[c-nsp] IPV6 RTBH on IOS

Job Snijders job at instituut.net
Mon May 2 16:38:52 EDT 2016


On Mon, May 02, 2016 at 09:44:14PM +0200, Job Snijders wrote:
> On Mon, May 02, 2016 at 07:55:25PM +0200, Marco Marzetti wrote:
> > Do you have any ideas?
> 
> 	ipv6 route 100::1/128 null0

Some testing showed that the above doesn't change the situation. 

As discussed on IRC, there are is this approach: set the correct next-hop on
the RIB -> FIB boundry:

	router bgp XXX
	 address-family ipv6
	  table-map DIE_IPV6 filter
	 address-family ipv4
	  table-map DIE_IPV4 filter

	route-map DIE_IPV6 permit 10
	 match community BLACKHOLE
	 set next-hop 100::1
	route-map DIE_IPV6 permit 20

	route-map DIE_IPV4 permit 10
	 match community BLACKHOLE
	 set next-hop 1.1.1.1
	route-map DIE_IPV4 permit 20

Kind regards,

Job


More information about the cisco-nsp mailing list