Link to home
Start Free TrialLog in
Avatar of Cahit Eyigünlü
Cahit Eyigünlü

asked on

ExaBGP - Juniper MX internal bgp - router passing community to external BGP

Hello ,

We are using an ExaBGP server to send dynamic updates to the Juniper MX80 Router.
Blackhole community can go through the ExaBGP to juniper and upstream providers. But other communities are not passing and locking at the inet.0 of juniper mx table :

As a result : Exabgp passing the request and communities to the Juniper MX with SPD-MON-IN statement and it is adding communites in inet.0 table . But Juniper is not passing the communites to the upstream with the SPD-OUT statement. Only the blackhole community is working

root@mx80-core> show route community 57844:222 table inet.0

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

185.9.156.0/24      [BGP/170] 00:40:45, localpref 100, from 178.20.231.218
                      AS path: I, validation-state: unverified
                    > to 10.32.35.13 via ae0.0

root@mx80-core> ...222 table inet.0 advertising-protocol bgp 10.32.35.13

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)

root@mx80-core>

Open in new window


We are sending community over this command :

echo "announce route 185.9.156.0/24 next-hop 10.32.35.13 community 57844:222" > /tmp/exabgp.cmd                        

Open in new window



set policy-options policy-statement SPD-IN term 1 then accept
set policy-options policy-statement SPD-MON-IN term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-MON-IN term VoxOnly then tag 222
set policy-options policy-statement SPD-MON-IN term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-MON-IN term VoxOnly then accept
set policy-options policy-statement SPD-MON-IN term VoxPlusTT from community ExaTTplusVox
set policy-options policy-statement SPD-MON-IN term VoxPlusTT then community - VoxilityOnly
set policy-options policy-statement SPD-MON-IN term VoxPlusTT then community add Firewall
set policy-options policy-statement SPD-MON-IN term VoxPlusTT then accept
set policy-options policy-statement SPD-MON-IN term TTPlusCogent from community ExaTTplusCogent
set policy-options policy-statement SPD-MON-IN term TTPlusCogent then community - VoxilityOnly
set policy-options policy-statement SPD-MON-IN term TTPlusCogent then community add OnlyTT
set policy-options policy-statement SPD-MON-IN term TTPlusCogent then accept
set policy-options policy-statement SPD-MON-IN term 1 from community BLACKHOLE
set policy-options policy-statement SPD-MON-IN term 1 then community add NTD-BLACKHOLE
set policy-options policy-statement SPD-MON-IN term 1 then accept
set policy-options policy-statement SPD-MON-IN term 500 then reject
set policy-options policy-statement SPD-MON-OUT term 500 then reject
set policy-options policy-statement SPD-OUT term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-OUT term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxOnly then accept
set policy-options policy-statement SPD-OUT term VoxPlusTT from community ExaTTplusVox
set policy-options policy-statement SPD-OUT term VoxPlusTT then community - VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxPlusTT then community add Firewall
set policy-options policy-statement SPD-OUT term VoxPlusTT then accept
set policy-options policy-statement SPD-OUT term TTPlusCogent from community ExaTTplusCogent
set policy-options policy-statement SPD-OUT term TTPlusCogent then community - VoxilityOnly
set policy-options policy-statement SPD-OUT term TTPlusCogent then community add OnlyTT
set policy-options policy-statement SPD-OUT term TTPlusCogent then accept
set policy-options policy-statement SPD-OUT term A from tag 666
set policy-options policy-statement SPD-OUT term A then community add NTD-BLACKHOLE
set policy-options policy-statement SPD-OUT term A then accept
set policy-options policy-statement SPD-OUT term B from protocol bgp
set policy-options policy-statement SPD-OUT term B then community add NTD-BLACKHOLE
set policy-options policy-statement SPD-OUT term B then accept
set policy-options policy-statement SPD-OUT term H from prefix-list TT_KAPALI
set policy-options policy-statement SPD-OUT term H then community + Firewall_TT_Block
set policy-options policy-statement SPD-OUT term H then accept
set policy-options policy-statement SPD-OUT term F from prefix-list DDOS-PREFIX-LIST
set policy-options policy-statement SPD-OUT term F then community + Firewall
set policy-options policy-statement SPD-OUT term F then accept
set policy-options policy-statement SPD-OUT term 1 from prefix-list SPD-PREFIX-LIST
set policy-options policy-statement SPD-OUT term 1 then accept
set policy-options policy-statement SPD-OUT term G from prefix-list Guard-PREFIX-LIST
set policy-options policy-statement SPD-OUT term G then community + Firewall
set policy-options policy-statement SPD-OUT term G then accept
set policy-options policy-statement SPD-OUT term 500 then reject

