advertise-community on 5500EI Comware 5 ipv6 BGP-VPN?

[marvias]

Hi I am configuring ipv6 BGP inside vpn-instance, and have proglem with peer advertise-community command. It works fine with ipv4, but with ipv6, it writes "cannot find this group in the instance" and leaves ipv6 config.

Any idea if this is bug or Im doing something wrong? Device is 5500 EI switch with comware 5. I have this config running on comware 7 without a problem. I found in documentation for 5800 that it should be working, but I know that 5500 is not 5800...

https://techhub.hpe.com/eginfolib/networking/docs/switches/5820x-5800/5998-7388r_l3-ip-rtng_cr/content/441758081.htm

bgp 65000
ipv6-family vpn-instance wanvrf

network 2:3:4:: 48
peer 1:2:3::4 as-number 12345
peer 1:2:3::4 route-policy RP6-IN-PRI import
peer 1:2:3::4 route-policy RP6-OUT-PRI export
filter-policy ipv6-prefix 1 import
filter-policy ipv6-prefix 2 export
peer 1:2:3::4 advertise-community

[l3sw-bgp-ipv6-wanvrf]peer 1:2:3::4 advertise-community
 Cannot find this group in the instance
[l3sw-bgp]

[akg7]

Hello @marvias ,

What is the device software version?

Are you using the correct ipv6 ip format?

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=c02645756

Thanks!

[marvias]

Hello, its running on code 2221P20

I see there was bunch of updates after that, so I might try to update.

What ipv6 IP format are you referring to? Link leads to multicast manual.

[Ivan_B]

Hi @marvias !

Seems like the switch considers '1:2:3::4' as group name, not the IPv6 address. Do you use this particular address or you just gave us an obfuscated example?

[marvias]

Hello Ivan,

it looks like this: 2A07:1C20:2:21::1

I also tried to define a group, but after definition it returns me from ipv6 scope and its not possilbe to add peer to a group

[l3sw-bgp-ipv6-wanvrf]group bgptest external
[l3sw-bgp]ipv6-family vpn-instance wanvrf
[l3sw-bgp-ipv6-wanvrf]peer 2A07:1C20:2:21::1 group bgptest
                                                 ^
 % Unrecognized command found at '^' position.
[l3sw-bgp-ipv6-wanvrf]

[Ivan_B · Accepted solution]

I've tested on the latest version and here is the situation:

You can create peer groups, address peers by their group and set 'advertise-community' only under 'ipv6-family' context. The global one. Here are all the options available for peers in that context:

[H3C-bgp-af-ipv6]peer 2001::1 ?
  advertise-community      Send community attribute to this peer
  advertise-ext-community  Advertise extended community
  allow-as-loop            Configure permit of as-path loop
  as-number                AS number
  as-path-acl              Set the filter list of peer or peer group
  bfd                      Enable BFD for this peer
  capability-advertise     Advertise capability
  connect-interface        Set interface name to be used as session's output
                           interface
  default-route-advertise  Advertise default route to this peer
  description              Configure description information about peer
  dscp                     Differentiated Services Codepoint (DSCP)
  ebgp-max-hop             EBGP Multihop
  enable                   Enable peer
  fake-as                  Configure a fake AS number for the peer
  filter-policy            BGP filter list
  group                    Specify a peer group
  ignore                   Suspend the peer session for this peer
  ipsec-policy             Specify an IPsec security policy
  ipv6-prefix              Specify BGP route filtering policy based on
                           ip-prefix
  keep-all-routes          Keep all original routes' information from the peer
  log-change               Log any session status and event change information
  next-hop-local           Specify local address as the next hop of routes
                           advertised to the peer
  password                 Peer password
  preferred-value          Set route PrefVal to this peer
  public-as-only           Remove private AS number from outbound updates
  reflect-client           Configure a peer as a route reflector client
  route-limit              Number of routes limited from this peer
  route-policy             Apply route-policy
  route-update-interval    Route update interval
  substitute-as            Substitute with local AS
  timer                    Configure timers for a peer

However, under the 'ipv6-family vpn-instance ...' context you can address peers only by IPv6 address:

[H3C-bgp-ipv6-test]peer ?
  X:X::X:X  Specify an IPv6 peer address

[H3C-bgp-ipv6-test]peer

You have only these options even if you put the IPv6:

[H3C-bgp-ipv6-test]peer 2001::1 ?
  as-number             AS number
  bfd                   Enable BFD for this peer
  capability-advertise  Advertise capability
  preferred-value       Set route PrefVal to this peer
  route-policy          Apply route-policy

[H3C-bgp-ipv6-test]peer 2001::1

So that document for 5800 not applicable for 5500. The command exists, but only for the global IPv6 routing table, not for the vpn-instance.

[marvias]

Hello Ivan,

thats unfortunate, but thanks for clarification.