[94600] in North American Network Operators' Group
Re: Route Reflector architecture and how to get small customer blocks in to BGP?
daemon@ATHENA.MIT.EDU (Steve Meuse)
Sun Jan 28 15:58:57 2007
Date: Sun, 28 Jan 2007 15:57:55 -0500
From: "Steve Meuse" <smeuse@gmail.com>
To: "Danny McPherson" <danny@tcb.net>
Cc: NANOG <nanog@merit.edu>
In-Reply-To: <C349E401-A2C7-4F37-8B92-AFB51B8A6758@tcb.net>
Errors-To: owner-nanog@merit.edu
------=_Part_23129_9067091.1170017875094
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
On 1/28/07, Danny McPherson <danny@tcb.net> wrote:
>
>
> o If you're going to use redistribution - or not - ensure that all
> external advertisement policies require explicit match of advertise
> communities and default is to deny
>
>
I'll second that recommendation. I learned early in life that this can be a
mess otherwise. We employed that technique at BBN/Genu and it kept us from
leaking quite nicely. If a provisioning person forgot a customer inbound
route-map or something, we didn't accidentally hose ourselves.
--
-Steve
------=_Part_23129_9067091.1170017875094
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
<br><br><div><span class="gmail_quote">On 1/28/07, <b class="gmail_sendername">Danny McPherson</b> <<a href="mailto:danny@tcb.net">danny@tcb.net</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>o If you're going to use redistribution - or not - ensure that all<br>external advertisement policies require explicit match of advertise<br>communities and default is to deny<br><br></blockquote></div><br>I'll second that recommendation. I learned early in life that this can be a mess otherwise. We employed that technique at BBN/Genu and it kept us from leaking quite nicely. If a provisioning person forgot a customer inbound route-map or something, we didn't accidentally hose ourselves.
<br><br clear="all"><br>-- <br><br>-Steve
------=_Part_23129_9067091.1170017875094--