Open in new window



Our BGP configuration as given below :

set protocols bgp group Netdirekt type external
set protocols bgp group Netdirekt description Netdirekt
set protocols bgp group Netdirekt local-address 10.32.35.14
set protocols bgp group Netdirekt import SPD-IN
set protocols bgp group Netdirekt export SPD-OUT
set protocols bgp group Netdirekt peer-as 43391
set protocols bgp group Netdirekt neighbor 10.32.35.13
set protocols bgp group SPDMON type internal
set protocols bgp group SPDMON description SPD-MON
set protocols bgp group SPDMON local-address 10.32.35.14
set protocols bgp group SPDMON import SPD-MON-IN
set protocols bgp group SPDMON export SPD-MON-OUT
set protocols bgp group SPDMON cluster 10.32.35.14
set protocols bgp group SPDMON peer-as 57844
set protocols bgp group SPDMON neighbor 178.20.231.218

Open in new window


And the community strings as given below :

set policy-options community BLACKHOLE members 57844:666
set policy-options community ExaTTDelete members 57844:222
set policy-options community Firewall members 9121:444
set policy-options community Firewall members 43391:111
set policy-options community Firewall_TT_Block members 9121:444
set policy-options community Firewall_TT_Block members 43391:111
set policy-options community Firewall_TT_Block members 43391:222
set policy-options community NTD-BLACKHOLE members 43391:666
set policy-options community NTD-BLACKHOLE members 9121:666
set policy-options community NTD-BLACKHOLE members 57844:666
set policy-options community VoxilityOnly members 9121:444
set policy-options community VoxilityOnly members 43391:111
set policy-options community VoxilityOnly members 43391:222
set policy-options community no-export members no-export

Open in new window



If somebody can help us to over come this issue , it will be appriciated
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image
set policy-options policy-statement SPD-OUT term B from protocol bgp
set policy-options policy-statement SPD-OUT term B then community add NTD-BLACKHOLE
set policy-options policy-statement SPD-OUT term B then accept

I would assume that this statement is too general and will always be a match which is the reason to always assign NTD-BLACKHOLE community and jump out of the loop, terms H and below will never be reached. "then accept" is terminating action - and will jump out of the policy stament SPD-OUT so no other communities listed after term B can be assigned.

Solution may be policy reorder or removing "then accept" to stay in the loop, depending on your design.
Avatar of Cahit Eyigünlü
Cahit Eyigünlü

ASKER

Thank you so much , but when i deactivate this B ruleset also Blackhole community working correctly.  And i am interested in to solve this part :


set policy-options policy-statement SPD-OUT term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-OUT term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxOnly then accept
set policy-options policy-statement SPD-OUT term VoxPlusTT from community ExaTTplusVox
set policy-options policy-statement SPD-OUT term VoxPlusTT then community - VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxPlusTT then community add Firewall
set policy-options policy-statement SPD-OUT term VoxPlusTT then accept
set policy-options policy-statement SPD-OUT term TTPlusCogent from community ExaTTplusCogent
set policy-options policy-statement SPD-OUT term TTPlusCogent then community - VoxilityOnly
set policy-options policy-statement SPD-OUT term TTPlusCogent then community add OnlyTT
set policy-options policy-statement SPD-OUT term TTPlusCogent then accept

Open in new window


They are earlier than B . 
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image
Issue is not in Blackhole community or is it working correctly or not.

