I read and confirmed that you cannot attach a neighbor policy unless in the
neighbor definition you designate it as a route-server-client. Once I do
this, yes the policy attaches, but the neighbor will then not come up (goes
between idle and active). I'd also like to understand why you have to be a
route server to attache a policy to a neighbor statement. What needs to be
done on the client side to get this to work? My config here:
*Router with Policy to neighbor:*
[global.config]
as = 65001
router-id = "192.168.0.2"
[global.apply-policy.config]
export-policy-list = ["policy1"]
[zebra]
[zebra.config]
enabled = true
url = "unix:/var/run/quagga/zserv.api"
redistribute-route-type-list = ["connect"]
[[neighbors]]
[neighbors.config]
neighbor-address = "192.168.0.3"
peer-as = 65001
[neighbors.route-server.config]
route-server-client = true
[neighbors.apply-policy.config]
import-policy-list = ["policy1"]
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "ipv4-unicast"
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "ipv6-unicast"
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "ipv4-labelled-unicast"
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "l3vpn-ipv4-unicast"
[[defined-sets.bgp-defined-sets.community-sets]]
community-set-name = "cs0"
community-list = ["200:50"]
[[policy-definitions]]
name = "policy1"
[[policy-definitions.statements]]
name = "Drop community 200:50"
[policy-definitions.statements.conditions.bgp-conditions.match-community-set]
community-set = "cs0"
match-set-options = "any"
[policy-definitions.statements.actions.route-disposition]
accept-route = false
*Remote end config:*
[global.config]
as = 65001
router-id = "192.168.0.3"
[zebra]
[zebra.config]
enabled = true
url = "unix:/var/run/quagga/zserv.api"
redistribute-route-type-list = ["connect"]
[[neighbors]]
[neighbors.config]
neighbor-address = "192.168.0.2"
peer-as = 65001
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "ipv4-unicast"
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "ipv6-unicast"
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "ipv4-labelled-unicast"
[[neighbors.afi-safis]]
[neighbors.afi-safis.config]
afi-safi-name = "l3vpn-ipv4-unicast"
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
gobgp-devel mailing list
gobgp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/gobgp-devel
