[nsp] BGP filter issue

[Sean Mathias]

With the filter in place, can you look at the output of show ip bgp
regexp ^19262 [0-9]+$ to see if it is matching as you expected it to?  

Sean Mathias
CCIE #12779
206-920-0301
seanm at prosolve.com


-----Original Message-----
From: Alban Dani [mailto:adani at stevens.edu] 
Sent: Thursday, January 29, 2004 1:14 PM
To: cisco-nsp at puck.nether.net
Subject: [nsp] BGP filter issue


Hello,

 

Recently I experienced a weird issue with our internet connection.

 

We have a Cisco 7200 connected to our ISP ( Verizon).

A month ago we applied a bgp filter on the inbound that would accept bgp
routing updates only from our neighbor AS and the one next to it.

 

ip as-path access-list 6 permit ^19262$

ip as-path access-list 6 permit ^19262 [0-9]+$

ip as-path access-list 6 deny .*

 

Last week we started having issues with the internet connection for
several employees that connected remotely to our network. After some
research we figured that people that were connected to ISP-s that were
no more then two AS hops from us were having the problem ( and we could
find their networks in the bgp table ). On the other hand people who
were more then two AS hops away were just fine. Their networks could not
be found in the bgp table (as excpected  because of the filter ) and
they were taking the default route outside.

 

We took the filter out today and everything is back to normal.

 

Can anybody explain this? Is it a bug? A design flow? Is it the ISP?

 

 

Thanks in advance

 

Alban 

 

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/