Rip Interface Route-Map Vrf

Scenario to verify RIP interface route-map configuration within a VRF.

The set protocols vrf <vrf> rip interface <ifc> route-map in <name> command applies a route-map to filter incoming RIP route updates on a specific interface inside a VRF. The set protocols vrf <vrf> rip interface <ifc> route-map out <name> command applies a route-map to filter outgoing RIP route updates on a specific interface inside a VRF.

Each interface accepts at most one route-map in and one route-map out. Configuring a second route-map in the same direction will overwrite the previous one.

Additionally, route-map rules that set metric values outside the valid RIP range (1-16) are rejected at commit time when applied to a RIP interface inside a VRF.

Test RIP VRF Interface Route-Map In

Description

Test RIP interface route-map in filtering within a VRF (RIP-VRF). DUT1 redistributes two connected dummy routes (10.10.10.0/24 and 10.20.20.0/24) into RIP inside RIP-VRF. DUT0 applies a route-map on its incoming VRF interface that only permits 10.10.10.0/24. DUT0 learns only the permitted route; 10.20.20.0/24 is filtered out.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 action permit
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 prefix 10.10.10.0/24
set protocols route-map VRF-FILTER-IN rule 1 action permit
set protocols route-map VRF-FILTER-IN rule 1 match ip address prefix-list VRF-ALLOW-DUM0
set protocols vrf RIP-VRF rip interface eth0 route-map in VRF-FILTER-IN
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Step 2: Set the following configuration in DUT1 :

set interfaces dummy dum0 address 10.10.10.1/24
set interfaces dummy dum0 vrf RIP-VRF
set interfaces dummy dum1 address 10.20.20.1/24
set interfaces dummy dum1 vrf RIP-VRF
set interfaces ethernet eth0 address 10.1.1.50/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols vrf RIP-VRF rip interface eth0
set protocols vrf RIP-VRF rip redistribute connected
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Attention

Verify that DUT0 learns route 10.10.10.0/24 in VRF RIP-VRF (permitted by route-map in)

Step 3: Run the command protocols vrf RIP-VRF rip show on DUT0 and check whether the output matches the following regular expressions:

R\(n\)\s+10.10.10.0/24
Show output
Codes: K - kernel route, C - connected, L - local, S - static,
       R - RIP, O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric, t - Table-Direct
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

     Network            Next Hop         Metric From            Tag Time
C(i) 10.1.1.0/24        0.0.0.0               1 self              0
R(n) 10.10.10.0/24      10.1.1.50             2 10.1.1.50         0 02:58

Test RIP VRF Interface Route-Map Out

Description

Test RIP interface route-map out filtering within a VRF (RIP-VRF). DUT0 redistributes two connected dummy routes (10.10.10.0/24 and 10.20.20.0/24) into RIP inside RIP-VRF and applies a route-map on its outgoing VRF interface that only permits 10.10.10.0/24. DUT1 learns only the permitted route; 10.20.20.0/24 is not advertised.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 10.10.10.1/24
set interfaces dummy dum0 vrf RIP-VRF
set interfaces dummy dum1 address 10.20.20.1/24
set interfaces dummy dum1 vrf RIP-VRF
set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 action permit
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 prefix 10.10.10.0/24
set protocols route-map VRF-FILTER-OUT rule 1 action permit
set protocols route-map VRF-FILTER-OUT rule 1 match ip address prefix-list VRF-ALLOW-DUM0
set protocols vrf RIP-VRF rip interface eth0 route-map out VRF-FILTER-OUT
set protocols vrf RIP-VRF rip redistribute connected
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.1.1.50/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols vrf RIP-VRF rip interface eth0
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Attention

Verify that DUT1 learns route 10.10.10.0/24 in VRF RIP-VRF (permitted by route-map out)

Step 3: Run the command protocols vrf RIP-VRF rip show on DUT1 and check whether the output matches the following regular expressions:

R\(n\)\s+10.10.10.0/24
Show output
Codes: K - kernel route, C - connected, L - local, S - static,
       R - RIP, O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric, t - Table-Direct
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

     Network            Next Hop         Metric From            Tag Time
C(i) 10.1.1.0/24        0.0.0.0               1 self              0
R(n) 10.10.10.0/24      10.1.1.100            2 10.1.1.100        0 02:58

Test RIP VRF Interface Route-Map In Set Metric

Description

Test RIP interface route-map in with set metric 5 within a VRF (RIP-VRF). DUT1 redistributes a connected dummy route (10.10.10.0/24) into RIP inside RIP-VRF. DUT0 applies a route-map on its incoming VRF interface that sets the metric to 5. DUT0 learns the route with metric 6 (5 + 1 hop).

