[c-nsp] Filtering Routes with Private AS Numbers in the AS Path

Ivan cisco-nsp at itpro.co.nz
Tue Mar 20 19:17:13 EDT 2012


Hi,

For filtering private as numbers (64512-65535) using an as-path
access-list there are a few options I have seen:

1). All in one line
ip as-path access-list 66 permit
_(6451[2-9]|645[2-9][0-9]|64[6-9][0-9][0-9]|65[0-4][0-9][0-9]|655[0-2][0-9]|6553[0-5])_

2). The above modified hopefully to be "better" in terms or regexp
processing but perhaps not readability
ip as-path access-list 66 permit
_6(4(5(1[2-9]|[2-9][0-9])|[6-9][0-9][0-9])|5([0-4][0-9][0-9]|5([0-2][0-9]|3[0-5])))_

3). Separate lines
ip as-path access-list 66 permit _6451[2-9]_
ip as-path access-list 66 permit _645[2-9][0-9]_
ip as-path access-list 66 permit _64[6-9][0-9][0-9]_
ip as-path access-list 66 permit _65[0-4][0-9][0-9]_
ip as-path access-list 66 permit _655[0-2][0-9]_
ip as-path access-list 66 permit _6553[0-5]_

I would appreciate any feedback as to which is the least CPU intensive and
if there is a better way to optimise 2 above.

Thanks

Ivan




More information about the cisco-nsp mailing list