When first match is found action is taken if "then accept" is configured no further checking will be done for other terms in policy statement.

set policy-options policy-statement SPD-OUT term A from tag 666
set policy-options policy-statement SPD-OUT term A then community add NTD-BLACKHOLE
set policy-options policy-statement SPD-OUT term A then accept

set policy-options policy-statement SPD-OUT term H from prefix-list TT_KAPALI
set policy-options policy-statement SPD-OUT term H then community + Firewall_TT_Block
set policy-options policy-statement SPD-OUT term H then accept

Open in new window

If "term A" is match - term H will never be reached.

https://www.juniper.net/documentation/en_US/junos/topics/usage-guidelines/policy-configuring-actions-in-routing-policy-terms.html

acceptAccept the route and propagate it. After a route is accepted, no other terms in the routing policy and no other routing policies are evaluated

I really don't know your design to give you exact answer.
And i am interested in to solve this part : 
Solution depends on your needs (that's the part that I don't understand, that's why protocol bgp may be just blocking all other policies). If you want to evaluate through all terms in SPD-OUT policy statements then action may need to be "next term" (or something else) instead of "accept".

How Juniper is chaining policies

  1. The route is evaluated against the first term in the first routing policy. If it matches, the specified action is taken. If the action is to accept or reject the route, that action is taken and the evaluation of the route ends. If the next term action is specified, if no action is specified, or if the route does not match, the evaluation continues as described in Step 2. If the next policy action is specified, any accept or reject action specified in this term is skipped, all remaining terms in this policy are skipped, all other actions are taken, and the evaluation continues as described in Step 3.
  2. The route is evaluated against the second term in the first routing policy. If it matches, the specified action is taken. If the action is to accept or reject the route, that action is taken and the evaluation of the route ends. If the next term action is specified, if no action is specified, or if the route does not match, the evaluation continues in a similar manner against the last term in the first routing policy. If the next policy action is specified, any accept or reject action specified in this term is skipped, all remaining terms in this policy are skipped, all other actions are taken, and the evaluation continues as described in Step 3. 
  3. If the route does not match a term or matches a term with a next policy action in the first routing policy, it is evaluated against the first term in the second routing policy.
  4. The evaluation continues until the route matches a term with an accept or reject action defined or until there are no more routing policies to evaluate. If there are no more routing policies, then the accept or reject action specified by the default policy is taken. 

User generated image

Avatar of Cahit Eyigünlü
Cahit Eyigünlü

ASKER

Thank you for your kind answer. But I am just let it work the first rule with it's own selector. So the other rules is not important now. VoxOnly term is the one just i want to trigger with the conditions given below . So if 4th rule is direct accepting is not the problem now.

For understanding the topology

This is my ExaBGP config. Which send communities.

set protocols bgp group SPDMON type internal
set protocols bgp group SPDMON description SPD-MON
set protocols bgp group SPDMON local-address 10.32.35.14
set protocols bgp group SPDMON import SPD-MON-IN
set protocols bgp group SPDMON export SPD-MON-OUT
set protocols bgp group SPDMON cluster 10.32.35.14
set protocols bgp group SPDMON peer-as 57844
set protocols bgp group SPDMON neighbor 178.20.231.218