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols route-map VRF-SET-METRIC-IN rule 1 action permit
set protocols route-map VRF-SET-METRIC-IN rule 1 set metric 5
set protocols vrf RIP-VRF rip interface eth0 route-map in VRF-SET-METRIC-IN
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Step 2: Set the following configuration in DUT1 :

set interfaces dummy dum0 address 10.10.10.1/24
set interfaces dummy dum0 vrf RIP-VRF
set interfaces ethernet eth0 address 10.1.1.50/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols vrf RIP-VRF rip interface eth0
set protocols vrf RIP-VRF rip redistribute connected
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Attention

Verify that DUT0 learns route 10.10.10.0/24 in VRF RIP-VRF with metric 6 (5 set by route-map in + 1 hop)

Step 3: Run the command protocols vrf RIP-VRF rip show on DUT0 and check whether the output matches the following regular expressions:

R\(n\)\s+10.10.10.0/24\s+10.1.1.50\s+6\s+10.1.1.50
Show output
Codes: K - kernel route, C - connected, L - local, S - static,
       R - RIP, O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric, t - Table-Direct
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

     Network            Next Hop         Metric From            Tag Time
C(i) 10.1.1.0/24        0.0.0.0               1 self              0
R(n) 10.10.10.0/24      10.1.1.50             6 10.1.1.50         0 02:58

Test RIP VRF Interface Route-Map Out Set Metric

Description

Test RIP interface route-map out with set metric 5 within a VRF (RIP-VRF). DUT0 redistributes a connected dummy route (10.10.10.0/24) into RIP inside RIP-VRF and applies a route-map on its outgoing VRF interface that sets the metric to 5. DUT1 learns the route with metric 6 (5 + 1 hop).

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 10.10.10.1/24
set interfaces dummy dum0 vrf RIP-VRF
set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols route-map VRF-SET-METRIC-OUT rule 1 action permit
set protocols route-map VRF-SET-METRIC-OUT rule 1 set metric 5
set protocols vrf RIP-VRF rip interface eth0 route-map out VRF-SET-METRIC-OUT
set protocols vrf RIP-VRF rip redistribute connected
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.1.1.50/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols vrf RIP-VRF rip interface eth0
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Attention

Verify that DUT1 learns route 10.10.10.0/24 in VRF RIP-VRF with metric 6 (5 set by route-map out + 1 hop)

Step 3: Run the command protocols vrf RIP-VRF rip show on DUT1 and check whether the output matches the following regular expressions:

R\(n\)\s+10.10.10.0/24\s+10.1.1.100\s+6\s+10.1.1.100
Show output
Codes: K - kernel route, C - connected, L - local, S - static,
       R - RIP, O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric, t - Table-Direct
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

     Network            Next Hop         Metric From            Tag Time
C(i) 10.1.1.0/24        0.0.0.0               1 self              0
R(n) 10.10.10.0/24      10.1.1.100            6 10.1.1.100        0 02:58

