add no export to upstream community

natesales · Dec 4, 2020 · 2674cec · 2674cec
1 parent fa25af8
commit 2674cec
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 6 deletions.
diff --git a/README.md b/README.md
@@ -87,12 +87,13 @@ bcg *should* have reasonable single-stack peering support but is not fully teste
 #### BGP Communities
 bcg uses RFC 8092 BGP Large Communities
 
-| Large     | Meaning                 |
-|-----------|-------------------------|
-| ASN,0,100 | Originated              |
-| ASN,0,101 | Learned from upstream   |
-| ASN,0,102 | Learned from peer       |
-| ASN,0,103 | Learned from downstream |
+| Large     | Meaning                   |
+|-----------|---------------------------|
+| ASN,0,100 | Originated                |
+| ASN,0,101 | Learned from upstream     |
+| ASN,0,102 | Learned from peer         |
+| ASN,0,103 | Learned from downstream   |
+| ASN,0,200 | Don't export to upstreams |
 
 #### Global Configuration Options
 

diff --git a/templates/peer.tmpl b/templates/peer.tmpl
@@ -81,6 +81,7 @@ protocol bgp {{ $peer.Name }}v{{ $af }}_{{ $i }} {
             accept_local(); # Originated
             {{ end -}}
             {{ if eq $peer.Type "upstream" -}}
+            if ((ASN,0,200) ~ bgp_large_community) then reject; # Don't export to upstreams
             if ((ASN,0,103) ~ bgp_large_community) then accept; # Downstream
             {{ else if or (eq $peer.Type "peer") (eq $peer.Type "import-valid") -}}
             if ((ASN,0,103) ~ bgp_large_community) then accept; # Downstream