[c-nsp] prefix lists updates and max prefix filters
    James Ashton 
    james at gitflorida.com
       
    Mon Dec  5 12:08:06 EST 2011
    
    
  
Hi all.
 I have run into a problem that seams obvious, but is new to me.
 I control outbound announcements with a prefix filter. I update this filter daily with a small shell script. t has been working for several years now without problem, but for the last few months one of our upstreams has dropped our session for hitting a max prefix filter. The session drops within seconds of issuing the "no ip prefix-list XXX" command.   Before I can rebuild the filter.
 As I said, the problem seams obvious, but the solutions all seam less than elegant. I can only really see 2 ways through it, but I am probably missing several.  First would be to run a prefix list and an access list and update them one at a time.   So one it always in place.  The second would be to edit the prefix list one line at a time and never actually regenerate the entire list in one shot.  This seams the most proper/elegant method and the one putting the least CPU strain on a hard working router. It would also cause me to write good bit more code that no-one else here could edit. 
I am using rtconfig to generate the lists, so adding another isn't a huge project, but will add additional CPU time to a router that is begging for more CPU as it is.
Thoughts?
Thank You
James
    
    
More information about the cisco-nsp
mailing list