Configure IP Prefix List and Route Map on Tenant BGP Peer Group

To enable external connectivity, you can configure the IP prefix list and route map attributes in ingress or egress direction when you create or update BGP peer group.

About this task

Follow this procedure to configure IP prefix list and route map attributes.

Procedure

  1. Run the following command to configure IP prefix list and route map attributes when you create BGP peer group:
    efa tenant service bgp peer-group create --name <bgp-pg-name> --tenant <tenant-name>
        --pg-name <device-ip:pg-name> --pg-asn <device-ip,pg-name:remote-asn>
        --pg-bfd-enable <device-ip,pg-name:true|false> 
        --pg-ipv4-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction>
        --pg-ipv4-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction>
                    
        --pg-ipv6-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction>
        --pg-ipv6-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction>

    The following example configures IP prefix list and route map:

    efa tenant service bgp peer-group create --name ten1bgppg1 --tenant ten1 
        --pg-name 10.20.246.15:pg1 --pg-asn 10.20.246.15,pg1:55001 
        --pg-bfd-enable 10.20.246.15,pg1:true 
        --pg-ipv4-uc-nbr-prefix-list 10.20.246.15,pg1:ipPrefixList1,in
        --pg-ipv6-uc-nbr-prefix-list 10.20.246.15,pg1:ipPrefixList2,out 
        --pg-ipv4-uc-nbr-route-map 10.20.246.15,pg1:routeMap2,in 
        --pg-ipv6-uc-nbr-route-map 10.20.246.15,pg1:routeMap1,in 
               
        --pg-name 10.20.246.16:pg1 --pg-asn 10.20.246.16,pg1:55001 
        --pg-bfd-enable 10.20.246.16,pg1:true 
        --pg-ipv4-uc-nbr-prefix-list 10.20.246.16,pg1:ipPrefixList1,in
        --pg-ipv6-uc-nbr-prefix-list 10.20.246.16,pg1:ipPrefixList1,out 
        --pg-ipv4-uc-nbr-route-map 10.20.246.16,pg1:routeMap1,in 
        --pg-ipv6-uc-nbr-route-map 10.20.246.16,pg1:routeMap1,out
  2. Run the following command to configure IP prefix list and route map attributes when you update BGP peer group:
    efa tenant service bgp peer-group update --name <bgp-pg-name> --tenant <tenant-name> 
        --operation peer-group-add 
        --pg-name <device-ip:pg-name> --pg-asn <device-ip,pg-name:remote-asn>
        --pg-bfd-enable <device-ip,pg-name:true|false> 
        --pg-ipv4-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction>
        --pg-ipv4-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction>
                    
        --pg-ipv6-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction>
        --pg-ipv6-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction>

    The following example configures IP prefix list and route map:

    efa tenant service bgp peer-group update --name ten1bgppg1 --tenant ten1 
            --operation peer-group-add 
            --pg-name 10.20.246.15:pg2 --pg-asn 10.20.246.15,pg2:55002 
            --pg-bfd-enable 10.20.246.15,pg2:true 
            --pg-ipv6-uc-nbr-prefix-list 10.20.246.15,pg2:ipPrefixList2,out 
            --pg-ipv4-uc-nbr-route-map 10.20.246.15,pg2:routeMap2,in
                      
            --pg-name 10.20.246.16:pg2 --pg-asn 10.20.246.16,pg2:55002 
            --pg-bfd-enable 10.20.246.16,pg2:true 
            --pg-ipv6-uc-nbr-prefix-list 10.20.246.16,pg2:ipPrefixList1,out 
            --pg-ipv4-uc-nbr-route-map 10.20.246.16,pg2:routeMap1,in
    efa tenant service bgp peer-group show --detail
    ===========================================
    Name             : ten1bgppg1
    Tenant           : ten1
    State            : bgp-pg-created
    Description      :
    
    Peer Group
    ----------
     Device IP         : 10.20.246.16
     Peer Group        : pg1
     Remote ASN        : 65002
     Next Hop Self     : true
     Update Source IP  : 10.20.30.40
     BFD Enabled       : true
     BFD Interval      : 100
     BFD Rx            : 300
     BFD Multiplier    : 5
     MD5 Password      : $9$QxCvD7N6a0P96eT3BvnQfQ==
     Remove Private AS : true
     Prefix List In : Name (afi)
                         ipPrefixList1 (ipv4)
     Prefix List Out   : Name (afi)
                         ipPrefixList1 (ipv6)
     Route Map In      : Name (afi)
                         routeMap1 (ipv4)
     Route Map Out     : Name (afi)
                         routeMap1 (ipv6)
     Send Community    : both (ipv4)
     Dev State         : provisioned
     App State         : cfg-in-sync
    
     Device IP         : 10.20.246.16
     Peer Group        : pg2
     Remote ASN        : 65002
     Next Hop Self     : true
     Update Source IP  : 10.20.30.50
     BFD Enabled       : true
     BFD Interval      : 100
     BFD Rx            : 300
     BFD Multiplier    : 5
     MD5 Password      : $9$QxCvD7N6a0P96eT3BvnQfQ==
     Remove Private AS : true
     Prefix List In    : 
     Prefix List Out   : Name (afi)
                         ipPrefixList1 (ipv6)
     Route Map In      : Name (afi)
                         routeMap1 (ipv4)
     Route Map Out     : 
     Send Community    : both (ipv4)
     Dev State         : provisioned
     App State         : cfg-in-sync
    ======================================
    ========================================================       
    
