neighbor distribute-list
Applies the specified address-based access list to route updates from/to a BGP peer.
Syntax: [no] neighbor {ip-address | peer-group-name} distribute-list list-name {in | out}
ip-address
IP address of the BGP neighbor.
peer-group-name
Name of a BGP peer group.
list-name
Name or number of a address-address-based access list.
in
Apply route address-based access list onto incoming route updates.
out
Apply route address-based access list onto outgoing route updates.
Description: Access lists enable you to restrict the routing information that BGP learns and/or advertises.
Use the neighbor distribute-list command to apply the access list filters named in list-name to the specified BGP neighbor or peer group.
Use the ip-address parameter to apply the specified list to a BGP neighbor.
Use the peer-group-name parameter to apply the specified list to all the members of a peer group.
If you specify a distribute list with an individual IP address, you override a distribute list defined for a peer group that includes that IP address.
If you use the neighbor distribute-list command more than once specifying the same IP address or peer group, only the last list-name is applied.
Use the no neighbor distribute-list command to remove the specified access list from route updates.
Factory Default: No distribute-lists are applied.
Command Mode: Router configuration.
Example 1: In the following example
- The access-list commands create an access list named ISP7_Inbound to permit routes from 1 host and 2 network prefixes.
- The neighbor distribute-list command applies the access list ISP7_Inbound to updates coming from neighbor 121.80.100.4.
router(config)#access-list ISP7_Inbound permit 10.5.1.121 0.0.0.255
router(config)#access-list ISP7_Inbound permit 128.20.0.0 0.0 255.255
router(config)#access-list ISP7_Inbound permit 120.0.0.0 0.255.255.255
router(config)#access-list ISP7_Inbound deny any
router(config)#router bgp 101
router(config-router)#network 121.113.0.0
router(config-router)#neighbor 121.80.100.4 remote-as 101
router(config-router)#neighbor 121.80.100.4 distribute-list ISP7_Inbound in
- Only those routes permitted by access list ISP7_Inbound are accepted from neighbor 121.80.100.4
Example 2: The following example removes the access list internal-list from outgoing updates to peer group internal:
router(config)#router bgp 101
router(config-router)#no neighbor internal distribute-list internal-list out
Related Commands: neighbor distribute-list
neighbor filter-list
show ip bgp
access-list
ip access-list
ip as-path access-list
ip community-list
show access-lists
show ip access-lists
Copyright © 2004
Avici Systems Inc.
Avici® and TSR®
is a registered trademark of Avici Systems Inc.
IPriori, Composite Links, SSR, QSR, and NSR® are
trademarks of Avici Systems Inc.
Source
File Name: BGP_Nd.fm
HTML File Name: BGP_Nd28.html
Last Updated: 05/10/04 at 16:36:55