>Oula mélange pas tout: une route-map par neighbour, c’est plus simple à gérer.
Ah bon ? J'ai a l'esprit que cela est beaucoup plus simple d'avoir UNE seule route-map dans laquelle tu match ton transitaire pour lui appliquer une préférence par exemple.
Egalement cela simplifi la lecture de la conf je trouve.
>Mais là, je pense qu’il manque la ligne où tu appliques la route-map à chaque neighbor :)
Je vois quelque chose comme ça, avec du route-map mais toujours dans l'incompréhension du deny/permit dans les séquences :'(
! AS174
neighbor 10.4.1.1 soft-reconfiguration inbound
neighbor 10.4.1.1 route-map RM_TRANSIT_IN_IP4 in
neighbor 10.4.1.1 route-map RM_TRANSIT_OUT_IP4 out
neighbor 10.4.1.1 filter-list 10 in
neighbor 10.4.1.1 filter-list 1 out
! AS6939
neighbor 20.4.1.2 soft-reconfiguration inbound
neighbor 20.4.1.2 route-map RM_TRANSIT_IN_IP4 in
neighbor 20.4.1.2 route-map RM_TRANSIT_OUT_IP4 out
neighbor 20.4.1.2 filter-list 20 in
neighbor 20.4.1.2 filter-list 1 out
!
ip prefix-list PX_IN_IP4 seq 5 deny 0.0.0.0/0
ip prefix-list PX_IN_IP4 seq 10 deny A.A.A.0/24
ip prefix-list PX_IN_IP4 seq 15 deny B.B.B.0/23
ip prefix-list PX_IN_IP4 seq 20 deny C.C.C.0/24
!
ip prefix-list PX_OUT_IP4 seq 5 permit A.A.A.0/24
ip prefix-list PX_OUT_IP4 seq 10 permit B.B.B.0/23
ip prefix-list PX_OUT_IP4 seq 15 permit C.C.C.0/24
ip prefix-list PX_OUT_IP4 seq 20 deny any
!
ip as-path access-list 1 permit ^$
ip as-path access-list 1 permit ^(65001_)*$
ip as-path access-list 1 deny .*
ip as-path access-list 10 permit ^174_
ip as-path access-list 10 deny .*
ip as-path access-list 20 permit ^6939_
ip as-path access-list 20 deny .*
!
route-map RM_TRANSIT_IN_IP4 deny 10
match ip address prefix-list PX_IN_IP4
!
route-map RM_TRANSIT_IN_IP4 permit 20
match as-path 10
set local-preference 200
!
route-map RM_TRANSIT_IN_IP4 permit 30
match as-path 20
set local-preference 100
!
!
route-map RM_TRANSIT_OUT_IP4 deny 10
match ip address prefix-list PX_OUT_IP4
!
neighbor 10.4.1.1 soft-reconfiguration inbound
neighbor 10.4.1.1 route-map RM_TRANSIT_IN_IP4 in
neighbor 10.4.1.1 route-map RM_TRANSIT_OUT_IP4 out
neighbor 10.4.1.1 filter-list 10 in
neighbor 10.4.1.1 filter-list 1 out
! AS6939
neighbor 20.4.1.2 soft-reconfiguration inbound
neighbor 20.4.1.2 route-map RM_TRANSIT_IN_IP4 in
neighbor 20.4.1.2 route-map RM_TRANSIT_OUT_IP4 out
neighbor 20.4.1.2 filter-list 20 in
neighbor 20.4.1.2 filter-list 1 out
!
ip prefix-list PX_IN_IP4 seq 5 deny 0.0.0.0/0
ip prefix-list PX_IN_IP4 seq 10 deny A.A.A.0/24
ip prefix-list PX_IN_IP4 seq 15 deny B.B.B.0/23
ip prefix-list PX_IN_IP4 seq 20 deny C.C.C.0/24
!
ip prefix-list PX_OUT_IP4 seq 5 permit A.A.A.0/24
ip prefix-list PX_OUT_IP4 seq 10 permit B.B.B.0/23
ip prefix-list PX_OUT_IP4 seq 15 permit C.C.C.0/24
ip prefix-list PX_OUT_IP4 seq 20 deny any
!
ip as-path access-list 1 permit ^$
ip as-path access-list 1 permit ^(65001_)*$
ip as-path access-list 1 deny .*
ip as-path access-list 10 permit ^174_
ip as-path access-list 10 deny .*
ip as-path access-list 20 permit ^6939_
ip as-path access-list 20 deny .*
!
route-map RM_TRANSIT_IN_IP4 deny 10
match ip address prefix-list PX_IN_IP4
!
route-map RM_TRANSIT_IN_IP4 permit 20
match as-path 10
set local-preference 200
!
route-map RM_TRANSIT_IN_IP4 permit 30
match as-path 20
set local-preference 100
!
!
route-map RM_TRANSIT_OUT_IP4 deny 10
match ip address prefix-list PX_OUT_IP4
!
En fait quel est la meilleure façon de faire en terme de conf et relecture à long terme ?
