Filtering, Filtering specific ip addresses – Brocade TurboIron 24X Series Configuration Guide User Manual

Page 736

Advertising
background image

702

Brocade TurboIron 24X Series Configuration Guide

53-1003053-01

Filtering

To enable the Layer 3 Switch to redistribute BGP4 routes into OSPF and RIP, enter the following
command.

TurboIron(config-bgp-router)#bgp-redistribute-internal

Syntax: [no] bgp-redistribute-internal

To disable redistribution of IBGP routes into RIP and OSPF, enter the following command.

TurboIron(config-bgp-router)#no bgp-redistribute-internal

Filtering

This section describes the following:

“Filtering specific IP addresses”

on page 702

“Filtering AS-paths”

on page 703

“Filtering communities”

on page 707

“Defining IP prefix lists”

on page 709

“Defining neighbor distribute lists”

on page 710

“Defining route maps”

on page 711

“Using a table map to set the rag value”

on page 719

“Configuring cooperative BGP4 route filtering”

on page 719

Filtering specific IP addresses

You can configure the router to explicitly permit or deny specific IP addresses received in updates
from BGP4 neighbors by defining IP address filters. The router permits all IP addresses by default.
You can define up to 100 IP address filters for BGP4.

If you want permit to remain the default behavior, define individual filters to deny specific IP
addresses.

If you want to change the default behavior to deny, define individual filters to permit specific IP
addresses.

NOTE

Once you define a filter, the default action for addresses that do not match a filter is “deny”. To
change the default action to “permit”, configure the last filter as “permit any any”.

Address filters can be referred to by a BGP neighbor's distribute list number as well as by match
statements in a route map.

NOTE

If the filter is referred to by a route map match statement, the filter is applied in the order in which
the filter is listed in the match statement.

NOTE

You also can filter on IP addresses by using IP ACLs.

To define an IP address filter to deny routes to 10.157.0.0, enter the following command.

Advertising