IP Large Community List

IP large community lists define ordered permit/deny rules that match the BGP large community attribute (RFC 8092) of routes. Each large community is written as <global-administrator>:<local-data-1>:<local-data-2>, which allows 4-byte AS numbers to be used in communities. An entry either lists the large communities to match (standard list) or a regular expression (expanded list). Large community lists are referenced from route map match large-community and set large-community-list ... delete clauses.

Diagram

Classes

nxos

Name	Type	Constraint	Mandatory	Default Value
devices	List	devices	No
device_groups	List	device_groups	No
global	Class	global	No
templates	List	templates	No

devices (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

device_groups (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

global (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

templates (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

configuration (nxos.devices)

Name	Type	Constraint	Mandatory	Default Value
ip_large_community_lists	List	ip_large_community_lists	No

ip_large_community_lists (nxos.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
entries	List	entries	No

entries (nxos.devices.configuration.ip_large_community_lists)

Name	Type	Constraint	Mandatory	Default Value
seq	Integer	min: 1, max: 4294967294	Yes
action	Choice	permit, deny	No
regex	String		No
communities	List	String	No

Examples

Example 1: Standard large community list matching specific large communities

nxos:
  devices:
    - name: BORDER-LEAF1
      configuration:
        ip_large_community_lists:
          - name: LCL-TENANT-A
            entries:
              - seq: 10
                action: permit
                communities:
                  - "4200000001:1:100"
                  - "4200000001:1:200"
              - seq: 20
                action: deny
                communities:
                  - "4200000001:9:9"

Example 2: Expanded large community list using a regular expression

nxos:
  devices:
    - name: SPINE1
      configuration:
        ip_large_community_lists:
          - name: LCL-REGEX
            entries:
              - seq: 10
                action: permit
                regex: "4200000001:.*"