    
    
    
    
    
    
     Device IP         : 10.20.246.15
     Peer Group        : pg1
     Remote ASN        : 65002
     Next Hop Self     : true
     Update Source IP  : 10.20.30.40
     BFD Enabled       : true
     BFD Interval      : 100
     BFD Rx            : 300
     BFD Multiplier    : 5
     MD5 Password      : $9$QxCvD7N6a0P96eT3BvnQfQ==
     Remove Private AS : true
     Prefix List In  : Name (afi)
                         ipPrefixList1 (ipv4)
     Prefix List Out   : Name (afi)
                         ipPrefixList1 (ipv6)
     Route Map In      : Name (afi)
                         routeMap1 (ipv6)
                         routeMap2 (ipv4)
     Send Community    : both (ipv4)
     Dev State         : provisioned
     App State         : cfg-in-sync
    
     Device IP         : 10.20.246.15
     Peer Group        : pg2
     Remote ASN        : 65002
     Next Hop Self     : true
     Update Source IP  : 10.20.30.50
     BFD Enabled       : true
     BFD Interval      : 100
     BFD Rx            : 300
     BFD Multiplier    : 5
     MD5 Password      : $9$QxCvD7N6a0P96eT3BvnQfQ==
     Remove Private AS : true
     Prefix List In    : 
     Prefix List Out   : Name (afi)
                         ipPrefixList1 (ipv6)
     Route Map In      : Name (afi)
                         routeMap1 (ipv4)
     Route Map Out     : 
     Send Community    : both (ipv4)
     Dev State         : provisioned
     App State         : cfg-in-sync 
    ===============================================
  3. Verify the switch configuration on the SLX device.
    Rack1-Device1# show running-config router bgp
    router bgp
     local-as 4200000000
     capability as4-enable
     fast-external-fallover
     neighbor pg1 peer-group
     neighbor pg1 remote-as 65002
     neighbor pg1 update-source 10.20.30.40
     neighbor pg1 next-hop-self
     neighbor pg1 password $9$QxCvD7N6a0P96eT3BvnQfQ==
     neighbor pg1 remove-private-as
     neighbor pg1 bfd
     neighbor pg1 bfd interval 100 min-rx 300 multiplier 5
     neighbor pg2 peer-group
     neighbor pg2 remote-as 65002
     neighbor pg2 update-source 10.20.30.50
     neighbor pg2 next-hop-self
     neighbor pg2 password $9$QxCvD7N6a0P96eT3BvnQfQ==
     neighbor pg2 remove-private-as
     neighbor pg2 bfd
     neighbor pg2 bfd interval 100 min-rx 300 multiplier 5
     neighbor 10.20.20.4 remote-as 4200000000
     neighbor 10.20.20.4 next-hop-self
     address-family ipv4 unicast
      network 172.31.254.214/32
      network 172.31.254.228/32
      neighbor pg2 route-map in routeMap2
      neighbor pg1 prefix-list ipPrefixList1 in
      neighbor pg1 route-map in routeMap2
      maximum-paths 8
      graceful-restart
     !
     address-family ipv6 unicast
      neighbor pg2 prefix-list ipPrefixList2 out
      neighbor pg1 prefix-list ipPrefixList2 out
      neighbor pg1 route-map in routeMap1
     !
     address-family l2vpn evpn
      graceful-restart
     !
    !
    Rack1-Device2# show running-config router bgp
    router bgp
     local-as 4200000000
     capability as4-enable
     fast-external-fallover
     neighbor pg1 peer-group
     neighbor pg1 remote-as 65002
     neighbor pg1 update-source 10.20.30.40
     neighbor pg1 next-hop-self
     neighbor pg1 password $9$QxCvD7N6a0P96eT3BvnQfQ==
     neighbor pg1 remove-private-as
     neighbor pg1 bfd
     neighbor pg1 bfd interval 100 min-rx 300 multiplier 5
     neighbor pg2 peer-group
     neighbor pg2 remote-as 65002
     neighbor pg2 update-source 10.20.30.50
     neighbor pg2 next-hop-self
     neighbor pg2 password $9$QxCvD7N6a0P96eT3BvnQfQ==
     neighbor pg2 remove-private-as
     neighbor pg2 bfd
     neighbor pg2 bfd interval 100 min-rx 300 multiplier 5
     neighbor 10.20.20.5 remote-as 4200000000
     neighbor 10.20.20.5 next-hop-self
     address-family ipv4 unicast
      network 172.31.254.214/32
      network 172.31.254.246/32
      neighbor pg2 route-map in routeMap1
      neighbor pg1 prefix-list ipPrefixList1 in
      neighbor pg1 route-map in routeMap1
      maximum-paths 8
      graceful-restart
     !
     address-family ipv6 unicast
      neighbor pg2 prefix-list ipPrefixList1 out
      neighbor pg1 prefix-list ipPrefixList1 out
      neighbor pg1 route-map out routeMap1
     !
     address-family l2vpn evpn
      graceful-restart
     !
    !