Redistribute BGP/OSPF route map xxxx

[Pierre2018]

Hello Team,

We have a route Map « FROM_TEST1» configured to filter a BGP route under OSPF.
We have detect that this subnet «192.168.1.2/24» is appear in the routing table , Which is not normal for us.

SW#sh run | s router
router ospf 21 vrf DATA
log-adjacency-changes
redistribute bgp 65000 subnets route-map FROM_TEST1
network xxxxx

SW#sh ip route vrf DATA 192.168.1.2
Routing entry for 192.168.1.2/24
Known via "bgp 65000" distance 20, metric 0
Tag 642, type external
Redistributing via ospf 20
Advertised by ospf 20 subnets route-map FROM_TEST1

SW#sh ip ospf 21 database | i 192.168.1.2

192.168.1.2 10.206.4.1 987 0x80004E88 0x004CB1 3489726128
192.168.1.2 10.206.4.10 084 0x80004E86 0x004AB4 3489726128

kind Regards, 

[Alex Pfeil · Accepted solution]

Please provide the route-map and ACLs.

[Pierre2018]

Hello, 

bellow the ACL and Route Map: 

ip prefix-list TEST1 seq 5 permit 10.206.2.200/32
ip prefix-list TEST1 seq 10 permit 10.206.3.230/32
!
route-map FROM_TEST1 permit 10
 match ip address TEST1
!

Why i see this subnet "192.168.1.2" in the ospf database, however that not permitted in the ACL !!

SW#sh ip ospf 21 database | i 192.168.1.2

192.168.1.2 10.206.4.1 987 0x80004E88 0x004CB1 3489726128
192.168.1.2 10.206.4.10 084 0x80004E86 0x004AB4 3489726128

Thank you very Much.

Kind Regards, 

[Alex Pfeil]

You have a prefix-list configured and you are trying to match an ACL in the route-map. You have to change the match statement to be a prefix list or write an ACL to match.

when trying to match an IP, use the match up address prefix-list command.

thanks,

alex

[Alex Pfeil]

Match IP address prefix-list. Spellcheck changed it above.

[Pierre2018]

hi, 

Thank you Alex, 

It's normal to see this subnet in the OSPF database table. 

BR, 

[paul driver]

Hello

the reason why your seeing that prefix is the redistributed route-map isnt be matched on your prefix-list so it’s advertising everything as per default when an empty route- map is specified   

As as already stated ammend your route-map to match on prefix—list instead of an acl

[Alex Pfeil]

Paul’s explanation is sufficient. Your existing prefix-list is not working and is permitting all routes. The resolution is to change the route-map to match the prefix-list.

Please rate helpful posts.

thanks,

Alex

[Pierre2018]

Hi, 

Thank you for your assistance. 

How i can change it !! 

Thank you

BR, 

[paul driver · Accepted solution]

Hello

---

@Pierre2018 wrote:

Hi, 

Thank you for your assistance. 

How i can change it !! 

---

route-map FROM_TEST1 permit 10
no match ip address TEST1
match ip address prefix-list TEST1