the as-path access-list global configuration
command and the neighbor filter-list router configuration command. You can also use access lists with the neighbor
distribute-list router configuration command. Distribute-list filters are applied to network numbers. See
Advertising and Processing in Routing Updates, page 920
You can use route maps on a per-neighbor basis to filter updates and to modify various attributes. A route map can be
applied to either inbound or outbound updates. Only the routes that pass the route map are sent or accepted in updates.
On both inbound and outbound updates, matching is supported based on AS path, community, and network numbers.
Autonomous-system path matching requires the match as-path access-list route-map command, community-based
matching requires the match community-list route-map command, and network-based matching requires the ip
access-list global configuration command.
BEFORE YOU BEGIN
Enable BGP routing as described in the
DETAILED STEPS
Command
1. configure terminal
2. router bgp autonomous-system
3. neighbor {ip-address | peer-group
name} distribute-list
{access-list-number | name} {in | out}
4. neighbor {ip-address | peer-group
name} route-map map-tag {in | out}
5. end
6. show ip bgp neighbors
7. copy running-config startup-config
Use the no neighbor distribute-list command to remove the access list from the neighbor. Use the no neighbor
route-map map-tag router configuration command to remove the route map from the neighbor.
EXAMPLE
The following router configuration mode example applies list 39 to incoming advertisements from neighbor172.16.4.1.
List 39 permits the advertisement of network 10.109.0.0.
Switch(config)# router bgp 109
Switch(config-router)# network 10.108.0.0
Switch(config-router)# neighbor 172.16.4.1 distribute-list 39 in
Configuring BGP Filtering By Access Lists
Another method of filtering is to specify an access list filter on both incoming and outbound updates, based on the BGP
autonomous system paths. Each filter is an access list based on regular expressions. (See
BGP for more information on forming regular expressions.) To use this method, define an autonomous system path
access list, and apply it to updates to and from particular neighbors.
for information about the distribute-list command.
Enabling BGP Routing, page
Purpose
Enter global configuration mode.
Enable a BGP routing process, assign it an AS number, and
enter router configuration mode.
(Optional) Filter BGP routing updates to or from neighbors
as specified in an access list.
Note: You can also use the neighbor prefix-list router
configuration command to filter updates, but you cannot
use both commands to configure the same BGP peer.
(Optional) Apply a route map to filter an incoming or
outgoing route.
Return to privileged EXEC mode.
Verify the configuration.
(Optional) Save your entries in the configuration file.
858
850.
Using Regular Expressions in
Controlling