[20787] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Clue's for Clue-less

daemon@ATHENA.MIT.EDU (Jim Jagielski)
Tue Oct 27 17:56:22 1998

From: Jim Jagielski <jim@jaguNET.com>
To: CMartin@mercury.balink.com (Martin, Christian)
Date: Mon, 26 Oct 1998 18:32:33 -0500 (EST)
Cc: rirving@onecall.net, nanog@merit.edu
Reply-To: jim@jaguNET.com
In-Reply-To: <c=US%a=_%p=BAIS%l=MERCURY-981026230057Z-1836@mercury.balink.com> from "Martin, Christian" at Oct 26, 98 06:00:57 pm

Martin, Christian wrote:
> 
> Poor filtering practices.  As filter-lists grow in size and complexity,
> and the AS lists grow, there is the potential for leaks.  All it takes
> is for and inexperienced/tired/clueless operator to turn up a T1 session
> with a multihomed downstream peer, and neglect the filter-list on their
> inbound updates.  Then, considering that any other peer that advertises
> an AS that is two hops away has the same preference configured all the
> way through, we're talking router ID here.  The OC3 session that is
> prefered doesn't see the routes, but they are coming in from other
> places, including the T1.  bgp always-compare-med can help, but not
> everyone uses it.  This can be bad.  
> 

What would be helpful, of course, is a series of FAQs that pretty much
detail various config options for different-type setups. Freeman's
stuff is a start.

-- 
===========================================================================
   Jim Jagielski   |||   jim@jaguNET.com   |||   http://www.jaguNET.com/
            "That's no ordinary rabbit... that's the most foul,
            cruel and bad-tempered rodent you ever laid eyes on"

home help back first fref pref prev next nref lref last post