Open in new window


And i had tested all this policy-statements are working correctly and getting the community requests into inet.0 table 

set policy-options policy-statement SPD-MON-IN term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-MON-IN term VoxOnly then tag 222
set policy-options policy-statement SPD-MON-IN term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-MON-IN term VoxOnly then accept
set policy-options policy-statement SPD-MON-IN term VoxPlusTT from community ExaTTplusVox
set policy-options policy-statement SPD-MON-IN term VoxPlusTT then community - VoxilityOnly
set policy-options policy-statement SPD-MON-IN term VoxPlusTT then community add Firewall
set policy-options policy-statement SPD-MON-IN term VoxPlusTT then accept
set policy-options policy-statement SPD-MON-IN term TTPlusCogent from community ExaTTplusCogent
set policy-options policy-statement SPD-MON-IN term TTPlusCogent then community - VoxilityOnly
set policy-options policy-statement SPD-MON-IN term TTPlusCogent then community add OnlyTT
set policy-options policy-statement SPD-MON-IN term TTPlusCogent then accept

Open in new window


And this is my upstream provider :


set protocols bgp group Netdirekt type external
set protocols bgp group Netdirekt description Netdirekt
set protocols bgp group Netdirekt local-address 10.32.35.14
set protocols bgp group Netdirekt import SPD-IN
set protocols bgp group Netdirekt export SPD-OUT
set protocols bgp group Netdirekt peer-as 43391
set protocols bgp group Netdirekt neighbor 10.32.35.13

Open in new window


So , do not think about the any other rule . I have deleted all of them. Only the first rule i want to trigger:

set policy-options policy-statement SPD-OUT term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-OUT term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxOnly then accept

Open in new window


It does not get triggered by the from selector. Where i am doing wrong this is the problem ?

Because i can see the community on the MX device after i've sent from the Exa : 

root@mx80-core> show route community ExaTTDelete table inet.0

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

185.9.156.0/24      [BGP/170] 00:40:45, localpref 100, from 178.20.231.218
                      AS path: I, validation-state: unverified
                    > to 10.32.35.13 via ae0.0

Open in new window


but it does not trigger the upstream's bgp policy-statement.

Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image
I am not sure that I understand issue. can you please provide output from command:
show route advertising-protocol bgp 10.32.35.12 detail

Open in new window

Avatar of Cahit Eyigünlü
Cahit Eyigünlü

ASKER

It can be a little long :)


root@mx80-core> show route advertising-protocol bgp 10.32.35.13 detail

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)
* 2.58.124.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.96.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.97.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.98.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.99.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.100.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.101.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.102.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 37.123.103.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.10.150.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.12.64.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.12.65.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.12.66.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.12.67.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.67.84.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.67.85.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.67.86.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.67.87.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.81.140.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.81.141.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.81.142.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.81.143.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.124.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.125.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.126.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.127.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.136.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.137.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.138.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.139.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.180.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.181.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.182.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.83.183.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.139.64.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.139.65.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.139.66.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.139.67.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.155.124.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.156.44.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.156.45.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.156.46.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.156.47.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.88.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.89.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.90.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.91.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.224.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.225.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.226.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 45.158.227.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 77.83.132.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 77.83.133.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 77.83.134.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 77.83.135.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.115.204.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.115.205.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.115.206.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.115.207.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.4.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.6.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.7.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.8.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.9.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.20.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.21.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.22.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.23.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.28.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.29.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.30.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.31.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.32.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.34.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.35.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.40.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.41.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.42.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.44.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.45.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.46.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.47.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.56.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.57.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.59.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 85.153.100.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.101.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.102.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.103.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 85.153.127.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 91.186.198.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 91.186.199.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 91.186.208.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 91.186.209.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 91.186.210.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 91.186.211.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I

