I’m trying to follow this document as a guide, the info appears to be in the very bottom under “Route Filter”. BGP — VyOS 1.3.x (equuleus) documentation
So I’m setting up a new vyos (VyOS 1.3.0-epa2 equuleus), with a new pair of bgp peers to the internet provider. We need to advertise/broadcast our local subnet “A.B.C.0/24”, but apparently we’re actually sending the ENTIRE routing table back to the provider as well. (Receiving the entire table from them is, I’m told, working fine.)
I’m following as precisely as I can the given example, where “AS65535-OUT” is just a simple text label, written as “-OUT” below; “A.B.C.0/24” is the only network that should be advertised back to our peer; “” is just my own local AS; and “D.E.F.G” and “H.I.J.K” are the two bgp-connected peers. Transcribing just the “OUT” entries from the examples, that makes my config:
set policy prefix-list <LABEL>-OUT rule 10 action 'deny' set policy prefix-list <LABEL>-OUT rule 10 prefix 'A.B.C.0/24' set policy route-map <LABEL>-OUT rule 10 action 'deny' set policy route-map <LABEL>-OUT rule 10 match ip address prefix-list '<LABEL>-OUT' set policy route-map <LABEL>-OUT rule 20 action 'permit' set protocols bgp <LABEL> address-family ipv4-unicast network A.B.C.0/24 set protocols bgp <MINE> neighbor D.E.F.G address-family ipv4-unicast route-map export '<LABEL>-OUT' set protocols bgp <MINE> neighbor H.I.J.K address-family ipv4-unicast route-map export '<LABEL>-OUT'
So if I’ve followed that example exactly, why then is the ENTIRE table still being broadcast back out to the peers?