Tony, On Thu, 11 May 2000, Tony Wicks wrote:
Due to continuing problems with excessive route tables being advertised in to my ( ICONZ / Asia ONline NZ ) network from Netgate as being domestic I have found it necessary to access list the bgp routes. I would appreciate it if the varous Network engineers would confirm that their route are in this list. I will endeavour to then create some sort of database that everyone can use. http://tonyw.com/routes.txt
Much easier method is to ask NetGate for a list of ASes that provide international transit for them. Then make an as-path access list thus: ip as-path access-list 10 deny _4648_XXXX_ ip as-path access-list 10 deny _4648_YYYY_ ip as-path access-list 10 deny _4648_ZZZZ_ ip as-path access-list 10 permit .* where XXXX, YYYY, ZZZ (etc) are transit ASes of 4648 (i.e. upstream ASes for Telecom). You can apply this with "neighbor a.a.a.a filter-list 10 in" where a.a.a.a is Telecom's router on the other side of your domestic PVC. This way you can filter international routes from your domestic PVC with some accuracy, without having to make guesses :) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog