[c-nsp] IPv6 access-lists/BGP filter

[Gert Doering]

Hi,

On Wed, Jan 17, 2007 at 03:11:14PM +0800, Nick Kraal wrote:
> What is the best way to write a BGP filter to prevent 
> receiving/announcing **all** IPv6 addresses larger than a /32.

Bad idea (because you'll lose fairly important networks that way, like
"DNS Root-Servers").

For generic IPv6 BGP filter recommendations (unfortunately a bit outdated
regarding /12s - to be updated soon) you might want to read through

  http://www.space.net/~gert/RIPE/ipv6-filters.html

it has some discussions regarding the "why", and example configs for
Cisco and Juniper.

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de