<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Filter using prefix-lists for routes received from your customer based on your policies and what you have verified they are permitted to announce to you. For IPv4, le 24 is all that’s really going to be useful if you will be announcing it to any up streams or peers as anything greater than /24 is usually filtered out. Tag the customer routes with one or more communities as well so you can easily propagate it elsewhere using those communities. And for everything else, use communities. Trying to maintain prefix-lists everywhere for what you are announcing to your customers will make you go insane and does not scale. Identify prefixes as they enter your network with communities so you can then advertise those networks with your customers. Use prefix-lists in route-maps along with the communities if you want to adjust prefix-length.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>-Vinny<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> foundry-nsp-bounces@puck.nether.net [mailto:foundry-nsp-bounces@puck.nether.net] <b>On Behalf Of </b>Muhammad<br><b>Sent:</b> Friday, May 20, 2011 2:58 PM<br><b>To:</b> foundry-nsp@puck.nether.net<br><b>Subject:</b> [f-nsp] BGP insight required<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Dear list,<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I would like to request an insight from some professionals.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I am administering two independent networks, each running an own AS and each network consisting of two MLX-4, each router has two upstreams peers and one session between them. Some far all worked just well for years.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>For some reasons, these two networks are now being merged into one for global IP Transit for saving on costs but each will keep its total autonomy (local peering, etc.). The routes toward Tier-1 will be only sent thru the second network, while some local peering will be kept by the first network, thus servicing internally and leveraging on the savings of the second network.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Therefore it means that one of the routers in the second network will become the upstream peer of the first network router. So far all seems easy, one BGP session and routes will be sent toward upstreams Tier-1 providers.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>But here comes the trick with me. I have never set a session with a downstream as this wasn’t my business until a few days. I am bit puzzled about how to adapt my route-maps and ACLs prefix lists.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>1) What should my route-maps/prefix-list consist of if I am sending a full-route to the downstream?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Ø I imagine I will have an empty statement in the route-map toward the peer? (for sending ALL routes) If not, what should my ACL be?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>2) What should my route-maps/prefix-list consist of if I am accepting only two prefixes from my downstream peer?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Ø I also imagine having a filter on incoming routes based on a prefix-list that will ONLY accept the prefixes that matches the downstream’s prefixes? But should I also filter it against bogons?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>3) Am I just adding these two prefixes to the current prefix-list that I send to my upstreams peers, or should I make a new one?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Ø I imagine I will just add these prefixes to the current prefix-list currently used for my announced prefixes? Maybe should I have a prefix-list for my downstream prefixes but I have no clue about how to concatenate them together…<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I may have to merge additional peers later with the same concept so I am looking for some relevant remarks and good practice with prefix-list and route-map. There’s no community implied in this BGP design between the two networks. Upstreams filters have been updated.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Much thanks in advance.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>BR.<o:p></o:p></p></div><div><p class=MsoNormal>Muhammad<o:p></o:p></p></div></div></body></html>