topic VSP7400 vIST suppression not working in ExtremeSwitching (VSP/Fabric Engine)

VSP7400 vIST suppression not working

bfaltys — Thu, 23 Dec 2021 17:58:00 GMT

I'm testing a configuration to suppress the vIST subnet from being redistributed through ISIS. After applying this configuration I am still seeing the subnet being learned on other VSPs. From all the documentation I've read, this should be a fairly simple configuration... Here is the config I have applied to both VSPs.

vlan create 2600 name "vIST" type port 0
vlan i-sid 2600 102600
interface vlan 2600
ip address 10.82.255.1 255.255.255.0
exit
ip prefix-list VIST-SUBNET 10.82.255.0/24
route-map SUPPRESS-VIST 1
match network VIST-SUBNET
no permit
enable
route-map SUPPRESS-VIST 2
permit
enable
router isis
redistribute direct route-map "SUPPRESS-VIST"
exit

RE: VSP7400 vIST suppression not working

EXTR_Paul — Thu, 23 Dec 2021 19:28:00 GMT

Looks like you are missing the "match protocol local" commands.

https://extremeportal.force.com/ExtrArticleDetail?an=000080223&q=supress%20vIST

RE: VSP7400 vIST suppression not working

bfaltys — Thu, 23 Dec 2021 19:45:00 GMT

Is that required? Based on the "SPBVOSS_TCG_CG.pdf" from March 2020 example, it isn't.

RE: VSP7400 vIST suppression not working

EXTR_Paul — Thu, 23 Dec 2021 19:56:00 GMT

The SPBm_TCG may had been updated in March 2020. But it hasn't been truly over hauled in a very long. We plan on doing a big document clean up in 2022.

Some of those command and designs are still be referencing the ERS8800 and VSP9000 and VSP7024.

The article I posted above is for VOSS and just updated in 2019.

RE: VSP7400 vIST suppression not working

bfaltys — Thu, 23 Dec 2021 20:04:00 GMT

In your example, the 1st route map entry should block anything matching the referenced prefix list. That looks just like mine. The 2nd part of your example seems to permit local routes, but mine are already being learned so I don't believe that should be necessary.

VSP 4000(config)#ip prefix-list IST 10.28.1.4/30

VSP 4000 (config)#route-map suppressIST 1
VSP 4000 (route-map)#no permit
VSP 4000 (route-map)#enable
VSP 4000 (route-map)#match network "IST"
VSP 4000 (route-map)#exit

VSP 4000 (config)#route-map suppressIST 2
VSP 4000 (route-map)#enable
VSP 4000 (route-map)#match protocol local
VSP 4000 (route-map)#exit

RE: VSP7400 vIST suppression not working

EXTR_Paul — Thu, 23 Dec 2021 20:21:00 GMT

I understand. Your call. Only trying to help and point out something different that I noticed.

I would just trust the GTAC KB written 2 years ago versus a 12 year old document. That TCG was written with VOSS devices running v3 and v4.

And I will just point out again that the document isn't explicit that those code examples aren't from an ERS8800 or VSP9000.

RE: VSP7400 vIST suppression not working

bfaltys — Wed, 29 Dec 2021 00:10:00 GMT

Turns out I just had to re-apply the redistribution by re-entering the "isis apply redistribute direct" command.