* 91.188.216.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 91.188.217.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 91.188.218.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 91.188.219.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.146.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.148.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.154.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.156.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.192.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.196.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.206.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.208.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.129.242.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.165.32.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.165.40.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.165.44.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 102.165.50.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 103.243.162.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 103.243.163.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 139.28.72.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 139.28.73.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 139.28.74.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 139.28.75.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.106.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.142.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.152.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.174.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.184.0/21 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.192.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.196.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 154.16.226.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.224.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.225.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.226.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.227.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.228.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.229.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.230.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 178.20.231.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 179.61.200.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 179.61.218.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 179.61.230.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 179.61.234.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 179.61.238.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 181.214.50.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 181.214.72.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 181.214.78.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 181.214.80.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 181.214.84.0/23 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 181.214.128.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.9.156.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.9.157.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.9.158.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.9.159.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.72.8.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.72.9.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.72.10.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.72.11.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.99.50.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.99.51.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.118.140.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.118.141.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.118.142.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.118.143.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.150.128.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.182.188.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.182.189.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.182.190.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 185.182.191.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 191.96.52.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 191.96.236.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 191.101.52.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 191.101.184.0/22 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 192.124.180.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 192.124.181.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 192.124.182.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 192.124.183.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 193.16.12.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 193.16.13.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 193.16.14.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 193.16.15.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 193.164.7.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.34.104.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.34.105.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.34.106.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.20.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.21.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.22.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.23.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.24.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.25.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.26.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 194.87.27.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 195.133.40.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 195.133.41.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 195.133.42.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 195.133.43.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 212.193.28.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 212.193.29.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 212.193.30.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 212.193.31.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 213.238.166.0/24 (1 entry, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

* 213.238.172.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

root@mx80-core>

Open in new window





But please check this out too :



root@mx80-core> show route community-name ExaTTDelete table inet.0

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

185.9.156.0/24      [BGP/170] 1d 05:28:06, localpref 100, from 178.20.231.218
                      AS path: I, validation-state: unverified
                    > to 10.32.35.13 via ae0.0

Open in new window


It does not triggering the first rule on the policy-statements :

set policy-options policy-statement SPD-OUT term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-OUT term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxOnly then accept

Open in new window


185.9.156.0/24 this class is the same with others :


* 185.9.156.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

Open in new window


Normally it needs to be added communites :

set policy-options community VoxilityOnly members 9121:444
set policy-options community VoxilityOnly members 43391:111
set policy-options community VoxilityOnly members 43391:222

Open in new window


Avatar of Cahit Eyigünlü
Cahit Eyigünlü

ASKER

Note : If i add this ip class (185.9.156.0/24) to TT_KAPALI prefix list , based on this rule. :

set policy-options policy-statement SPD-OUT term H from prefix-list TT_KAPALI
set policy-options policy-statement SPD-OUT term H then community + Firewall_TT_Block
set policy-options policy-statement SPD-OUT term H then accept

Open in new window


It is doing the expected work :
* 185.9.156.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111 43391:222

Open in new window


So my question is that . My very first rule to SPD-OUT statemen why does not triggered by the from selector , even i can see the tag on the inet.0 table which is sended from the ExaBGP


root@mx80-core> show route community-name ExaTTDelete table inet.0

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

185.9.156.0/24      [BGP/170] 1d 05:28:06, localpref 100, from 178.20.231.218
                      AS path: I, validation-state: unverified
                    > to 10.32.35.13 via ae0.0

Open in new window

Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image
Once again, I don't see what you see. I can only guess.

* 185.9.156.0/24 (2 entries, 1 announced)
MX is having two entries for that prefix. When you change from criteria from community to prefix it will always be match no matter which exact route is being considered best, but two learned prefixes can have different communities... which may not have end result that you expect. 😀
Avatar of Cahit Eyigünlü
Cahit Eyigünlü

ASKER

I want to change the learned communities of this class:

* 185.9.156.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111

Open in new window


to :

* 185.9.156.0/24 (2 entries, 1 announced)
 BGP group Netdirekt type External
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111 43391:222

Open in new window


Dynamically with the sended community from ExaBGP Router .

