Configure an extended community list

Create an extended community list to organize destinations by shared attributes, enabling precise BGP route filtering and policy object use.

An extended community is a larger group of destinations that share some common attribute. The BGP extended community list has attributes that can be used to mark a set of prefixes that share a common attribute. These markers are used in the match clause of a route map to filter the routes for implementing route leaks among virtual routers. You can also define policy list objects with the extended community list for filtering. Matching statements are organized in an ordered list within the extended community list. Routes are matched against the rules until a match is found with the specified route target (standard rule type) or regular expression (expanded rule type). Create and edit extended community list policy objects using the Extended Community page.

Note

The extended community lists are applicable only for configuring import or export of routes.

You can use this object with Firewall Threat Defense devices.

Procedure


Step 1

Select Objects > Community List > Extended Community, and then click Add Extended Community List.

Step 2

In the Name field, specify a name for the extended community list object. You can enter up to 80 characters for the name.

Step 3

Select the extended community rule type:

  • To specify one or more route targets, click the Standard radio button .

  • To specify regular expressions, click the Expanded radio button.

Note
Use either Standard or Expanded extended community rule type in each Extended Community List object.

Step 4

Click Add.

Step 5

If you have selected Standard as the extended community rule type, specify the following:

  1. In the Sequence No field, enter the order in which you want the rule to be executed.

    The sequence number must be unique in the list.

  2. From the Action drop-down list, if you want to permit routes that have matching route target that is specified here, select Allow; if you want to deny routes that have matching route target that is specified here, select Block.

  3. In the Route Target field, specify a route target.

    • You can add a single route target or a set of route targets separated by commas in a single entry. For example, 1:2,1:4,1:6.

    • Valid values can be from 1:1 to 65534:65535.

    • You can have a maximum of 8 route targets in an entry.

    • You cannot have redundant route target set across multiple entries. For example, say you want to configure seq1 with 1:200,100:100,1:300 route targets, and seq2 with 1:300,100:100,1:200 route targets. This results in redundant route target set and cannot be deployed.

Step 6

If you have selected Expanded as the extended community rule type, specify the following:

  1. In the Sequence No field, enter the order in which you want the rule to be executed.

    The sequence number must be unique in the list.

  2. From the Action drop-down list, if you want to permit routes that have matching regular expression that is specified here, select Allow; if you want to deny routes that have matching regular expression that is specified here, select Block.

  3. Specify the regular expression in the Expressions field.

    • You can add a single route target or a set of route targets separated by a space in a single entry. For example, ^((16) | (18)):(.)$.

    • You can add a maximum of 16 regular expressions to an entry.

    • You cannot have redundant regular expression set across multiple entries. For example, say you want to configure seq1 with ^((16) | (18)):(.)$ ^4_[0-9]*$ route targets, and seq2 with ^4_[0-9]*$ ^((16) | (18)):(.)$ route targets. This results in redundant regular expression set and cannot be deployed.

    For details on BGP regular expressions, see here.

Step 7

If you want to allow overrides for this object, check the Allow Overrides check box; see Allow object overrides.

Step 8

Click Save.


The extended community list can be referenced in the match clause of the Route Map object or Policy List object:

  • In the Route Map object, the name of the extended community list is displayed in the Add Route Map Entry > Match Clause > BGP > Community List > Add Extended Community List dialog. For more details on configuring BGP settings in a route map, see Configure a route map.

  • In the Policy List object, the name of the extended community list is displayed in the Add Policy List > Community Rule > Add Extended Community List dialog. For more details on configuring BGP settings in a policy list, see Configure a policy list.