route-map match community is not working #16773

nitinraj92 · 2024-09-09T11:43:14Z

nitinraj92
Sep 9, 2024

I have a setup where routes are exported by setting community in bgp and I want them to import only routes containing the same community string to a specific VRF.

router bgp 64402 vrf vrf-green
 neighbor 172.16.5.1 remote-as 64502
 !
 address-family ipv4 unicast
  import vrf route-map RP_VRF_GREEN_IN
  import vrf default
 exit-address-family
exit
!
router bgp 64402 vrf vrf-black
 neighbor 172.16.5.1 remote-as 64502
 !
 address-family ipv4 unicast
  import vrf route-map RP_VRF_BLACK_IN
  import vrf default
 exit-address-family
exit
route-map RP_VRF_BLACK_IN permit 12
 match community 100:200 any
exit

I can see that in default vrf the community string is carried but when the route-map is applied, the routes are not getting matched.

CE2A# show ip bgp 1.1.1.0/24
BGP routing table entry for 1.1.1.0/24, version 4
Paths: (1 available, best #1, table default)
  Advertised to non peer-group peers:
  172.16.5.1
  Imported from 192.168.101.1:4:1.1.1.0/24
  Local
    192.168.101.10 from 0.0.0.0 (6.6.6.6) vrf vrf-green(40) announce-nh-self
      Origin incomplete, metric 100, aigp-metric 100, weight 32768, valid, sourced, local, best (First path received)
      Community: 100:100
      Originator: 6.6.6.6
      Last update: Sun Sep  8 23:26:54 2024
CE2A# show ip bgp 172.16.3.0/30
BGP routing table entry for 172.16.3.0/30, version 9
Paths: (1 available, best #1, table default)
  Advertised to non peer-group peers:
  172.16.5.1
  64502
    172.16.5.1 from 172.16.5.1 (11.11.11.11)
      Origin incomplete, metric 20, valid, external, best (First path received)
      Last update: Sun Sep  8 23:28:04 2024
CE2A# show ip bgp 192.168.200.0/24
BGP routing table entry for 192.168.200.0/24, version 13
Paths: (1 available, best #1, table default)
  Advertised to non peer-group peers:
  172.16.5.1
  64502 64302
    172.16.5.1 from 172.16.5.1 (11.11.11.11)
      Origin incomplete, valid, external, best (First path received)
      Community: 100:200
      Last update: Sun Sep  8 23:28:04 2024
CE2A# show ip bgp vrf vrf-black
BGP table version is 19, local router ID is 192.168.201.1, vrf id 41
Default local pref 100, local AS 64402
     Network          Next Hop            Metric LocPrf Weight Path
 *>  192.168.201.0/24 0.0.0.0                  0         32768 ?

Displayed 1 routes and 1 total paths

We can see that only local route is present but not the route 192.168.200.0/24 which have the community 100:200.
But when I remove the match criteria, all routes are getting imported. I want only the routes with community string 100:200 be import to vrf vrf-black.

route-map RP_VRF_BLACK_IN permit 12
exit
CE2A# show ip bgp vrf vrf-black
BGP table version is 28, local router ID is 192.168.201.1, vrf id 41
Default local pref 100, local AS 64402
     Network          Next Hop            Metric LocPrf Weight Path
 *>  10.5.0.0/24      172.16.5.1@0             0    102      0 64502 ?
 *>  172.16.1.0/30    172.16.5.1@0           200    102      0 64502 ?
 *>  172.16.2.0/30    172.16.5.1@0             0    102      0 64502 ?
 *>  172.16.3.0/30    172.16.5.1@0            20    102      0 64502 ?
 *>  172.16.4.0/30    172.16.5.1@0            20    102      0 64502 ?
 *>  172.16.5.0/30    0.0.0.0@0                0    102  32768 i
 *                    0.0.0.0@0                0    102  32768 ?
 *                    172.16.5.1@0             0    102      0 64502 i
 *>  172.16.6.0/30    172.16.5.1@0             0    102      0 64502 i
     192.168.12.0/24  0.0.0.0@0                0    102  32768 i
 *>  192.168.100.0/24 172.16.5.1@0                  102      0 64502 64302 ?
 *>  192.168.200.0/24 172.16.5.1@0                  102      0 64502 64302 ?
 *>  192.168.201.0/24 0.0.0.0                  0         32768 ?

Displayed 11 routes and 13 total paths

I am not sure if community is broken or we need to add some other configuration to make the community match criteria work. Please help.
Let me know if you need more information on the setup.