Yasini,<br><br>You could try and instead of using prefixes for the filters only make the use of a route-map.This would add more felxibility such as adding of local-pref or communities to the incoming routes.<br><br>Sample route-map could be<br>
<br>route-map PEER_PERMIT deny 10<br>match ip address prefix-list PRIVATE_IPS_PREFIX_LIST<br>route-map PEER_PERMIT permit 20<br><br>The route-map would be applied as your incoming filter with your peer.<br><br>What the route-map does is deny any private IP's and then permit anything else.<br>
<br>Hope this answers your question.<br><br>Regards,<br>Shake Righa<br><br><br><div class="gmail_quote">On Fri, May 25, 2012 at 2:14 PM, Yasini Kilima <span dir="ltr"><<a href="mailto:ykilima@tra.go.tz" target="_blank">ykilima@tra.go.tz</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Gurus,<br>
<br>
I am trying to create an IP prefix filter to filter bogons Private blocks received from one of my peer provider's announcements.<br>
I know the following filter would help me but surprisingly the last entry of the list doesn't execute, is it the problem of my IOS for my ASBR or what?<br>
<br>
ip prefix-list DENY-PRIVATE description Filter bogons<br>
ip prefix-list DENY-PRIVATE deny <a href="http://0.0.0.0/8" target="_blank">0.0.0.0/8</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://127.0.0.0/8" target="_blank">127.0.0.0/8</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://169.254.0.0/16" target="_blank">169.254.0.0/16</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://172.16.0.0/12" target="_blank">172.16.0.0/12</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://192.0.2.0/24" target="_blank">192.0.2.0/24</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/16</a><br>
ip prefix-list DENY-PRIVATE deny <a href="http://240.0.0.0/4" target="_blank">240.0.0.0/4</a><br>
ip prefix-list DENY-PRIVATE permit any<br>
<br>
ip prefix-list DENY-PRIVATE permit any (This doesn't execute it gives an error as here below):<br>
<br>
INTERNET_LINK(config)#$ist DENY-PRIVATE description Filter bogons<br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://0.0.0.0/8" target="_blank">0.0.0.0/8</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://127.0.0.0/8" target="_blank">127.0.0.0/8</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://169.254.0.0/16" target="_blank">169.254.0.0/16</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://172.16.0.0/12" target="_blank">172.16.0.0/12</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://192.0.2.0/24" target="_blank">192.0.2.0/24</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/16</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE deny <a href="http://240.0.0.0/4" target="_blank">240.0.0.0/4</a><br>
INTERNET_LINK(config)#ip prefix-list DENY-PRIVATE permit any<br>
^<br>
% Invalid input detected at '^' marker.<br>
<br>
INTERNET_LINK(config)#<br>
<br>
I am sure of the command to be correct you can correct me if I am wrong,<br>
How can I permit any then<br>
Is it an IOS issue or I am not correct, if that then what should I do in order to permit any<br>
When I apply the list regardless I can't get any bgp routes from that provider even the PUBLIC prefixes but I can receive from other providers the PUBLIC prefixes as usual.<br>
<br>
I don't want to receive his PRIVATE prefixes what should I do?<br>
<br>
Please help me!<br>
<br>
Yasini.<br>
<br>
________________________________<br>
<br>
<br>
<br>
DISCLAIMER: This e-mail and any attachments are proprietary to TANZANIA REVENUE AUTHORITY.Any unauthorized use or interception is illegal. The views and opinions expressed are those of the sender, unless clearly stated as being those of TANZANIA REVENUE AUTHORITY. This e-mail is only addressed to the addressee and TANZANIA REVENUE AUTHORITY shall not be responsible for any further publication of the contents of this e-mail. If this e-mail is not addressed to you, you may not copy, print, distribute or disclose the contents to anyone nor act on its contents. If you received this in error, please inform the sender and delete this e-mail from your computer.<br>
<br>
<br>
<br>
_______________________________________________<br>
afnog mailing list<br>
<a href="http://afnog.org/mailman/listinfo/afnog" target="_blank">http://afnog.org/mailman/listinfo/afnog</a><br>
</blockquote></div><br>