Test RIP VRF Interface Route-Map Overwrite

Description

Test that each RIP VRF interface accepts at most one route-map per direction. Configuring a second route-map in the same direction overwrites the previous one. DUT1 redistributes two connected dummy routes (10.10.10.0/24 and 10.20.20.0/24) into RIP inside RIP-VRF. DUT0 configures two route-maps in the in direction: VRF-FILTER-A (permits only 10.10.10.0/24) and VRF-FILTER-B (permits only 10.20.20.0/24). Only the last configured route-map (VRF-FILTER-B) takes effect. DUT0 learns 10.20.20.0/24 and does not learn 10.10.10.0/24.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 action permit
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 prefix 10.10.10.0/24
set protocols ip prefix-list VRF-ALLOW-DUM1 rule 1 action permit
set protocols ip prefix-list VRF-ALLOW-DUM1 rule 1 prefix 10.20.20.0/24
set protocols route-map VRF-FILTER-A rule 1 action permit
set protocols route-map VRF-FILTER-A rule 1 match ip address prefix-list VRF-ALLOW-DUM0
set protocols route-map VRF-FILTER-B rule 1 action permit
set protocols route-map VRF-FILTER-B rule 1 match ip address prefix-list VRF-ALLOW-DUM1
set protocols vrf RIP-VRF rip interface eth0 route-map in VRF-FILTER-B
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Step 2: Set the following configuration in DUT1 :

set interfaces dummy dum0 address 10.10.10.1/24
set interfaces dummy dum0 vrf RIP-VRF
set interfaces dummy dum1 address 10.20.20.1/24
set interfaces dummy dum1 vrf RIP-VRF
set interfaces ethernet eth0 address 10.1.1.50/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols vrf RIP-VRF rip interface eth0
set protocols vrf RIP-VRF rip redistribute connected
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Attention

Verify that DUT0 running configuration shows only the last route-map (VRF-FILTER-B)

Step 3: Run the command show running on DUT0 and check whether the output contains the following tokens:

vrf RIP-VRF rip interface eth0 route-map in VRF-FILTER-B
Show output
# Teldat OSDx VM version v4.2.10.0
# Tue 19 May 2026 13:37:22 +00:00
# Warning: Configuration has not been saved
set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 action permit
set protocols ip prefix-list VRF-ALLOW-DUM0 rule 1 prefix 10.10.10.0/24
set protocols ip prefix-list VRF-ALLOW-DUM1 rule 1 action permit
set protocols ip prefix-list VRF-ALLOW-DUM1 rule 1 prefix 10.20.20.0/24
set protocols route-map VRF-FILTER-A rule 1 action permit
set protocols route-map VRF-FILTER-A rule 1 match ip address prefix-list VRF-ALLOW-DUM0
set protocols route-map VRF-FILTER-B rule 1 action permit
set protocols route-map VRF-FILTER-B rule 1 match ip address prefix-list VRF-ALLOW-DUM1
set protocols vrf RIP-VRF rip interface eth0 route-map in VRF-FILTER-B
set protocols vrf RIP-VRF rip timers update 5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF

Attention

Verify that DUT0 learns route 10.20.20.0/24 in VRF RIP-VRF (permitted by last route-map VRF-FILTER-B)

Step 4: Run the command protocols vrf RIP-VRF rip show on DUT0 and check whether the output matches the following regular expressions:

R\(n\)\s+10.20.20.0/24
Show output
Codes: K - kernel route, C - connected, L - local, S - static,
       R - RIP, O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric, t - Table-Direct
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

     Network            Next Hop         Metric From            Tag Time
C(i) 10.1.1.0/24        0.0.0.0               1 self              0
R(n) 10.20.20.0/24      10.1.1.50             2 10.1.1.50         0 02:59

Test RIP VRF Interface Route-Map Invalid Metric Rejected

Description

Test that a route-map with a metric value outside the valid RIP range (1-16) is rejected at commit time when applied to a RIP interface inside a VRF. DUT0 configures a route-map INVALID-METRIC with set metric 20 and applies it to a RIP interface in RIP-VRF. The commit must fail with a validation error indicating that metric 20 is outside the RIP range.

Scenario

Step 1: Set the following configuration in DUT0 and expect this output:

set interfaces ethernet eth0 address 10.1.1.100/24
set interfaces ethernet eth0 vrf RIP-VRF
set protocols route-map INVALID-METRIC rule 1 action permit
set protocols route-map INVALID-METRIC rule 1 set metric 20
set protocols vrf RIP-VRF rip interface eth0 route-map in INVALID-METRIC
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system vrf RIP-VRF
Show output
[ protocols vrf RIP-VRF rip interface eth0 route-map in INVALID-METRIC ]
Route-map INVALID-METRIC rule 1 has set metric 20 outside RIP range (1-16)
Commit validation failed
CLI Error: Command error