[afnog] Private IP Filters in bgp

Nishal Goburdhan ndg at ieee.org
Fri May 25 11:58:26 UTC 2012


On May 25, 2012, at 3:14 PM, Yasini Kilima wrote:

> Hello Gurus,
[snip]

> ip prefix-list DENY-PRIVATE permit any

try: 
ip prefix-list DENY-PRIVATE permit 0.0.0.0/0 le 32 

you might find http://ws.afnog.org/afnog2012/sie/detail.html to be useful as well.

remember that this just means your router won't listen to bgp announcements for these networks.
that's *not* the same as your network will not trying to send traffic to these;  so hopefully, in addition to not listening to these adverts, (which is good!) you're also filtering traffic *to* those destinations.

--n.


More information about the afnog mailing list