This policy statement working :
set policy-options policy-statement SPD-MON-IN term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-MON-IN term VoxOnly then tag 222
set policy-options policy-statement SPD-MON-IN term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-MON-IN term VoxOnly then accept

Open in new window


Because i can see the change on the show route community-namne , when i send the community from the ExaBGP Router.

root@mx80-core> show route community-name ExaTTDelete table inet.0

inet.0: 588 destinations, 601 routes (588 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

185.9.156.0/24      [BGP/170] 1d 05:28:06, localpref 100, from 178.20.231.218
                      AS path: I, validation-state: unverified
                    > to 10.32.35.13 via ae0

Open in new window


But this rule set is not working :
set policy-options policy-statement SPD-OUT term VoxOnly from community ExaTTDelete
set policy-options policy-statement SPD-OUT term VoxOnly then community add VoxilityOnly
set policy-options policy-statement SPD-OUT term VoxOnly then accept

Open in new window


Because it is not changing the learned communities ! When i add my prefixes manually to a prefix list it is working with this way :

set policy-options policy-statement SPD-OUT term H from prefix-list TT_KAPALI
set policy-options policy-statement SPD-OUT term H then community + Firewall_TT_Block
set policy-options policy-statement SPD-OUT term H then accept

Open in new window


So why this selector not working :

SPD-OUT term VoxOnly from community ExaTTDelete

Open in new window


Do you see now ?
Avatar of Cahit Eyigünlü
Cahit Eyigünlü

ASKER

Ok I've see what you are trying to tell :

This is the line :

                Communities: 9121:444 43391:111 43391:222 57844:222

Open in new window


So how can i let it work ?

root@mx80-core# run show route extensive 185.9.156.0/24

inet.0: 587 destinations, 600 routes (586 active, 0 holddown, 1 hidden)
185.9.156.0/24 (2 entries, 1 announced)
TSI:
KRT in-kernel 185.9.156.0/24 -> {}
Page 0 idx 0, (group Netdirekt type External) Type 1 val 0x522ed18 (adv_entry)
   Advertised metrics:
     Nexthop: Self
     AS path: [57844] I
     Communities: 9121:444 43391:111
Path 185.9.156.0 Vector len 4.  Val: 0
        *Static Preference: 5
                Next hop type: Discard, Next hop index: 0
                Address: 0x2886e4c
                Next-hop reference count: 121
                State: <Active Int Ext>
                Local AS: 57844
                Age: 150w2d 22:29:08
                Validation State: unverified
                Task: RT
                Announcement bits (4): 0-KRT 2-RT 3-BGP_RT_Background 4-Resolve tree 2
                AS path: I
                AS path: Recorded
         BGP    Preference: 170/-101
                Next hop type: Indirect, Next hop index: 0
                Address: 0x440d1b0
                Next-hop reference count: 1
                Source: 178.20.231.218
                Next hop type: Router, Next hop index: 931
                Next hop: 10.32.35.13 via ae0.0, selected
                Session Id: 0x1f1
                Protocol next hop: 10.32.35.13
                Indirect next hop: 0x327cdf0 - INH Session ID: 0x0
                State: <Int Ext>
                Inactive reason: Route Preference
                Local AS: 57844 Peer AS: 57844
                Age: 1:35       Metric2: 0
                Validation State: unverified
                Task: BGP_57844.178.20.231.218
                AS path: I
                AS path: Recorded
                Communities: 9121:444 43391:111 43391:222 57844:222
                Accepted
                Localpref: 100
                Router ID: 178.20.231.218
                Indirect next hops: 1
                        Protocol next hop: 10.32.35.13
                        Indirect next hop: 0x327cdf0 - INH Session ID: 0x0
                        Indirect path forwarding next hops: 1
                                Next hop type: Router
                                Next hop: 10.32.35.13 via ae0.0
                                Session Id: 0x1f1
                        10.32.35.12/30 Originating RIB: inet.0
                          Node path count: 1
                          Forwarding nexthops: 1
                                Next hop type: Interface
                                Nexthop: via ae0.0

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial